| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-06-01 | Add signed SHIM binary including the VyOS Networks CA certificate | Christian Breunig | |
| 2026-05-19 | Fix up stupid omission in the previous package uploaddebian/1.50 | Steve McIntyre | |
| the changes in 1.49 did not take into account the "SecureBoot enabled" case when adding a default error trap. Closes: #1137098, #1137101. | |||
| 2026-05-19 | Make mokutil parsing more robust. Closes: #1137063debian/1.49 | Steve McIntyre | |
| Cope with "Platform is in Setup Mode" message If we get any other unexpected output, print what we got for debugging. | |||
| 2026-05-18 | Make sure we remove shim-signed.preinst during clean | Steve McIntyre | |
| 2026-05-18 | Update changelog and release 1.48debian/1.48 | Steve McIntyre | |
| 2026-05-17 | Update changelog | Steve McIntyre | |
| 2026-05-13 | Update changelog | Steve McIntyre | |
| 2026-04-28 | Add support for verifying and then combining signatures | Steve McIntyre | |
| from multiple signed shims. * Move the verification logic out into a new helper script verify_combine_sigs - see comments there for how it works. * Rename the existing shim binaries and CA cert to match * Include some extra certs and binaries for testing with | |||
| 2025-07-29 | update-secureboot-policy: do better checking around DKMSdebian/1.47 | Steve McIntyre | |
| If we have DKMS modules installed: + Check to see if a DKMS MOK key has been created and enrolled; + Check that all the DKMS modules are signed with that key; If successful, don't tell users to disable Secure Boot. Closes: #1108278. Add dependencies on openssl and kmod for shim-signed-common, needed for implementing these check. | |||
| 2025-06-23 | No-change rebuild to upload source-only.debian/1.46 | Steve McIntyre | |
| 2025-06-22 | Release 1.45debian/1.45 | Steve McIntyre | |
| Add changelog entries for merged changes | |||
| 2024-07-03 | Release 1.44debian/1.44 | Steve McIntyre | |
| With helpful fixes from Fabian Grünbichler | |||
| 2024-06-29 | Fix broken usage of dpkg-querydebian/1.43 | Steve McIntyre | |
| 2024-06-28 | Tweak versioning in runtime dependenciesdebian/1.42 | Steve McIntyre | |
| using substvars to make things more automatic in future. | |||
| 2024-06-26 | Release shim-signed 1.41 for siddebian/1.41 | Steve McIntyre | |
| 2024-06-26 | Switch from debian/compat to build-dep on debhelper-compat (= 13) | Steve McIntyre | |
| 2024-06-26 | New signed binaries corresponding to 15.8-1 | Steve McIntyre | |
| Update build-dep on shim-unsigned to use 15.8-1. Update SBAT to revoke grub binaries with sbat < 4. Stop building for i386. | |||
| 2023-08-04 | Add Romanian translation for debconf templatesdebian/1.40 | Steve McIntyre | |
| thanks to Remus-Gabriel Chelu. Closes: #1039090 | |||
| 2023-08-04 | Stop recommending secureboot-db, we don't have that package | Steve McIntyre | |
| Closes: #1042964, #1041449, #932358 | |||
| 2023-03-09 | Tweak dependencies between packagesdebian/1.39 | Steve McIntyre | |
| 2023-03-08 | Add some Closes:, let's kill some bugs! :-) | Steve McIntyre | |
| 2023-03-08 | Add pt_BR translation, thanks to Paulo Henrique de Lima Santana | Steve McIntyre | |
| Closes: #1026415 | |||
| 2023-02-23 | postinst/postrm: make config_item() more robust | Steve McIntyre | |
| 2023-02-18 | Update Depends on grub2-common | Steve McIntyre | |
| 2023-02-18 | Tweak changelog | Steve McIntyre | |
| 2023-02-17 | New signed binaries corresponding to 15.7-1 | Steve McIntyre | |
| We now have arm64 signed shims again \o/ Closes: #1008942, #992073 Pulls multiple other bugfixes in for the signed version: Make sbat_var.S parse right with buggy gcc/binutils Enable NX support at build time, as required by policy for signing new shim binaries. Update build-dep on shim-unsigned to use 15.7-1 Block Debian grub binaries with sbat < 4 (see #1024617) | |||
| 2021-07-12 | Update build-dep on shim-unsigned to use 15.4-7debian/1.38 | Steve McIntyre | |
| 2021-07-12 | Tweak how we call grub-install; don't abort on error | Steve McIntyre | |
| Not ideal behaviour either, but don't break upgrades. Copy the behaviour from the grub packages here. Closes: #990984 | |||
| 2021-06-29 | New signed binaries based on shim 15.4-6debian/1.37 | Steve McIntyre | |
| Pulls multiple bugfixes in for the signed version: * Add arm64 patch to tweak section layout and stop crashing problems. Upstream issue #371. (#990082, #990190) * In insecure mode, don't abort if we can't create the MokListXRT variable. Upstream issue #372. (#989962, #990158) Update build-dep on shim-unsigned to use 15.4-6~deb10u1 | |||
| 2021-05-06 | Update build-dep on shim-unsigned to use 15.4-5debian/1.36 | Steve McIntyre | |
| 2021-05-06 | Add defensive code around calls to db_get | Steve McIntyre | |
| Don't fail if they return errors. Closes: #988114 | |||
| 2021-05-04 | Update build-dep on shim-unsigneddebian/1.35 | Steve McIntyre | |
| 2021-05-04 | Fix the old doc links for shim-signed. Closes: #988057 | Steve McIntyre | |
| 2021-05-04 | If we're not running on an EFI system then exit cleanly | Steve McIntyre | |
| in postinst and postrm. We have nothing to do here. Closes: #988059 | |||
| 2021-05-04 | Add explicit dependency from shim-signed to shim-signed-common | Steve McIntyre | |
| Closes: #988047, #988056 | |||
| 2021-05-03 | Release shim-signed 1.34 for siddebian/1.34 | Steve McIntyre | |
| 2021-05-03 | Add a NEWS file for shim-signed to talk about arm64 | Steve McIntyre | |
| As it's in the package now, no need to link to the wiki. | |||
| 2021-05-03 | This upload closes #987991 as well | Steve McIntyre | |
| 2021-05-03 | Document the maint script changes in the changelog | Steve McIntyre | |
| 2021-04-30 | Add Spanish translation for debconf templates | Steve McIntyre | |
| Thanks to Camaleón. Closes: #987339 | |||
| 2021-04-30 | Tweak dh_install* usage for docs | Steve McIntyre | |
| Newer versions of debhelper are not happy about setting up cross-package links for (e.g.) copyright and changelog files between binary-any and binary-all packages. Stop trying to do that now, just include them in both the shim-signed and shim-signed-common packages separately. | |||
| 2021-04-30 | Don't include apport stuff in the Debian build, it's not useful | Steve McIntyre | |
| 2021-04-30 | Tweak the Makefile setup | Steve McIntyre | |
| "make check" should not matter in terms of the package build. Closes: #936002 | |||
| 2021-04-30 | The new shim build means we can close #971129 | Steve McIntyre | |
| 2021-04-30 | Tweak arm64 building a lot | Steve McIntyre | |
| And various other minor packaging tweaks Add a different description at package build time to warn users that shim-signed on arm64 is *not* actually signed. Add a doc link to the wiki for more details. Comment out a lintian override for arm64 | |||
| 2021-04-28 | Add the new signed binaries based on 15.4-2 | Steve McIntyre | |
| 2019-06-09 | Prepare 1.33 releasedebian/1.33 | Steve McIntyre | |
| 2019-06-09 | Display the sha256sums of the binaries as we check them | Steve McIntyre | |
| 2019-06-09 | Drop the hard-coded version in Built-Using | Steve McIntyre | |
| Pick up the version of shim we're using properly. | |||
| 2019-06-09 | Update to use the new signed binaried | Steve McIntyre | |
| * Build against new signed binaries corresponding to 15+1533136590.3beb971-7 * Update Build-Depends and Depends to match. Closes: #928107 | |||
 |
index : shim-signed.git | |
| VyOS code for the shim-signed package (mirror of https://github.com/vyos/shim-signed.git) |
| summaryrefslogtreecommitdiff |