Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
path: root/archiso
diff options
context:
space:
mode:
authornl6720 <nl6720@gmail.com>2022-06-18 09:56:24 +0300
committernl6720 <nl6720@gmail.com>2022-06-18 09:59:19 +0300
commit53a3ad25af78d6399d9b605a037878ccd3179320 (patch)
treeb6791596fde9815692ca4dee588ec81c41ef6f50 /archiso
parent91b48f82f37f812e605771d42a812d7462f7cca5 (diff)
mkarchiso: add SBAT metadata to grub-mkstandalone created EFI binaries
Even though archiso created ISOs do not support Secure Boot, having SBAT would allow users to more easily repack the files in the ISO to add a signed shim. Fixes #174
Diffstat (limited to 'archiso')
-rwxr-xr-xarchiso/mkarchiso2
1 files changed, 2 insertions, 0 deletions
diff --git a/archiso/mkarchiso b/archiso/mkarchiso
index bb084f7..bb0524c 100755
--- a/archiso/mkarchiso
+++ b/archiso/mkarchiso
@@ -544,6 +544,7 @@ _make_bootmode_uefi-ia32.grub.esp() {
--modules="part_gpt part_msdos fat iso9660" \
--locales="en@quot" \
--themes="" \
+ --sbat=/usr/share/grub/sbat.csv \
-o "${work_dir}/BOOTIA32.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg"
# Add GRUB to the list of files used to calculate the required FAT image size.
efiboot_files+=("${work_dir}/BOOTIA32.EFI"
@@ -619,6 +620,7 @@ _make_bootmode_uefi-x64.grub.esp() {
--modules="part_gpt part_msdos fat iso9660" \
--locales="en@quot" \
--themes="" \
+ --sbat=/usr/share/grub/sbat.csv \
-o "${work_dir}/BOOTx64.EFI" "boot/grub/grub.cfg=${work_dir}/grub-embed.cfg"
# Add GRUB to the list of files used to calculate the required FAT image size.
efiboot_files+=("${work_dir}/BOOTx64.EFI"