#kernel

writing · September 2026

The Key in the Wrong Keyring

We wanted to sign everything for cairn in CI, including a key for kernel modules, and reached into shim's part of the boot chain without asking first.