Changeset 97017 in vbox

Timestamp:

Oct 5, 2022 8:09:52 PM (2 years ago)

Author:

vboxsync

Message:

Installer: Linux: rcvboxdrv.sh: Do not use update-secureboot-policy tool if it does not support required commandline switches, bugref:10287.

Unlike Ubuntu and simillar distributions, on Debian, update-secureboot-policy tool
does not support '--new-key' and '--enroll-key' command line switches. This makes it
no use for us on Debian. Moreover, 'update-secureboot-policy --enroll-key' will open
interactive user-input dialog which will result in 5 minutes hang on host boot. So,
just don't use it in this case and let user to generate and enroll keys manually.

File:

• trunk/src/VBox/Installer/linux/vboxdrv.sh (modified) (1 diff)

trunk/src/VBox/Installer/linux/vboxdrv.sh

@@ -127 +127 @@
 fi
 
+# Check if update-secureboot-policy tool supports required commandline options.
+update_secureboot_policy_supports()
+{
+    opt_name="$1"
+    [ -n "$opt_name" ] || return
+
+    [ -z "$(update-secureboot-policy --help 2>&1 | grep "$opt_name")" ] && return
+    echo "1"
+}
+
+HAVE_UPDATE_SECUREBOOT_POLICY_TOOL=
 if type update-secureboot-policy >/dev/null 2>&1; then
-    HAVE_UPDATE_SECUREBOOT_POLICY_TOOL=true
+    [ "$(update_secureboot_policy_supports new-key)" = "1" -a "$(update_secureboot_policy_supports enroll-key)" = "1" ] && \
+        HAVE_UPDATE_SECUREBOOT_POLICY_TOOL=true
 fi