debian/rules

   1 #!/usr/bin/make -f
   2
   3 # Other vendors, add your certs here.  No sense in using
   4 # dpkg-vendor --derives-from, because only Canonical-generated binaries will
   5 # be signed with this key; so if you are building your own shim binary you
   6 # should be building the other binaries also.
   7 ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes)
   8         cert=debian/canonical-uefi-ca.der
   9 else
  10         cert=debian/debian-uefi-ca.der
  11 endif
  12
  13 ifeq ($(DEB_HOST_ARCH),amd64)
  14 export EFI_ARCH := x64
  15 endif
  16
  17 %:
  18         dh $@ --parallel
  19
  20 override_dh_auto_clean:
  21         dh_auto_clean -- MAKELEVEL=0
  22 override_dh_auto_build:
  23         dh_auto_build -- \
  24                 MAKELEVEL=0 \
  25                 EFI_PATH=/usr/lib \
  26                 ENABLE_SHIM_CERT=1 \
  27                 ENABLE_SBSIGN=1 \
  28                 VENDOR_CERT_FILE=$(cert)
  29
  30 override_dh_fixperms:
  31         dh_fixperms
  32         chmod a-x debian/shim/usr/lib/shim/shim$(EFI_ARCH).efi