Age | Commit message (Collapse) | Author | |
---|---|---|---|
2025-03-24 | Merge branch 'mr/fix-d-watch-for-RC' into 'master'master | Steve McIntyre | |
d/watch: mangle RC versions See merge request efi-team/shim!18 | |||
2025-03-24 | d/watch: mangle RC versions | Fabian Grünbichler | |
else 16.0.rc1 gets sorted higher than the final 16.0 release tarball. Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com> | |||
2025-03-05 | Remove Steve Langasek from Uploaders. RIP my good friend. | Steve McIntyre | |
2025-01-08 | Also make the rules-requires-root changes in the templates | Steve McIntyre | |
for our generated packages. Closes: #1092425 | |||
2025-01-04 | Update changelog | Steve McIntyre | |
2025-01-04 | Merge branch 'bug-1089432-rootless' into 'master' | Steve McIntyre | |
shim: Build without requiring root See merge request efi-team/shim!17 | |||
2024-12-28 | shim: Build without requiring root | Niels Thykier | |
Closes: #1089432 | |||
2024-05-26 | Merge branch 'remove-ubuntu-files' into 'master' | Steve McIntyre | |
Remove Ubuntu CA and dbx files from the repository See merge request efi-team/shim!16 | |||
2024-05-26 | Remove Ubuntu CA and dbx files from the repository | Mate Kukri | |
2024-05-05 | salsa-ci config: Disable i386 builds and arm64 cross-builds | Steve McIntyre | |
2024-05-04 | Release 15.8-1debian/15.8-1 | Steve McIntyre | |
2024-05-04 | Clean up better after build. Closes: #1046268 | Steve McIntyre | |
2024-05-04 | Remove artifacts imported by mistake | Steve McIntyre | |
2024-05-04 | Install a copy of the Debian CA certificate into /usr/share/shim. | Steve McIntyre | |
Closes: #1069054 | |||
2024-05-04 | Tag bugfixes | Steve McIntyre | |
2024-05-03 | Force usage of newest revocations at build time | Steve McIntyre | |
Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" This should work with the current released grub builds in all of buster, bullseye, bookwork and trixie/unstable. Let's not leave known security holes in the wild. | |||
2024-05-03 | Cherry-pick latest grub revocation patches from upstream shim | Steve McIntyre | |
0001-sbat-Add-grub.peimage-2-to-latest-CVE-2024-2312.patch 0002-sbat-Also-bump-latest-for-grub-4-and-to-todays-date.patch | |||
2024-05-03 | Log if the build is nx-compatible or not | Steve McIntyre | |
Add a new simple script to do this: check_nx | |||
2024-05-03 | Stop building shim for i386 | Steve McIntyre | |
Debian kernels are no longer signed for i386, it's time to stop supporting i386 SB. | |||
2024-05-03 | Switch to 15.8 upstream and drop patches | Steve McIntyre | |
2024-05-03 | New upstream version 15.8 | Steve McIntyre | |
2024-05-02 | Tweak the UUID handling to be clearer | Steve McIntyre | |
2024-05-02 | Add salsa-ci.yml | Bastien Roucariès | |
2024-04-29 | Merge branch 'fixes20240429' into 'master' | Steve McIntyre | |
Apply multi-arch hints. + shim-unsigned: Add Multi-Arch: same. See merge request efi-team/shim!15 | |||
2024-04-29 | Add changelog entry | Bastien Roucariès | |
2024-04-29 | Add verification of upstream release | Bastien Roucariès | |
2024-04-29 | Fix d/watch | Bastien Roucariès | |
2024-04-29 | Closes: #936009 | Bastien Roucariès | |
2024-04-29 | Apply multi-arch hints. + shim-unsigned: Add Multi-Arch: same. | Debian Janitor | |
Changes-By: apply-multiarch-hints | |||
2024-04-17 | Merge branch 'tests' into 'master' | Steve McIntyre | |
Tests See merge request efi-team/shim!14 | |||
2024-04-16 | Add machine smm=on | Bastien Roucariès | |
2024-04-15 | Fix test failure | Bastien Roucariès | |
2024-04-15 | Fix depreciation warnings | Bastien Roucariès | |
2024-04-15 | Use popen for lsb_release | Bastien Roucariès | |
2024-04-15 | Fix depends | Bastien Roucariès | |
2024-04-15 | Update changelog | Bastien Roucariès | |
2024-04-15 | Port to debian | Bastien Roucariès | |
2024-04-15 | Add ubuntu test | Bastien Roucariès | |
2024-01-20 | generate_dbx_list: pick a fixed UUID | Steve McIntyre | |
otherwise our build won't be reproducible, doh! | |||
2023-11-02 | Tweak building with pesign changes | Steve McIntyre | |
We used to use efisiglist to generate the DBX list. Newer versions of the pesign package don't include it any more, and the recommended replacement tool is now efisecdb from efivar. Tweak the generate_dbx_list script to work with both old and new. Let's make backports easy... | |||
2023-01-31 | Release 15.7-1debian/15.7-1 | Steve McIntyre | |
2023-01-30 | Swith to using the upstream "enable NX" patch | Steve McIntyre | |
2023-01-29 | Block Debian grub binaries with sbat < 4 (see #1024617) | Steve McIntyre | |
2023-01-24 | Enable NX support at build time | Steve McIntyre | |
As required by policy for signing new shim binaries. | |||
2023-01-22 | Update upstream commit hash in build | Steve McIntyre | |
We're using 657b2483ca6e9fcf2ad8ac7ee577ff546d24c3aa, which is the 15.7 release plus the one patch we're applying. | |||
2023-01-22 | Update to Standards-Version 4.6.2 (no changes needed) | Steve McIntyre | |
2023-01-22 | Switch to using gcc-12 | Steve McIntyre | |
Closes: #1022180 | |||
2023-01-22 | Switch to new upstream (15.7) | Steve McIntyre | |
Also import patch to deal with buggy binutils | |||
2023-01-22 | Update upstream source from tag 'upstream/15.7' | Steve McIntyre | |
Update to upstream version '15.7' with Debian dir f802105ae061241b13ab962854f56388092fc703 | |||
2023-01-22 | New upstream version 15.7upstream/15.7 | Steve McIntyre | |