debian/rules

   1 #!/usr/bin/make -f
   2
   3 # Other vendors, add your certs here.  No sense in using
   4 # dpkg-vendor --derives-from, because only Canonical-generated binaries will
   5 # be signed with this key; so if you are building your own shim binary you
   6 # should be building the other binaries also.
   7 ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes)
   8         cert=debian/canonical-uefi-ca.der
   9         distributor=ubuntu
  10 else
  11         cert=debian/debian-uefi-ca.der
  12         distributor=debian
  13 endif
  14
  15 ifeq ($(DEB_HOST_ARCH),amd64)
  16 export EFI_ARCH := x64
  17 else ($(DEB_HOST_ARCH),arm64)
  18 export EFI_ARCH := aa64
  19 endif
  20
  21 COMMON_OPTIONS = \
  22         MAKELEVEL=0 \
  23         EFI_PATH=/usr/lib \
  24         ENABLE_SHIM_CERT=1 \
  25         ENABLE_SBSIGN=1 \
  26         VENDOR_CERT_FILE=$(cert) \
  27         EFIDIR=$(distributor) \
  28         $(NULL)
  29
  30 %:
  31         dh $@ --parallel
  32
  33 override_dh_auto_clean:
  34         dh_auto_clean -- MAKELEVEL=0
  35
  36 override_dh_auto_build:
  37         dh_auto_build -- $(COMMON_OPTIONS)
  38
  39 override_dh_auto_install:
  40         dh_auto_install --destdir=debian/tmp -- $(COMMON_OPTIONS)
  41
  42 override_dh_fixperms:
  43         dh_fixperms
  44         chmod a-x debian/shim/usr/lib/shim/shim$(EFI_ARCH).efi