mirror of
https://github.com/flatcar/scripts.git
synced 2026-05-04 19:56:32 +02:00
Build shim into the image
grub requires that shim be available in order to call out to verify the kernel. Sign it and stick it in the image alongside grub.
This commit is contained in:
parent
707803ed43
commit
4b8a64b70c
@ -147,7 +147,11 @@ case "${FLAGS_target}" in
|
||||
--cert /usr/share/sb_keys/DB.crt \
|
||||
"${ESP_DIR}/${GRUB_DIR}/${CORE_NAME}"
|
||||
sudo cp "${ESP_DIR}/${GRUB_DIR}/${CORE_NAME}.signed" \
|
||||
"${ESP_DIR}/EFI/boot/bootx64.efi"
|
||||
"${ESP_DIR}/EFI/boot/grub.efi"
|
||||
sudo sbsign --key /usr/share/sb_keys/DB.key \
|
||||
--cert /usr/share/sb_keys/DB.crt \
|
||||
--output "${ESP_DIR}/EFI/boot/bootx64.efi" \
|
||||
"/usr/lib/shim/shim.efi"
|
||||
else
|
||||
sudo cp "${ESP_DIR}/${GRUB_DIR}/${CORE_NAME}" \
|
||||
"${ESP_DIR}/EFI/boot/bootx64.efi"
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user