summaryrefslogtreecommitdiff
path: root/debian/shim-signed.preinst.in
AgeCommit message (Collapse)Author
2026-05-19Fix up stupid omission in the previous package uploaddebian/1.50Steve McIntyre
the changes in 1.49 did not take into account the "SecureBoot enabled" case when adding a default error trap. Closes: #1137098, #1137101.
2026-05-19Make mokutil parsing more robust. Closes: #1137063debian/1.49Steve McIntyre
Cope with "Platform is in Setup Mode" message If we get any other unexpected output, print what we got for debugging.
2026-05-18Switch to using debconf to display signature errorsSteve McIntyre
2026-05-17Update changelogSteve McIntyre
2026-05-17Add more text to the failure messsageSteve McIntyre
And link to a wiki page for more info. Need to write that page!
2026-05-17Move shim signature checks to preinstSteve McIntyre
It's safer to do it here before a new shim is installed. As we don't have any files installed at this point, we can't look up knowwn signatures from a file. Instead, we now substitute the signature fingerprints directly into shim-signed.preinst at package build time. Put the postinst back to where it was before the signature checks were added.