summarylogtreecommitdiffstats
path: root/secureboot-helper-edk2.hook
diff options
context:
space:
mode:
Diffstat (limited to 'secureboot-helper-edk2.hook')
-rw-r--r--secureboot-helper-edk2.hook12
1 files changed, 12 insertions, 0 deletions
diff --git a/secureboot-helper-edk2.hook b/secureboot-helper-edk2.hook
new file mode 100644
index 000000000000..b297e744334d
--- /dev/null
+++ b/secureboot-helper-edk2.hook
@@ -0,0 +1,12 @@
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Package
+Target = edk2-shell
+
+[Action]
+Description = Signing EDK2 EFI Shell Binary for SecureBoot
+When = PostTransaction
+Exec = /usr/bin/sbsign --key /%SIGN_LOCATION%/db/db.key --cert /%SIGN_LOCATION%/db/db.crt --output "/usr/lib/systemd/boot/efi/systemd-bootx64.efi" "/usr/share/edk2-shell/x64/Shell_Full.efi"
+Depends = sbsigntools
+Depends = grep