From 49b36303625c3bc6e93eba5df0719652cd51b2a9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?= Date: Fri, 28 Aug 2015 04:40:06 +0200 Subject: [PATCH] lorax: disable UEFI Secure Boot shim We don't have signed xen/kernel/initramfs binaries. And more importantly, we don't have MS-signed key... --- lorax-templates-qubes/templates/efi.tmpl | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lorax-templates-qubes/templates/efi.tmpl b/lorax-templates-qubes/templates/efi.tmpl index 119b030..5f20117 100644 --- a/lorax-templates-qubes/templates/efi.tmpl +++ b/lorax-templates-qubes/templates/efi.tmpl @@ -8,11 +8,12 @@ APPLE_EFI_DISKNAME=inroot+"/usr/share/pixmaps/bootloader/fedora-media.vol" mkdir ${EFIBOOTDIR} mkdir ${EFIBOOTDIR}/fonts/ -install boot/efi/EFI/*/shim.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi +install boot/efi/EFI/*/gcd${efiarch|lower}.efi ${EFIBOOTDIR}/BOOT${efiarch}.efi +# keep also under original name to make mkefiboot --apple happy +install boot/efi/EFI/*/gcd${efiarch|lower}.efi ${EFIBOOTDIR}/grub${efiarch|lower}.efi install boot/efi/EFI/*/xen*.efi ${EFIBOOTDIR}/xen-check.efi install boot/efi/EFI/*/xen*.efi ${EFIBOOTDIR}/xen.efi install boot/efi/EFI/*/MokManager.efi ${EFIBOOTDIR}/ -install boot/efi/EFI/*/gcd${efiarch|lower}.efi ${EFIBOOTDIR}/grub${efiarch|lower}.efi install boot/efi/EFI/*/fonts/unicode.pf2 ${EFIBOOTDIR}/fonts/ ## actually make the EFI images