Sign the created image with the keys from uefi-keys/

dracut.module/dracut.conf → dracut.module/dracut.conf.in

@@ -10,5 +10,5 @@ reproducible=yes
 #loginstall=./loginstall/
 uefi=yes
 uefi_stub=/usr/lib/systemd/boot/efi/linuxx64.efi.stub
-#uefi_secureboot_cert=/etc/uefi-key/db.crt
-#uefi_secureboot_key=/etc/uefi-key/db.key
+uefi_secureboot_cert=%PROJECT_DIR%/uefi-keys/DB.crt
+uefi_secureboot_key=%PROJECT_DIR%/uefi-keys/DB.key

installation/dependencies.sh

@@ -18,6 +18,3 @@ apt -y install dracut-core dracut dracut-network
 wget https://download.opensuse.org/repositories/home:/fg.nxd/Debian_11/amd64/dep--mca-static_1-1_amd64.deb
 apt -y install ./dep--mca-static_1-1_amd64.deb
 apt -y install ./fluent-bit_1-1_amd64.deb
-
-# signing initramfs
-apt -y install sbsigntool efitools

installation/install.sh

@@ -8,6 +8,8 @@ if [ ! -d dracut.module ]; then
 	cd ..
 fi
 
+PROJECT_DIR=`pwd`
+
 # This script assumes to be run by the root user (with /sbin in the path).
 
 # Install the module
@@ -16,6 +18,11 @@ make uninstall
 make install
 cd -
 
+# Generation of dracut.module/dracut.conf
+cd dracut.module
+sed "s|%PROJECT_DIR%|$PROJECT_DIR|g" dracut.conf.in > dracut.conf
+cd -
+
 # note: on the capri002 (as of the time those lines are wrote):
 # OS disk: 250GB, /dev/nvme1n1
 # /dev/nvme1n1p1	efi partition