From 772056893a23bada6d56ceb235d3e8ceaa663799 Mon Sep 17 00:00:00 2001
From: Kyle K <kylek389@gmail.com>
Date: Sat, 18 Dec 2021 03:11:36 -0600
Subject: add support for signing kernel, modules, and grubx64.efi for Secure
 Boot

---
 uefi/mod-sign.sh | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100755 uefi/mod-sign.sh

(limited to 'uefi/mod-sign.sh')

diff --git a/uefi/mod-sign.sh b/uefi/mod-sign.sh
new file mode 100755
index 0000000..f110b95
--- /dev/null
+++ b/uefi/mod-sign.sh
@@ -0,0 +1,19 @@
+#! /bin/sh
+
+MODSECKEY=$1
+MODPUBKEY=$2
+moddir=$3
+
+modules=$(find "$moddir" -type f -name '*.ko')
+
+NPROC=$(nproc)
+[ -z "$NPROC" ] && NPROC=1
+
+echo "$modules" | xargs -r -n16 -P $NPROC sh -c "
+for mod; do
+    ./sign-file sha256 $MODSECKEY $MODPUBKEY \$mod
+    rm -f \$mod.sig \$mod.dig
+done
+" DUMMYARG0   # xargs appends ARG1 ARG2..., which go into $mod in for loop.
+
+exit 0
-- 
cgit v1.2.3