Skip to content

Instantly share code, notes, and snippets.

@zdw
Created August 29, 2017 15:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save zdw/ab4f730011550ac72c97c623a17bd70d to your computer and use it in GitHub Desktop.
Save zdw/ab4f730011550ac72c97c623a17bd70d to your computer and use it in GitHub Desktop.
vagrant@head1:/var/log/maas$ sudo apt-get install shim-signed
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
efibootmgr grub-common grub-efi-amd64-bin grub-pc grub-pc-bin grub2-common
libefivar0 mokutil sbsigntool secureboot-db shim
Suggested packages:
multiboot-doc grub-emu xorriso desktop-base
The following NEW packages will be installed:
efibootmgr grub-efi-amd64-bin libefivar0 mokutil sbsigntool secureboot-db
shim shim-signed
The following packages will be upgraded:
grub-common grub-pc grub-pc-bin grub2-common
4 upgraded, 8 newly installed, 0 to remove and 8 not upgraded.
Need to get 4,775 kB of archives.
After this operation, 7,172 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu/ trusty-updates/main libefivar0 amd64 0.21-1~14.04.2 [42.7 kB]
Get:2 http://archive.ubuntu.com/ubuntu/ trusty-updates/main efibootmgr amd64 0.5.4-7ubuntu1.2 [28.4 kB]
Get:3 http://archive.ubuntu.com/ubuntu/ trusty-updates/main grub-pc amd64 2.02~beta2-9ubuntu1.14 [174 kB]
Get:4 http://archive.ubuntu.com/ubuntu/ trusty-updates/main grub-pc-bin amd64 2.02~beta2-9ubuntu1.14 [882 kB]
Get:5 http://archive.ubuntu.com/ubuntu/ trusty-updates/main grub2-common amd64 2.02~beta2-9ubuntu1.14 [501 kB]
Get:6 http://archive.ubuntu.com/ubuntu/ trusty-updates/main grub-common amd64 2.02~beta2-9ubuntu1.14 [1,679 kB]
Get:7 http://archive.ubuntu.com/ubuntu/ trusty-updates/main mokutil amd64 0.3.0-0ubuntu3~14.04.1 [20.1 kB]
Get:8 http://archive.ubuntu.com/ubuntu/ trusty-updates/main sbsigntool amd64 0.6-0ubuntu7.2 [53.9 kB]
Get:9 http://archive.ubuntu.com/ubuntu/ trusty/main secureboot-db amd64 1.1 [2,740 B]
Get:10 http://archive.ubuntu.com/ubuntu/ trusty-updates/main shim amd64 0.9+1474479173.6c180c6-1ubuntu1 [434 kB]
Get:11 http://archive.ubuntu.com/ubuntu/ trusty-updates/main grub-efi-amd64-bin amd64 2.02~beta2-9ubuntu1.14 [649 kB]
Get:12 http://archive.ubuntu.com/ubuntu/ trusty-updates/main shim-signed amd64 1.32~14.04.2+0.9+1474479173.6c180c6-1ubuntu1 [309 kB]
Fetched 4,775 kB in 2s (1,627 kB/s)
Preconfiguring packages ...
Selecting previously unselected package libefivar0:amd64.
(Reading database ... 140237 files and directories currently installed.)
Preparing to unpack .../libefivar0_0.21-1~14.04.2_amd64.deb ...
Unpacking libefivar0:amd64 (0.21-1~14.04.2) ...
Selecting previously unselected package efibootmgr.
Preparing to unpack .../efibootmgr_0.5.4-7ubuntu1.2_amd64.deb ...
Unpacking efibootmgr (0.5.4-7ubuntu1.2) ...
Preparing to unpack .../grub-pc_2.02~beta2-9ubuntu1.14_amd64.deb ...
Unpacking grub-pc (2.02~beta2-9ubuntu1.14) over (2.02~beta2-9ubuntu1.12) ...
Preparing to unpack .../grub-pc-bin_2.02~beta2-9ubuntu1.14_amd64.deb ...
Unpacking grub-pc-bin (2.02~beta2-9ubuntu1.14) over (2.02~beta2-9ubuntu1.12) ...
Preparing to unpack .../grub2-common_2.02~beta2-9ubuntu1.14_amd64.deb ...
Unpacking grub2-common (2.02~beta2-9ubuntu1.14) over (2.02~beta2-9ubuntu1.12) ...
Preparing to unpack .../grub-common_2.02~beta2-9ubuntu1.14_amd64.deb ...
Unpacking grub-common (2.02~beta2-9ubuntu1.14) over (2.02~beta2-9ubuntu1.12) ...
Selecting previously unselected package mokutil.
Preparing to unpack .../mokutil_0.3.0-0ubuntu3~14.04.1_amd64.deb ...
Unpacking mokutil (0.3.0-0ubuntu3~14.04.1) ...
Selecting previously unselected package sbsigntool.
Preparing to unpack .../sbsigntool_0.6-0ubuntu7.2_amd64.deb ...
Unpacking sbsigntool (0.6-0ubuntu7.2) ...
Selecting previously unselected package secureboot-db.
Preparing to unpack .../secureboot-db_1.1_amd64.deb ...
Unpacking secureboot-db (1.1) ...
Selecting previously unselected package shim.
Preparing to unpack .../shim_0.9+1474479173.6c180c6-1ubuntu1_amd64.deb ...
Unpacking shim (0.9+1474479173.6c180c6-1ubuntu1) ...
Selecting previously unselected package grub-efi-amd64-bin.
Preparing to unpack .../grub-efi-amd64-bin_2.02~beta2-9ubuntu1.14_amd64.deb ...
Unpacking grub-efi-amd64-bin (2.02~beta2-9ubuntu1.14) ...
Selecting previously unselected package shim-signed.
Preparing to unpack .../shim-signed_1.32~14.04.2+0.9+1474479173.6c180c6-1ubuntu1_amd64.deb ...
Unpacking shim-signed (1.32~14.04.2+0.9+1474479173.6c180c6-1ubuntu1) ...
Processing triggers for man-db (2.6.7.1-1ubuntu1) ...
Processing triggers for install-info (5.2.0.dfsg.1-2) ...
Processing triggers for ureadahead (0.100.0-16) ...
Setting up libefivar0:amd64 (0.21-1~14.04.2) ...
Setting up efibootmgr (0.5.4-7ubuntu1.2) ...
Setting up grub-common (2.02~beta2-9ubuntu1.14) ...
Setting up grub2-common (2.02~beta2-9ubuntu1.14) ...
Setting up grub-pc-bin (2.02~beta2-9ubuntu1.14) ...
Setting up grub-pc (2.02~beta2-9ubuntu1.14) ...
Installing for i386-pc platform.
Installation finished. No error reported.
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-3.13.0-128-generic
Found initrd image: /boot/initrd.img-3.13.0-128-generic
done
Setting up mokutil (0.3.0-0ubuntu3~14.04.1) ...
Setting up sbsigntool (0.6-0ubuntu7.2) ...
Setting up secureboot-db (1.1) ...
Can't access efivars filesystem at /sys/firmware/efi/efivars, aborting
Setting up shim (0.9+1474479173.6c180c6-1ubuntu1) ...
Setting up grub-efi-amd64-bin (2.02~beta2-9ubuntu1.14) ...
Setting up shim-signed (1.32~14.04.2+0.9+1474479173.6c180c6-1ubuntu1) ...
Secure Boot not enabled on this system.
Processing triggers for libc-bin (2.19-0ubuntu6.13) ...
vagrant@head1:/var/log/maas$ cd /var/lib/shim/
-bash: cd: /var/lib/shim/: No such file or directory
vagrant@head1:/var/lib/shim-signed$ ls -l
total 4
-rw-r--r-- 1 root root 45 Aug 29 15:43 dkms-list
vagrant@head1:/var/lib/shim-signed$ dpkg -L shim-signed
/.
/var
/var/lib
/var/lib/shim-signed
/usr
/usr/share
/usr/share/apport
/usr/share/apport/package-hooks
/usr/share/apport/package-hooks/source_shim-signed.py
/usr/share/doc
/usr/share/doc/shim-signed
/usr/share/doc/shim-signed/changelog.Debian.gz
/usr/share/doc/shim-signed/copyright
/usr/share/lintian
/usr/share/lintian/overrides
/usr/share/lintian/overrides/shim-signed
/usr/lib
/usr/lib/shim
/usr/lib/shim/shimx64.efi.signed
/usr/lib/shim/BOOTX64.CSV
/usr/sbin
/usr/sbin/update-secureboot-policy
/usr/share/apport/package-hooks/source_shim.py
vagrant@head1:/var/lib$ cd shim-signed/
vagrant@head1:/var/lib/shim-signed$ ls
dkms-list
vagrant@head1:/var/lib/shim-signed$ ls -l
total 4
-rw-r--r-- 1 root root 45 Aug 29 15:43 dkms-list
vagrant@head1:/var/lib/shim-signed$ sudo mkdir /var/lib/shim
vagrant@head1:/var/lib/shim-signed$ sudo cp /usr/lib/shim/shimx64.efi.signed /var/lib/shim/shim.efi.signed
vagrant@head1:/var/lib/shim-signed$ md5sum /var/lib/shim/shim.efi.signed
3aef9c72ad50faa8db576c01f85a0915 /var/lib/shim/shim.efi.signed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment