Changeset 97013 in vbox for trunk/src/VBox/Additions/linux

Timestamp:

Oct 5, 2022 7:27:55 PM (2 years ago)

Author:

vboxsync

Message:

Additions: Linux: rcvboxadd.sh: Do not use update-secureboot-policy tool if it does not support required commandline switches, bugref:10287.

Unlike Ubuntu and simillar distributions, on Debian, update-secureboot-policy tool
does not support '--new-key' and '--enroll-key' command line switches. This makes it
no use for us on Debian. Moreover, 'update-secureboot-policy --enroll-key' will open
interactive user-input dialog which will result in 5 minutes hang on guest boot. So,
just don't use it in this case and let user to generate and enroll keys manually.

File:

• trunk/src/VBox/Additions/linux/installer/vboxadd.sh (modified) (1 diff)

trunk/src/VBox/Additions/linux/installer/vboxadd.sh

@@ -305 +305 @@
 esac
 
-
+# Check if update-secureboot-policy tool supports required commandline options.
+update_secureboot_policy_supports()
+{
+    opt_name="$1"
+    [ -n "$opt_name" ] || return
+
+    [ -z "$(update-secureboot-policy --help 2>&1 | grep "$opt_name")" ] && return
+    echo "1"
+}
+
+HAVE_UPDATE_SECUREBOOT_POLICY_TOOL=
 if type update-secureboot-policy >/dev/null 2>&1; then
-    HAVE_UPDATE_SECUREBOOT_POLICY_TOOL=true
+    [ "$(update_secureboot_policy_supports new-key)" = "1" -a "$(update_secureboot_policy_supports enroll-key)" = "1" ] && \
+        HAVE_UPDATE_SECUREBOOT_POLICY_TOOL=true
 fi