Package Missing Secboot EFI VAR File

Task Info (Flyspray)
Opened By	Shane Francis (BuzzBumbleBee)
Task ID	71383
Type	Bug Report
Project	Arch Linux
Category	Packages: Extra
Version	None
OS	All
Opened	2021-06-28 13:18:51 UTC
Status	Assigned
Assignee	Anatol Pomozov (anatolik)
Assignee	David Runge (dvzrv)

Details

Other distros supply EFI variable files that include a default secure boot keychain, for example :

Ubuntu : OVMF_VARS.fd OVMF_VARS.ms.fd (MS secure boot)

Fedora : OVMF_VARS.fd OVMF_VARS.secboot.fd

Currently on Arch this means that anyone making use of the "OVMF_CODE.secboot.fd" loader will need to manually import / setup the secure boot keychain.

Current Arch edk2-ovmf file list for x64 :

usr/share/edk2-ovmf/x64/OVMF.fd usr/share/edk2-ovmf/x64/OVMF_CODE.fd usr/share/edk2-ovmf/x64/OVMF_CODE.secboot.fd usr/share/edk2-ovmf/x64/OVMF_VARS.fd