~ubuntu-core-dev/shim/+git/shim-signed:xenial

Last commit made on 2021-07-16
Get this branch:
git clone -b xenial https://git.launchpad.net/~ubuntu-core-dev/shim/+git/shim-signed
Members of Ubuntu Core Development Team can upload to this branch. Log in for directions.

Branch merges

Branch information

Recent commits

aafa80b... by Julian Andres Klode

releasing package shim-signed version 1.33.1~16.04.10

20c4b55... by Julian Andres Klode

Update to shim 15.4-0ubuntu7

 * Update to shim 15.4-0ubuntu7:
   - Fix load option parsing, and thus fwupd execution (LP: #1929471) (PR #379)
   - Fix occasional crashes in _relocate() on arm64 (LP: #1928010) (PR #383)
   - Fix accidental deletion of RT variables (LP: #1934506) (PR #387)
   - mok: relax the maximum variable size check (LP: #1934780) (PR #369)
-- Julian Andres Klode <email address hidden> Thu, 15 Jul 2021 10:59:07 +0200

b29d789... by Julian Andres Klode

releasing package shim-signed version 1.33.1~16.04.9

8d5b2c8... by Julian Andres Klode

Disable sbverify for fbx64.efi and mmx64.efi

d935915... by Julian Andres Klode

Clean up debhelper log file accidentally imported into git during 16.04.7 import.

3d70aae... by Julian Andres Klode

Do not build a dual-signed shim (fixing regression from ~16.04.7)

902aafa... by Julian Andres Klode

releasing package shim-signed version 1.33.1~16.04.8

c1fede2... by Julian Andres Klode

Update to shim 15.4-0ubuntu5:

* Update to shim 15.4-0ubuntu5:
  - Stop addending vendor dbx to MokListXRT during MokListX mirroring. This
    is causing systems to run out of EFI storage space, or just hang up
    when trying to write it (LP: #1924605) (LP: #1928434)
  - Further relax the check for variable mirroring on non-secureboot systems
    avoiding boot failures on out of space conditons (pull request #372)
  - Don't unhook ExitBootServices() when EBS protection is disabled
    (LP: #1931136) (pull request #378)

573fda1... by Julian Andres Klode

debian/*.postinst: Unconditionally call grub-install with --force-extra-removable, so that the \EFI\BOOT removable path as used in cloud images receives the updates. LP: #1930742.

Changelog message stolen from vorlon :D

4afb7ed... by Steve Langasek

Import Debian version 1.33.1~16.04.7

shim-signed (1.33.1~16.04.7) xenial; urgency=medium
.
  * New upstream release 15.4. LP: #1921134
  * Update packaging to pull fb and mm from shim-signed package as in
    later releases, dropping the runtime dependency on shim.
  * Add download-signed script from linux-signed package
  * Add a versioned dependency on the mokutil that introduces --timeout, and
    call mokutil --timeout -1 so that users don't end up with broken systems
    by missing MokManager on reboot after install. LP: #1856422.
  * Add versioned dependencies on grub-efi-amd64-signed and grub2-common,
    to ensure we have SBAT-compatible grub.efi and grub 2.04-compatible
    grub-install present when we are installing new shim to the ESP.
  * Include reworked Makefile from devel to better assert the integrity of
    the executables.