3 Commits

Author	SHA1	Message	Date
Jean-Francois Roy	fd54dc191d	feat(talosctl): append microsoft secure boot certs ... This patch adds a flag to `secureboot.database.Generate` to append the Microsoft UEFI secure boot DB and KEK certificates to the appropriate ESLs, in addition to complimentary command line flags. This patch also includes a copy of said Microsoft certificates. The certificates are downloaded from an official Microsoft repo. Signed-off-by: Jean-Francois Roy <jf@devklog.net> Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-07-22 14:15:42 +04:00
Andrey Smirnov	41f92e0ba4	chore: update Go to 1.22.4, other updates ... Bump go modules, adjust the code. New linter warnings. Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-06-05 20:59:52 +04:00
Andrey Smirnov	f38eaaab87	feat: rework secureboot and PCR signing key ... Support different providers, not only static file paths. Drop `pcr-signing-key-public.pem` file, as we generate it on the fly now. See https://github.com/siderolabs/image-factory/issues/19 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2023-11-10 21:14:21 +04:00