actions/build-container-installer
1
0
Fork 0
mirror of https://github.com/JasonN3/build-container-installer.git synced 2025-12-25 02:47:56 +01:00
Code Releases Activity

Add Support for Secure Boot (#37)

Browse source
This commit is contained in:
Noel Miller 2024-03-05 12:11:52 -06:00 • committed by GitHub
parent 17927f37f8
commit ef90875a1c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 100 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

26
lorax_templates/scripts/post/enroll-secureboot-key Executable file
View file

@ -0,0 +1,26 @@
<%page args="enrollment_password "/>
## --nochroot
set -oue pipefail
readonly ENROLLMENT_PASSWORD=${enrollment_password}
readonly SECUREBOOT_KEY="/run/install/repo/sb_pubkey.der"
if [[ ! -d "/sys/firmware/efi" ]]; then
echo "EFI mode not detected. Skipping key enrollment."
exit 0
fi
if [[ ! -f "$SECUREBOOT_KEY" ]]; then
echo "Secure boot key not provided: $SECUREBOOT_KEY"
exit 0
fi
SYS_ID="$(cat /sys/devices/virtual/dmi/id/product_name)"
if [[ ":Jupiter:Galileo:" =~ ":$SYS_ID:" ]]; then
echo "Steam Deck hardware detected. Skipping key enrollment."
exit 0
fi
mokutil --timeout -1 || :
echo -e "$ENROLLMENT_PASSWORD\n$ENROLLMENT_PASSWORD" | mokutil --import "$SECUREBOOT_KEY" || :