From 772056893a23bada6d56ceb235d3e8ceaa663799 Mon Sep 17 00:00:00 2001 From: Kyle K Date: Sat, 18 Dec 2021 03:11:36 -0600 Subject: add support for signing kernel, modules, and grubx64.efi for Secure Boot --- uefi/mod-sign.sh | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100755 uefi/mod-sign.sh (limited to 'uefi/mod-sign.sh') diff --git a/uefi/mod-sign.sh b/uefi/mod-sign.sh new file mode 100755 index 0000000..f110b95 --- /dev/null +++ b/uefi/mod-sign.sh @@ -0,0 +1,19 @@ +#! /bin/sh + +MODSECKEY=$1 +MODPUBKEY=$2 +moddir=$3 + +modules=$(find "$moddir" -type f -name '*.ko') + +NPROC=$(nproc) +[ -z "$NPROC" ] && NPROC=1 + +echo "$modules" | xargs -r -n16 -P $NPROC sh -c " +for mod; do + ./sign-file sha256 $MODSECKEY $MODPUBKEY \$mod + rm -f \$mod.sig \$mod.dig +done +" DUMMYARG0 # xargs appends ARG1 ARG2..., which go into $mod in for loop. + +exit 0 -- cgit v1.2.3