shim-signed.git - VyOS code for the shim-signed package (mirror of https://github.com/vyos/shim-signed.git)

Age	Commit message (Collapse)	Author
2026-05-18	Make sure we remove shim-signed.preinst during clean	Steve McIntyre

2026-05-18	Switch to using debconf to display signature errors	Steve McIntyre

2026-05-17	Move shim signature checks to preinst	Steve McIntyre
	It's safer to do it here before a new shim is installed. As we don't have any files installed at this point, we can't look up knowwn signatures from a file. Instead, we now substitute the signature fingerprints directly into shim-signed.preinst at package build time. Put the postinst back to where it was before the signature checks were added.
2024-07-01	d/rules: import architecture.mk earlier	Fabian Grünbichler
	else DEB_HOST_ARCH is not potentially not yet set and some invocations might print a spurious warning. Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2024-06-29	Fix broken usage of dpkg-querydebian/1.43	Steve McIntyre

2024-06-28	Tweak versioning in runtime dependenciesdebian/1.42	Steve McIntyre
	using substvars to make things more automatic in future.
2023-02-17	New signed binaries corresponding to 15.7-1	Steve McIntyre
	We now have arm64 signed shims again \o/ Closes: #1008942, #992073 Pulls multiple other bugfixes in for the signed version: Make sbat_var.S parse right with buggy gcc/binutils Enable NX support at build time, as required by policy for signing new shim binaries. Update build-dep on shim-unsigned to use 15.7-1 Block Debian grub binaries with sbat < 4 (see #1024617)
2021-04-30	Fix command-line arguments for dh_gencontrol	Steve McIntyre
	The arguments going to dh_gencontrol need to e before the -- , doh!
2021-04-30	Typo fix - remove space	Steve McIntyre

2021-04-30	Tweak dh_install* usage for docs	Steve McIntyre
	Newer versions of debhelper are not happy about setting up cross-package links for (e.g.) copyright and changelog files between binary-any and binary-all packages. Stop trying to do that now, just include them in both the shim-signed and shim-signed-common packages separately.
2021-04-30	Don't include apport stuff in the Debian build, it's not useful	Steve McIntyre

2021-04-30	Tweak arm64 building a lot	Steve McIntyre
	And various other minor packaging tweaks Add a different description at package build time to warn users that shim-signed on arm64 is not actually signed. Add a doc link to the wiki for more details. Comment out a lintian override for arm64
2019-05-27	Remove doc link used to quieten old lintian versionsdebian/1.31	Steve McIntyre

2019-05-27	Separate the helper scripts into a new shim-signed-common package	Steve McIntyre
	Separate this from the actual signed shim binaries so that we can sensibly support co-installability using Multi-Arch. Closes: #928486
2019-04-19	Grab the version of shim-unsigned in debian/rules, not shim	Steve McIntyre

2019-04-19	Instead of hard-coding amd64 (x64), use a per-arch variable	Steve McIntyre

2019-04-19	Stop copying helper binaries into our package now	Steve McIntyre
	We just depend on shim-helpers-ARCH-signed now, much better
2019-03-06	Import Debian version 1.28+nmu2debian/1.28+nmu2	Steve McIntyre
	shim-signed (1.28+nmu2) unstable; urgency=medium * Non-maintainer upload. * Copy the helper binaries from the shim binary so that we no longer need to depend on it. See #922179 for more details. Add a Replaces: shim and to allow us to over-write binaries there. * Explicitly uploading in a chroot with older binaries installed for shim and sbsigntool, and update Build-Depends to point to those speficic versions. This package will not function with other versions installed.
2019-03-06	Import Debian version 1.28debian/1.28	Steve Langasek
	shim-signed (1.28) unstable; urgency=medium * Initial Debian upload, based on Ubuntu package.