summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-02-23postinst/postrm: make config_item() more robustSteve McIntyre
2023-02-18Update Depends on grub2-commonSteve McIntyre
2023-02-18Tweak changelogSteve McIntyre
2023-02-18Verify on all arches nowSteve McIntyre
2023-02-18Remove the NEWS file, now we have working arm64 shim-signedSteve McIntyre
2023-02-17Fix up lintian overridesSteve McIntyre
2023-02-17New signed binaries corresponding to 15.7-1Steve McIntyre
We now have arm64 signed shims again \o/ Closes: #1008942, #992073 Pulls multiple other bugfixes in for the signed version: Make sbat_var.S parse right with buggy gcc/binutils Enable NX support at build time, as required by policy for signing new shim binaries. Update build-dep on shim-unsigned to use 15.7-1 Block Debian grub binaries with sbat < 4 (see #1024617)
2021-07-12Update build-dep on shim-unsigned to use 15.4-7debian/1.38Steve McIntyre
2021-07-12Tweak how we call grub-install; don't abort on errorSteve McIntyre
Not ideal behaviour either, but don't break upgrades. Copy the behaviour from the grub packages here. Closes: #990984
2021-06-29New signed binaries based on shim 15.4-6debian/1.37Steve McIntyre
Pulls multiple bugfixes in for the signed version: * Add arm64 patch to tweak section layout and stop crashing problems. Upstream issue #371. (#990082, #990190) * In insecure mode, don't abort if we can't create the MokListXRT variable. Upstream issue #372. (#989962, #990158) Update build-dep on shim-unsigned to use 15.4-6~deb10u1
2021-05-09Fix duplicated word in the NEWS fileSteve McIntyre
2021-05-06Update build-dep on shim-unsigned to use 15.4-5debian/1.36Steve McIntyre
2021-05-06Add defensive code around calls to db_getSteve McIntyre
Don't fail if they return errors. Closes: #988114
2021-05-04Update build-dep on shim-unsigneddebian/1.35Steve McIntyre
2021-05-04Fix the old doc links for shim-signed. Closes: #988057Steve McIntyre
2021-05-04If we're not running on an EFI system then exit cleanlySteve McIntyre
in postinst and postrm. We have nothing to do here. Closes: #988059
2021-05-04Add explicit dependency from shim-signed to shim-signed-commonSteve McIntyre
Closes: #988047, #988056
2021-05-03Release shim-signed 1.34 for siddebian/1.34Steve McIntyre
2021-05-03Add a NEWS file for shim-signed to talk about arm64Steve McIntyre
As it's in the package now, no need to link to the wiki.
2021-05-03This upload closes #987991 as wellSteve McIntyre
2021-05-03Document the maint script changes in the changelogSteve McIntyre
2021-05-03Only run grub-install if we're actually running on an EFI systemSteve McIntyre
Try to avoid errors if people are doing weird things
2021-05-03Move grub-install bits from the -common postinstSteve McIntyre
There's no guarantee that it will be called when needed, so switch to the binary packages instead.
2021-05-03Also add a shim-signed.postrmSteve McIntyre
Similarly to the postinst, we need to call grub-install to ensure the boot chain is correct. If we're being remove, *again* work out the right grub EFI target arch and the grub-install options so we can call grub-install safely. Also: grub-install won't clean up after us if we've been uninstalled, so also go and remove the shim binary from the ESP.
2021-05-03Important bugfixes for shim-signed-common.postinstSteve McIntyre
As we're calling grub-install and specifying the target EFI arch, make sure that we're using the *right* EFI arch. If we're on a mixed-mode x86 system (32-bit UEFI, 64-bit CPU), that means that we need to be specifying i386-efi here. Also check to see if grub-efi has been configured to use --force-extra-removable or --no-nvram. If we're calling grub-install here, then it's important we follow the same rules or we may end up breaking installations. :-/
2021-05-03Fix typoSteve McIntyre
2021-04-30Fix command-line arguments for dh_gencontrolSteve McIntyre
The arguments going to dh_gencontrol need to e before the -- , doh!
2021-04-30Typo fix - remove spaceSteve McIntyre
2021-04-30Add Spanish translation for debconf templatesSteve McIntyre
Thanks to Camaleón. Closes: #987339
2021-04-30Tweak dh_install* usage for docsSteve McIntyre
Newer versions of debhelper are not happy about setting up cross-package links for (e.g.) copyright and changelog files between binary-any and binary-all packages. Stop trying to do that now, just include them in both the shim-signed and shim-signed-common packages separately.
2021-04-30Don't include apport stuff in the Debian build, it's not usefulSteve McIntyre
2021-04-30Tweak the Makefile setupSteve McIntyre
"make check" should not matter in terms of the package build. Closes: #936002
2021-04-30The new shim build means we can close #971129Steve McIntyre
2021-04-30Tweak arm64 building a lotSteve McIntyre
And various other minor packaging tweaks Add a different description at package build time to warn users that shim-signed on arm64 is *not* actually signed. Add a doc link to the wiki for more details. Comment out a lintian override for arm64
2021-04-28Add the new signed binaries based on 15.4-2Steve McIntyre
2019-06-09Prepare 1.33 releasedebian/1.33Steve McIntyre
2019-06-09Ignore generated filesSteve McIntyre
2019-06-09Display the sha256sums of the binaries as we check themSteve McIntyre
2019-06-09Drop the hard-coded version in Built-UsingSteve McIntyre
Pick up the version of shim we're using properly.
2019-06-09Update to use the new signed binariedSteve McIntyre
* Build against new signed binaries corresponding to 15+1533136590.3beb971-7 * Update Build-Depends and Depends to match. Closes: #928107
2019-06-09New signed binaries from MicrosoftSteve McIntyre
From "Signed_14173467011297444.zip" Correspond to sources from shim-unsigned 15+1533136590.3beb971-7
2019-05-28Prepare 1.32 releasedebian/1.32Steve McIntyre
2019-05-28Add Breaks/Replaces to shim-signed-commonSteve McIntyre
For update-secureboot-policy etc. Closes: #929673
2019-05-27Remove doc link used to quieten old lintian versionsdebian/1.31Steve McIntyre
2019-05-27Prepare 1.31 releaseSteve McIntyre
2019-05-27Move the translation bits to the -common packageSteve McIntyre
2019-05-27Updated Dutch translationSteve McIntyre
Closes: #917580, #926664, thanks to Frans Spiesschaert
2019-05-27Add Russian translationSteve McIntyre
Closes: #922229, thanks to Lev Lamberov
2019-05-27Add Swedish translationSteve McIntyre
Closes: #921410, thanks to Matrin Bagge
2019-05-27Add Italian translationSteve McIntyre
Closes: #915993, thanks to Beatrice Torracca