summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-08-26 20:20:41 +0200
committerChristian Breunig <christian@breunig.cc>2024-09-14 20:44:55 +0200
commit56cd7de907ef26ae27909a5d468768bb6e1e7f6f (patch)
tree12dc44c33cd0cb10da6056cebc84ae170c5cf701
parent5df36ba0e3c95efb2962ed54e614552f7425e173 (diff)
downloadvyos-1x-56cd7de907ef26ae27909a5d468768bb6e1e7f6f.tar.gz
vyos-1x-56cd7de907ef26ae27909a5d468768bb6e1e7f6f.zip
T861: add dependency to enable UEFI secure boot support
-rw-r--r--debian/control5
-rw-r--r--python/vyos/system/grub.py2
2 files changed, 5 insertions, 2 deletions
diff --git a/debian/control b/debian/control
index 890100fd8..d1d1602ae 100644
--- a/debian/control
+++ b/debian/control
@@ -113,8 +113,11 @@ Depends:
efibootmgr,
libefivar1,
dosfstools,
- grub-efi-amd64-bin [amd64],
+ grub-efi-amd64-signed [amd64],
grub-efi-arm64-bin [arm64],
+ mokutil [amd64],
+ shim-signed [amd64],
+ sbsigntool [amd64],
# Image signature verification tool
minisign,
# Live filesystem tools
diff --git a/python/vyos/system/grub.py b/python/vyos/system/grub.py
index daddb799a..de8303ee2 100644
--- a/python/vyos/system/grub.py
+++ b/python/vyos/system/grub.py
@@ -82,7 +82,7 @@ def install(drive_path: str, boot_dir: str, efi_dir: str, id: str = 'VyOS', chro
f'{chroot_cmd} grub-install --no-floppy --recheck --target={efi_installation_arch}-efi \
--force-extra-removable --boot-directory={boot_dir} \
--efi-directory={efi_dir} --bootloader-id="{id}" \
- --no-uefi-secure-boot'
+ --uefi-secure-boot'
)