diff options
| author | Steve Langasek <steve.langasek@canonical.com> | 2019-02-09 21:28:06 -0800 |
|---|---|---|
| committer | Steve Langasek <steve.langasek@canonical.com> | 2019-02-09 21:32:44 -0800 |
| commit | ab4c731c1dd379acd3e95971af57401fb0a650a1 (patch) | |
| tree | 6a26fb8d0746cbbaa6c2d4b242c73442bcc1df06 /debian/rules | |
| parent | 0d63079c7da8e86104ce4bbdae2f6cb8d2ea40c6 (diff) | |
| parent | 9c12130f9cd2ae11a9336813dd1f1669c0b64ad0 (diff) | |
| download | efi-boot-shim-debian/15+1533136590.3beb971-1.tar.gz efi-boot-shim-debian/15+1533136590.3beb971-1.zip | |
* New upstream release.debian/15+1533136590.3beb971-1
- debian/patches/second-stage-path: dropped; the default loader path now
includes an arch suffix.
- debian/patches/sbsigntool-no-pesign: dropped; no longer needed.
* Drop remaining patches that were not being applied.
* Sync packaging from Ubuntu:
- debian/copyright: Update upstream source location.
- debian/control: add a Build-Depends on libelf-dev.
- Enable arm64 build.
- debian/patches/fixup_git.patch: don't run git in clean; we're not
really in a git tree.
- debian/rules, debian/shim.install: use the upstream install target as
intended, and move files to the target directory using dh_install.
- define RELEASE and COMMIT_ID for the snapshot.
- Set ENABLE_HTTPBOOT to enable the HTTP Boot feature.
- Update dh_auto_build/dh_auto_clean/dh_auto_install for new upstream
options: set MAKELEVEL.
- Define an EFI_ARCH variable, and use that for paths to shim. This
makes it possible to build a shim for other architectures than amd64.
- Set EFIDIR=$distro for dh_auto_install; that will let files be installed
in the "right" final directories, and makes boot.csv for us.
- Set ENABLE_SHIM_CERT, to keep using ephemeral self-signed certs built
at compile-time for MokManager and fallback.
- Set ENABLE_SBSIGN, to use sbsign instead of pesign for signing fallback
and MokManager.
Diffstat (limited to 'debian/rules')
| -rwxr-xr-x | debian/rules | 30 |
1 files changed, 28 insertions, 2 deletions
diff --git a/debian/rules b/debian/rules index f368a197..4c92c804 100755 --- a/debian/rules +++ b/debian/rules @@ -6,16 +6,42 @@ # should be building the other binaries also. ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes) cert=debian/canonical-uefi-ca.der + distributor=ubuntu else cert=debian/debian-uefi-ca.der + distributor=debian endif +ifeq ($(DEB_HOST_ARCH),amd64) +export EFI_ARCH := x64 +else ($(DEB_HOST_ARCH),arm64) +export EFI_ARCH := aa64 +endif + +COMMON_OPTIONS = \ + RELEASE=15 \ + COMMIT_ID=3beb971b10659cf78144ddc5eeea83501384440c \ + MAKELEVEL=0 \ + EFI_PATH=/usr/lib \ + ENABLE_HTTPBOOT=true \ + ENABLE_SHIM_CERT=1 \ + ENABLE_SBSIGN=1 \ + VENDOR_CERT_FILE=$(cert) \ + EFIDIR=$(distributor) \ + $(NULL) + %: dh $@ --parallel +override_dh_auto_clean: + dh_auto_clean -- MAKELEVEL=0 + override_dh_auto_build: - dh_auto_build -- EFI_PATH=/usr/lib VENDOR_CERT_FILE=$(cert) + dh_auto_build -- $(COMMON_OPTIONS) + +override_dh_auto_install: + dh_auto_install --destdir=debian/tmp -- $(COMMON_OPTIONS) override_dh_fixperms: dh_fixperms - chmod a-x debian/shim/usr/lib/shim/shimx64.efi + chmod a-x debian/shim/usr/lib/shim/shim$(EFI_ARCH).efi |