blob: 8c3863ef169c0e6c03b7d0f1ffcda9ef887f1bcb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
#!/usr/bin/make -f
# Other vendors, add your certs here. No sense in using
# dpkg-vendor --derives-from, because only Canonical-generated binaries will
# be signed with this key; so if you are building your own shim binary you
# should be building the other binaries also.
ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes)
cert=debian/canonical-uefi-ca.der
distributor=ubuntu
else
cert=debian/debian-uefi-ca.der
distributor=debian
endif
ifeq ($(DEB_HOST_ARCH),amd64)
export EFI_ARCH := x64
endif
COMMON_OPTIONS = \
MAKELEVEL=0 \
EFI_PATH=/usr/lib \
ENABLE_SHIM_CERT=1 \
ENABLE_SBSIGN=1 \
VENDOR_CERT_FILE=$(cert) \
EFIDIR=$(distributor) \
$(NULL)
%:
dh $@ --parallel
override_dh_auto_clean:
dh_auto_clean -- MAKELEVEL=0
override_dh_auto_build:
dh_auto_build -- $(COMMON_OPTIONS)
override_dh_auto_install:
dh_auto_install --destdir=debian/tmp -- $(COMMON_OPTIONS)
override_dh_fixperms:
dh_fixperms
chmod a-x debian/shim/usr/lib/shim/shim$(EFI_ARCH).efi
|