IN=$2
OUT=$3
+DEBIAN_UUID="fa31923d-6047-40bf-81d0-e63edefcf194"
+
# This needs to be fixed to make builds reproducible, of course. If
# you're deriving from Debian, please generate your own.
-DEBIAN_UUID="fa31923d-6047-40bf-81d0-e63edefcf194"
+UUID="$DEBIAN_UUID"
rm -f $OUT
if [ -x /usr/bin/efisiglist ] ; then
for HASH in $(grep -E "[[:xdigit:]]{32} $ARCH" < $IN | \
awk '{print $1}' | sort | uniq); do
echo " Adding $HASH to dbx list"
- efisecdb -g "$DEBIAN_UUID" -a -t sha256 -h $HASH $INTMP -o $OUT
+ efisecdb -g "$UUID" -a -t sha256 -h $HASH $INTMP -o $OUT
# Subsequent passes need to read the previous output as input
# each time, and won't overwrite the output.