feat: add auto secure boot to new kernel update

2026-07-28 13:16:02 +02:00
parent 61e0e1e840
commit 937fced108
9 changed files with 436 additions and 9 deletions
--- a/secureboot/99-secureboot-sign-cachyos.hook
+++ b/secureboot/99-secureboot-sign-cachyos.hook
@ -0,0 +1,20 @@
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Package
+Target = grub
+Target = shim-signed
+
+[Trigger]
+Operation = Install
+Operation = Upgrade
+Type = Path
+Target = boot/vmlinuz-*
+
+[Action]
+Description = Signing and verifying CachyOS Secure Boot artifacts...
+When = PostTransaction
+Depends = grub
+Depends = shim-signed
+Depends = sbsigntools
+Exec = /usr/local/sbin/secureboot-sign-cachyos