Changes

Jump to: navigation, search

Linux: Secure Boot

61 bytes added, 07:28, 6 June 2018
/* Prepare signed grub.cfg kernel and initrd on the EFI partition */
== Prepare signed grub.cfg kernel and initrd on the EFI partition ==
* Mount your EFI partition to /boot/efiif not mounted yet [ "$(mount | grep /boot/efi)" ] || mount /dev/disk/by-uuid/$EFI_UUID /boot/efi
* Create grub.cfg on the EFI partition
KERNEL_VERSION=$(uname -r)
}
EOF
### as result grub.cfg will be created, please review it
cp /boot/vmlinuz-$KERNEL_VERSION /boot/efi/
cp /boot/initrd.img-$KERNEL_VERSION /boot/efi/
* Sign grub.cfg, kernel and initrd with your GPG key
gpg --default-key "$GPG_KEY" --detach-sign /boot/efi/vmlinuz-$KERNEL_VERSION
gpg --default-key "$GPG_KEY" --detach-sign /boot/efi/initrd.img-$KERNEL_VERSION
### as result signatures of these files will be created
425
edits