diff options
| author | cvlc12 <cvlc12@outlook.fr> | 2024-08-21 18:29:06 +0200 |
|---|---|---|
| committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2024-09-20 01:24:15 +0200 |
| commit | 4beac1034d51e3cedb79cedf57e274b02b690eeb (patch) | |
| tree | 677bc8696d803e7fb47948eb4a0bef9c71de6781 /src/kernel-install | |
| parent | man: update PCR and Secure Boot key names and paths (diff) | |
| download | systemd-4beac1034d51e3cedb79cedf57e274b02b690eeb.tar.xz systemd-4beac1034d51e3cedb79cedf57e274b02b690eeb.zip | |
kernel-install: add uki.conf example
Diffstat (limited to 'src/kernel-install')
| -rw-r--r-- | src/kernel-install/meson.build | 3 | ||||
| -rw-r--r-- | src/kernel-install/uki.conf | 34 |
2 files changed, 37 insertions, 0 deletions
diff --git a/src/kernel-install/meson.build b/src/kernel-install/meson.build index 7f61fcc516..edd0b7d360 100644 --- a/src/kernel-install/meson.build +++ b/src/kernel-install/meson.build @@ -42,6 +42,9 @@ if want_kernel_install install_data('install.conf', install_dir : kerneldir) + + install_data('uki.conf', + install_dir : kerneldir) if install_sysconfdir install_emptydir(sysconfdir / 'kernel/install.d') diff --git a/src/kernel-install/uki.conf b/src/kernel-install/uki.conf new file mode 100644 index 0000000000..fd48662532 --- /dev/null +++ b/src/kernel-install/uki.conf @@ -0,0 +1,34 @@ +# This file is part of systemd. +# +# systemd is free software; you can redistribute it and/or modify it under the +# terms of the GNU Lesser General Public License as published by the Free +# Software Foundation; either version 2.1 of the License, or (at your option) +# any later version. +# +# Ini-style configuration file for ukify(1) which is only effective when +# $KERNEL_INSTALL_LAYOUT or layout= in install.conf is set to uki and +# $KERNEL_INSTALL_UKI_GENERATOR or uki_generator= in install.conf is set to +# ukify, or is unset. $KERNEL_INSTALL_CONF_ROOT may be used to override the +# search path. +# +# See kernel-install(8) for details. + +#[UKI] +#Initrd= +#Microcode= +#Splash= +#PCRPKey= +#PCRBanks= +#SecureBootSigningTool= +#SecureBootPrivateKey=/etc/kernel/secure-boot-private-key.pem +#SecureBootCertificate=/etc/kernel/secure-boot-certificate.pem +#SecureBootCertificateDir= +#SecureBootCertificateName= +#SecureBootCertificateValidity= +#SigningEngine= +#SignKernel= + +#[PCRSignature:NAME] +#PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key.pem +#PCRPublicKey=/etc/systemd/tpm2-pcr-public-key.pem +#Phases= |