From 6c7b84f5909d37d79a2120fe23f5096d9b92063b Mon Sep 17 00:00:00 2001 From: João Paulo Rechi Vita Date: Fri, 30 Nov 2018 20:35:49 -0800 Subject: Import latest packaging from Debian Testing (Buster) Version 0.9+1474479173.6c180c6-1, minus the debian/patches directory. https://phabricator.endlessm.com/T24681 --- debian/rules | 22 ++++++++++++++++------ 1 file changed, 16 insertions(+), 6 deletions(-) (limited to 'debian/rules') diff --git a/debian/rules b/debian/rules index 7ebe0e6f..f368a197 100755 --- a/debian/rules +++ b/debian/rules @@ -1,11 +1,21 @@ #!/usr/bin/make -f +# Other vendors, add your certs here. No sense in using +# dpkg-vendor --derives-from, because only Canonical-generated binaries will +# be signed with this key; so if you are building your own shim binary you +# should be building the other binaries also. +ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes) + cert=debian/canonical-uefi-ca.der +else + cert=debian/debian-uefi-ca.der +endif + %: - dh $@ + dh $@ --parallel override_dh_auto_build: - dh_auto_build -- EFI_PATH=/usr/lib VENDOR_CERT_FILE=debian/endless-ca.cer - cp -v shim.efi bootx64.efi - cp -v MokManager.efi.signed MokManager.efi - cp -v fallback.efi.signed fallback.efi - iconv -t utf-16le debian/BOOT.CSV.utf8 > BOOT.CSV + dh_auto_build -- EFI_PATH=/usr/lib VENDOR_CERT_FILE=$(cert) + +override_dh_fixperms: + dh_fixperms + chmod a-x debian/shim/usr/lib/shim/shimx64.efi -- cgit v1.2.3