T861: add secure boot support. Build shim-signed package

4 files changed, 12 insertions, 0 deletions

diff --git a/.github/workflows/trigger_rebuild_packages.yml b/.github/workflows/trigger_rebuild_packages.yml
index 75e73f46..1d68cba4 100644
--- a/.github/workflows/trigger_rebuild_packages.yml
+++ b/.github/workflows/trigger_rebuild_packages.yml
@@ -82,6 +82,8 @@ jobs:
               - 'scripts/package-build/pyhumps/**'
             radvd:
               - 'scripts/package-build/radvd/**'
+            shim-signed:
+              - 'scripts/package-build/shim-signed/**'
             strongswan:
               - 'scripts/package-build/strongswan/**'
             tacacs:
@@ -235,6 +237,10 @@ jobs:
             trigger_build "radvd"
           fi
 
+          if [ "${{ steps.changes.outputs.shim-signed }}" == "true" ]; then
+            trigger_build "shim-signed"
+          fi
+
           if [ "${{ steps.changes.outputs.strongswan }}" == "true" ]; then
             trigger_build "strongswan"
           fi
diff --git a/scripts/package-build/shim-signed/.gitignore b/scripts/package-build/shim-signed/.gitignore
new file mode 100644
index 00000000..ea2f72c7
--- /dev/null
+++ b/scripts/package-build/shim-signed/.gitignore
@@ -0,0 +1 @@
+/shim-signed/
diff --git a/scripts/package-build/shim-signed/build.py b/scripts/package-build/shim-signed/build.py
new file mode 120000
index 00000000..3c76af73
--- /dev/null
+++ b/scripts/package-build/shim-signed/build.py
@@ -0,0 +1 @@
+../build.py
\ No newline at end of file
diff --git a/scripts/package-build/shim-signed/package.toml b/scripts/package-build/shim-signed/package.toml
new file mode 100644
index 00000000..020c3e3d
--- /dev/null
+++ b/scripts/package-build/shim-signed/package.toml
@@ -0,0 +1,4 @@
+[[packages]]
+name = "shim-signed"
+commit_id = "rolling"
+scm_url = "https://github.com/vyos/shim-signed.git"