remove broken ms-lockdown

This commit is contained in:
Tobias Powalowski 2021-10-14 21:13:21 +02:00
parent 105f05776e
commit be9198fe37
3 changed files with 2 additions and 17 deletions

View file

@ -20,7 +20,7 @@ archboot_openvpn archboot_vpnc archboot_pptpclient archboot_smartmontools archbo
archboot_linux_atm archboot_netctl archboot_fsarchiver archboot_vim archboot_wipe archboot_testdisk archboot_ddrescue \
archboot_chntpw archboot_nmap archboot_tcpdump archboot_openconnect archboot_dnsmasq archboot_platform \
archboot_hypervisor archboot_dmidecode archboot_amd_ucode archboot_intel_ucode archboot_wvdial \
archboot_usb_modeswitch archboot_lockdown-ms archboot_secure_boot archboot_efivar archboot_lshw)
archboot_usb_modeswitch archboot_secure_boot archboot_efivar archboot_lshw)
# COMPRESSION
# Use this to compress the initramfs image. By default, gzip compression

View file

@ -1,15 +0,0 @@
#!/usr/bin/env bash
# Created by Tobias Powalowski <tpowa@archlinux.org>
build ()
{
add_file "/usr/lib/lockdown-ms/LockDown_ms.efi"
}
help ()
{
cat<<HELPEOF
This hook includes lockdown-ms on an archboot image.
HELPEOF
}

View file

@ -6,7 +6,7 @@ build ()
# https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot
apps="openssl python3 cert-to-efi-hash-list efi-readvar efi-updatevar efitool-mkusb flash-var \
hash-to-efi-sig-list sig-list-to-certs cert-to-efi-sig-list sign-efi-sig-list sbattach sbkeysync \
sbsiglist sbsign sbvarsign sbverify mokutil"
sbsiglist sbsign sbvarsign sbverify mokutil sbctl"
add_file "/etc/ssl/openssl.cnf"
for i in $apps; do
add_binary "$i"