* feat: Allow users to override secure boot key and password when using container or action
* fix: follow redirects
* chore: update docs
* fix: added comments and removed additional \n
* fix: removed defaults
* fix: added conditional for adding public key
* chore(ci): Added additional test for secure boot
* chore(ci): fixed up workflows to match production
* fix(ci): added workflow dispatch to test
* fix(ci): fixed version and added IMAGE_TAG
* chore(ci): changed to bluefin to test both 38 and 39 secure boot
* chore(ci): added required variables to entrypoint
* chore(ci): added merge_group and added paths-ignore
* chore(ci): updated description
* chore(ci): set to Silverblue since we are testing Bluefin
* chore(ci): Fixed secure boot key not found error
Received error in anaconda when check was hit, need to set as a soft failure to exit the script early without stopping anaconda installation.
* chore: fixed formatting
* chore: fixed whitespace
* chore(ci): Removed duplicate test
* chore: fix whitespace
* chore(ci): fixed test and removed upload to Github Artifacts
* chore: updated README
* feat: Re-enable Test Media Feature
* feat: Allow users to override secure boot key and password when using container or action
* fix: follow redirects
* chore: update docs
* fix: added comments and removed additional \n
* fix: removed defaults
* fix: added conditional for adding public key
* chore(ci): Added additional test for secure boot
* chore(ci): fixed up workflows to match production
* fix(ci): added workflow dispatch to test
* fix(ci): fixed version and added IMAGE_TAG
* chore(ci): changed to bluefin to test both 38 and 39 secure boot
* chore(ci): added required variables to entrypoint
* chore(ci): added merge_group and added paths-ignore
* chore(ci): updated description
* chore(ci): set to Silverblue since we are testing Bluefin
* chore(ci): Fixed secure boot key not found error
Received error in anaconda when check was hit, need to set as a soft failure to exit the script early without stopping anaconda installation.
* chore: fixed formatting
* chore: fixed whitespace
* chore(ci): Removed duplicate test
* chore: fix whitespace
* chore(ci): fixed test and removed upload to Github Artifacts
* chore: updated README
* fix: set password to ublue default
* fix: changed enrollment password in containerfile
* fix: make loop device during container build of ISO
This creates the loop device during container runtime which allows lorax
to build the ISO and not need to rely on a host provided device file.
Fixes: #22
* chore: updated readme
---------
Co-authored-by: Noel Miller <noelmiller@protonmail.com>
* fix: missed \
* fix: moved variables into table and added EXTRA_BOOT_PARAMS
* Update README.md
Co-authored-by: Robert Sturla <robertsturla@outlook.com>
---------
Co-authored-by: Robert Sturla <robertsturla@outlook.com>
* fix: Ignore Valve Steam Deck hardware due to using EFI but having no keys enrolled by default.
* fix: add extra boot parameters to fix steam deck resolution issue
---------
Co-authored-by: Noel Miller <noelmiller@protonmail.com>
The very short-lived key AKMOD_PRIVKEY_20230517 was accidentally
included here instead of the proper one.
This correct key is the one we actually use to sign akmods (and also is
used by bazzite to sign the whole kernel). So we definitely need this
to be correct.
* chore: First pass of adding secure boot key enrollment
* feat: Add secure boot support
* feat: Removed Test this media grub entry and set default to install
* fix: simplify secureboot scripts
---------
Co-authored-by: Kyle Gospodnetich <me@kylegospodneti.ch>
* fix: tags are now properly set in remote after install
* refactor: kinoite variant is better as a default except for silverblue
* refactor: use docker to build ISO
---------
Co-authored-by: Benjamin Sherman <benjamin@holyarmy.org>