| FROM fedora:33 |
| |
| RUN dnf install -y \ |
| gcc \ |
| git \ |
| gnu-efi-devel \ |
| make \ |
| patch |
| |
| # Clone shim, check out tag 15.4, and init submodules |
| RUN git clone --branch 15.4 https://github.com/rhboot/shim.git /build/shim |
| WORKDIR /build/shim |
| RUN git submodule update --init |
| |
| # Add our public certificate |
| ADD neverware.cer . |
| |
| # Add our SBAT data |
| ADD sbat.csv data/sbat.csv |
| |
| # Create build directories |
| RUN mkdir build-x64 build-ia32 |
| |
| # Build 64-bit |
| RUN make -C build-x64 ARCH=x86_64 VENDOR_CERT_FILE=../neverware.cer \ |
| TOPDIR=.. -f ../Makefile |
| |
| # Build 32-bit |
| RUN make -C build-ia32 ARCH=ia32 VENDOR_CERT_FILE=../neverware.cer \ |
| TOPDIR=.. -f ../Makefile |
| |
| # Copy the shims to a convenient location |
| RUN mkdir /build/install |
| RUN cp build-x64/shimx64.efi /build/install |
| RUN cp build-ia32/shimia32.efi /build/install |
