From d6d31d5073e9034bfe2e25ba3fafd19acff5943a Mon Sep 17 00:00:00 2001 From: asklymenko Date: Fri, 12 Jun 2026 20:47:32 +0300 Subject: T861: add secure boot support. Build shim-signed package --- .github/workflows/trigger_rebuild_packages.yml | 6 ++++++ scripts/package-build/shim-signed/.gitignore | 1 + scripts/package-build/shim-signed/build.py | 1 + scripts/package-build/shim-signed/package.toml | 4 ++++ 4 files changed, 12 insertions(+) create mode 100644 scripts/package-build/shim-signed/.gitignore create mode 120000 scripts/package-build/shim-signed/build.py create mode 100644 scripts/package-build/shim-signed/package.toml diff --git a/.github/workflows/trigger_rebuild_packages.yml b/.github/workflows/trigger_rebuild_packages.yml index 75e73f46..1d68cba4 100644 --- a/.github/workflows/trigger_rebuild_packages.yml +++ b/.github/workflows/trigger_rebuild_packages.yml @@ -82,6 +82,8 @@ jobs: - 'scripts/package-build/pyhumps/**' radvd: - 'scripts/package-build/radvd/**' + shim-signed: + - 'scripts/package-build/shim-signed/**' strongswan: - 'scripts/package-build/strongswan/**' tacacs: @@ -235,6 +237,10 @@ jobs: trigger_build "radvd" fi + if [ "${{ steps.changes.outputs.shim-signed }}" == "true" ]; then + trigger_build "shim-signed" + fi + if [ "${{ steps.changes.outputs.strongswan }}" == "true" ]; then trigger_build "strongswan" fi diff --git a/scripts/package-build/shim-signed/.gitignore b/scripts/package-build/shim-signed/.gitignore new file mode 100644 index 00000000..ea2f72c7 --- /dev/null +++ b/scripts/package-build/shim-signed/.gitignore @@ -0,0 +1 @@ +/shim-signed/ diff --git a/scripts/package-build/shim-signed/build.py b/scripts/package-build/shim-signed/build.py new file mode 120000 index 00000000..3c76af73 --- /dev/null +++ b/scripts/package-build/shim-signed/build.py @@ -0,0 +1 @@ +../build.py \ No newline at end of file diff --git a/scripts/package-build/shim-signed/package.toml b/scripts/package-build/shim-signed/package.toml new file mode 100644 index 00000000..020c3e3d --- /dev/null +++ b/scripts/package-build/shim-signed/package.toml @@ -0,0 +1,4 @@ +[[packages]] +name = "shim-signed" +commit_id = "rolling" +scm_url = "https://github.com/vyos/shim-signed.git" -- cgit v1.2.3 From a7ccbf6d3a2a4fc985062e2d9e9ebef8fb914f57 Mon Sep 17 00:00:00 2001 From: asklymenko Date: Mon, 15 Jun 2026 11:48:52 +0300 Subject: T861: add secure boot support. Build shim-signed package --- scripts/package-build/shim-signed/package.toml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/scripts/package-build/shim-signed/package.toml b/scripts/package-build/shim-signed/package.toml index 020c3e3d..1c3ae115 100644 --- a/scripts/package-build/shim-signed/package.toml +++ b/scripts/package-build/shim-signed/package.toml @@ -2,3 +2,10 @@ name = "shim-signed" commit_id = "rolling" scm_url = "https://github.com/vyos/shim-signed.git" + +[dependencies] +packages = [ + "shim-helpers-amd64-signed", + "shim-helpers-amd64-signed-template", + "shim-unsigned" +] -- cgit v1.2.3