VyOS code for the shim-signed package (mirror of https://github.com/vyos/shim-signed.git) https://git.amelek.net/vyos/shim-signed.git/atom?h=rolling 2026-05-17T21:40:01+00:00 2026-05-17T21:40:01+00:00 Steve McIntyre steve@einval.com 2026-05-17T21:34:26+00:00 urn:sha1:32c23f8e7c8dace4677a5393a86cb91857630ff0 It's safer to do it here before a new shim is installed. As we don't have any files installed at this point, we can't look up knowwn signatures from a file. Instead, we now substitute the signature fingerprints directly into shim-signed.preinst at package build time. Put the postinst back to where it was before the signature checks were added.