From e6e3dafa86c29e94e9aaba8d965e294dc5e59819 Mon Sep 17 00:00:00 2001 From: James Le Cuirot Date: Mon, 2 Dec 2024 10:51:14 +0000 Subject: [PATCH] grub_install.sh: Temporarily undo copying the officially signed shim We previously did the AKV signing in the image job but temporarily nobbled that code path while we completed the shim review. Now the AKV signing has been split out into a separate job that will only be invoked once changes to the jenkins-os repo have been merged. The only thing we now need to nobble here is copying the signed shim. In the meantime, we copy the unsigned shim instead. Revert this commit once the shim review is complete. --- build_library/grub_install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build_library/grub_install.sh b/build_library/grub_install.sh index 61e2fc6fb83..43dfd606e72 100755 --- a/build_library/grub_install.sh +++ b/build_library/grub_install.sh @@ -208,7 +208,7 @@ case "${FLAGS_target}" in # Official build: Copy signed shim and mm for signing later. sudo cp "${BOARD_ROOT}/usr/lib/shim/mm${EFI_ARCH}.efi" \ "${ESP_DIR}/EFI/boot/mm${EFI_ARCH}.efi" - sudo cp "${BOARD_ROOT}/usr/lib/shim/shim${EFI_ARCH}.efi.signed" \ + sudo cp "${BOARD_ROOT}/usr/lib/shim/shim${EFI_ARCH}.efi" \ "${ESP_DIR}/EFI/boot/boot${EFI_ARCH}.efi" fi