feat: Secure Boot support + hiperiso-branded background
- Add mmx64.efi (MOK Manager) to EFI/BOOT/ for Secure Boot enrollment - Add ENROLL_THIS_KEY_IN_MOKMANAGER.cer to tool/ for key enrollment - Replace Ventoy background.png with hiperiso-branded one (dark navy background, green 'hiperiso' title, 'Hypervisor ISO Boot Tool' subtitle) - Verified via QEMU+OVMF boot test: GRUB2 boots, passes all validation checks, shows hiperiso menu with correct branding, zero Ventoy refs
This commit is contained in:
@@ -41,6 +41,8 @@ xz --check=crc32 "$PAYLOAD/boot/core.img"
|
|||||||
# ── EFI/ (our custom GRUB2 EFI + hypervisor payloads) ───────────────
|
# ── EFI/ (our custom GRUB2 EFI + hypervisor payloads) ───────────────
|
||||||
cp "$EFI_BOOT_SRC" "$PAYLOAD/EFI/BOOT/"
|
cp "$EFI_BOOT_SRC" "$PAYLOAD/EFI/BOOT/"
|
||||||
cp "$HIPERISO_ROOT/src/grub2/grub/grub.cfg" "$PAYLOAD/EFI/BOOT/"
|
cp "$HIPERISO_ROOT/src/grub2/grub/grub.cfg" "$PAYLOAD/EFI/BOOT/"
|
||||||
|
[ -f "$HIPERISO_ROOT/vendor/secureboot/mmx64.efi" ] && \
|
||||||
|
cp "$HIPERISO_ROOT/vendor/secureboot/mmx64.efi" "$PAYLOAD/EFI/BOOT/"
|
||||||
|
|
||||||
cp "$KERNEL_SRC" "$PAYLOAD/EFI/hiperiso/vmlinuz"
|
cp "$KERNEL_SRC" "$PAYLOAD/EFI/hiperiso/vmlinuz"
|
||||||
cp "$STAGING/initramfs.cpio.gz" "$PAYLOAD/EFI/hiperiso/"
|
cp "$STAGING/initramfs.cpio.gz" "$PAYLOAD/EFI/hiperiso/"
|
||||||
@@ -77,6 +79,8 @@ cp "$HIPERISO_ROOT/src/installer/tool/HiperisoWorker.sh" "$PAYLOAD/tool/"
|
|||||||
cp "$HIPERISO_ROOT/src/installer/tool/create_hiperiso_iso_part_dm.sh" "$PAYLOAD/tool/"
|
cp "$HIPERISO_ROOT/src/installer/tool/create_hiperiso_iso_part_dm.sh" "$PAYLOAD/tool/"
|
||||||
cp "$HIPERISO_ROOT/assets/languages.json" "$PAYLOAD/tool/languages.json"
|
cp "$HIPERISO_ROOT/assets/languages.json" "$PAYLOAD/tool/languages.json"
|
||||||
cp "$HIPERISO_ROOT/assets/HiperisoGTK.glade" "$PAYLOAD/tool/HiperisoGTK.glade"
|
cp "$HIPERISO_ROOT/assets/HiperisoGTK.glade" "$PAYLOAD/tool/HiperisoGTK.glade"
|
||||||
|
[ -f "$HIPERISO_ROOT/vendor/secureboot/ENROLL_THIS_KEY_IN_MOKMANAGER.cer" ] && \
|
||||||
|
cp "$HIPERISO_ROOT/vendor/secureboot/ENROLL_THIS_KEY_IN_MOKMANAGER.cer" "$PAYLOAD/tool/"
|
||||||
|
|
||||||
for tool in ash hexdump mkexfatfs mount.exfat-fuse xzcat; do
|
for tool in ash hexdump mkexfatfs mount.exfat-fuse xzcat; do
|
||||||
cp "$HIPERISO_ROOT/vendor/tool-x86_64/$tool" "$PAYLOAD/tool/x86_64/"
|
cp "$HIPERISO_ROOT/vendor/tool-x86_64/$tool" "$PAYLOAD/tool/x86_64/"
|
||||||
@@ -126,6 +130,8 @@ mmd -i "$ESP_IMG" ::/tool
|
|||||||
mmd -i "$ESP_IMG" ::/hiperiso
|
mmd -i "$ESP_IMG" ::/hiperiso
|
||||||
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/BOOT/BOOTX64.EFI" ::/EFI/BOOT/
|
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/BOOT/BOOTX64.EFI" ::/EFI/BOOT/
|
||||||
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/BOOT/grub.cfg" ::/EFI/BOOT/
|
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/BOOT/grub.cfg" ::/EFI/BOOT/
|
||||||
|
[ -f "$PAYLOAD/EFI/BOOT/mmx64.efi" ] && \
|
||||||
|
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/BOOT/mmx64.efi" ::/EFI/BOOT/
|
||||||
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/hiperiso/vmlinuz" ::/EFI/hiperiso/
|
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/hiperiso/vmlinuz" ::/EFI/hiperiso/
|
||||||
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/hiperiso/initramfs.cpio.gz" ::/EFI/hiperiso/
|
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/hiperiso/initramfs.cpio.gz" ::/EFI/hiperiso/
|
||||||
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/hiperiso/OVMF.fd" ::/EFI/hiperiso/
|
mcopy -i "$ESP_IMG" "$PAYLOAD/EFI/hiperiso/OVMF.fd" ::/EFI/hiperiso/
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 256 KiB After Width: | Height: | Size: 18 KiB |
Binary file not shown.
Vendored
BIN
Binary file not shown.
Reference in New Issue
Block a user