mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-07-26 14:29:20 +00:00
402fafb475
Also drop debian/patches/sbsigntool-no-pesign: with this change from upstream it is no longer needed..
33 lines
790 B
Makefile
Executable File
33 lines
790 B
Makefile
Executable File
#!/usr/bin/make -f
|
|
|
|
# Other vendors, add your certs here. No sense in using
|
|
# dpkg-vendor --derives-from, because only Canonical-generated binaries will
|
|
# be signed with this key; so if you are building your own shim binary you
|
|
# should be building the other binaries also.
|
|
ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes)
|
|
cert=debian/canonical-uefi-ca.der
|
|
else
|
|
cert=debian/debian-uefi-ca.der
|
|
endif
|
|
|
|
ifeq ($(DEB_HOST_ARCH),amd64)
|
|
export EFI_ARCH := x64
|
|
endif
|
|
|
|
%:
|
|
dh $@ --parallel
|
|
|
|
override_dh_auto_clean:
|
|
dh_auto_clean -- MAKELEVEL=0
|
|
override_dh_auto_build:
|
|
dh_auto_build -- \
|
|
MAKELEVEL=0 \
|
|
EFI_PATH=/usr/lib \
|
|
ENABLE_SHIM_CERT=1 \
|
|
ENABLE_SBSIGN=1 \
|
|
VENDOR_CERT_FILE=$(cert)
|
|
|
|
override_dh_fixperms:
|
|
dh_fixperms
|
|
chmod a-x debian/shim/usr/lib/shim/shim$(EFI_ARCH).efi
|