faerbit/archiso
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

mkarchiso: add SBAT metadata to grub-mkstandalone created EFI binaries

Browse Source 
Even though archiso created ISOs do not support Secure Boot, having SBAT would allow users to more easily repack the files in the ISO to add a signed shim.

Fixes #174
This commit is contained in:
nl6720 2022-06-18 09:56:24 +03:00
parent 91b48f82f3
commit 53a3ad25af
No known key found for this signature in database
GPG Key ID: 5CE88535E188D369
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
archiso/mkarchiso
View File

@ -544,6 +544,7 @@ _make_bootmode_uefi-ia32.grub.esp() {
--modules="part_gpt part_msdos fat iso9660" \ --modules="part_gpt part_msdos fat iso9660" \
--locales="en@quot" \ --locales="en@quot" \
--themes="" \ --themes="" \
--sbat=/usr/share/grub/sbat.csv \
-o "${work_dir}/BOOTIA32.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg" -o "${work_dir}/BOOTIA32.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg"
# Add GRUB to the list of files used to calculate the required FAT image size. # Add GRUB to the list of files used to calculate the required FAT image size.
efiboot_files+=("${work_dir}/BOOTIA32.EFI" efiboot_files+=("${work_dir}/BOOTIA32.EFI"
@ -619,6 +620,7 @@ _make_bootmode_uefi-x64.grub.esp() {
--modules="part_gpt part_msdos fat iso9660" \ --modules="part_gpt part_msdos fat iso9660" \
--locales="en@quot" \ --locales="en@quot" \
--themes="" \ --themes="" \
--sbat=/usr/share/grub/sbat.csv \
-o "${work_dir}/BOOTx64.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg" -o "${work_dir}/BOOTx64.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg"
# Add GRUB to the list of files used to calculate the required FAT image size. # Add GRUB to the list of files used to calculate the required FAT image size.
efiboot_files+=("${work_dir}/BOOTx64.EFI" efiboot_files+=("${work_dir}/BOOTx64.EFI"