Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-03-06 | Typo fix: s,singing,signing,g | Steve McIntyre | |
2019-02-15 | Add uname.patch to avoid architecture variability | Luca Boccassi | |
Signed-off-by: Luca Boccassi <bluca@debian.org> | |||
2019-02-15 | Include /usr/share/dpkg/architecture.mk instead of shelling out. | Luca Boccassi | |
2019-02-15 | Override lintian error about template rules file | Luca Boccassi | |
Lintian parses the shebang in the rules files of the templates packages and complains that there is no dependency on make. But they are special packages, so override it. | |||
2019-02-15 | Add shim-$arch-signed-template support | Philipp Hahn | |
for getting the MOK-manager and fall-back binary to be signed by Debians singing service instead of using an ephemeral key. Closes: #922228 | |||
2019-02-15 | Rename to shim-unsigned | Philipp Hahn | |
as all EFI binaries are now unsigned. They are useless to any normal user as - shim is useless without being signed by an external UEFI CA. - mm and fb won't be loaded by shim as they are now no longer linked to corresponding shim by the ephemeral key any longer. | |||
2019-02-15 | Disable ephemeral key on Debian | Philipp Hahn | |
shim creates an ephemeral key, which gets embedded into shim and is used to sign the corresponding mok-manager (mm*.efi) and fall-back-manager (fb*.efi). This makes the build unreproducible. For Debian we will get those two binaries signed by our Debian-UEFI-CA, which is the primary (and only) key embedded in shim. | |||
2019-02-15 | debian/rules: fixing permissions no longer required | Philipp Hahn | |
as Makefiles used "install -m 0644" by now. | |||
2019-02-11 | releasing package shim version 15+1533136590.3beb971-2debian/15+1533136590.3beb971-2 | Steve Langasek | |
2019-02-10 | Update debian/copyright (drop reference to file no longer in source) | Steve Langasek | |
2019-02-10 | Update Standards-Version. | Steve Langasek | |
2019-02-10 | Ensure DEB_HOST_ARCH is set even if not present in the environment. | Steve Langasek | |
2019-02-10 | Enable build for i386. | Steve Langasek | |
2019-02-10 | Fix debian/rules syntax for arm64 build. | Steve Langasek | |
2019-02-10 | Update VCS to point to salsa. | Steve Langasek | |
2019-02-10 | Update debian/watch. | Steve Langasek | |
2019-02-09 | * New upstream release.debian/15+1533136590.3beb971-1 | Steve Langasek | |
- debian/patches/second-stage-path: dropped; the default loader path now includes an arch suffix. - debian/patches/sbsigntool-no-pesign: dropped; no longer needed. * Drop remaining patches that were not being applied. * Sync packaging from Ubuntu: - debian/copyright: Update upstream source location. - debian/control: add a Build-Depends on libelf-dev. - Enable arm64 build. - debian/patches/fixup_git.patch: don't run git in clean; we're not really in a git tree. - debian/rules, debian/shim.install: use the upstream install target as intended, and move files to the target directory using dh_install. - define RELEASE and COMMIT_ID for the snapshot. - Set ENABLE_HTTPBOOT to enable the HTTP Boot feature. - Update dh_auto_build/dh_auto_clean/dh_auto_install for new upstream options: set MAKELEVEL. - Define an EFI_ARCH variable, and use that for paths to shim. This makes it possible to build a shim for other architectures than amd64. - Set EFIDIR=$distro for dh_auto_install; that will let files be installed in the "right" final directories, and makes boot.csv for us. - Set ENABLE_SHIM_CERT, to keep using ephemeral self-signed certs built at compile-time for MokManager and fallback. - Set ENABLE_SBSIGN, to use sbsign instead of pesign for signing fallback and MokManager. | |||
2019-02-09 | null merge of the Ubuntu git history | Steve Langasek | |
2018-08-22 | releasing package shim version 15+1533136590.3beb971-0ubuntu1debian/15+1533136590.3beb971-0ubuntu1 | Mathieu Trudel-Lapierre | |
2018-08-22 | Make sure we pass the right COMMIT_ID to build | Mathieu Trudel-Lapierre | |
2018-08-21 | Update to new snapshot | Mathieu Trudel-Lapierre | |
2018-08-21 | Update upstream source from tag 'upstream/15+1533136590.3beb971' | Mathieu Trudel-Lapierre | |
Update to upstream version '15+1533136590.3beb971' with Debian dir 26714b7953c3d4b1f6aa8b95e9e1e026d455a008 | |||
2018-08-21 | New upstream version 15+1533136590.3beb971upstream/15+1533136590.3beb971 | Mathieu Trudel-Lapierre | |
2018-08-14 | releasing package shim version 15+1531942534.dd3230d-0ubuntu1debian/15+1531942534.dd3230d-0ubuntu1 | Mathieu Trudel-Lapierre | |
2018-07-24 | debian/patches/fixup_git.patch: don't run git in clean; we're not really in ↵ | Mathieu Trudel-Lapierre | |
a git tree. | |||
2018-07-24 | * debian/rules: | Mathieu Trudel-Lapierre | |
- define RELEASE and COMMIT_ID for the snapshot. - Set ENABLE_HTTPBOOT to enable the HTTP Boot feature. | |||
2018-07-24 | debian/patches/abort_abort_abort.patch: dropped patch, included upstream. | Mathieu Trudel-Lapierre | |
2018-07-24 | New upstream snapshot. | Mathieu Trudel-Lapierre | |
2018-07-24 | New upstream version 15+1531942534.dd3230dupstream/15+1531942534.dd3230d | Mathieu Trudel-Lapierre | |
2018-07-24 | Update upstream source from tag 'upstream/15+1531942534.dd3230d' | Mathieu Trudel-Lapierre | |
Update to upstream version '15+1531942534.dd3230d' with Debian dir 8b167be00338c76b0ddc9164059ce6090c274641 | |||
2018-04-24 | Enable arm64 build. | dann frazier | |
2018-04-23 | Fix Vcs link. | Steve Langasek | |
2017-11-07 | releasing package shim version 13-0ubuntu2debian/13-0ubuntu2 | Mathieu Trudel-Lapierre | |
2017-11-07 | Clean up old patches. | Mathieu Trudel-Lapierre | |
2017-11-06 | debian/patches/abort_abort_abort.patch: signtool.exe isn't happy with some ↵ | Mathieu Trudel-Lapierre | |
of the structure of our binary, partly because abort() is thought to be an external symbol, which causes some relocalisations to appear. | |||
2017-09-29 | releasing package shim version 13-0ubuntu1debian/13-0ubuntu1 | Mathieu Trudel-Lapierre | |
2017-09-29 | Don't need to clean after .signed files, upstream Makefile does it now. | Mathieu Trudel-Lapierre | |
Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com> | |||
2017-09-29 | Drop buildid_write_return.patch; no longer needed. | Mathieu Trudel-Lapierre | |
Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com> | |||
2017-09-29 | Don't need to set -Wno-error=unused-variable anymore | Mathieu Trudel-Lapierre | |
Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com> | |||
2017-09-29 | New upstream release: 13 | Mathieu Trudel-Lapierre | |
2017-09-29 | New upstream version 13upstream/13 | Mathieu Trudel-Lapierre | |
2017-09-29 | Updated version 13 from 'upstream/13' | Mathieu Trudel-Lapierre | |
with Debian dir e38346a2eec5376ccf228af4ba0e2d170f07448f | |||
2017-09-29 | Updated version 13~z1 from 'upstream/13_z1' | Mathieu Trudel-Lapierre | |
with Debian dir e38346a2eec5376ccf228af4ba0e2d170f07448f | |||
2017-09-29 | New upstream version 13~z1upstream/13_z1 | Mathieu Trudel-Lapierre | |
2017-09-27 | New upstream snapshot: 13~git1506531982.23ce039 | Mathieu Trudel-Lapierre | |
2017-09-27 | Updated version 13~git1506531982.23ce039 from ↵ | Mathieu Trudel-Lapierre | |
'upstream/13_git1506531982.23ce039' with Debian dir bc85d2ed9d59b8c9e8d4bf33603c75c11feec4f8 | |||
2017-09-27 | New upstream version 13~git1506531982.23ce039upstream/13_git1506531982.23ce039 | Mathieu Trudel-Lapierre | |
2017-09-27 | We don't really need libnss3-tools. | Mathieu Trudel-Lapierre | |
2017-09-27 | debian/control: add Breaks: for the previous shim-signed builds given that ↵ | Mathieu Trudel-Lapierre | |
shim will now build and ship BOOT.CSV by itself. | |||
2017-09-27 | Ignore unused-variable errors. | Mathieu Trudel-Lapierre | |