2020-05-01 16:19:34 +02:00
|
|
|
# securebootsign
|
|
|
|
|
|
2021-02-02 21:58:16 +01:00
|
|
|
# Create new keys for secureboot
|
|
|
|
|
https://wiki.archlinux.org/index.php/Unified_Extensible_Firmware_Interface/Secure_Boot#Creating_keys
|
|
|
|
|
|
|
|
|
|
# Create new combined signed EFI image
|
|
|
|
|
./signkernels.sh
|
|
|
|
|
|
|
|
|
|
# Remount efivars writable
|
|
|
|
|
moutn -o remount,rw /sys/firmware/efi/efivars
|
|
|
|
|
|
|
|
|
|
# Create boot entry
|
|
|
|
|
efibootmgr --create /dev/sda --part 1 --label ArchLinux_combined --loader EFILinuxvmlinuz-linux.efi --verbose
|
|
|
|
|
|
|
|
|
|
# sign automatically after updates
|
|
|
|
|
cp 96-signkernels.hook /etc/pacman.d/hooks/
|
