Commit Graph

281 Commits

Author SHA256 Message Date
Stephan Kulow
08b33c6edf Accepting request 243992 from home:lnussel:branches:devel:openSUSE:Factory
fix typo in changes file that prevents the Factory submission

OBS-URL: https://build.opensuse.org/request/show/243992
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=79
2014-08-08 15:48:02 +00:00
Stephan Kulow
3bd935ea7f Accepting request 243951 from home:lnussel:branches:devel:openSUSE:Factory
- don't fail the build if the UEFI signing service signature can't
  be attached anymore. This way shim can still pass through staging
  projects. We will verify the correct signature for release builds
  using openQA instead.

OBS-URL: https://build.opensuse.org/request/show/243951
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=78
2014-08-08 13:19:04 +00:00
Gary Ching-Pang Lin
12d0642c1a Accepting request 243573 from home:michael-chang:branches:devel:openSUSE:Factory
- shim-install: fix GRUB shows broken letters at boot by calling
  grub2-install to initialize /boot/grub2 directory with files 
  needed by grub.cfg (bnc#889765)

OBS-URL: https://build.opensuse.org/request/show/243573
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=77
2014-08-04 09:46:50 +00:00
Gary Ching-Pang Lin
d6b79f1fb6 Accepting request 236110 from home:gary_lin:branches:devel:openSUSE:Factory
- remove the unused variables
- check the encoding of the keys (bnc#872503)
- fetch the netboot image from the same device (bnc#877003)
- Refresh shim-opensuse-cert-prompt.patch

OBS-URL: https://build.opensuse.org/request/show/236110
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=76
2014-06-03 02:49:47 +00:00
Gary Ching-Pang Lin
e0970dfd6a Accepting request 233853 from home:gary_lin:branches:devel:openSUSE:Factory
Use --reinit instead of --refresh in %post to update the files in /boot

OBS-URL: https://build.opensuse.org/request/show/233853
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=75
2014-05-14 10:01:52 +00:00
Gary Ching-Pang Lin
2562b2ffce Accepting request 231974 from home:michael-chang:branches:devel:openSUSE:Factory
- shim-install: fix boot partition and rollback support kluge
  (bnc#875385)

OBS-URL: https://build.opensuse.org/request/show/231974
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=74
2014-04-29 07:55:23 +00:00
Stephan Kulow
fa8f2b475d osc copypac from project:devel:openSUSE:Factory package:shim revision:71
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=73
2014-04-29 07:15:01 +00:00
Stephan Kulow
73e81b4748 osc copypac from project:openSUSE:Factory package:shim revision:29
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=31
2014-04-21 09:05:08 +00:00
OBS User buildservice-autocommit
b518987796 Updating link to change in openSUSE:Factory/shim revision 31.0
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=7a81e86df566f93dbe199635b458d416
2014-04-21 09:05:08 +00:00
Tomáš Chvátal
7e334a0f0f Accepting request 230429 from devel:openSUSE:Factory
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/230429
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=30
2014-04-20 09:35:05 +00:00
Gary Ching-Pang Lin
e876d9efc6 Accepting request 229569 from home:gary_lin:branches:devel:openSUSE:Factory
Replace shim-mokmanager-support-sha1.patch with shim-mokmanager-support-sha-family.patch to support the SHA family

OBS-URL: https://build.opensuse.org/request/show/229569
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=71
2014-04-10 08:31:41 +00:00
Gary Ching-Pang Lin
e0fd4dbc38 Accepting request 229264 from home:gary_lin:branches:devel:openSUSE:Factory
Support SHA1 hashes in MOK

OBS-URL: https://build.opensuse.org/request/show/229264
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=70
2014-04-07 10:06:19 +00:00
Gary Ching-Pang Lin
062d82ccf6 Accepting request 228324 from home:michael-chang:branches:devel:openSUSE:Factory
- snapper rollback support (fate#317062)
  - refresh shim-install

OBS-URL: https://build.opensuse.org/request/show/228324
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=69
2014-03-31 13:30:21 +00:00
Gary Ching-Pang Lin
58137361ad Accepting request 225772 from home:gary_lin:branches:devel:openSUSE:Factory
Insert the right signature (bnc#867974)

OBS-URL: https://build.opensuse.org/request/show/225772
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=68
2014-03-13 03:25:28 +00:00
Gary Ching-Pang Lin
99fdefd1f8 Accepting request 225406 from home:gary_lin:branches:devel:openSUSE:Factory
Add shim-fix-uninitialized-variable.patch to fix the use of uninitialzed variables in lib

OBS-URL: https://build.opensuse.org/request/show/225406
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=67
2014-03-10 09:28:44 +00:00
Gary Ching-Pang Lin
cb72e488f1 Accepting request 224988 from home:gary_lin:branches:devel:openSUSE:Factory
- Add shim-mokmanager-delete-bs-var-right.patch to delete the BS+NV
  variables the right way
- Update shim-opensuse-cert-prompt.patch to delete openSUSE_Verify
  correctly

OBS-URL: https://build.opensuse.org/request/show/224988
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=66
2014-03-07 09:40:50 +00:00
Gary Ching-Pang Lin
2d5468ae12 Accepting request 224833 from home:gary_lin:branches:devel:openSUSE:Factory
- Add shim-fallback-avoid-duplicate-bootorder.patch to fix the
  duplicate entries in BootOrder
- Add shim-allow-fallback-use-system-loadimage.patch to handle the
  shim protocol properly to keep only one protocol entity
- Refresh shim-opensuse-cert-prompt.patch

OBS-URL: https://build.opensuse.org/request/show/224833
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=65
2014-03-06 07:55:56 +00:00
Gary Ching-Pang Lin
466149ebe7 Accepting request 224828 from home:michael-chang:branches:devel:openSUSE:Factory
- shim-install: fix the $prefix to use grub2-mkrelpath for paths
  on btrfs subvolume (bnc#866690).

OBS-URL: https://build.opensuse.org/request/show/224828
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=64
2014-03-06 04:08:12 +00:00
Gary Ching-Pang Lin
898a347233 Accepting request 224565 from home:gary_lin:branches:devel:openSUSE:Factory
- Update signature-sles.asc: shim signed by UEFI signing service,
  based on code from "Thu Feb 20 11:57:01 UTC 2014"

OBS-URL: https://build.opensuse.org/request/show/224565
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=63
2014-03-04 06:40:16 +00:00
Gary Ching-Pang Lin
ac40989026 Accepting request 224563 from home:gary_lin:branches:devel:openSUSE:Factory
FATE#315002: Update shim-install to install shim.efi as the EFI default bootloader when none exists in \EFI\boot.

OBS-URL: https://build.opensuse.org/request/show/224563
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=62
2014-03-04 04:32:46 +00:00
Tomáš Chvátal
48acea1e89 Accepting request 223346 from home:gary_lin:branches:devel:openSUSE:Factory
Show the prompt to ask whether the user trusts the openSUSE certificate or not

OBS-URL: https://build.opensuse.org/request/show/223346
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=61
2014-02-28 10:04:44 +00:00
Gary Ching-Pang Lin
358e7af8a4 Accepting request 223224 from home:lnussel:branches:devel:openSUSE:Factory
- allow package to carry multiple signatures
- check correct certificate is embedded

OBS-URL: https://build.opensuse.org/request/show/223224
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=60
2014-02-21 02:21:37 +00:00
Gary Ching-Pang Lin
12d61956b5 Accepting request 223204 from home:lnussel:branches:devel:openSUSE:Factory
- always clean up generated files that embed certificates
  (shim_cert.h shim.cer shim.crt) to make sure next build loop
  rebuilds them properly

OBS-URL: https://build.opensuse.org/request/show/223204
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=59
2014-02-20 10:26:49 +00:00
Gary Ching-Pang Lin
18c5d7ff47 Accepting request 222658 from home:gary_lin:branches:devel:openSUSE:Factory
- Add shim-bnc863205-mokmanager-fix-hash-delete.patch to fix the
  hash deletion operation to avoid ruining the whole list
  (bnc#863205)

OBS-URL: https://build.opensuse.org/request/show/222658
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=58
2014-02-18 03:46:55 +00:00
Gary Ching-Pang Lin
63a3d1b717 Accepting request 221745 from home:gary_lin:branches:devel:openSUSE:Factory
- Update shim-mokx-support.patch to support the resetting of MOK blacklist
- Fix the variable checking in get_variable_attr
- Improve the boot entry pathes and avoid generating the boot entries that are already there
- Update SUSE certificate
- Update scritps to remove the creation of the temporary nss database
- Remove the kernel version of the build server
- Match the the prefix of the project name properly by escaping the percent sign.

OBS-URL: https://build.opensuse.org/request/show/221745
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=57
2014-02-13 01:57:08 +00:00
Stephan Kulow
0615dc4f67 Accepting request 215490 from devel:openSUSE:Factory
- enable signature assertion also in SUSE: hierarchy (forwarded request 214707 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/215490
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=29
2014-01-30 10:37:50 +00:00
f46b6f113f Accepting request 214707 from home:lnussel:branches:devel:openSUSE:Factory
- enable signature assertion also in SUSE: hierarchy

OBS-URL: https://build.opensuse.org/request/show/214707
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=55
2014-01-29 10:49:44 +00:00
Stephan Kulow
d1b62e799b Accepting request 209583 from devel:openSUSE:Factory
handle the error status from ReadKeyStroke to avoid unexpected keys (forwarded request 209582 from gary_lin)

OBS-URL: https://build.opensuse.org/request/show/209583
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=28
2013-12-06 10:48:26 +00:00
Gary Ching-Pang Lin
1e4680c8fe Accepting request 209582 from home:gary_lin:branches:devel:openSUSE:Factory
handle the error status from ReadKeyStroke to avoid unexpected keys

OBS-URL: https://build.opensuse.org/request/show/209582
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=53
2013-12-06 07:16:12 +00:00
Gary Ching-Pang Lin
1640d5b323 Accepting request 209456 from home:gary_lin:branches:devel:openSUSE:Factory
Update to 0.7, include upstream patches, and support MOK blacklist

OBS-URL: https://build.opensuse.org/request/show/209456
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=52
2013-12-05 02:46:29 +00:00
Stephan Kulow
ebc9d1e0fd Accepting request 205340 from devel:openSUSE:Factory
- Update microsoft.asc: shim signed by UEFI signing service, based
  on code from "Tue Oct  1 04:29:29 UTC 2013". (forwarded request 205333 from fcrozat)

OBS-URL: https://build.opensuse.org/request/show/205340
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=27
2013-10-31 15:00:05 +00:00
Gary Ching-Pang Lin
123cf8931f Accepting request 205333 from home:fcrozat:branches:devel:openSUSE:Factory
- Update microsoft.asc: shim signed by UEFI signing service, based
  on code from "Tue Oct  1 04:29:29 UTC 2013".

OBS-URL: https://build.opensuse.org/request/show/205333
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=50
2013-10-31 10:33:54 +00:00
Stephan Kulow
1cd0c7adf2 Accepting request 201535 from devel:openSUSE:Factory
- Add shim-netboot-fixes.patch to include upstream netboot fixes
- Add shim-mokmanager-disable-gfx-console.patch to disable the
  graphics console to avoid system hang on some machines
- Add shim-bnc841426-silence-shim-protocols.patch to silence the
  shim protocols (bnc#841426) (forwarded request 201531 from gary_lin)

OBS-URL: https://build.opensuse.org/request/show/201535
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=26
2013-10-02 11:33:52 +00:00
Gary Ching-Pang Lin
fe27947fc0 Accepting request 201531 from home:gary_lin:branches:devel:openSUSE:Factory
- Add shim-netboot-fixes.patch to include upstream netboot fixes
- Add shim-mokmanager-disable-gfx-console.patch to disable the
  graphics console to avoid system hang on some machines
- Add shim-bnc841426-silence-shim-protocols.patch to silence the
  shim protocols (bnc#841426)

OBS-URL: https://build.opensuse.org/request/show/201531
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=48
2013-10-01 07:06:21 +00:00
Stephan Kulow
f0ace7e2ef Accepting request 200509 from devel:openSUSE:Factory
Create boot.csv in ESP for fallback.efi to restore the boot entry (forwarded request 200505 from gary_lin)

OBS-URL: https://build.opensuse.org/request/show/200509
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=25
2013-09-25 15:20:27 +00:00
Gary Ching-Pang Lin
abecbcfee6 Accepting request 200505 from home:gary_lin:branches:devel:openSUSE:Factory
Create boot.csv in ESP for fallback.efi to restore the boot entry

OBS-URL: https://build.opensuse.org/request/show/200505
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=46
2013-09-25 08:08:02 +00:00
Stephan Kulow
62821c12ac Accepting request 199392 from devel:openSUSE:Factory
OBS-URL: https://build.opensuse.org/request/show/199392
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=23
2013-09-17 13:03:17 +00:00
7d754a1d6f Accepting request 199366 from home:fcrozat:branches:devel:openSUSE:Factory
- Update microsoft.asc: shim signed by UEFI signing service, based
  on code from "Fri Sep  6 13:57:36 UTC 2013".
- Improve extract_signature.sh to work on current path.

OBS-URL: https://build.opensuse.org/request/show/199366
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=44
2013-09-17 09:17:43 +00:00
Stephan Kulow
d3b40f81ac Accepting request 197952 from devel:openSUSE:Factory
- set timestamp of PE file to time of the binary the signature was
  made for.
- make sure cert.o get's rebuilt for each target

- Update microsoft.asc: shim signed by UEFI signing service, based
  on code from "Wed Aug 28 15:54:38 UTC 2013" (forwarded request 197604 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/197952
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=22
2013-09-11 11:09:51 +00:00
Gary Ching-Pang Lin
23b0639b8c Accepting request 197604 from home:lnussel:branches:devel:openSUSE:Factory
- set timestamp of PE file to time of the binary the signature was
  made for.
- make sure cert.o get's rebuilt for each target

- Update microsoft.asc: shim signed by UEFI signing service, based
  on code from "Wed Aug 28 15:54:38 UTC 2013"

OBS-URL: https://build.opensuse.org/request/show/197604
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=42
2013-09-09 03:29:33 +00:00
Stephan Kulow
72ecfc0c8d Accepting request 196741 from devel:openSUSE:Factory
- always build a shim that embeds the distro's certificate (e.g.
  shim-opensuse.efi). If the package is built in the devel project
  additionally shim-devel.efi is created. That allows us to either
  load grub2/kernel signed by the distro or signed by the devel
  project, depending on use case. Also shim-$distro.efi from the
  devel project can be used to request additional signatures. (forwarded request 196735 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/196741
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=21
2013-08-30 09:49:18 +00:00
Gary Ching-Pang Lin
3436d7ba57 Accepting request 196735 from home:lnussel:branches:devel:openSUSE:Factory
- always build a shim that embeds the distro's certificate (e.g.
  shim-opensuse.efi). If the package is built in the devel project
  additionally shim-devel.efi is created. That allows us to either
  load grub2/kernel signed by the distro or signed by the devel
  project, depending on use case. Also shim-$distro.efi from the
  devel project can be used to request additional signatures.

OBS-URL: https://build.opensuse.org/request/show/196735
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=40
2013-08-29 08:43:23 +00:00
Stephan Kulow
17697d55a4 Accepting request 196635 from devel:openSUSE:Factory
- also include old openSUSE 4096 bit certificate to be able to still
  boot kernels signed with that key.
- add show_signatures script (forwarded request 196609 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/196635
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=20
2013-08-28 19:17:50 +00:00
Gary Ching-Pang Lin
f83d4083f6 Accepting request 196609 from home:lnussel:branches:devel:openSUSE:Factory
- also include old openSUSE 4096 bit certificate to be able to still
  boot kernels signed with that key.
- add show_signatures script

OBS-URL: https://build.opensuse.org/request/show/196609
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=38
2013-08-28 09:32:58 +00:00
Stephan Kulow
5f351b95fb Accepting request 196499 from devel:openSUSE:Factory
- replace the 4096 bit openSUSE UEFI CA certificate with new a
  standard compliant 2048 bit one. (forwarded request 196493 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/196499
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=19
2013-08-27 19:11:58 +00:00
Gary Ching-Pang Lin
e60c1a0266 Accepting request 196493 from home:lnussel:branches:devel:openSUSE:Factory
- replace the 4096 bit openSUSE UEFI CA certificate with new a
  standard compliant 2048 bit one.

OBS-URL: https://build.opensuse.org/request/show/196493
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=36
2013-08-27 07:45:39 +00:00
Tomáš Chvátal
4ab739d4df Accepting request 195856 from devel:openSUSE:Factory
- fix shell syntax error (forwarded request 195685 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/195856
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=18
2013-08-22 08:55:23 +00:00
Gary Ching-Pang Lin
79c0b9a33d Accepting request 195685 from home:lnussel:branches:devel:openSUSE:Factory
- fix shell syntax error

OBS-URL: https://build.opensuse.org/request/show/195685
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=34
2013-08-22 01:54:02 +00:00
Tomáš Chvátal
38991a68fe Accepting request 186559 from devel:openSUSE:Factory
- don't include binary in the sources. Instead package the raw
  signature and attach it during build (bnc#813448). (forwarded request 186534 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/186559
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/shim?expand=0&rev=17
2013-08-12 12:22:13 +00:00
Gary Ching-Pang Lin
dd00d3c666 Accepting request 186534 from home:lnussel:branches:devel:openSUSE:Factory
- don't include binary in the sources. Instead package the raw
  signature and attach it during build (bnc#813448).

OBS-URL: https://build.opensuse.org/request/show/186534
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=32
2013-08-09 09:33:45 +00:00