Updated to 0.7.3
I took ownership to enable signing OC with arch-managed SecureBoot keys. Here's a pacman hook to sign, obviously change your key location:
[Trigger]
Operation = Install
Operation = Upgrade
Type = Package
Target = opencore-efi
[Action]
Description = Signing OpenCore with Machine Owner Key for Secure Boot
When = PostTransaction
Exec = /usr/bin/find /boot/EFI/OC -maxdepth 2 -name '*.efi' -exec /usr/bin/sh -c 'if ! /usr/bin/sbverify --list {} 2>/dev/null | /usr/bin/grep -q "signature certificates"; then /usr/bin/sbsign --key /etc/efi-keys/MOK.key --cert /etc/efi-keys/MOK.crt --output {} {}; fi' ;
Depends = sbsigntools
Depends = grep
Pinned Comments
sovanyio commented on 2021-09-24 21:08 (UTC) (edited on 2021-09-25 20:20 (UTC) by sovanyio)
Updated to 0.7.3
I took ownership to enable signing OC with arch-managed SecureBoot keys. Here's a pacman hook to sign, obviously change your key location: