(mirror of https://github.com/vyos/efi-boot-shim.git) https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=rolling 2021-03-23T23:33:04+00:00 2021-03-23T23:33:04+00:00 Steve McIntyre steve@einval.com 2021-03-14T16:04:15+00:00 urn:sha1:de3def7f5365e0b567606c3b7b63df2f0525af35 Only include the hashes for the architecture we're building for - no point in adding bloat and delay here. Add a script "block_signed_deb" to scan a set of .deb files, extract the hashes for .efi binaries and list them in the format wanted for the dbx hashes file. Split out the code to use that file from the rules file into a separate helper. 2020-07-24T00:28:51+00:00 Steve McIntyre 93sam@debian.org 2020-06-09T09:30:53+00:00 urn:sha1:c161c40d1ef319d0d54e6ab19de6fc35c42b9967 2019-05-08T15:49:11+00:00 Steve McIntyre 93sam@debian.org 2019-05-08T15:49:11+00:00 urn:sha1:3a1cdbfd4ca5196367fded2dbbb0101193f6889c for the dbx list, as recommended by Peter Jones. No actual changes needed in our list of hashes at this point - they work out the same either way. 2019-05-07T10:05:48+00:00 Steve McIntyre 93sam@debian.org 2019-05-07T10:05:48+00:00 urn:sha1:28e8f71ef2a18134ef2f11bd5ec237c7a4833707 so they'll get an empty dbs list rather than breaking the build