search

mocaccinoOS / mocaccino

:musical_score: where magic happens
72 stars 7 forks source link

ISO: having shim-signed included #123

Open yusssufff opened 1 year ago

yusssufff commented 1 year ago

It could be great to have shim-signed backed in the ISO. If the file isn't too big to add. That would allow a boot of live-usb on all those secure boot modern uefi windows machines.

Gentoo uses this one it seems: https://packages.gentoo.org/packages/sys-boot/shim

Sabayon used this one it seems: https://github.com/Sabayon/for-gentoo/blob/master/app-crypt/shim-signed/shim-signed-0.2.ebuild

joostruis commented 1 year ago

Can you download the mOS-xfce-dev.iso.zip image that was generated here : https://github.com/mocaccinoOS/mocaccino/actions/runs/4246570582 (scroll down to artifacts)

I tried to add the required shim to it. See if that makes any difference.

joostruis commented 1 year ago

In the above commit you can see that I've added the shim package in the uefi section of the iso building process. I'm not 100% sure about this, I mean the package installs files in /usr/share/shim Perhaps I need some install hook that properly installs the files in the correct location. (I am not sure about this yet).

What I believe could work is, disable secureboot then install MOS and boot into it. If you then install system/shim you will notice files available in /usr/share/shim. From that point on you should be able to follow instructions from the Gentoo topic below.

https://forums.gentoo.org/viewtopic-p-8590950.html?sid=34abf386b3101d2d9e901f1dda88a43e#8590950

Could you (or somebody) toy around with that a bit and see if you can make it work this way? Then we can later try to fix this in live USB.