5 files changed, 50 insertions, 0 deletions
diff --git a/debian/signing-template/README.source b/debian/signing-template/README.source
new file mode 100644
index 0000000..36fb03e
--- /dev/null
+++ b/debian/signing-template/README.source
@@ -0,0 +1,4 @@
+This source package is generated by the Debian signing service from a
+template built by the fwupd package.  It should never be updated directly.
+
+ -- Steve McIntyre <93sam@debian.org>  Sat, 07 Apr 2018 12:44:55 +0100
diff --git a/debian/signing-template/control b/debian/signing-template/control
new file mode 100644
index 0000000..8baaf83
--- /dev/null
+++ b/debian/signing-template/control
@@ -0,0 +1,26 @@
+Source: systemd-boot-efi-${DEB_HOST_ARCH}-signed
+Section: admin
+Priority: optional
+Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
+Build-Depends: debhelper-compat (= 13),
+               sbsigntool,
+               systemd-boot-efi (= ${DEB_VERSION}),
+Standards-Version: 4.7.0
+Rules-Requires-Root: no
+Vcs-Git: https://salsa.debian.org/systemd-team/systemd.git
+Vcs-Browser: https://salsa.debian.org/systemd-team/systemd
+
+Package: systemd-boot-efi-${DEB_HOST_ARCH}-signed
+Section: admin
+Architecture: ${DEB_HOST_ARCH}
+Provides: systemd-boot-efi-signed
+Built-Using: systemd (= ${DEB_VERSION_SOURCE})
+Description: Tools to manage UEFI firmware updates (signed)
+ systemd is a system and service manager for Linux. It provides aggressive
+ parallelization capabilities, uses socket and D-Bus activation for starting
+ services, offers on-demand starting of daemons, keeps track of processes using
+ Linux control groups, maintains mount and automount points and implements an
+ elaborate transactional dependency-based service control logic.
+ .
+ This package provides systemd's tools for EFI boot:
+  * signed efi binaries
diff --git a/debian/signing-template/install b/debian/signing-template/install
new file mode 100644
index 0000000..65ed847
--- /dev/null
+++ b/debian/signing-template/install
@@ -0,0 +1 @@
+*.efi.signed /usr/lib/systemd/boot/efi
diff --git a/debian/signing-template/rules b/debian/signing-template/rules
new file mode 100755
index 0000000..0887e3e
--- /dev/null
+++ b/debian/signing-template/rules
@@ -0,0 +1,18 @@
+#!/usr/bin/make -f
+
+include /usr/share/dpkg/default.mk
+
+BINARY = systemd-boot${DEB_HOST_ARCH_EFI}.efi
+INSTALLED = usr/lib/systemd/boot/efi/$(BINARY)
+SIGNATURE = debian/signatures/systemd-boot-efi/$(INSTALLED).sig
+
+%:
+	dh $@
+
+override_dh_auto_build:
+	cp /$(INSTALLED) $(BINARY)
+	sbattach --attach $(SIGNATURE) $(BINARY)
+	mv $(BINARY) $(BINARY).signed
+
+override_dh_gencontrol:
+	dh_gencontrol -- -v${DEB_VERSION}
diff --git a/debian/signing-template/source/format b/debian/signing-template/source/format
new file mode 100644
index 0000000..89ae9db
--- /dev/null
+++ b/debian/signing-template/source/format
@@ -0,0 +1 @@
+3.0 (native)