#!/usr/bin/make -f

# Other vendors, add your certs here.  No sense in using
# dpkg-vendor --derives-from, because only Canonical-generated binaries will
# be signed with this key; so if you are building your own shim binary you
# should be building the other binaries also.
ifeq ($(shell dpkg-vendor --is ubuntu && echo yes),yes)
	cert=debian/canonical-uefi-ca.der
else
	cert=debian/debian-uefi-ca.der
endif

ifeq ($(DEB_HOST_ARCH),amd64)
export EFI_ARCH := x64
endif

%:
	dh $@ --parallel

override_dh_auto_clean:
	dh_auto_clean -- MAKELEVEL=0
override_dh_auto_build:
	dh_auto_build -- \
		MAKELEVEL=0 \
		EFI_PATH=/usr/lib \
		ENABLE_SHIM_CERT=1 \
		ENABLE_SBSIGN=1 \
		VENDOR_CERT_FILE=$(cert)

override_dh_fixperms:
	dh_fixperms
	chmod a-x debian/shim/usr/lib/shim/shim$(EFI_ARCH).efi