commit | fc51267ccb57c3d8619e904f0353c7f7cce87195 | [log] [tgz] |
---|---|---|
author | Paul Nardini <pnardini@neverware.com> | Fri Aug 21 17:10:35 2020 |
committer | Paul Nardini <pnardini@neverware.com> | Fri Aug 21 17:10:35 2020 |
tree | 49ca323d06c933605ffd9babd91db85f0cf542c9 | |
parent | 277caf26d0cc31930f140f5b252575960e1af9c2 [diff] |
Updated link to shim 15.1 build patch to be based on the v4 shim-build tag
This repo is for review of requests for signing shim. To create a request for review:
Note that we really only have experience with using grub2 on Linux, so asking us to endorse anything else for signing is going to require some convincing on your part.
Here's the template:
Neverware Inc. (https://www.neverware.com)
CloudReady
CloudReady is a Linux distro; we'd like to encourage people to boot our OS with secure boot enabled.
https://github.com/rhboot/shim/tree/shim-15.1
https://github.com/rhboot/shim/tree/shim-15.1
A patch for a missing ‘{’ in mok.c is applied to the shim-15.1 code base, as the build fails without it: https://github.com/neverware/shim-build/blob/v4/build-fix.patch
This repo contains the Dockerfile we use to build shim: https://github.com/neverware/shim-build/tree/v4
Our shim-15.1 build is largely upstream's 15.1 with our new public certificate embedded. This build has been tested with our new grub, which is now up-to-date with fedora-33.