efi-boot-shim.git/debian/rules, branch debian/15.3-2 (mirror of https://github.com/vyos/efi-boot-shim.git) https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=debian%2F15.3-2 2021-03-23T23:43:27+00:00 Switch to using the 15.3 release from upstream 2021-03-23T23:43:27+00:00 Steve McIntyre steve@einval.com 2021-03-23T23:43:27+00:00 urn:sha1:85b409232ce89b34626df9d72abedf5d4f5ccef6 Fix up some of the options we're using at build time 2021-03-23T23:33:13+00:00 Steve McIntyre steve@einval.com 2021-03-15T20:19:01+00:00 urn:sha1:57e2a32beff477648d2ea608ecefb10499a9a10c Definitely don't want to be setting EFI_PATH, as that over-rides the vendored gnu-efi. Argh Improve how the dbx hashes are handled 2021-03-23T23:33:04+00:00 Steve McIntyre steve@einval.com 2021-03-14T16:04:15+00:00 urn:sha1:de3def7f5365e0b567606c3b7b63df2f0525af35 Only include the hashes for the architecture we're building for - no point in adding bloat and delay here. Add a script "block_signed_deb" to scan a set of .deb files, extract the hashes for .efi binaries and list them in the format wanted for the dbx hashes file. Split out the code to use that file from the rules file into a separate helper. Tweak the gnu-efi tarball code 2021-03-23T23:32:57+00:00 Steve McIntyre steve@einval.com 2021-03-13T20:00:58+00:00 urn:sha1:3139bb3585d443a96ed7b9f5fdfbb49b6af281af Add an extra rule to generate the extra gnu-efi tarball 2021-03-23T23:32:52+00:00 Steve McIntyre steve@einval.com 2021-03-13T19:43:00+00:00 urn:sha1:9b014236c8b4113aeae40b452e35208cf0397d1a Thanks to Dmitri John Ledkov for help Add Debian SBAT data to the shim build 2021-03-23T23:32:45+00:00 Steve McIntyre steve@einval.com 2021-03-13T19:06:37+00:00 urn:sha1:2e0a83e1f2e1d1cf76a4082eb14dd7f9b11eda2d Add a Debian SBAT template, and rules to use it Adds a build-dep on dos2unix Remove artifacts that upstream installs that we don't use 2021-02-21T16:34:28+00:00 Steve McIntyre 93sam@debian.org 2021-02-21T16:14:14+00:00 urn:sha1:bcc26d6dfbe6948e8f79d501ac727b34771e4021 ... to keep debhelper from complaining Switch to using gcc-10 rather than gcc-9. Closes: #978521 2021-02-21T13:53:17+00:00 Steve McIntyre 93sam@debian.org 2021-02-21T13:53:17+00:00 urn:sha1:334e9afa91427a6ac9a465ce0fc6c5c8643defb9 Switch to newer upstream "release" 15+1613861442.888f5b5 2021-02-21T13:50:33+00:00 Steve McIntyre 93sam@debian.org 2021-02-21T13:50:33+00:00 urn:sha1:371ed906c5a9e5a8219bf168209c801803ec7d1c Many many updates, but caring mainly about SBAT support Use sort and uniq - minimise the size of the list here 2020-07-24T00:28:51+00:00 Steve McIntyre 93sam@debian.org 2020-06-09T10:40:14+00:00 urn:sha1:8d7a0a5ce1e053beedc075b3171bf145efc4de82 We may end up with duplicates, let's not include hashes twice in the shim binary blacklist