summaryrefslogtreecommitdiff
path: root/debian/rules
diff options
context:
space:
mode:
authorJoão Paulo Rechi Vita <jprvita@endlessm.com>2018-11-30 20:35:49 -0800
committerJoão Paulo Rechi Vita <jprvita@endlessm.com>2018-11-30 22:33:56 -0800
commit6c7b84f5909d37d79a2120fe23f5096d9b92063b (patch)
tree16aab836f2549b7cfe1488d96d9e9f16e45f3d28 /debian/rules
parentf430b853338e84df4a68d738889df44ae00d4be4 (diff)
downloadefi-boot-shim-Version_15_debian.tar.gz
efi-boot-shim-Version_15_debian.zip
Import latest packaging from Debian Testing (Buster)Version_15_debian
Version 0.9+1474479173.6c180c6-1, minus the debian/patches directory. https://phabricator.endlessm.com/T24681
Diffstat (limited to 'debian/rules')
-rwxr-xr-xdebian/rules22
1 files changed, 16 insertions, 6 deletions
diff --git a/debian/rules b/debian/rules
index 7ebe0e6f..f368a197 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,11 +1,21 @@
#!/usr/bin/make -f
+# Other vendors, add your certs here. No sense in using
+# dpkg-vendor --derives-from, because only Canonical-generated binaries will
+# be signed with this key; so if you are building your own shim binary you
+# should be building the other binaries also.
+ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes)
+ cert=debian/canonical-uefi-ca.der
+else
+ cert=debian/debian-uefi-ca.der
+endif
+
%:
- dh $@
+ dh $@ --parallel
override_dh_auto_build:
- dh_auto_build -- EFI_PATH=/usr/lib VENDOR_CERT_FILE=debian/endless-ca.cer
- cp -v shim.efi bootx64.efi
- cp -v MokManager.efi.signed MokManager.efi
- cp -v fallback.efi.signed fallback.efi
- iconv -t utf-16le debian/BOOT.CSV.utf8 > BOOT.CSV
+ dh_auto_build -- EFI_PATH=/usr/lib VENDOR_CERT_FILE=$(cert)
+
+override_dh_fixperms:
+ dh_fixperms
+ chmod a-x debian/shim/usr/lib/shim/shimx64.efi