blob: 95e0552d91563b6be3712a2077ebc1f919f8e5ba (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
|
#!/bin/bash
# SPDX-License-Identifier: LGPL-2.1-or-later
set -e
# sbsign is not available on CentOS Stream
if command -v sbsign &>/dev/null; then
# Ensure that side-loaded PE addons are loaded if signed, and ignored if not
addons_dir=/efi/loader/addons
mkdir -p "$addons_dir"
ukify build --secureboot-private-key mkosi.key --secureboot-certificate mkosi.crt --cmdline this_should_be_here -o "$addons_dir/good.addon.efi"
ukify build --cmdline this_should_not_be_here -o "$addons_dir/bad.addon.efi"
fi
|
