summaryrefslogtreecommitdiff
path: root/debian/control
AgeCommit message (Collapse)Author
2021-03-24Add missing build-dep on xxd for build-time unit testsdebian/15.3-2Steve McIntyre
2021-03-23Add Debian SBAT data to the shim buildSteve McIntyre
Add a Debian SBAT template, and rules to use it Adds a build-dep on dos2unix
2021-02-21Switch to using gcc-10 rather than gcc-9. Closes: #978521Steve McIntyre
2020-04-01Update standards version to 4.4.1, no changes needed.Debian Janitor
Fixes: lintian: out-of-date-standards-version See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html
2020-04-01Set debhelper-compat version in Build-Depends.Debian Janitor
Fixes: lintian: uses-debhelper-compat-file See-also: https://lintian.debian.org/tags/uses-debhelper-compat-file.html
2020-04-01Bump debhelper from old 11 to 12.Debian Janitor
Fixes: lintian: package-uses-old-debhelper-compat-version See-also: https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html
2020-03-24Update debhelper compat level to 11Steve McIntyre
2020-03-24Switch to using gcc-9 for builds. Closes: #925826Steve McIntyre
Pull upstream commit aaa09b35e73c4a35fc119d225e5241199d7cf5aa to fix an FTBFS.
2019-05-06Add initial file with test checksums for the dbx listSteve McIntyre
2019-05-04Generate a vendor dbx file at build timeSteve McIntyre
This allow us to block executing binaries with specific checksums. Generate the dbx list at runtime from a simple list of sha256 hashes, so we can update this easily. If we need to also blacklist a cert later, we'll need to update this code to add that option too. Add a build-dep on pesign to get the needed efisiglist program.
2019-05-03Build using gcc-7Steve McIntyre
To get better control of reproducibility during the lifetime of Buster
2019-05-03Update VCS-* fields in debian/controlSteve McIntyre
2019-03-06Rename all the packages containg the helper binariesSteve McIntyre
Remove potential confusion with shim-signed. We will now end up with shim-helpers-$arch-signed to make it clear that they just contain the helper binaries (fb.efi and mm.efi)
2019-03-06Change maintenance address to be the EFI teamSteve McIntyre
Add me and vorlon to the Uploaders list
2019-03-06Typo fix: s,singing,signing,gSteve McIntyre
2019-02-15Add shim-$arch-signed-template supportPhilipp Hahn
for getting the MOK-manager and fall-back binary to be signed by Debians singing service instead of using an ephemeral key. Closes: #922228
2019-02-15Rename to shim-unsignedPhilipp Hahn
as all EFI binaries are now unsigned. They are useless to any normal user as - shim is useless without being signed by an external UEFI CA. - mm and fb won't be loaded by shim as they are now no longer linked to corresponding shim by the ephemeral key any longer.
2019-02-10Update Standards-Version.Steve Langasek
2019-02-10Enable build for i386.Steve Langasek
2019-02-10Update VCS to point to salsa.Steve Langasek
2019-02-09* New upstream release.debian/15+1533136590.3beb971-1Steve Langasek
- debian/patches/second-stage-path: dropped; the default loader path now includes an arch suffix. - debian/patches/sbsigntool-no-pesign: dropped; no longer needed. * Drop remaining patches that were not being applied. * Sync packaging from Ubuntu: - debian/copyright: Update upstream source location. - debian/control: add a Build-Depends on libelf-dev. - Enable arm64 build. - debian/patches/fixup_git.patch: don't run git in clean; we're not really in a git tree. - debian/rules, debian/shim.install: use the upstream install target as intended, and move files to the target directory using dh_install. - define RELEASE and COMMIT_ID for the snapshot. - Set ENABLE_HTTPBOOT to enable the HTTP Boot feature. - Update dh_auto_build/dh_auto_clean/dh_auto_install for new upstream options: set MAKELEVEL. - Define an EFI_ARCH variable, and use that for paths to shim. This makes it possible to build a shim for other architectures than amd64. - Set EFIDIR=$distro for dh_auto_install; that will let files be installed in the "right" final directories, and makes boot.csv for us. - Set ENABLE_SHIM_CERT, to keep using ephemeral self-signed certs built at compile-time for MokManager and fallback. - Set ENABLE_SBSIGN, to use sbsign instead of pesign for signing fallback and MokManager.
2018-04-24Enable arm64 build.dann frazier
2018-04-23Fix Vcs link.Steve Langasek
2017-09-27We don't really need libnss3-tools.Mathieu Trudel-Lapierre
2017-09-27debian/control: add Breaks: for the previous shim-signed builds given that ↵Mathieu Trudel-Lapierre
shim will now build and ship BOOT.CSV by itself.
2017-08-31debian/control: add a Build-Depends on libelf-dev.Mathieu Trudel-Lapierre
2017-08-07debian/control: add a Build-Depends on libnss3-tools for pk12-util.Mathieu Trudel-Lapierre
2017-08-07Update changelog/changes for released 0.9+1474479173.6c180c6-1ubuntu10.9+1474479173.6c180c6-1ubuntu1Mathieu Trudel-Lapierre
2016-10-01* Initial Debian upload. Closes: #820052.Steve Langasek
* Update Standards-Version. * Embed the newly-minted Debian CA certificate. * Vendorize debian/rules so that the same package can be used in both Debian and Ubuntu without modification. * Fix debian/copyright to match the spec (last match wins, not first) * Fix shim.efi to not be executable. * Add watchfile. * Support parallel builds, because eh why not * Update Vcs-Bzr.
2013-07-02Add missing build-dependency on openssl.Steve Langasek
2013-07-02Bump the versioned build-dep on gnu-efi to one that supports current shimSteve Langasek
2012-12-13Add a versioned build-dependency on gnu-efi; we need features only foundSteve Langasek
in 3.0k to build the netboot support.
2012-12-13debian/patches/sbsigntool-not-pesign: Sign MokManager withSteve Langasek
sbsigntool instead of pesign.
2012-10-04Only build the package for amd64; we're not signing an i386 shim at thisSteve Langasek
stage so there's no point in building it.
2012-08-29add build-dependency on gnu-efiSteve Langasek
2012-08-29Initial release.Steve Langasek
generated by cgit v1.2.3 (git 2.39.1) at 2025-09-01 16:40:53 +0000