diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-06-01 20:03:28 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-06-01 20:08:57 +0200 |
| commit | 1ae30357985b54baf0e86e7bddc5d188f6777e22 (patch) | |
| tree | 1a3168a398ca82484da2d2d249fcd192e8101c21 | |
| parent | 283a4621d2d1b0ff6980c3ab51e6fea78a301fb6 (diff) | |
| download | efi-boot-shim-rolling.tar.gz efi-boot-shim-rolling.zip | |
Docker: T861: add build instruction for unsigned shim binaryrolling
docker build -t vyos/shim-build:rolling https://github.com/vyos/efi-boot-shim.git
docker run --rm -it vyos/shim-build:rolling bash
git clone https://github.com/vyos/efi-boot-shim
cd efi-boot-shim && dpkg-buildpackage -uc -us -tc -b
| -rw-r--r-- | Dockerfile | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 00000000..3a25da12 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,35 @@ +# To build VyOS unsigned shim binary use the following instructions: +# +# $ docker build -t vyos/shim-build:rolling https://github.com/vyos/efi-boot-shim +# $ docker run --rm -it vyos/shim-build:rolling bash +# $ git clone https://github.com/vyos/efi-boot-shim +# $ cd efi-boot-shim && dpkg-buildpackage -uc -us -tc -b + +FROM debian:trixie-20250630 +RUN apt-get update -y +RUN DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates + +######### +## +## May need these 2 lines below as/when toolchain updates hit trixie +#RUN echo "deb [check-valid-until=no] https://snapshot.debian.org/archive/debian/20240422T205059Z/ unstable main" > /etc/apt/sources.list +#RUN echo "deb-src [check-valid-until=no] https://snapshot.debian.org/archive/debian/20240422T205059Z/ unstable main" >> /etc/apt/sources.list +## +######### + +RUN apt-get update -y +RUN DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ + build-essential \ + wget \ + git \ + debhelper-compat \ + gnu-efi \ + sbsigntool \ + openssl \ + libelf-dev \ + gcc-12 \ + dos2unix \ + pesign \ + efivar \ + xxd \ + libefivar-dev |