| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2019-03-23 | Fix FTCBFS: Set CROSS_COMPILE. (Closes: #922152) | Helmut Grohne | |
| 2019-02-15 | Include /usr/share/dpkg/architecture.mk instead of shelling out. | Luca Boccassi | |
| 2019-02-15 | Add shim-$arch-signed-template support | Philipp Hahn | |
| for getting the MOK-manager and fall-back binary to be signed by Debians singing service instead of using an ephemeral key. Closes: #922228 | |||
| 2019-02-15 | Disable ephemeral key on Debian | Philipp Hahn | |
| shim creates an ephemeral key, which gets embedded into shim and is used to sign the corresponding mok-manager (mm*.efi) and fall-back-manager (fb*.efi). This makes the build unreproducible. For Debian we will get those two binaries signed by our Debian-UEFI-CA, which is the primary (and only) key embedded in shim. | |||
| 2019-02-15 | debian/rules: fixing permissions no longer required | Philipp Hahn | |
| as Makefiles used "install -m 0644" by now. | |||
| 2019-02-10 | Ensure DEB_HOST_ARCH is set even if not present in the environment. | Steve Langasek | |
| 2019-02-10 | Enable build for i386. | Steve Langasek | |
| 2019-02-10 | Fix debian/rules syntax for arm64 build. | Steve Langasek | |
| 2018-08-22 | Make sure we pass the right COMMIT_ID to build | Mathieu Trudel-Lapierre | |
| 2018-07-24 | * debian/rules: | Mathieu Trudel-Lapierre | |
| - define RELEASE and COMMIT_ID for the snapshot. - Set ENABLE_HTTPBOOT to enable the HTTP Boot feature. | |||
| 2018-04-24 | Enable arm64 build. | dann frazier | |
| 2017-09-29 | Don't need to clean after .signed files, upstream Makefile does it now. | Mathieu Trudel-Lapierre | |
| Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com> | |||
| 2017-09-29 | Don't need to set -Wno-error=unused-variable anymore | Mathieu Trudel-Lapierre | |
| Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com> | |||
| 2017-09-27 | Ignore unused-variable errors. | Mathieu Trudel-Lapierre | |
| 2017-08-31 | debian/rules, debian/shim.install: make sure the 'make install' step does ↵ | Mathieu Trudel-Lapierre | |
| what it's meant to do by upstream: we can easily make use of the end result to have the files we need. | |||
| 2017-08-29 | Set EFIDIR=ubuntu for dh_auto_install; that will let files be installed in ↵ | Mathieu Trudel-Lapierre | |
| the "right" final directories, and makes boot.csv for us. | |||
| 2017-08-29 | Update dh_auto_build/dh_auto_clean/dh_auto_install for new upstream options: ↵ | Mathieu Trudel-Lapierre | |
| set MAKELEVEL. | |||
| 2017-08-29 | debian/rules: clean up after *.signed files. | Mathieu Trudel-Lapierre | |
| 2017-08-29 | Set ENABLE_SBSIGN, to use sbsign instead of pesign for signing fallback and ↵ | Mathieu Trudel-Lapierre | |
| MokManager. Also drop debian/patches/sbsigntool-no-pesign: with this change from upstream it is no longer needed.. | |||
| 2017-08-29 | Set ENABLE_SHIM_CERT, to keep using ephemeral self-signed certs built at ↵ | Mathieu Trudel-Lapierre | |
| compile-time for MokManager and fallback. | |||
| 2017-08-29 | debian/patches/second-stage-path: dropped; the default loader path now ↵ | Mathieu Trudel-Lapierre | |
| includes an arch suffix. | |||
| 2017-08-07 | Fix typo for DEFAULT_LOADER: missing a backslash, also needs quoting. | Mathieu Trudel-Lapierre | |
| 2017-08-07 | Define an EFI_ARCH variable, and use that for paths to shim. This makes it ↵ | Mathieu Trudel-Lapierre | |
| possible to build a shim for other architectures than amd64. | |||
| 2017-08-07 | Set DEFAULT_LOADER; this makes second-stage-path unnecessary. | Mathieu Trudel-Lapierre | |
| 2017-08-07 | * debian/rules: | Mathieu Trudel-Lapierre | |
| - Update dh_auto_build/dh_auto_clean for new upstream options: set MAKELEVEL. | |||
| 2016-10-01 | fix path we're chmodding, for current upstream | Steve Langasek | |
| 2016-10-01 | * Initial Debian upload. Closes: #820052. | Steve Langasek | |
| * Update Standards-Version. * Embed the newly-minted Debian CA certificate. * Vendorize debian/rules so that the same package can be used in both Debian and Ubuntu without modification. * Fix debian/copyright to match the spec (last match wins, not first) * Fix shim.efi to not be executable. * Add watchfile. * Support parallel builds, because eh why not * Update Vcs-Bzr. | |||
| 2012-10-04 | Use a clearer name for the VENDOR_CERT_FILE. | Steve Langasek | |
| 2012-10-04 | Pull newer upstream snapshot, which fixes verification of the signature on ↵ | Steve Langasek | |
| our signed GRUB efi | |||
| 2012-10-03 | Include the Canonical Secure Boot master CA (cert.der) and include as | Steve Langasek | |
| cert.h at build time. | |||
| 2012-08-30 | Fix up the path to the EFI environment | Steve Langasek | |
| 2012-08-29 | Initial release. | Steve Langasek | |
 |
index : efi-boot-shim.git | |
| (mirror of https://github.com/vyos/efi-boot-shim.git) |
| summaryrefslogtreecommitdiff |