> == Detailed Description ==
> The goal is to move away from initrd images being generated on the
> installed machine. They are generated while building the kernel
> package instead, then shipped as part of a unified kernel image.
>
> A unified kernel image is an all-in-one efi binary containing kernel,
> initrd, cmdline and signature. The secure boot signature covers
> everything, specifically the initrd is included which is not the case
> when the initrd gets loaded as separate file from /boot.
What platforms are going to be affected? Is it x86-64 only or does it
include aarch64 (as it's also using UEFI)?
x86_64 is the primary target.
aarch64 possibly too. Secure boot isn't a factor there so it's less
important, but having a more robust initrd build and kernel update
process is nice to have ...
Are ppc64le and s390x out of the current scope?
Yes.
take care,
Gerd