| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2023-02-23 | postinst/postrm: make config_item() more robust | Steve McIntyre | |
| 2023-02-18 | Update Depends on grub2-common | Steve McIntyre | |
| 2023-02-18 | Tweak changelog | Steve McIntyre | |
| 2023-02-18 | Verify on all arches now | Steve McIntyre | |
| 2023-02-18 | Remove the NEWS file, now we have working arm64 shim-signed | Steve McIntyre | |
| 2023-02-17 | Fix up lintian overrides | Steve McIntyre | |
| 2023-02-17 | New signed binaries corresponding to 15.7-1 | Steve McIntyre | |
| We now have arm64 signed shims again \o/ Closes: #1008942, #992073 Pulls multiple other bugfixes in for the signed version: Make sbat_var.S parse right with buggy gcc/binutils Enable NX support at build time, as required by policy for signing new shim binaries. Update build-dep on shim-unsigned to use 15.7-1 Block Debian grub binaries with sbat < 4 (see #1024617) | |||
| 2021-07-12 | Update build-dep on shim-unsigned to use 15.4-7debian/1.38 | Steve McIntyre | |
| 2021-07-12 | Tweak how we call grub-install; don't abort on error | Steve McIntyre | |
| Not ideal behaviour either, but don't break upgrades. Copy the behaviour from the grub packages here. Closes: #990984 | |||
| 2021-06-29 | New signed binaries based on shim 15.4-6debian/1.37 | Steve McIntyre | |
| Pulls multiple bugfixes in for the signed version: * Add arm64 patch to tweak section layout and stop crashing problems. Upstream issue #371. (#990082, #990190) * In insecure mode, don't abort if we can't create the MokListXRT variable. Upstream issue #372. (#989962, #990158) Update build-dep on shim-unsigned to use 15.4-6~deb10u1 | |||
| 2021-05-09 | Fix duplicated word in the NEWS file | Steve McIntyre | |
| 2021-05-06 | Update build-dep on shim-unsigned to use 15.4-5debian/1.36 | Steve McIntyre | |
| 2021-05-06 | Add defensive code around calls to db_get | Steve McIntyre | |
| Don't fail if they return errors. Closes: #988114 | |||
| 2021-05-04 | Update build-dep on shim-unsigneddebian/1.35 | Steve McIntyre | |
| 2021-05-04 | Fix the old doc links for shim-signed. Closes: #988057 | Steve McIntyre | |
| 2021-05-04 | If we're not running on an EFI system then exit cleanly | Steve McIntyre | |
| in postinst and postrm. We have nothing to do here. Closes: #988059 | |||
| 2021-05-04 | Add explicit dependency from shim-signed to shim-signed-common | Steve McIntyre | |
| Closes: #988047, #988056 | |||
| 2021-05-03 | Release shim-signed 1.34 for siddebian/1.34 | Steve McIntyre | |
| 2021-05-03 | Add a NEWS file for shim-signed to talk about arm64 | Steve McIntyre | |
| As it's in the package now, no need to link to the wiki. | |||
| 2021-05-03 | This upload closes #987991 as well | Steve McIntyre | |
| 2021-05-03 | Document the maint script changes in the changelog | Steve McIntyre | |
| 2021-05-03 | Only run grub-install if we're actually running on an EFI system | Steve McIntyre | |
| Try to avoid errors if people are doing weird things | |||
| 2021-05-03 | Move grub-install bits from the -common postinst | Steve McIntyre | |
| There's no guarantee that it will be called when needed, so switch to the binary packages instead. | |||
| 2021-05-03 | Also add a shim-signed.postrm | Steve McIntyre | |
| Similarly to the postinst, we need to call grub-install to ensure the boot chain is correct. If we're being remove, *again* work out the right grub EFI target arch and the grub-install options so we can call grub-install safely. Also: grub-install won't clean up after us if we've been uninstalled, so also go and remove the shim binary from the ESP. | |||
| 2021-05-03 | Important bugfixes for shim-signed-common.postinst | Steve McIntyre | |
| As we're calling grub-install and specifying the target EFI arch, make sure that we're using the *right* EFI arch. If we're on a mixed-mode x86 system (32-bit UEFI, 64-bit CPU), that means that we need to be specifying i386-efi here. Also check to see if grub-efi has been configured to use --force-extra-removable or --no-nvram. If we're calling grub-install here, then it's important we follow the same rules or we may end up breaking installations. :-/ | |||
| 2021-05-03 | Fix typo | Steve McIntyre | |
| 2021-04-30 | Fix command-line arguments for dh_gencontrol | Steve McIntyre | |
| The arguments going to dh_gencontrol need to e before the -- , doh! | |||
| 2021-04-30 | Typo fix - remove space | Steve McIntyre | |
| 2021-04-30 | Add Spanish translation for debconf templates | Steve McIntyre | |
| Thanks to Camaleón. Closes: #987339 | |||
| 2021-04-30 | Tweak dh_install* usage for docs | Steve McIntyre | |
| Newer versions of debhelper are not happy about setting up cross-package links for (e.g.) copyright and changelog files between binary-any and binary-all packages. Stop trying to do that now, just include them in both the shim-signed and shim-signed-common packages separately. | |||
| 2021-04-30 | Don't include apport stuff in the Debian build, it's not useful | Steve McIntyre | |
| 2021-04-30 | Tweak the Makefile setup | Steve McIntyre | |
| "make check" should not matter in terms of the package build. Closes: #936002 | |||
| 2021-04-30 | The new shim build means we can close #971129 | Steve McIntyre | |
| 2021-04-30 | Tweak arm64 building a lot | Steve McIntyre | |
| And various other minor packaging tweaks Add a different description at package build time to warn users that shim-signed on arm64 is *not* actually signed. Add a doc link to the wiki for more details. Comment out a lintian override for arm64 | |||
| 2021-04-28 | Add the new signed binaries based on 15.4-2 | Steve McIntyre | |
| 2019-06-09 | Prepare 1.33 releasedebian/1.33 | Steve McIntyre | |
| 2019-06-09 | Ignore generated files | Steve McIntyre | |
| 2019-06-09 | Display the sha256sums of the binaries as we check them | Steve McIntyre | |
| 2019-06-09 | Drop the hard-coded version in Built-Using | Steve McIntyre | |
| Pick up the version of shim we're using properly. | |||
| 2019-06-09 | Update to use the new signed binaried | Steve McIntyre | |
| * Build against new signed binaries corresponding to 15+1533136590.3beb971-7 * Update Build-Depends and Depends to match. Closes: #928107 | |||
| 2019-06-09 | New signed binaries from Microsoft | Steve McIntyre | |
| From "Signed_14173467011297444.zip" Correspond to sources from shim-unsigned 15+1533136590.3beb971-7 | |||
| 2019-05-28 | Prepare 1.32 releasedebian/1.32 | Steve McIntyre | |
| 2019-05-28 | Add Breaks/Replaces to shim-signed-common | Steve McIntyre | |
| For update-secureboot-policy etc. Closes: #929673 | |||
| 2019-05-27 | Remove doc link used to quieten old lintian versionsdebian/1.31 | Steve McIntyre | |
| 2019-05-27 | Prepare 1.31 release | Steve McIntyre | |
| 2019-05-27 | Move the translation bits to the -common package | Steve McIntyre | |
| 2019-05-27 | Updated Dutch translation | Steve McIntyre | |
| Closes: #917580, #926664, thanks to Frans Spiesschaert | |||
| 2019-05-27 | Add Russian translation | Steve McIntyre | |
| Closes: #922229, thanks to Lev Lamberov | |||
| 2019-05-27 | Add Swedish translation | Steve McIntyre | |
| Closes: #921410, thanks to Matrin Bagge | |||
| 2019-05-27 | Add Italian translation | Steve McIntyre | |
| Closes: #915993, thanks to Beatrice Torracca | |||
