shim-systemd: Install & update the Mok Management executable on the ESP - Githubissues

clearlinux / clr-boot-manager

Kernel & Boot Loader Management

https://clearlinux.org/

111 stars 30 forks source link

shim-systemd: Install & update the Mok Management executable on the ESP #254

Closed joebonrichie closed 1 month ago

joebonrichie commented 1 year ago

The Mok Management EFI executable (generally mmx64.efi) is needed in a few cases (when secure boot is enabled):

When using a third-party shim requiring you to enroll your own cert on first boot
When using a custom kernel or bootloader allowing the user the enroll the hash of it in order to boot

According to the layout comment on the top of the file this should already be expected to be on the ESP, fix that.