proxmox-mirrors/efi-boot-shim
1
0
Fork 0
mirror of https://git.proxmox.com/git/efi-boot-shim synced 2025-07-21 21:30:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add a failure case to the test plan and fix an ordering error.

Browse Source 
Signed-off-by: Peter Jones <pjones@redhat.com>
This commit is contained in:
Peter Jones 2014-02-14 14:44:31 -05:00
parent ac356a0e77
commit a0bb7822bc
1 changed files with 17 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
testplan.txt
View File

@ -12,23 +12,26 @@ How to test a new shim build for RHEL/fedora:
-s -c "Red Hat Test Certificate" -s -c "Red Hat Test Certificate"
6) put pesign-test-app-signed.efi in \EFI\test as grubx64.efi 6) put pesign-test-app-signed.efi in \EFI\test as grubx64.efi
cp /usr/share/pesign-test-app-0.4/pesign-test-app-signed.efi \ cp /usr/share/pesign-test-app-0.4/pesign-test-app-signed.efi \
/boot/efi/EFI/test/test.efi /boot/efi/EFI/test/test.efi
7) sign a copy of grubx64.efi with RHTC and iput it in \EFI\test\: 7) sign a copy of grubx64.efi with RHTC and iput it in \EFI\test\ . Also
pesign -i /boot/efi/EFI/redhat/grubx64.efi -o grubx64-unsigned.efi \ leave an unsigned copy there:
-r -u 0 pesign -i /boot/efi/EFI/redhat/grubx64.efi \
pesign -i grubx64-unsigned.efi -o /boot/efi/EFI/test/grub.efi \ -o /boot/efi/EFI/test/grubx64-unsigned.efi \
-s -c "Red Hat Test Certificate" -r -u 0
pesign -i /boot/efi/EFI/test/grubx64-unsigned.efi \
-o /boot/efi/EFI/test/grub.efi \
-s -c "Red Hat Test Certificate"
8) sign a copy of mokmanager with RHTC and put it in \EFI\test: 8) sign a copy of mokmanager with RHTC and put it in \EFI\test:
pesign -i /usr/share/shim/MokManager.efi \ pesign -i /usr/share/shim/MokManager.efi \
-o /boot/efi/EFI/test/MokManager.efi -s \ -o /boot/efi/EFI/test/MokManager.efi -s \
-c "Red Hat Test Certificate" -c "Red Hat Test Certificate"
9) copy grub.cfg to our test directory: 9) copy grub.cfg to our test directory:
cp /boot/efi/EFI/redhat/grub.cfg /boot/efi/EFI/test/grub.cfg cp /boot/efi/EFI/redhat/grub.cfg /boot/efi/EFI/test/grub.cfg
10) *move* \EFI\redhat\BOOT.CSV to \EFI\test 10) *move* \EFI\redhat\BOOT.CSV to \EFI\test
mv /boot/efi/EFI/redhat/BOOT.CSV /boot/efi/EFI/test/BOOT.CSV
11) sign a copy of fallback.efi and put it in \EFI\BOOT\fallback.efi
rm -rf /boot/efi/EFI/BOOT/ rm -rf /boot/efi/EFI/BOOT/
mkdir /boot/efi/EFI/BOOT/ mkdir /boot/efi/EFI/BOOT/
mv /boot/efi/EFI/redhat/BOOT.CSV /boot/efi/EFI/test/BOOT.CSV
11) sign a copy of fallback.efi and put it in \EFI\BOOT\fallback.efi
pesign -i /usr/share/shim/fallback.efi \ pesign -i /usr/share/shim/fallback.efi \
-o /boot/efi/EFI/BOOT/fallback.efi \ -o /boot/efi/EFI/BOOT/fallback.efi \
-s -c "Red Hat Test Certificate" -s -c "Red Hat Test Certificate"
@ -55,7 +58,7 @@ How to test a new shim build for RHEL/fedora:
If you get the expected result, shim can run things signed by its internal If you get the expected result, shim can run things signed by its internal
key ring. Check a box someplace that says it can do that. key ring. Check a box someplace that says it can do that.
23) from the EFI shell, copy grub to grubx64.efi: 23) from the EFI shell, copy grub to grubx64.efi:
cp \EFI\test\grubx.efi \EFI\test\grubx64.efi cp \EFI\test\grub.efi \EFI\test\grubx64.efi
24) in the EFI shell, run fs0:\EFI\test\shim.efi 24) in the EFI shell, run fs0:\EFI\test\shim.efi
result: this should start grub, which will let you boot a kernel result: this should start grub, which will let you boot a kernel
If grub starts, it means shim can run things signed by a key in the system's If grub starts, it means shim can run things signed by a key in the system's
@ -78,3 +81,7 @@ How to test a new shim build for RHEL/fedora:
If this works, you should see a bit of output very quickly and then the same If this works, you should see a bit of output very quickly and then the same
thing as #24. This means shim recognized it was in \EFI\BOOT and ran thing as #24. This means shim recognized it was in \EFI\BOOT and ran
fallback.efi, which worked. fallback.efi, which worked.
29) copy the unsigned grub into place and reboot:
cp /boot/efi/EFI/test/grubx64-unsigned.efi /boot/efi/EFI/test/grubx64.efi
30) reboot again.
result: shim should refuse to load grub.