FROM ubuntu:noble

COPY . /shim-review
RUN sed -i 's/^Types: deb/& deb-src/' /etc/apt/sources.list.d/ubuntu.sources && \
    apt update -y && \
    DEBIAN_FRONTEND=noninteractive apt install -y devscripts git-buildpackage software-properties-common && \
    apt build-dep -y shim

RUN git clone https://git.launchpad.net/~ubuntu-core-dev/shim/+git/shim		# your shim source tree
WORKDIR /shim
RUN gbp buildpackage -us -uc
WORKDIR /

# FIXME: This only works on x86-64 efi binary
RUN hexdump -Cv /shim-review/shimx64.efi > orig && \
    hexdump -Cv /shim/shimx64.efi > build && \
    diff -u orig build