aboutsummaryrefslogtreecommitdiffstats
path: root/sysutils/shim/Makefile
blob: edb69dfd09a32f792c5cde49c13c840f69f90f02 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
# Created by: Edward Tomasz Napierala <trasz@FreeBSD.org>
# $FreeBSD$

PORTNAME=   shim
PORTVERSION=    0.8
PORTREVISION=   4
CATEGORIES= sysutils

MAINTAINER= ports@FreeBSD.org
COMMENT=    UEFI Secure Boot shim loader

LICENSE=    BSD2CLAUSE

BUILD_DEPENDS=  ${LOCALBASE}/lib/libgnuefi.a:devel/gnu-efi \
        bash:shells/bash

USE_GITHUB= yes
GH_ACCOUNT= mjg59

USES=       gmake
USE_CSTD=   gnu89
USE_GCC=    yes
USE_GITHUB= yes
MAKE_ARGS=  CC="${CC} ${CFLAGS:M-std=*}" LD="${LD}" OBJCOPY="${OBJCOPY}"
MAKE_JOBS_UNSAFE=   yes
ONLY_FOR_ARCHS= amd64

PLIST_FILES=    lib/shim/shim.pem lib/shim/shim.key \
        lib/shim/MokManager.efi lib/shim/fallback.efi lib/shim/shim.efi

post-patch:
    @${REINPLACE_CMD} -e "s|/bin/bash|${LOCALBASE}/bin/bash|" ${WRKSRC}/make-certs

do-install:
    # Note that before this step, the shim.pem contains the _private_ key.
    openssl x509 -inform der -in ${WRKSRC}/shim.cer -outform pem -out ${WRKSRC}/shim.pem
    ${MKDIR} ${STAGEDIR}/${PREFIX}/lib/shim
    ${INSTALL_DATA} -m 600 ${WRKSRC}/shim.key ${STAGEDIR}/${PREFIX}/lib/shim
    ${INSTALL_DATA} ${WRKSRC}/shim.pem ${STAGEDIR}/${PREFIX}/lib/shim
    ${INSTALL_DATA} ${WRKSRC}/shim.efi ${STAGEDIR}/${PREFIX}/lib/shim
    ${INSTALL_DATA} ${WRKSRC}/MokManager.efi ${STAGEDIR}/${PREFIX}/lib/shim
    ${INSTALL_DATA} ${WRKSRC}/fallback.efi ${STAGEDIR}/${PREFIX}/lib/shim

.include <bsd.port.mk>