proxmox-mirrors/efi-boot-shim
1
0
Fork 0
mirror of https://git.proxmox.com/git/efi-boot-shim synced 2025-08-15 21:00:44 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
585 Commits 1 Branch 3 Tags 11 MiB
9bfbee892e
Commit Graph

585 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Luca Boccassi
9bfbee892e Include /usr/share/dpkg/architecture.mk instead of shelling out. 2019-02-15 21:26:05 +00:00
Luca Boccassi
8c00485c68 Override lintian error about template rules file 
Lintian parses the shebang in the rules files of the templates packages
and complains that there is no dependency on make. But they are special
packages, so override it.
 2019-02-15 21:26:05 +00:00
Philipp Hahn
f7add2255f Add shim-$arch-signed-template support 
for getting the MOK-manager and fall-back binary to be signed by Debians
singing service instead of using an ephemeral key.

Closes: #922228
 2019-02-15 21:26:05 +00:00
Philipp Hahn
c2dbb9ef4e Rename to shim-unsigned 
as all EFI binaries are now unsigned. They are useless to any normal
user as
- shim is useless without being signed by an external UEFI CA.
- mm and fb won't be loaded by shim as they are now no longer linked to
  corresponding shim by the ephemeral key any longer.
 2019-02-15 21:26:04 +00:00
Philipp Hahn
e914483c5b Disable ephemeral key on Debian 
shim creates an ephemeral key, which gets embedded into shim and is used
to sign the corresponding mok-manager (mm*.efi) and fall-back-manager
(fb*.efi).
This makes the build unreproducible.

For Debian we will get those two binaries signed by our Debian-UEFI-CA,
which is the primary (and only) key embedded in shim.
 2019-02-15 21:25:37 +00:00
Philipp Hahn
4bb202a099 debian/rules: fixing permissions no longer required 
as Makefiles used "install -m 0644" by now.
 2019-02-15 19:51:32 +00:00
Steve Langasek
8819008767 releasing package shim version 15+1533136590.3beb971-2 2019-02-11 05:18:25 +00:00
Steve Langasek
47660e6730 Update debian/copyright (drop reference to file no longer in source) 2019-02-10 21:16:09 -08:00
Steve Langasek
2b9acc731a Update Standards-Version. 2019-02-10 21:15:01 -08:00
Steve Langasek
1d945f7690 Ensure DEB_HOST_ARCH is set even if not present in the environment. 2019-02-10 21:10:48 -08:00
Steve Langasek
21efb35cce Enable build for i386. 2019-02-10 21:09:39 -08:00
Steve Langasek
cebae05a6d Fix debian/rules syntax for arm64 build. 2019-02-10 21:09:14 -08:00
Steve Langasek
2fab563a95 Update VCS to point to salsa. 2019-02-10 21:06:28 -08:00
Steve Langasek
100e3b0cdb Update debian/watch. 2019-02-10 00:15:42 -08:00
Steve Langasek
ab4c731c1d * New upstream release. 
- debian/patches/second-stage-path: dropped; the default loader path now
    includes an arch suffix.
  - debian/patches/sbsigntool-no-pesign: dropped; no longer needed.
* Drop remaining patches that were not being applied.
* Sync packaging from Ubuntu:
  - debian/copyright: Update upstream source location.
  - debian/control: add a Build-Depends on libelf-dev.
  - Enable arm64 build.
  - debian/patches/fixup_git.patch: don't run git in clean; we're not
    really in a git tree.
  - debian/rules, debian/shim.install: use the upstream install target as
    intended, and move files to the target directory using dh_install.
  - define RELEASE and COMMIT_ID for the snapshot.
  - Set ENABLE_HTTPBOOT to enable the HTTP Boot feature.
  - Update dh_auto_build/dh_auto_clean/dh_auto_install for new upstream
    options: set MAKELEVEL.
  - Define an EFI_ARCH variable, and use that for paths to shim. This
    makes it possible to build a shim for other architectures than amd64.
  - Set EFIDIR=$distro for dh_auto_install; that will let files be installed
    in the "right" final directories, and makes boot.csv for us.
  - Set ENABLE_SHIM_CERT, to keep using ephemeral self-signed certs built
    at compile-time for MokManager and fallback.
  - Set ENABLE_SBSIGN, to use sbsign instead of pesign for signing fallback
    and MokManager.
 2019-02-09 21:32:44 -08:00
Steve Langasek
0d63079c7d null merge of the Ubuntu git history 2019-02-09 21:26:40 -08:00
Mathieu Trudel-Lapierre
9c12130f9c releasing package shim version 15+1533136590.3beb971-0ubuntu1 2018-08-22 14:47:35 -04:00
Mathieu Trudel-Lapierre
d2b378f8a4 Make sure we pass the right COMMIT_ID to build 2018-08-22 10:06:32 -04:00
Mathieu Trudel-Lapierre
637de4775e Update to new snapshot 2018-08-21 14:24:09 -04:00
Mathieu Trudel-Lapierre
5f81bd7e08 Update upstream source from tag 'upstream/15+1533136590.3beb971' 
Update to upstream version '15+1533136590.3beb971'
with Debian dir 26714b7953
 2018-08-21 14:22:44 -04:00
Mathieu Trudel-Lapierre
7bf7a6d085 New upstream version 15+1533136590.3beb971 2018-08-21 14:22:44 -04:00
Mathieu Trudel-Lapierre
3f6670a920 releasing package shim version 15+1531942534.dd3230d-0ubuntu1 2018-08-14 14:49:36 -04:00
Mathieu Trudel-Lapierre
ad536b8717 debian/patches/fixup_git.patch: don't run git in clean; we're not really in a git tree. 2018-07-24 18:13:48 -04:00
Mathieu Trudel-Lapierre
f42b58fc50 * debian/rules: 
- define RELEASE and COMMIT_ID for the snapshot.
  - Set ENABLE_HTTPBOOT to enable the HTTP Boot feature.
 2018-07-24 16:39:07 -04:00
Mathieu Trudel-Lapierre
0283a7456e debian/patches/abort_abort_abort.patch: dropped patch, included upstream. 2018-07-24 16:26:53 -04:00
Mathieu Trudel-Lapierre
25f42a7c60 New upstream snapshot. 2018-07-24 16:25:42 -04:00
Mathieu Trudel-Lapierre
f892ac6608 New upstream version 15+1531942534.dd3230d 2018-07-24 16:24:23 -04:00
Mathieu Trudel-Lapierre
ca6b857775 Update upstream source from tag 'upstream/15+1531942534.dd3230d' 
Update to upstream version '15+1531942534.dd3230d'
with Debian dir 8b167be003
 2018-07-24 16:24:23 -04:00
dann frazier
3802e1ad5a Enable arm64 build. 2018-04-24 12:40:56 -06:00
Steve Langasek
fac86c7403 Fix Vcs link. 2018-04-23 18:09:05 -07:00
Mathieu Trudel-Lapierre
d1d148eac9 releasing package shim version 13-0ubuntu2 2017-11-07 10:19:35 -05:00
Mathieu Trudel-Lapierre
d49114cbb9 Clean up old patches. 2017-11-07 10:18:58 -05:00
Mathieu Trudel-Lapierre
81b34c1631 debian/patches/abort_abort_abort.patch: signtool.exe isn't happy with some of the structure of our binary, partly because abort() is thought to be an external symbol, which causes some relocalisations to appear. 2017-11-06 09:18:08 -05:00
Mathieu Trudel-Lapierre
4a3efbe436 releasing package shim version 13-0ubuntu1 2017-09-29 15:11:42 -04:00
Mathieu Trudel-Lapierre
dbbe142c74 Don't need to clean after .signed files, upstream Makefile does it now. 
Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>
 2017-09-29 11:29:25 -04:00
Mathieu Trudel-Lapierre
560a356bc7 Drop buildid_write_return.patch; no longer needed. 
Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>
 2017-09-29 11:26:01 -04:00
Mathieu Trudel-Lapierre
04acbb3ee3 Don't need to set -Wno-error=unused-variable anymore 
Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>
 2017-09-29 11:24:56 -04:00
Mathieu Trudel-Lapierre
2f7a1c0b68 New upstream release: 13 2017-09-29 11:22:09 -04:00
Mathieu Trudel-Lapierre
6215e920e7 New upstream version 13 2017-09-29 11:20:57 -04:00
Mathieu Trudel-Lapierre
f9f6966262 Updated version 13 from 'upstream/13' 
with Debian dir e38346a2ee
 2017-09-29 11:20:57 -04:00
Mathieu Trudel-Lapierre
81250bb1a1 Updated version 13~z1 from 'upstream/13_z1' 
with Debian dir e38346a2ee
 2017-09-29 11:18:56 -04:00
Mathieu Trudel-Lapierre
6025103c25 New upstream version 13~z1 2017-09-29 11:18:56 -04:00
Mathieu Trudel-Lapierre
a9cd148a1e New upstream snapshot: 13~git1506531982.23ce039 2017-09-27 13:10:32 -04:00
Mathieu Trudel-Lapierre
77e5c6e480 Updated version 13~git1506531982.23ce039 from 'upstream/13_git1506531982.23ce039' 
with Debian dir bc85d2ed9d
 2017-09-27 13:09:42 -04:00
Mathieu Trudel-Lapierre
ecc2922605 New upstream version 13~git1506531982.23ce039 2017-09-27 13:09:42 -04:00
Mathieu Trudel-Lapierre
e85582f4ca We don't really need libnss3-tools. 2017-09-27 12:55:12 -04:00
Mathieu Trudel-Lapierre
926d947690 debian/control: add Breaks: for the previous shim-signed builds given that shim will now build and ship BOOT.CSV by itself. 2017-09-27 12:54:05 -04:00
Mathieu Trudel-Lapierre
52b46c08f6 Ignore unused-variable errors. 2017-09-27 12:46:14 -04:00
Mathieu Trudel-Lapierre
21fbf908f7 New upstream snapshot: 13~git1505328971.0780644a 2017-09-27 12:45:29 -04:00
Mathieu Trudel-Lapierre
51d5bbcb24 New upstream version 13~git1505328971.0780644a 2017-09-14 17:48:49 -07:00