From a64ef966534f8dba6af889ba4bfce15691bfc85b Mon Sep 17 00:00:00 2001 From: Nippy Date: Sun, 1 Nov 2026 18:13:54 +0100 Subject: új telepítő MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../secureboot/installed/raveos-sb-resume.service | 7 --- .../secureboot/installed/raveos-sb-sign-local.sh | 50 ---------------------- .../secureboot/installed/zz-raveos-sb-sign.hook | 17 -------- 3 files changed, 74 deletions(-) delete mode 100644 raveos-app-installer/secureboot/installed/raveos-sb-resume.service delete mode 100755 raveos-app-installer/secureboot/installed/raveos-sb-sign-local.sh delete mode 100644 raveos-app-installer/secureboot/installed/zz-raveos-sb-sign.hook (limited to 'raveos-app-installer/secureboot/installed') diff --git a/raveos-app-installer/secureboot/installed/raveos-sb-resume.service b/raveos-app-installer/secureboot/installed/raveos-sb-resume.service deleted file mode 100644 index d6005b6..0000000 --- a/raveos-app-installer/secureboot/installed/raveos-sb-resume.service +++ /dev/null @@ -1,7 +0,0 @@ -[Unit] -Description=RaveOS Secure Boot beallitas befejezese -[Service] -Type=oneshot -ExecStart=/usr/bin/raveos-secureboot-setup --resume -[Install] -WantedBy=multi-user.target diff --git a/raveos-app-installer/secureboot/installed/raveos-sb-sign-local.sh b/raveos-app-installer/secureboot/installed/raveos-sb-sign-local.sh deleted file mode 100755 index af20118..0000000 --- a/raveos-app-installer/secureboot/installed/raveos-sb-sign-local.sh +++ /dev/null @@ -1,50 +0,0 @@ -#!/bin/bash -set -u - -KEY=/etc/raveos/secureboot/machine.key -CERT=/etc/raveos/secureboot/machine.pem -SIGNFILE=/usr/local/bin/raveos-sign-file -[[ -f "$KEY" && -f "$CERT" ]] || exit 0 -command -v sbsign >/dev/null 2>&1 || exit 0 - -signed=0 - -for f in /boot/vmlinuz-* /boot/memtest86+/memtest.efi /boot/EFI/systemd/systemd-bootx64.efi /boot/EFI/BOOT/BOOTX64.EFI; do - [[ -f "$f" ]] || continue - case "$f" in *.signed) continue ;; esac - if sbverify --cert "$CERT" "$f" >/dev/null 2>&1; then - continue - fi - if sbsign --key "$KEY" --cert "$CERT" --output "${f}.signed" "$f" 2>/dev/null; then - mv "${f}.signed" "$f" - signed=$((signed + 1)) - fi -done - -if [[ -x "$SIGNFILE" ]]; then - for d in /usr/lib/modules/*/; do - for sub in extramodules updates/dkms extras; do - [[ -d "${d}${sub}" ]] || continue - while IFS= read -r -d '' f; do - modinfo -F signer "$f" 2>/dev/null | grep -q "RaveOS Machine Key" && continue - case "$f" in - *.ko) - "$SIGNFILE" sha512 "$KEY" "$CERT" "$f" >/dev/null 2>&1 && signed=$((signed + 1)) - ;; - *.ko.zst) - tmp="$(mktemp -d)" - if zstd -q -d -c "$f" > "$tmp/m.ko" 2>/dev/null && - "$SIGNFILE" sha512 "$KEY" "$CERT" "$tmp/m.ko" >/dev/null 2>&1 && - zstd -q -f -o "$f" "$tmp/m.ko" 2>/dev/null; then - signed=$((signed + 1)) - fi - rm -rf "$tmp" - ;; - esac - done < <(find "${d}${sub}" -type f \( -name '*.ko' -o -name '*.ko.zst' \) -print0 2>/dev/null) - done - done -fi - -[ "$signed" -gt 0 ] && echo "[raveos-sb] $signed fajl ujraalairva" -exit 0 diff --git a/raveos-app-installer/secureboot/installed/zz-raveos-sb-sign.hook b/raveos-app-installer/secureboot/installed/zz-raveos-sb-sign.hook deleted file mode 100644 index cf64ee2..0000000 --- a/raveos-app-installer/secureboot/installed/zz-raveos-sb-sign.hook +++ /dev/null @@ -1,17 +0,0 @@ -[Trigger] -Operation = Install -Operation = Upgrade -Type = Package -Target = linux-cachyos -Target = linux -Target = nvidia -Target = nvidia-dkms -Target = nvidia-open -Target = nvidia-open-dkms -Target = systemd -Target = dkms - -[Action] -Description = RaveOS Secure Boot: bootlanc + out-of-tree modulok ujraalairasa... -When = PostTransaction -Exec = /usr/local/bin/raveos-sb-sign-local.sh -- cgit v1.3