From: Joey Lee <jlee@suse.com>
Subject: Use 'kexec -s' on x86_64
References: FATE#315018, bsc#884453
Upstream: v0.8.17
Git-commit: 48162b5fc73d733ce57a27e4f6df7e46cae66684

The kexec(2) system call is disabled if booted with Secure Boot. Tell
kexec (the utility) to use kexec_file(2) instead on x86_64.

Signed-off-by: Joey Lee <jlee@suse.com>

---
 init/load.sh |    5 +++++
 1 file changed, 5 insertions(+)

--- a/init/load.sh
+++ b/init/load.sh
@@ -135,6 +135,11 @@ function build_kexec_options()
         options="$options --noio"
     fi
 
+    # add -s on x86_64 for signature verification of kernel
+    if [ "$(uname -i)" = "x86_64" ] ; then
+	options="$options -s"
+    fi
+
     echo "$options"
 }