mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-08-12 05:39:56 +00:00
Fix some minor testplan errors.
Signed-off-by: Peter Jones <pjones@redhat.com>
This commit is contained in:
parent
ada75ade4c
commit
e258243e43
@ -12,7 +12,7 @@ How to test a new shim build for RHEL/fedora:
|
|||||||
-s -c "Red Hat Test Certificate"
|
-s -c "Red Hat Test Certificate"
|
||||||
6) put pesign-test-app-signed.efi in \EFI\test as grubx64.efi
|
6) put pesign-test-app-signed.efi in \EFI\test as grubx64.efi
|
||||||
cp /usr/share/pesign-test-app-0.4/pesign-test-app-signed.efi \
|
cp /usr/share/pesign-test-app-0.4/pesign-test-app-signed.efi \
|
||||||
/boot/efi/EFI/test/test.efi
|
/boot/efi/EFI/test/grubx64.efi
|
||||||
7) sign a copy of grubx64.efi with RHTC and iput it in \EFI\test\ . Also
|
7) sign a copy of grubx64.efi with RHTC and iput it in \EFI\test\ . Also
|
||||||
leave an unsigned copy there:
|
leave an unsigned copy there:
|
||||||
pesign -i /boot/efi/EFI/redhat/grubx64.efi \
|
pesign -i /boot/efi/EFI/redhat/grubx64.efi \
|
||||||
@ -38,7 +38,9 @@ How to test a new shim build for RHEL/fedora:
|
|||||||
12) put shim.efi there as well
|
12) put shim.efi there as well
|
||||||
cp /boot/efi/EFI/test/shim.efi /boot/efi/EFI/BOOT/BOOTX64.EFI
|
cp /boot/efi/EFI/test/shim.efi /boot/efi/EFI/BOOT/BOOTX64.EFI
|
||||||
13) enroll the current kernel's certificate with mokutil:
|
13) enroll the current kernel's certificate with mokutil:
|
||||||
mokutil --import ~/redhatsecurebootca2.cer
|
# this should be a /different/ cert than the one signing pesign-test-app.
|
||||||
|
# for instance use a RHEL cert for p-t-a and a fedora cert+kernel here.
|
||||||
|
mokutil --import ~/fedora-ca.cer
|
||||||
14) put machine in setup mode
|
14) put machine in setup mode
|
||||||
15) boot to the UEFI shell
|
15) boot to the UEFI shell
|
||||||
16) run lockdown.efi from #4:
|
16) run lockdown.efi from #4:
|
||||||
|
Loading…
Reference in New Issue
Block a user