Gary Ching-Pang Lin
b85a3305e7
SL-Micro to the image booting with TPM2 unsealing (bsc#1210382) * 769e41d Limit the removable option to encrypted SL-Micro OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory/shim?expand=0&rev=216
26 lines
1.2 KiB
Plaintext
26 lines
1.2 KiB
Plaintext
==== openSUSE ====
|
|
For openSUSE, the devel project of shim is devel:openSUSE:Factory. ALWAYS
|
|
use the latest Leap to build shim-opensuse.efi for UEFI CA. Tumbleweed
|
|
shares the same binary with Leap, so do the older Leap releases.
|
|
|
|
The steps to udpate signature-opensuse.asc:
|
|
1) Branch devel:openSUSE:Factory/shim.
|
|
2) Add the latest Leap, e.g. 42.2, to the build target.
|
|
3) Build shim-opensuse.efi against the latest Leap.
|
|
4) Strip the signature from shim-opensuse.efi with strip_signature.sh.
|
|
5) Send shim-opensuse.efi to UEFI CA to request a new signature.
|
|
6) Extract the signature from the signed shim.efi with extract_signature.sh
|
|
7) Update signature-opensuse.asc.
|
|
|
|
==== SLES ===
|
|
Since there is no devel project for shim in SLES, just build shim-sles.efi with
|
|
the latest SLES and then send it to UEFI CA for a new signature.
|
|
|
|
The steps to update signature-sles.asc:
|
|
1) Branch shim from the latest SLES and apply the update/fix.
|
|
2) Build shim-sles.efi against the latest SLES.
|
|
3) Strip the signature from shim-sles.efi with strip_signature.sh.
|
|
4) Send shim-sles.efi to UEFI CA to request a new signature.
|
|
5) Extract the signature from the signed shim.efi with extract_signature.sh
|
|
6) Update signature-sles.asc.
|