sys-boot/shim: use secureboot.eclass to sign mokmanager

Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
This commit is contained in:
Andrew Ammerlaan
2023-07-12 09:32:05 +02:00
parent a5f2857de8
commit 62abff9d0e

View File

@@ -1,9 +1,9 @@
# Copyright 1999-2022 Gentoo Authors
# Copyright 1999-2023 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
inherit rpm
inherit rpm secureboot
DESCRIPTION="Fedora's signed UEFI shim"
HOMEPAGE="https://src.fedoraproject.org/rpms/shim"
@@ -23,4 +23,8 @@ src_install() {
insinto /usr/share/${PN}
doins BOOT/BOOT*.EFI
doins fedora/mm*.efi
# Shim is already signed with Microsoft keys, but MokManager still needs
# signing with our key otherwise we have to enrol the Fedora key in Mok list
secureboot_auto_sign --in-place
}