From 376a549acaa0bb2856297ab46f2d7a6304dcbbc4 Mon Sep 17 00:00:00 2001
From: Freya Murphy <freya@freyacat.org>
Date: Tue, 9 Apr 2024 18:18:55 -0400
Subject: a

---
 .root/etc/initcpio/post/uki-sbsign | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100755 .root/etc/initcpio/post/uki-sbsign

(limited to '.root/etc/initcpio')

diff --git a/.root/etc/initcpio/post/uki-sbsign b/.root/etc/initcpio/post/uki-sbsign
new file mode 100755
index 0000000..eb34cd4
--- /dev/null
+++ b/.root/etc/initcpio/post/uki-sbsign
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+uki="$3"
+[[ -n "$uki" ]] || exit 0
+
+keypairs=(/usr/share/secureboot/keys/db/db.key /usr/share/secureboot/keys/db/db.pem)
+
+for (( i=0; i<${#keypairs[@]}; i+=2 )); do
+	key="${keypairs[$i]}"
+	cert="${keypairs[(( i + 1))]}"
+	if ! sbverify --cert "$cert" "$uki" &>/dev/null; then
+		sbsign --key "$key" --cert "$cert" --output "$uki" "$uki"
+	fi
+done
+
-- 
cgit v1.2.3-freya