]> git.ipfire.org Git - thirdparty/mkosi.git/commit
projects / thirdparty / mkosi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d18b4a5) | patch
Don't insist on pre-signed EFI binaries when ShimBootloader == signed 3403/head
authorDaan De Meyer <daan.j.demeyer@gmail.com>
Wed, 22 Jan 2025 16:07:09 +0000 (17:07 +0100)
committerDaan De Meyer <daan.j.demeyer@gmail.com>
Wed, 22 Jan 2025 16:07:09 +0000 (17:07 +0100)
commit39277e041c0d51e53c3706755783c3baa9979a57
tree217accaad9fd9a3aedfc022ce7089e4d7b3d376etree
parentd18b4a5dc7aa1f20c4a1125948a1f538397fa3ffcommit | diff
Don't insist on pre-signed EFI binaries when ShimBootloader == signed

The whole point of shim is that you can use a presigned shim with
locally signed EFI binaries if the local key is enrolled in MOK, so
don't insist on presigned EFI binaries when a signed shim is requested.

Instead the new "signed" variants of the Bootloader= option can be used
to still force installation of presigned EFI binaries.
mkosi/__init__.py diff | blob | blame | history
mkosi/bootloader.py diff | blob | blame | history
Mirror of https://github.com/systemd/mkosi.git