diff options
| author | Nippy <nippy@Nippy-Mac-mini.local> | 2026-11-01 18:13:54 +0100 |
|---|---|---|
| committer | Nippy <nippy@Nippy-Mac-mini.local> | 2026-11-01 18:13:54 +0100 |
| commit | a64ef966534f8dba6af889ba4bfce15691bfc85b (patch) | |
| tree | b30f284d05b80fa115569ab220deae13797fad6f /raveos-app-installer/secureboot/installed | |
| parent | 919f977b40016f588b0c8532c8a57f6035056b95 (diff) | |
| download | RaveOS-PKGBUILD-a64ef966534f8dba6af889ba4bfce15691bfc85b.tar.gz RaveOS-PKGBUILD-a64ef966534f8dba6af889ba4bfce15691bfc85b.zip | |
új telepítő
Diffstat (limited to 'raveos-app-installer/secureboot/installed')
3 files changed, 0 insertions, 74 deletions
diff --git a/raveos-app-installer/secureboot/installed/raveos-sb-resume.service b/raveos-app-installer/secureboot/installed/raveos-sb-resume.service deleted file mode 100644 index d6005b6..0000000 --- a/raveos-app-installer/secureboot/installed/raveos-sb-resume.service +++ /dev/null @@ -1,7 +0,0 @@ -[Unit] -Description=RaveOS Secure Boot beallitas befejezese -[Service] -Type=oneshot -ExecStart=/usr/bin/raveos-secureboot-setup --resume -[Install] -WantedBy=multi-user.target diff --git a/raveos-app-installer/secureboot/installed/raveos-sb-sign-local.sh b/raveos-app-installer/secureboot/installed/raveos-sb-sign-local.sh deleted file mode 100755 index af20118..0000000 --- a/raveos-app-installer/secureboot/installed/raveos-sb-sign-local.sh +++ /dev/null @@ -1,50 +0,0 @@ -#!/bin/bash -set -u - -KEY=/etc/raveos/secureboot/machine.key -CERT=/etc/raveos/secureboot/machine.pem -SIGNFILE=/usr/local/bin/raveos-sign-file -[[ -f "$KEY" && -f "$CERT" ]] || exit 0 -command -v sbsign >/dev/null 2>&1 || exit 0 - -signed=0 - -for f in /boot/vmlinuz-* /boot/memtest86+/memtest.efi /boot/EFI/systemd/systemd-bootx64.efi /boot/EFI/BOOT/BOOTX64.EFI; do - [[ -f "$f" ]] || continue - case "$f" in *.signed) continue ;; esac - if sbverify --cert "$CERT" "$f" >/dev/null 2>&1; then - continue - fi - if sbsign --key "$KEY" --cert "$CERT" --output "${f}.signed" "$f" 2>/dev/null; then - mv "${f}.signed" "$f" - signed=$((signed + 1)) - fi -done - -if [[ -x "$SIGNFILE" ]]; then - for d in /usr/lib/modules/*/; do - for sub in extramodules updates/dkms extras; do - [[ -d "${d}${sub}" ]] || continue - while IFS= read -r -d '' f; do - modinfo -F signer "$f" 2>/dev/null | grep -q "RaveOS Machine Key" && continue - case "$f" in - *.ko) - "$SIGNFILE" sha512 "$KEY" "$CERT" "$f" >/dev/null 2>&1 && signed=$((signed + 1)) - ;; - *.ko.zst) - tmp="$(mktemp -d)" - if zstd -q -d -c "$f" > "$tmp/m.ko" 2>/dev/null && - "$SIGNFILE" sha512 "$KEY" "$CERT" "$tmp/m.ko" >/dev/null 2>&1 && - zstd -q -f -o "$f" "$tmp/m.ko" 2>/dev/null; then - signed=$((signed + 1)) - fi - rm -rf "$tmp" - ;; - esac - done < <(find "${d}${sub}" -type f \( -name '*.ko' -o -name '*.ko.zst' \) -print0 2>/dev/null) - done - done -fi - -[ "$signed" -gt 0 ] && echo "[raveos-sb] $signed fajl ujraalairva" -exit 0 diff --git a/raveos-app-installer/secureboot/installed/zz-raveos-sb-sign.hook b/raveos-app-installer/secureboot/installed/zz-raveos-sb-sign.hook deleted file mode 100644 index cf64ee2..0000000 --- a/raveos-app-installer/secureboot/installed/zz-raveos-sb-sign.hook +++ /dev/null @@ -1,17 +0,0 @@ -[Trigger] -Operation = Install -Operation = Upgrade -Type = Package -Target = linux-cachyos -Target = linux -Target = nvidia -Target = nvidia-dkms -Target = nvidia-open -Target = nvidia-open-dkms -Target = systemd -Target = dkms - -[Action] -Description = RaveOS Secure Boot: bootlanc + out-of-tree modulok ujraalairasa... -When = PostTransaction -Exec = /usr/local/bin/raveos-sb-sign-local.sh |