035518ff69
UEFI: add support for Secure Boot on amd64 and arm64
...
Support for UEFI Secure Boot is modelled after how it currently works
in Ubuntu and on how it is going to work on Debian.
A minimal bootloader, shim, is used as the first-stage and it then
loads grub. Both have to be signed.
shim-signed is already available in Debian so the filenames are
already established, and the grub2 repository and packaging is common
between the 2 distros so we can already be reasonably sure of what it
is going to be.
So if both are available, copy /usr/lib/shim/shim[x64|aa64].efi.signed
as boot[x64|aa64].efi so that UEFI loads it first, and copy
/usr/lib/grub/[x86_64|arm64]-efi-signed/grub[x64|aa64].efi.signed as
grub[x64|aa64].efi.
This grub2 EFI monolithic image is currently hard-coded in grub2's
repository to look for a config file in efi/debian, so make a copy
of the previously added minimal grub.cfg that loads the real one in
that directory in both the fat32 and ISO 9660 partitions.
The new option --uefi-secure-boot can be set to auto (default,
enable or disable.
In auto, the lack of the signed EFI binaries is intentionally left as a
soft failure - live-build will simply fallback to using the locally
generated non-signed grub2 monolithic EFI binary as the only
bootloader. Given the difficulties surrounding the Secure Boot
signing infrastructure this approach gives the most flexibility and
makes sure things will "just work" once the packages are available,
without the need to change anything in the configuration.
This will also greatly help downstream distributions and users who
want to do self-signing.
The enable or disable options work as expected.
Closes : #821084
2018-03-09 20:57:54 +00:00
37840d9cb2
Fix version strings in manual pages
2017-08-29 15:07:32 +02:00
c5a334deb8
Update PREPARER data for consistency
2017-08-29 15:06:35 +02:00
3f909bf486
Drop all references to live-systems.org and update copyright file
...
Also fix the version string in the manual pages.
Closes : #859290
2017-08-29 14:12:33 +02:00
10a5580c3a
Fix english mistakes in lb_config(1)
2016-12-16 10:03:45 +01:00
75aa6dec5b
Minor updates to lb_config and its manual page
...
* Update the manual page with the missiong --bootappend-live-failsafe
option.
* Keep supporting the former --bootloader (without s).
2016-12-16 10:00:36 +01:00
53eab12a24
Fix lintian warning about bad whatis entry
2016-11-28 23:23:24 +01:00
d8ca2041ad
Get rid of useless bootstrap_archive-keys script
...
Closes : #773775
2016-11-28 21:36:57 +01:00
6c6f34d92d
Manual pages updates
...
Thanks to jnqnfe for the patch.
Closes : #774730
2016-11-28 20:58:19 +01:00
164f23368e
Support “lb config --debootstrap-script <script>”
...
This option lets you use an alternate bootstrap script when running
debootstrap. Thanks to Sjoerd Simons <sjoerd@debian.org> for the initial
patch.
Closes : #790033
2016-11-28 20:58:19 +01:00
7becd08e4d
Added EFI support by the means of grub-efi
...
This work is based on debian-cd team work and uses,
as much as possible, the same mkisofs options
than the Debian Installation CD disk does.
It assumes that /boot/grub/grub.cfg (and other design items)
is generated by: binary_loopback_cfg .
It relies on efi-image and grub-cpmodules being setup
as build scripts on live-build package.
In the future event of these two files being moved
to a binary package (they are originally from:
src: live-installer) the binary_grub-efi script would have
to be rewritten to take the new paths into account.
2016-07-31 15:09:13 +02:00
1f8975cc60
Remove 586 flavour for i386 architecture. ( Closes : #807972 )
2015-12-15 14:01:29 +00:00
89040368a8
[l10n] Update French translation for manpages.
2015-12-15 14:00:26 +00:00
4789428101
Releasing debian version 5.0~a11-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-08-23 10:58:02 +02:00
44ab759038
Releasing debian version 5.0~a10-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-08-10 19:36:25 +02:00
06fb96a10c
Releasing debian version 5.0~a9-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-06-06 06:40:39 +02:00
3c303e7f53
Releasing debian version 5.0~a8-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-05-19 06:27:05 +02:00
66d8b61303
Releasing debian version 5.0~a7-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-05-14 13:16:48 +02:00
9280926b11
Switching from http.debian.net to httpredir.debian.org as default binary mirror.
2015-05-10 19:10:28 +02:00
ffb463f775
Releasing debian version 5.0~a6-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-05-04 20:04:23 +02:00
7f6b1d71f8
Releasing debian version 5.0~a5-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-04-28 07:58:18 +02:00
9c51918b3b
Releasing debian version 5.0~a4-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-04-26 20:21:09 +02:00
ba53a1f948
Releasing debian version 5.0~a3-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2015-02-07 06:57:48 +01:00
e51315ae1e
Switching to default to linux-image-586 on i386.
2015-01-26 06:30:49 +01:00
242aef5d83
Updating year in copyright notices to 2015.
2015-01-04 20:05:44 +01:00
b814f4e07e
Dropping cdebootstrap support ( Closes : #773657 ).
...
debootstrap is the official tool to bootstrap debian,
cdebootstrap has had the one or other bug making it
broken for times during the release cycles.
The extra effort of supporting both debootstrap
and cdebootstrap is hardly worth it since the bootstrap
stage is cached anyway.
2014-12-23 22:54:41 +01:00
2841d696c0
Releasing debian version 5.0~a1-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2014-12-10 08:39:45 +01:00
a767601f25
Releasing debian version 4.0.4-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2014-12-10 08:24:49 +01:00
ef9b1e8487
Fix missing grub2 option in bootloader selection ( Closes : #772671 ).
2014-12-10 07:51:50 +01:00
a157fbb361
Releasing debian version 4.0.3-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2014-10-25 14:39:17 +02:00
afef2c271e
Releasing debian version 4.0.2-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2014-09-12 13:42:57 +02:00
c736a9743d
Fix typos in lb_config.1.
2014-09-09 21:00:49 +02:00
b1ce772ab7
Releasing debian version 4.0.1-1.
...
Signed-off-by: Daniel Baumann <mail@daniel-baumann.ch>
2014-08-28 23:26:04 +02:00
c1d85328f8
Restoring old manpages since we're back to the non-python implementation ( Closes : #745134 ).
2014-08-28 01:01:31 +02:00
5c16b340e5
Releasing debian version 4.0~alpha39-1.
2014-07-24 05:06:08 +02:00
802741f84a
Releasing debian version 4.0~alpha38-1.
2014-06-25 21:08:54 +02:00
9cbb6865c1
Releasing debian version 4.0~alpha37-1.
2014-05-07 07:01:54 +02:00
4b5d831313
Releasing debian version 4.0~alpha36-1.
2014-04-28 19:51:41 +02:00
eca7aca936
Releasing debian version 4.0~alpha34-1.
2014-04-26 08:05:32 +02:00
145418141e
Releasing debian version 4.0~alpha33-1.
2014-03-31 21:48:33 +02:00
a816109ad7
Releasing debian version 4.0~alpha32-1.
2014-03-02 06:24:45 +01:00
eb336bb782
Updating copyright notices for 2014.
2014-02-08 17:47:24 +01:00
fde942d3bd
Releasing debian version 4.0~alpha31-1.
2014-01-07 21:16:23 +01:00
30d2c54194
Pre-emptively removing occurances of the short name of the Debian derivative from Canonical that cannot be named.
2013-11-10 09:33:47 +01:00
5b87f05ab9
Updating dates in manpages.
2013-11-06 09:10:53 +01:00
7a6a9cd732
Fixing typo in lb-binary-hooks.1 manpage.
2013-11-05 19:24:09 +01:00
8245c7d0fc
Adding --distribution to lb-init.
2013-11-05 12:20:17 +01:00
3a3a4bbfc9
Adding lb-init manpage.
2013-11-05 12:20:16 +01:00
2e77f83d83
Releasing debian version 4.0~alpha30-1.
2013-11-04 19:10:13 +01:00
6254718202
Adding lb-bootstrap-includes manpage.
2013-11-04 19:04:49 +01:00
3dbe0430d9
Adding lb-source-includes manpage.
2013-11-04 18:55:15 +01:00
3ad37ba9f8
Adding lb-binary-includes manpage.
2013-11-04 18:41:36 +01:00
6115270556
Adding lb-chroot-includes manpage.
2013-11-04 18:25:13 +01:00
9e3863aa8f
Switching to later submodule naming scheme for python stubs.
2013-11-04 17:10:22 +01:00
f3fe376f61
Removing wrong reference to config/build in lb_*_hooks manpages.
2013-11-04 16:42:40 +01:00
600e715703
Correcting spelling typo in manpages (s/hoooks/hooks/).
2013-11-04 12:45:10 +01:00
ef20722290
Harmonizing options markup in manpages.
2013-11-04 12:42:28 +01:00
35dbb107d0
Adding program specification to lb_bootstrap_hooks manpage.
2013-11-04 12:37:33 +01:00
e5c72654ec
Adding program specification to lb_chroot_hooks manpage.
2013-11-04 12:33:12 +01:00
f5b825ee3c
Adding program specification to lb_source_hooks manpage.
2013-11-04 12:26:39 +01:00
e00df1684b
Adding program specification to lb_binary_hooks manpage.
2013-11-04 12:21:32 +01:00
55e32d6c06
Releasing debian version 4.0~alpha29-1.
2013-11-04 07:40:05 +01:00
afafe4628c
Adding see also entries in hooks manpages.
2013-11-04 06:57:57 +01:00
3077d77a56
Adding lb_source_hooks manpage.
2013-11-04 06:47:04 +01:00
d042538e28
Adding lb_binary_hooks manpage.
2013-11-04 06:42:19 +01:00
12a20871ed
Adding lb_chroot_hooks manpage.
2013-11-03 21:01:43 +01:00
8295826a6b
Adding lb_bootstrap_hooks manpage.
2013-11-03 20:51:13 +01:00
c9cd3af6ec
Making various things in bootstrap manpages more consistent.
2013-11-03 19:48:37 +01:00
9ef33d083b
Releasing debian version 4.0~alpha28-1.
2013-10-28 08:36:09 +01:00
be1dfb1b0b
Releasing debian version 4.0~alpha27-1.
2013-10-18 09:49:35 +02:00
d07cb888ee
Updating German manpage translations.
2013-10-17 11:18:55 +02:00
1a6303611b
Releasing debian version 4.0~alpha26-1.
2013-09-19 09:10:20 +02:00
3b332c3788
Releasing debian version 4.0~alpha25-1.
2013-09-18 10:27:15 +02:00
f880117b97
Releasing debian version 4.0~a24-1.
2013-09-06 20:05:53 +02:00
0293f5d14c
Releasing debian version 4.0~a23-1.
2013-09-06 18:30:20 +02:00
7ca77d248b
Releasing debian version 4.0~a22-1.
2013-09-05 17:31:39 +02:00
89cf1cf609
Releasing debian version 4.0~a21-1.
2013-08-07 20:06:47 +02:00
921870160d
Releasing debian version 4.0~a20-1.
2013-06-19 08:02:54 +02:00
9008de3f0b
Releasing debian version 4.0~a19-1.
2013-05-27 17:07:14 +02:00
1c5c1441e0
Releasing debian version 4.0~a18-1.
2013-05-06 20:10:14 +02:00
ac29b32470
Releasing debian version 4.0~a17-1.
2013-05-06 14:50:08 +02:00
d5cc7dc428
Adding files section in bootstrap_debootstrap and bootstrap_cdebootstrap manpages.
2013-05-06 14:50:08 +02:00
9f32f7af78
Adding new lb_bootstrap_cdebootstrap manpage.
2013-05-06 14:50:08 +02:00
b5317e34a9
Adding new lb_bootstrap_debootstrap manpage.
2013-05-06 14:50:08 +02:00
82648922d5
Moving old manpages out of the way.
2013-05-06 14:50:07 +02:00
765ae792d4
Releasing debian version 4.0~a16-1.
2013-05-06 14:50:07 +02:00
a00211e9c6
Removing dedicated emdebian mode, this can entirely be handled with different defaults.
2013-05-06 14:50:07 +02:00
c287072126
Debranding package for derivatives.
2013-05-06 14:50:07 +02:00
6ce319f16d
Releasing debian version 4.0~a15-1.
2013-05-06 14:50:06 +02:00
59ce459f40
Removing all references to my old email address.
2013-05-06 14:50:06 +02:00
29043c34fe
Releasing debian version 4.0~a14-1.
2013-05-06 14:50:06 +02:00
c4b7263f13
Releasing debian version 4.0~a13-1.
2013-05-06 14:50:06 +02:00
cca7563257
Removing non-existent --apt-indices none references.
2013-05-06 14:50:06 +02:00
7c945b05f5
Releasing debian version 4.0~a12-1.
2013-05-06 14:50:06 +02:00
dbfe7b10d7
Removing incomplete support for fakeroot.
2013-05-06 14:50:06 +02:00
04cec317cc
Removing incomplete support for root-command.
2013-05-06 14:50:06 +02:00
705df48ec5
Releasing debian version 4.0~a11-1.
2013-05-06 14:50:05 +02:00
137c224579
Dropping powerpc bootloader support (yaboot), there is nobody actively maintaining this in live-build.
2013-05-06 14:50:05 +02:00
3e23aaacde
Dropping sparc bootloader support (silo), there is nobody actively maintaining this in live-build.
2013-05-06 14:50:05 +02:00
c6c9946048
Releasing debian version 4.0~a10-1.
2013-05-06 14:50:05 +02:00
Luca Boccassi
Raphaël Hertzog
Adrian Gibanel Lopez
Ben Armstrong
trebmuh
Daniel Baumann
jnqnfe
victory
chals
Daniel Baumann