Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for gpg2.1, ubuntu 18.04 #1

Open
wants to merge 15 commits into
base: master
Choose a base branch
from
Open

Add support for gpg2.1, ubuntu 18.04 #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
dacc0f4
Add support for gpg2.x (Ubuntu 18.04)
donbowman Feb 21, 2018
6699414
add sha256/sha512 to grub
donbowman Feb 22, 2018
302c509
fix typo on pinentry
donbowman Feb 22, 2018
a0ef53e
fix typo on rm
donbowman Feb 22, 2018
6fa100c
Only check .sig if signed kernel is installed
donbowman Feb 23, 2018
077ad13
Remove custom passphrase entry, let gpg pinentry do it (so
donbowman Feb 24, 2018
3babf39
More work-arounds for pinentry vs debconf lack of stdin
donbowman Feb 25, 2018
6e3df74
add luks/cryptodisk to list (to allow /boot to be on encrypted)
donbowman Feb 25, 2018
891e2bc
feat: cache to avoid rebuild of all grub modules
donbowman Dec 23, 2019
2e7559c
feat: invalidate cache if /boot/* changes or --sign-all
donbowman Jan 9, 2020
534b862
feat: check all .sig files for validity, resign if not
donbowman Jan 13, 2020
25901bc
fix: remove .sig from SECURE_BOOT_KERNEL_PATH if present
donbowman Jan 13, 2020
0420ce9
fix: swap -e and +e in helper function
klarose Feb 3, 2020
a6b0138
Merge pull request #2 from klarose/fix-early-exit
donbowman Feb 3, 2020
640ac90
fix: incorporate changelog for pull request #2
donbowman Feb 3, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ Build instructions

2. Build the package:

dpkg-buildpackage
dpkg-buildpackage --no-sign

Install instructions
--------------------
Expand Down
Empty file added data/etc/initramfs/dive.log
View file
Open in desktop
Empty file.
9 changes: 8 additions & 1 deletion data/etc/initramfs/post-update.d/zz-ubuntu-secure-boot
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,16 @@

set -e

log() {
logger -t zz-ubuntu-secure-boot "$*"
>&2 echo "$*"
}

log "update initramfs hook: $*"

if [ -z "$2" ] ; then
# Required parameter (path to initramfs file) is missing.
echo "Required parameter to zz-ubuntu-secure-boot initramfs " \
log "Required parameter to zz-ubuntu-secure-boot initramfs " \
"hook was missing."
exit 1
fi
Expand Down
6 changes: 6 additions & 0 deletions data/etc/ubuntu-secure-boot/keys/gpg-agent.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
pinentry-program /usr/bin/pinentry-curses
allow-loopback-pinentry
allow-preset-passphrase
default-cache-ttl 1800
max-cache-ttl 1800

Loading