efi-boot-shim.git/Makefile, branch vyos/current

Update version to 16.0

2025-03-18T22:12:50+00:00

Signed-off-by: Peter Jones

Update version to 16.0~rc1

2025-03-04T15:22:00+00:00

Signed-off-by: Peter Jones

makefiles: Make GITTAG swizzle tildes to dashes

2025-03-04T15:20:09+00:00

Signed-off-by: Peter Jones

Move memory attribute support to its own file.

2025-02-24T20:24:24+00:00

This moves the EFI Memory Attribute Protocol helper functions to their own file, since they're not related to PE things. Signed-off-by: Peter Jones

Move some stuff around

2025-02-11T15:43:37+00:00

This moves some things around to help with loader protocol changes: - Move replacements.c to loader-proto.c - likewise with replacements.h - move the SHIM_IMAGE_LOADER decl to loader-proto.h - move the LoadImage / StartImage interface setup to an init function - move shim_load_image() / shim_start_image() to loader-proto.c Signed-off-by: Peter Jones

Add configuration option to boot an alternative 2nd stage

2025-02-06T20:13:23+00:00

Add the ability for shim to load an optional configuration file. This new file is called "options.csv". The configuration file is completely optional. If used, it is located in the same directory as the booted shim. The "options.csv" file currently allows a single entry. Other options could be added to it in the future. The first and only entry in the file is the name of the secondary boot loader shim will load. The "options.csv" file is in Unicode LE format. This allows a signed shim to directly load a UKI without the need to rename it to grub. Shim's transitive trust is maintained. If the alternative 2nd stage can not be verified, it will not boot. Signed-off-by: Eric Snowberg

Create utils file

2025-02-06T20:13:23+00:00

Move some functions currently used within fallback that will later also be used in shim. Signed-off-by: Eric Snowberg

Generate and use generated_sbat_var_defs.h

2025-02-05T14:10:35+00:00

Build changes to generate include/generated_sbat_var_defs.h from SbatLevel_Variable.txt and use that header file. From here on forward SbatLevel_Variable.txt should be the only place a new revocation needs to be recorded. Signed-off-by: Jan Setje-Eilers

Add generate_sbat_var_defs utility program

2025-02-05T14:10:35+00:00

This adds the utility program generate_sbat_var_defs, which can be used to generate the sbar_var_defs.h header file from the human readable SbatLevel_Variable.txt file. Signed-off-by: Jan Setje-Eilers

Move is_removable_media_path() to a shared location.

2025-01-17T19:45:32+00:00

We need to use is_removable_media_path(), and potentially other helpers, from Mok as well as shim. This moves it to a file just for Device Path utility functions to make that simpler. Signed-off-by: Peter Jones