proxmox-secure-boot-support/debian/99-proxmox-secure-boot-support
Fabian Grünbichler 6b00df75d7 ship apt pinning snippet
this should ensure that a shim-signed package from a non-Proxmox repository
cannot overtake ours, even if the version is newer. since
proxmox-secure-boot-support is optional, this is entirely opt-in.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2024-06-21 11:16:05 +02:00

8 lines
324 B
Plaintext

# automatically added by proxmox-secure-boot-support, to ensure Proxmox version
# of shim-signed stays installed even if Debian repositories contain an
# upgraded version earlier than Proxmox ones, since they embed different
# certificates and are incompatible.
Package: shim-signed
Pin: release o=Proxmox
Pin-Priority: 900