Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-05-04 | Fix up the template maintainer scriptsdebian/15.4-4 | Steve McIntyre | |
if we're not running on an EFI system then exit cleanly | |||
2021-05-03 | Add maintainer scripts to the template packagesdebian/15.4-3 | Steve McIntyre | |
Manage installing and removing fbXXX.efi and mmXXX.efi when we install/remove the shim-helpers-$arch-signed packages. Closes: #966845 | |||
2021-04-21 | Add changelog for 15.4-2 with new patchesdebian/15.4-2 | Steve McIntyre | |
2021-04-21 | Don't call QueryVariableInfo() on EFI 1.10 machines | Steve McIntyre | |
New patch from upstream, don't break old Macs | |||
2021-04-21 | Fix handling of ignore_db and user_insecure_mode | Steve McIntyre | |
Extra patch from upstream | |||
2021-04-17 | Stop hardcoding the release version in the rules filedebian/15.4-1 | Steve McIntyre | |
We can grab it from the changelog already | |||
2021-04-17 | Clean more things | Steve McIntyre | |
2021-04-17 | Prep for releasing based on 15.4 | Steve McIntyre | |
2021-04-14 | allocate MOK config table as BootServicesData | Steve McIntyre | |
Another patch from upstream, needed with newer kernels on x86 | |||
2021-03-31 | Add one more patch from upstream to fix i386 binary relocations | Steve McIntyre | |
2021-03-31 | Move the sha256sum call to the end of the install phase | Steve McIntyre | |
Make the output easier to find | |||
2021-03-31 | Override dh_auto_build setting INSTALL, cut down on build noise | Steve McIntyre | |
2021-03-31 | Update to the 15.4 release | Steve McIntyre | |
2021-03-24 | Print sha256 checksums of the EFI binaries when the build is done | Steve McIntyre | |
2021-03-24 | Tweak the SBAT data to keep reproducibilitydebian/15.3-3 | Steve McIntyre | |
Only include the upstream version in the Debian SBAT metadata, so we don't break reproducibility on every minor packaging change. | |||
2021-03-24 | Add missing build-dep on xxd for build-time unit testsdebian/15.3-2 | Steve McIntyre | |
2021-03-23 | Switch to using the 15.3 release from upstream | Steve McIntyre | |
2021-03-23 | Remove all out outstanding patches | Steve McIntyre | |
* cast-CHAR8-string-handling.patch no longer needed * fix-Make.coverity-bashisms.patch went upstream | |||
2021-03-23 | Update copyright file | Steve McIntyre | |
Update a couple of top-level changes, copy in gnu-efi information from the gnu-efi package | |||
2021-03-23 | Fix up some of the options we're using at build time | Steve McIntyre | |
Definitely don't want to be setting EFI_PATH, as that over-rides the vendored gnu-efi. Argh | |||
2021-03-23 | Improve how the dbx hashes are handled | Steve McIntyre | |
Only include the hashes for the architecture we're building for - no point in adding bloat and delay here. Add a script "block_signed_deb" to scan a set of .deb files, extract the hashes for .efi binaries and list them in the format wanted for the dbx hashes file. Split out the code to use that file from the rules file into a separate helper. | |||
2021-03-23 | Tweak the gnu-efi tarball code | Steve McIntyre | |
2021-03-23 | Add an extra rule to generate the extra gnu-efi tarball | Steve McIntyre | |
Thanks to Dmitri John Ledkov for help | |||
2021-03-23 | Add Debian SBAT data to the shim build | Steve McIntyre | |
Add a Debian SBAT template, and rules to use it Adds a build-dep on dos2unix | |||
2021-03-23 | Add dbx entries for all our existing grub binaries | Steve McIntyre | |
They're insecure, let's break the chainloading hole | |||
2021-02-21 | Change changelog to shut lintian up | Steve McIntyre | |
2021-02-21 | Remove artifacts that upstream installs that we don't use | Steve McIntyre | |
... to keep debhelper from complaining | |||
2021-02-21 | Add new patch cast-CHAR8-string-handling.patch | Steve McIntyre | |
Cast CHAR8 strings to use (const char *) when using string functions Looks like gnu-efi definitions of CHAR8 are problematic | |||
2021-02-21 | Trivial change to remove bashisms in Make.coverity | Steve McIntyre | |
2021-02-21 | Remove all our old patches, no longer needed: | Steve McIntyre | |
- avoid_null_vsprint.patch - check_null_sn_ln.patch - fixup_git.patch - uname.patch - use_compare_mem_gcc9.patch | |||
2021-02-21 | Switch to using gcc-10 rather than gcc-9. Closes: #978521 | Steve McIntyre | |
2021-02-21 | Switch to newer upstream "release" 15+1613861442.888f5b5 | Steve McIntyre | |
Many many updates, but caring mainly about SBAT support | |||
2020-07-24 | Prepare 15+1533136590.3beb971-10 uploaddebian/15+1533136590.3beb971-10 | Steve McIntyre | |
2020-07-24 | Minimal-change upload to pick up rotated Debian signing keys | Steve McIntyre | |
2020-07-24 | Use sort and uniq - minimise the size of the list here | Steve McIntyre | |
We may end up with duplicates, let's not include hashes twice in the shim binary blacklist | |||
2020-07-24 | Typo fix | Steve McIntyre | |
2020-04-01 | Update standards version to 4.4.1, no changes needed. | Debian Janitor | |
Fixes: lintian: out-of-date-standards-version See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html | |||
2020-04-01 | Set upstream metadata fields: Bug-Database, Bug-Submit. | Debian Janitor | |
Fixes: lintian: upstream-metadata-file-is-missing See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html | |||
2020-04-01 | Set debhelper-compat version in Build-Depends. | Debian Janitor | |
Fixes: lintian: uses-debhelper-compat-file See-also: https://lintian.debian.org/tags/uses-debhelper-compat-file.html | |||
2020-04-01 | Bump debhelper from old 11 to 12. | Debian Janitor | |
Fixes: lintian: package-uses-old-debhelper-compat-version See-also: https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html | |||
2020-04-01 | debian/copyright: use spaces rather than tabs to start continuation lines. | Debian Janitor | |
Fixes: lintian: tab-in-license-text See-also: https://lintian.debian.org/tags/tab-in-license-text.html | |||
2020-04-01 | Use secure copyright file specification URI. | Debian Janitor | |
Fixes: lintian: insecure-copyright-format-uri See-also: https://lintian.debian.org/tags/insecure-copyright-format-uri.html | |||
2020-04-01 | Trim trailing whitespace. | Debian Janitor | |
Fixes: lintian: file-contains-trailing-whitespace See-also: https://lintian.debian.org/tags/file-contains-trailing-whitespace.html | |||
2020-03-30 | Tweak the version dependency of the -helpers-ARCH-signed packagesdebian/15+1533136590.3beb971-9 | Steve McIntyre | |
Change the version dependency on shim-unsigned to be >= and not =. This will allow for installation to still work in the window while we wait for the template package to do its second trip through the archive. Closes: #955356 | |||
2020-03-24 | Prepare Debian release 15+1533136590.3beb971-8debian/15+1533136590.3beb971-8 | Steve McIntyre | |
2020-03-24 | Update debhelper compat level to 11 | Steve McIntyre | |
2020-03-24 | Switch to using gcc-9 for builds. Closes: #925826 | Steve McIntyre | |
Pull upstream commit aaa09b35e73c4a35fc119d225e5241199d7cf5aa to fix an FTBFS. | |||
2019-05-08 | Use --padding when calling pesign to generate hashes | Steve McIntyre | |
for the dbx list, as recommended by Peter Jones. No actual changes needed in our list of hashes at this point - they work out the same either way. | |||
2019-05-08 | Prepare Debian release 15+1533136590.3beb971-7debian/15+1533136590.3beb971-7 | Steve McIntyre | |
2019-05-08 | Remove the hash for Sledge's test arm64 grub binary | Steve McIntyre | |
Not needed now. |