20648210a3
- Update shim-install to set the SRK algorithm for grub2 TPM2 key protector (bsc#1213945) + 92d0f4305df73 Set the SRK algorithm for the TPM2 protector - Build with update-bootloader-rpm-macros and fde-tpm-helper-rpm-macros and update the %post and %posttrans macros correctly OBS-URL: https://build.opensuse.org/request/show/1157811 OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim-leap?expand=0&rev=40
Since shim needs a "stable" environment to reproduce the binary to match the signature from UEFI CA, it's difficult to maintain shim in Tumbleweed due to the nature of a rolling release distro. Instead of compiling shim for Tumbleweed, we directly import the binary the latest stable Leap release to maintain a stable and reproducible shim binary.