Verified Commit 53a3ad25 authored by nl6720's avatar nl6720
Browse files

mkarchiso: add SBAT metadata to grub-mkstandalone created EFI binaries

Even though archiso created ISOs do not support Secure Boot, having SBAT would allow users to more easily repack the files in the ISO to add a signed shim.

Fixes #174
parent 91b48f82
......@@ -544,6 +544,7 @@ _make_bootmode_uefi-ia32.grub.esp() {
--modules="part_gpt part_msdos fat iso9660" \
--locales="en@quot" \
--themes="" \
--sbat=/usr/share/grub/sbat.csv \
-o "${work_dir}/BOOTIA32.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg"
# Add GRUB to the list of files used to calculate the required FAT image size.
efiboot_files+=("${work_dir}/BOOTIA32.EFI"
......@@ -619,6 +620,7 @@ _make_bootmode_uefi-x64.grub.esp() {
--modules="part_gpt part_msdos fat iso9660" \
--locales="en@quot" \
--themes="" \
--sbat=/usr/share/grub/sbat.csv \
-o "${work_dir}/BOOTx64.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg"
# Add GRUB to the list of files used to calculate the required FAT image size.
efiboot_files+=("${work_dir}/BOOTx64.EFI"
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment