lfs/live-custom-ubuntu-from-scratch
1
0
Fork 0
mirror of https://github.com/mvallim/live-custom-ubuntu-from-scratch.git synced 2025-08-03 16:33:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: enable secureboot

Browse Source
This commit is contained in:
Marcos Tischer Vallim
2024-09-07 17:02:59 -03:00
parent 13fac000e0
commit c9709f63c6
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -662,7 +662,7 @@ remove packages specified in `filesystem.manifest` that are *not* listed in `fil
4. Add .sbat sections 4. Add .sbat sections
```shell ```shell
objcopy --set-section-alignment '.sbat=512' --add-section .sbat=isolinux/sbat.csv isolinux/grubx64.efi --adjust-section-vma .sbat+10000000 objcopy --add-section .sbat=isolinux/sbat.csv isolinux/grubx64.efi --change-section-address .sbat=10000000
``` ```
5. UEFI secure boot signing 5. UEFI secure boot signing

2
scripts/chroot_build.sh
View File

@ -372,7 +372,7 @@ EOF
sed -i 's/SecureBoot/SecureB00t/' isolinux/grubx64.efi sed -i 's/SecureBoot/SecureB00t/' isolinux/grubx64.efi
# add .sbat sections # add .sbat sections
objcopy --set-section-alignment '.sbat=512' --add-section .sbat=isolinux/sbat.csv isolinux/grubx64.efi --adjust-section-vma .sbat+10000000 objcopy --add-section .sbat=isolinux/sbat.csv isolinux/grubx64.efi --change-section-address .sbat=10000000
# UEFI secure boot signing # UEFI secure boot signing
sbsign --key /certificates/db.key --cert /certificates/db.pem --output isolinux/grubx64.efi isolinux/grubx64.efi sbsign --key /certificates/db.key --cert /certificates/db.pem --output isolinux/grubx64.efi isolinux/grubx64.efi

6
scripts/default_config.sh
View File

@ -5,9 +5,9 @@
# Usage: Copy this file to config.sh and make changes there. Keep this file (default_config.sh) as-is # Usage: Copy this file to config.sh and make changes there. Keep this file (default_config.sh) as-is
# so that subsequent changes can be easily merged from upstream. Keep all customiations in config.sh # so that subsequent changes can be easily merged from upstream. Keep all customiations in config.sh
# The version of Ubuntu to generate. Successfully tested: bionic, cosmic, disco, eoan, focal, groovy, jammy # The version of Ubuntu to generate. Successfully tested LTS: bionic, focal, jammy, noble
# See https://wiki.ubuntu.com/DevelopmentCodeNames for details # See https://wiki.ubuntu.com/DevelopmentCodeNames for details
export TARGET_UBUNTU_VERSION="jammy" export TARGET_UBUNTU_VERSION="noble"
# The Ubuntu Mirror URL. It's better to change for faster download. # The Ubuntu Mirror URL. It's better to change for faster download.
# More mirrors see: https://launchpad.net/ubuntu/+archivemirrors # More mirrors see: https://launchpad.net/ubuntu/+archivemirrors
@ -41,7 +41,7 @@ export TARGET_PACKAGE_REMOVE="
function customize_image() { function customize_image() {
# install graphics and desktop # install graphics and desktop
apt-get install -y \ apt-get install -y \
plymouth-theme-ubuntu-logo \ plymouth-themes \
ubuntu-gnome-desktop \ ubuntu-gnome-desktop \
ubuntu-gnome-wallpapers ubuntu-gnome-wallpapers