[Trustedgrub-users] Is there a way to use stage1_5 with TrustedGrub?

[Ortwin A. <ang...@gm...>]

Hello there!

I have a question regarding stage1_5.
Is there a way to use a embedded stage1_5 in a *trusted* way with
TrustedGrub?

I have a problem with checksum mismatches of the MBR (stage1) when using
only stage2.
Every time i install the grub boot-loader the checksum of the MBR (stage1)
changes, resulting in a PCR mismatch.

As far as i understand is that the stage1 needs a hard coded jump address
to know where stage2 or stage1_5 is to continue booting.
Since stage2 is stored in a ext2 partition the jump address (sector) is
never the same.

If i could use the embedded stage1_5 i would not have that problem, since
stage1_5 is embedded directly after the MBR, always on the same address.
Since stage1_5 has some primitive filesystem drivers it can than load
stage2 from the boot partition.

Could you please clarify that?
I'm not really sure if i'm on the right way ;)

Here i found some useful information about the grub stages:
http://thestarman.pcministry.com/asm/mbr/GRUB.htm

Many thanks,
Ortwin