1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
SRCDIR = $(realpath .)
TOPDIR = $(realpath .)
include $(TOPDIR)/Make.version
include $(TOPDIR)/Make.rules
include $(TOPDIR)/Make.defaults
include $(TOPDIR)/Make.coverity
include $(TOPDIR)/Make.scan-build
SUBDIRS := include libdpe src
install :
$(INSTALL) -d -m 755 $(INSTALLROOT)$(docdir)/pesign-$(VERSION)/
$(INSTALL) -pm 644 COPYING $(INSTALLROOT)$(docdir)/pesign-$(VERSION)/
@$(call descend)
install_systemd install_sysvinit : install
@$(call descend)
distclean : | clean
clean :
@$(call removes)
@$(call descend)
clean deps all : | Make.version
deps all :
@$(call descend)
$(SUBDIRS) :
$(MAKE) -C $@ all
.PHONY: $(SUBDIRS)
GITTAG = $(VERSION)
test-archive:
@rm -rf /tmp/pesign-$(VERSION) /tmp/pesign-$(VERSION)-tmp
@mkdir -p /tmp/pesign-$(VERSION)-tmp
@git archive --format=tar $(shell git branch | awk '/^*/ { print $$2 }') | ( cd /tmp/pesign-$(VERSION)-tmp/ ; tar x )
@git diff | ( cd /tmp/pesign-$(VERSION)-tmp/ ; patch -s -p1 -b -z .gitdiff )
@mv /tmp/pesign-$(VERSION)-tmp/ /tmp/pesign-$(VERSION)/
@dir=$$PWD; cd /tmp; tar -c --bzip2 -f $$dir/pesign-$(VERSION).tar.bz2 pesign-$(VERSION)
@rm -rf /tmp/pesign-$(VERSION)
@echo "The archive is in pesign-$(VERSION).tar.bz2"
tag:
git tag -s $(GITTAG) refs/heads/main
archive: tag
@rm -rf /tmp/pesign-$(VERSION) /tmp/pesign-$(VERSION)-tmp
@mkdir -p /tmp/pesign-$(VERSION)-tmp
@git archive --format=tar $(GITTAG) | ( cd /tmp/pesign-$(VERSION)-tmp/ ; tar x )
@mv /tmp/pesign-$(VERSION)-tmp/ /tmp/pesign-$(VERSION)/
@dir=$$PWD; cd /tmp; tar -c --bzip2 -f $$dir/pesign-$(VERSION).tar.bz2 pesign-$(VERSION)
@rm -rf /tmp/pesign-$(VERSION)
@echo "The archive is in pesign-$(VERSION).tar.bz2"
valgrind : all
valgrind --leak-check=full --track-origins=yes ./src/pesign -f -s -t 'Secure Boot Signer' -c 'Certificate for Digital Signature' -i shimx64.efi -o shimx64.signed.efi --pwfile pwfile
strace : all
strace -tt -s 1024 -v -f -o pesign.strace -o /dev/stdout ./src/pesign -f -s -t 'Secure Boot Signer' -c 'Certificate for Digital Signature' -i shimx64.efi -o shimx64.signed.efi --pwfile pwfile
gdb : all
echo run -f -s -t \'Secure Boot Signer\' -c \'Certificate for Digital Signature\' -i shimx64.efi -o shimx64.signed.efi --pwfile pwfile | copy
gdb ./src/pesign
|
