shim-signed.git/debian, branch debian/1.34 VyOS code for the shim-signed package (mirror of https://github.com/vyos/shim-signed.git) https://git.amelek.net/vyos/shim-signed.git/atom?h=debian%2F1.34 2021-05-03T19:13:01+00:00 Release shim-signed 1.34 for sid 2021-05-03T19:13:01+00:00 Steve McIntyre steve@einval.com 2021-05-03T19:13:01+00:00 urn:sha1:43ef6b236319fa47124e4f4134ddb91323a74953 Add a NEWS file for shim-signed to talk about arm64 2021-05-03T17:38:30+00:00 Steve McIntyre steve@einval.com 2021-05-03T17:31:45+00:00 urn:sha1:e76fa65f427164b04cecffe5eb2f0ba2591c7433 As it's in the package now, no need to link to the wiki. This upload closes #987991 as well 2021-05-03T15:07:03+00:00 Steve McIntyre steve@einval.com 2021-05-03T15:07:03+00:00 urn:sha1:7011153faa233ec4d7e5689f049d2716aad84883 Document the maint script changes in the changelog 2021-05-03T15:03:31+00:00 Steve McIntyre steve@einval.com 2021-05-03T15:03:31+00:00 urn:sha1:30a06d518456b16f3e10395b3ab38b2ec8999dc2 Only run grub-install if we're actually running on an EFI system 2021-05-03T15:03:14+00:00 Steve McIntyre steve@einval.com 2021-05-03T14:54:46+00:00 urn:sha1:5f3cdb4f68753cb44cec980b862320f6a0397e2a Try to avoid errors if people are doing weird things Move grub-install bits from the -common postinst 2021-05-03T14:54:12+00:00 Steve McIntyre steve@einval.com 2021-05-03T14:51:21+00:00 urn:sha1:3eddc534b76622dcf15286490a32a63ad713dd6a There's no guarantee that it will be called when needed, so switch to the binary packages instead. Also add a shim-signed.postrm 2021-05-03T13:58:34+00:00 Steve McIntyre steve@einval.com 2021-05-03T13:58:34+00:00 urn:sha1:5e861c3788de5b8c5ad4d8d67ecb6bd7622315bf Similarly to the postinst, we need to call grub-install to ensure the boot chain is correct. If we're being remove, *again* work out the right grub EFI target arch and the grub-install options so we can call grub-install safely. Also: grub-install won't clean up after us if we've been uninstalled, so also go and remove the shim binary from the ESP. Important bugfixes for shim-signed-common.postinst 2021-05-03T13:57:27+00:00 Steve McIntyre steve@einval.com 2021-05-03T13:52:04+00:00 urn:sha1:98f1c68761ee1c63df60b0ba4867c222c2e184d1 As we're calling grub-install and specifying the target EFI arch, make sure that we're using the *right* EFI arch. If we're on a mixed-mode x86 system (32-bit UEFI, 64-bit CPU), that means that we need to be specifying i386-efi here. Also check to see if grub-efi has been configured to use --force-extra-removable or --no-nvram. If we're calling grub-install here, then it's important we follow the same rules or we may end up breaking installations. :-/ Fix typo 2021-05-03T13:27:36+00:00 Steve McIntyre steve@einval.com 2021-05-03T13:27:26+00:00 urn:sha1:42609c41b6fed5570333a86d88ecefd8e5b37934 Fix command-line arguments for dh_gencontrol 2021-04-30T20:07:15+00:00 Steve McIntyre steve@einval.com 2021-04-30T20:07:15+00:00 urn:sha1:827038320c0dd168edaa3f07f574b4c6bd4a4b35 The arguments going to dh_gencontrol need to e before the -- , doh!