Dermot Bradley ed2cce93d7 main/secureboot-hook: add support for specifying with EFISTUB file to use
In addition to Gummiboot as a EFISTUB to use there is now also
Stubbyboot and in future there may be other alternatives.

Add a secureboot.conf option to specify the path to a EFISTUB to use
so this is configurable.
2023-11-15 18:10:48 +00:00

29 lines
1.1 KiB
Plaintext
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Contributor: Jakub Jirutka <jakub@jirutka.cz>
# Maintainer: Jakub Jirutka <jakub@jirutka.cz>
pkgname=secureboot-hook
pkgver=0.2
pkgrel=1
pkgdesc="A kernel hook for generating signed UEFI Unified Kernel Image"
url="https://gitlab.alpinelinux.org/alpine/aports"
arch="noarch !armhf !s390x !ppc64le !mips !mips64" # limited by sbsigntool
license="MIT"
depends="efi-mkuki kernel-hooks initramfs-generator sbsigntool"
install="$pkgname.post-install $pkgname.pre-deinstall"
source="secureboot.hook
secureboot.conf
"
options="!check" # no tests provided
package() {
local name='secureboot'
install -D -m755 "$srcdir"/$name.hook "$pkgdir"/usr/share/kernel-hooks.d/$name.hook
install -D -m644 "$srcdir"/$name.conf "$pkgdir"/etc/kernel-hooks.d/$name.conf
install -d -m700 "$pkgdir"/etc/uefi-keys
}
sha512sums="
8cf0ea83f32f7cc546f2235dcf0258ada36cf738c5738d6ac31b935b158ac40de51d53784c310810be0f8f6ce3947d9e09d781eab716f6cc303948d47384f6a8 secureboot.hook
0777b1ec63d7d21a2144737fb913a52b8deedadbec69b7450799c228950adf9213d5d40e52617841dbae3bf4451f37a18f833e94860fab2c7779779b5fa9f66d secureboot.conf
"