summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-05-12Switch distribution to buster-securitydebian/15.8-1_deb10u1buster/updatesSteve McIntyre
2024-05-06Add salsa-ciBastien Roucariès
2024-05-06Release 15.8-1~deb10u1 for busterSteve McIntyre
2024-05-06check_nx: ignore arm64 binariesSteve McIntyre
the toolchain is too old
2024-05-06Tweak arm64 patchSteve McIntyre
2024-05-06Clean up better after build. Closes: #1046268Steve McIntyre
2024-05-06Install a copy of the Debian CA certificate into /usr/share/shim.Steve McIntyre
Closes: #1069054
2024-05-06Force usage of newest revocations at build timeSteve McIntyre
Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" This should work with the current released grub builds in all of buster, bullseye, bookwork and trixie/unstable. Let's not leave known security holes in the wild.
2024-05-06Cherry-pick latest grub revocation patches from upstream shimSteve McIntyre
0001-sbat-Add-grub.peimage-2-to-latest-CVE-2024-2312.patch 0002-sbat-Also-bump-latest-for-grub-4-and-to-todays-date.patch
2024-05-06Log if the build is nx-compatible or notSteve McIntyre
Add a new simple script to do this: check_nx
2024-05-06Switch to 15.8 upstream and drop old patchesSteve McIntyre
2024-05-06Remove artifacts imported by mistakeSteve McIntyre
2024-05-06Merge tag 'upstream/15.8' into buster/updatesBastien Roucariès
Upstream version 15.8
2024-02-17New upstream version 15.8upstream/15.8upstreamSteve McIntyre
2023-01-31Retarget to buster-securitydebian/15.7-1_deb10u1Steve McIntyre
2023-01-31Release 15.7-1~deb10u1Steve McIntyre
2023-01-31Block Debian grub binaries with sbat < 4 (see #1024617)Steve McIntyre
2023-01-31Enable NX support at build timeSteve McIntyre
As required by policy for signing new shim binaries.
2023-01-31Import upstream patch to deal with buggy binutilsSteve McIntyre
2023-01-31Port 15.7-1 back to buster tooSteve McIntyre
Fold in our other changes, and test
2023-01-31Merge branch 'upstream' into buster/updatesSteve McIntyre
2023-01-22New upstream version 15.7upstream/15.7Steve McIntyre
2022-07-28Release 15.6-1~deb10u1debian/15.6-1_deb10u1Steve McIntyre
2022-07-26Add new patches reverting arm64 build system changesSteve McIntyre
so we can build using older binutils
2022-07-24Port 15.6-1 back to buster tooSteve McIntyre
Fold in our other changes, and test
2022-07-24Merge branch 'upstream' into buster/updatesSteve McIntyre
2022-06-23New upstream version 15.6upstream/15.6Steve McIntyre
2022-04-27New upstream version 15.5upstream/15.5Steve McIntyre
2021-07-12Tweak how we call grub-install; don't abort on errordebian/15.4-7_deb10u1Steve McIntyre
Not ideal behaviour either, but don't break upgrades. Copy the behaviour from the grub packages here. Closes: #990966
2021-06-23Release 15.4-6~deb10u1debian/15.4-6_deb10u1Steve McIntyre
2021-06-22In insecure mode, don't abort if we can't create the MokListXRT varSteve McIntyre
Upstream issue #372. Closes: #989962, #990158
2021-06-22Add arm64 patch to tweak section layout and stop crashing problemsSteve McIntyre
Upstream issue #371. Closes: #990082
2021-05-08Add defensive code around calls to db_getdebian/15.4-5_deb10u1Steve McIntyre
Don't fail if they return errors.
2021-05-08Fix up the template maintainer scriptsSteve McIntyre
if we're not running on an EFI system then exit cleanly
2021-05-03Add maintainer scripts to the template packagesdebian/15.4-3_deb10u1Steve McIntyre
Manage installing and removing fbXXX.efi and mmXXX.efi when we install/remove the shim-helpers-$arch-signed packages. Closes: #966845
2021-04-21Use a better version number for the buster builddebian/15.4-2_deb10u1Steve McIntyre
2021-04-21Add changelog for 15.4-1_deb10u2 with new patchesSteve McIntyre
2021-04-21Don't call QueryVariableInfo() on EFI 1.10 machinesSteve McIntyre
New patch from upstream, don't break old Macs
2021-04-21Fix handling of ignore_db and user_insecure_modeSteve McIntyre
Extra patch from upstream
2021-04-17Stop hardcoding the release version in the rules filedebian/15.4-1_deb10u1Steve McIntyre
We can grab it from the changelog already
2021-04-17Clean more thingsSteve McIntyre
2021-04-17Prep for releasing based on 15.4Steve McIntyre
2021-04-14allocate MOK config table as BootServicesDataSteve McIntyre
Another patch from upstream, needed with newer kernels on x86
2021-03-31Add one more patch from upstream to fix i386 binary relocationsSteve McIntyre
2021-03-31Print sha256 checksums of the EFI binaries when the build is doneSteve McIntyre
2021-03-31Update to the 15.4 releaseSteve McIntyre
2021-03-31Merge tag 'upstream/15.4' into buster/updatesSteve McIntyre
Upstream version 15.4
2021-03-31New upstream version 15.4upstream/15.4Steve McIntyre
2021-03-24Tweak the SBAT data to keep reproducibilitydebian/15.3-1_deb10u3Steve McIntyre
Only include the upstream version in the Debian SBAT metadata, so we don't break reproducibility on every minor packaging change.
2021-03-24Add missing build-dep on xxd for build-time unit testsdebian/15.3-1_deb10u2Steve McIntyre
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-28 20:46:36 +0000