Commit Graph
5 Commits
Author SHA1 Message Date
alvinlollo e215b85d90 Harden SecureBoot.sh: UEFI check, verify paths, confirm before enroll
- set -euo pipefail and fix pacman --noconfirm typo (was -noconfirm)
- abort on non-UEFI systems (/sys/firmware/efi check)
- verify sbctl installed and sign targets exist before touching keys
- fix x84_64-efi typo, skip missing targets instead of failing silently
- require sbctl verify to pass before offering enrollment
- prompt y/N before enroll-keys with BIOS/USB recovery guidance
- gate success message on final sbctl verify, non-zero exit on failure
2026-10-08 14:03:31 +11:00
alvinlollo 622d6f5ace Use shelly instead of pacman 2026-08-10 12:17:54 +10:00
Alvin Vilaythong 8eb6627d4d Make all scripts executible 2025-11-12 07:33:51 +11:00
alvinlollo 26fd42f27e Remove duplicate 'sbsigntools' from package install 2025-10-28 23:02:23 +11:00
alvinlollo 16c816c1d4 Add prerequisites installation for SecureBoot script 2025-10-28 22:58:15 +11:00