efi-boot-shim.git/debian/generate_dbx_list, branch master (mirror of https://github.com/vyos/efi-boot-shim.git) https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=master 2024-05-02T21:13:14+00:00 Tweak the UUID handling to be clearer 2024-05-02T21:13:14+00:00 Steve McIntyre steve@einval.com 2024-02-17T17:19:57+00:00 urn:sha1:3cf4042d82ef314f19e9f7bd4f86c4b59efd8233 generate_dbx_list: pick a fixed UUID 2024-01-20T23:15:22+00:00 Steve McIntyre steve@einval.com 2024-01-20T22:40:27+00:00 urn:sha1:f4f4e39e16af685d5d6de16c4fcc0e04f651ab70 otherwise our build won't be reproducible, doh! Tweak building with pesign changes 2023-11-02T00:47:18+00:00 Steve McIntyre steve@einval.com 2023-11-01T23:37:50+00:00 urn:sha1:7686debad858ce35d7b393a424f9b684120c778c We used to use efisiglist to generate the DBX list. Newer versions of the pesign package don't include it any more, and the recommended replacement tool is now efisecdb from efivar. Tweak the generate_dbx_list script to work with both old and new. Let's make backports easy... Improve how the dbx hashes are handled 2021-03-23T23:33:04+00:00 Steve McIntyre steve@einval.com 2021-03-14T16:04:15+00:00 urn:sha1:de3def7f5365e0b567606c3b7b63df2f0525af35 Only include the hashes for the architecture we're building for - no point in adding bloat and delay here. Add a script "block_signed_deb" to scan a set of .deb files, extract the hashes for .efi binaries and list them in the format wanted for the dbx hashes file. Split out the code to use that file from the rules file into a separate helper.