Add UKI signing to build script

2023-06-30 13:20:16 +02:00 · 2023-06-30 13:20:16 +02:00 · 7b6d5db1b2
commit 7b6d5db1b2
parent eace144e90
1 changed files with 3 additions and 1 deletions
--- a/build-uki.sh
+++ b/build-uki.sh
@ -17,6 +17,8 @@ $sudo objcopy \
  --add-section .initrd="$path_to_vmlinuz_link/initrd.img" --change-section-vma .initrd=0x3000000 \
  /usr/lib/systemd/boot/efi/linuxx64.efi.stub $path_to_uki

-# TODO Sign UKI
+# Sign UKI
+$sudo sbsign --key /etc/secureboot/keys/db/db.key --cert /etc/secureboot/keys/db/db.crt --output $path_to_uki \
+  $path_to_uki

 exit 0