Initial release

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

Makefile

@@ -0,0 +1,40 @@
+include /usr/share/dpkg/pkg-info.mk
+
+GITVERSION:=$(shell git rev-parse HEAD)
+
+# amd64 only for now! else we need to generate d/control
+DEB=proxmox-secure-boot-support_$(DEB_VERSION)_amd64.deb
+
+BUILD_DIR=proxmox-secure-boot-support_$(DEB_VERSION)
+DSC=proxmox-secure-boot-support_$(DEB_VERSION).dsc
+
+.PHONY: deb dsc
+deb: $(DEB)
+dsc: $(DSC)
+
+$(BUILD_DIR): debian
+	rm -rf $@ $@.tmp
+	mkdir $@.tmp
+	cp -a debian $@.tmp/
+	mv $@.tmp $@
+
+$(DEB): $(BUILD_DIR)
+	cd $(BUILD_DIR); dpkg-buildpackage -b -uc -us
+	lintian $(DEBS)
+
+$(DSC): $(BUILD_DIR)
+	cd $(BUILD_DIR); dpkg-buildpackage -S -uc -us
+	lintian $(DSC)
+
+sbuild: $(DSC)
+	sbuild $(DSC)
+
+.PHONY: upload
+upload: UPLOAD_DIST ?= $(DEB_DISTRIBUTION)
+upload: $(DEBS)
+	tar cf - $(DEBS)|ssh repoman@repo.proxmox.com -- upload --product pve,pmg,pbs --dist $(UPLOAD_DIST)
+
+.PHONY: clean distclean
+distclean: clean
+clean:
+	rm -rf *~ proxmox-secure-boot-support*/ proxmox-secure-boot-support*.tar.* *.deb *.dsc *.changes *.buildinfo *.build

debian/changelog

@@ -0,0 +1,5 @@
+proxmox-secure-boot-support (1.0.0) bookworm; urgency=medium
+
+  * Initial release of new Proxmox Secure Boot meta package.
+
+ -- Proxmox Support Team <support@proxmox.com>  Thu, 11 Apr 2024 10:32:52 +0200

debian/control

@@ -0,0 +1,23 @@
+Source: proxmox-secure-boot-support
+Section: admin
+Priority: optional
+Build-Depends: debhelper-compat (= 13),
+               lintian
+Standards-Version: 4.6.2
+Maintainer: Proxmox Support Team <support@proxmox.com>
+
+Package: proxmox-secure-boot-support
+Architecture: amd64
+Section: admin
+Priority: optional
+Depends: grub-efi-amd64-signed (= 1+2.06+13+pmx1),
+         proxmox-grub (=2.06-13+pmx1),
+         shim-helpers-amd64-signed (= 1+15.7+1+pmx1),
+         shim-signed (= 1.39+pmx1+15.7-1+pmx1),
+         shim-unsigned (= 15.7-1+pmx1),
+         ${misc:Depends},
+Description: Meta package pulling in signed Secure Boot related packages
+ This is a metapackage which will install and version-pin Proxmox variants of
+ the signed shim and Grub packages needed to support Secure Boot out of the box
+ on most systems. It only needs to be installed if Secure Boot support is
+ desired and no manual key enrollment is done.

debian/copyright

@@ -0,0 +1,21 @@
+Copyright (C) 2024 Proxmox Server Solutions GmbH
+
+This software is written by Proxmox Server Solutions GmbH <support@proxmox.com>
+
+
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; version 2 dated June, 1991.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program; if not, write to the Free Software
+   Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
+   MA 02110-1301 USA
+
+The complete text of the GNU General
+Public License can be found in `/usr/share/common-licenses/GPL-2'.

debian/rules

@@ -0,0 +1,11 @@
+#!/usr/bin/make -f
+# -*- makefile -*-
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+%:
+	dh $@
+
+.PHONY: build clean
+build clean:

debian/source/format

@@ -0,0 +1 @@
+3.0 (native)