给UKI签名

sign-uki

#!/usr/bin/env fish

set uki "$argv[3]"

if test -z "$uki"
    exit 0
end

set keypairs "/root/.secureboot/MOK.key" "/root/.secureboot/MOK.crt"

set i 1
while test $i -le (count $keypairs)
    set key $keypairs[$i]
    set cert $keypairs[(math $i + 1)]
    if ! sbverify --cert "$cert" "$uki" &>/dev/null
        sbsign --key "$key" --cert "$cert" --output "$uki" "$uki"
    end
    set i (math $i + 2)
end