From 2cc58b6c8ad1826f22b120c4148d123018a7b92c Mon Sep 17 00:00:00 2001 From: cvlc12 Date: Sat, 28 Dec 2024 19:19:08 +0100 Subject: man: change "secureboot-private-key.pem" filename for consistency --- man/uki.conf.example | 4 ++-- man/ukify.xml | 18 +++++++++--------- 2 files changed, 11 insertions(+), 11 deletions(-) (limited to 'man') diff --git a/man/uki.conf.example b/man/uki.conf.example index 9fcae71e85..f78c15fe78 100644 --- a/man/uki.conf.example +++ b/man/uki.conf.example @@ -1,6 +1,6 @@ [UKI] -SecureBootPrivateKey=/etc/kernel/secure-boot-key.pem -SecureBootCertificate=/etc/kernel/secure-boot-certificate.pem +SecureBootPrivateKey=/etc/kernel/secureboot-private-key.pem +SecureBootCertificate=/etc/kernel/secureboot-certificate.pem [PCRSignature:initrd] Phases=enter-initrd diff --git a/man/ukify.xml b/man/ukify.xml index c3b8d920d1..13c14a45c8 100644 --- a/man/ukify.xml +++ b/man/ukify.xml @@ -671,8 +671,8 @@ --phases='enter-initrd:leave-initrd enter-initrd:leave-initrd:sysinit \ enter-initrd:leave-initrd:sysinit:ready' \ --pcr-banks=sha384,sha512 \ - --secureboot-private-key=sb.key \ - --secureboot-certificate=sb.cert \ + --secureboot-private-key=secureboot-private-key.pem \ + --secureboot-certificate=secureboot-certificate.pem \ --sign-kernel \ --cmdline='quiet rw rhgb' @@ -685,7 +685,7 @@ tpm2-pcr-private-key-initrd.pem, and for the main system (phases leave-initrd, sysinit, ready) with the key tpm2-pcr-private-key-system.pem. The Linux binary and the resulting - combined image will be signed with the SecureBoot key sb.key. + combined image will be signed with the SecureBoot key secureboot-private-key.pem. @@ -699,8 +699,8 @@ Initrd=early_cpio Cmdline=quiet rw rhgb -SecureBootPrivateKey=secure-boot-key.pem -SecureBootCertificate=secure-boot-certificate.pem +SecureBootPrivateKey=secureboot-private-key.pem +SecureBootCertificate=secureboot-certificate.pem SignKernel=yes PCRBanks=sha384,sha512 @@ -731,8 +731,8 @@ $ ukify -c ukify.conf build \ Kernel command line PE addon ukify build \ - --secureboot-private-key=secure-boot-key.pem \ - --secureboot-certificate=secure-boot-certificate.pem \ + --secureboot-private-key=secureboot-private-key.pem \ + --secureboot-certificate=secureboot-certificate.pem \ --cmdline='debug' \ --sbat='sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md uki-addon.author,1,UKI Addon for System,uki-addon.author,1,https://www.freedesktop.org/software/systemd/man/systemd-stub.html' @@ -753,8 +753,8 @@ $ ukify -c ukify.conf build \ Next, we can generate the certificate and keys: # ukify genkey --config=/etc/kernel/uki.conf -Writing SecureBoot private key to /etc/kernel/secure-boot-key.pem -Writing SecureBoot certificate to /etc/kernel/secure-boot-certificate.pem +Writing SecureBoot private key to /etc/kernel/secureboot-private-key.pem +Writing SecureBoot certificate to /etc/kernel/secureboot-certificate.pem Writing private key for PCR signing to /etc/systemd/tpm2-pcr-private-key-initrd.pem Writing public key for PCR signing to /etc/systemd/tpm2-pcr-public-key-initrd.pem Writing private key for PCR signing to /etc/systemd/tpm2-pcr-private-key-system.pem -- cgit v1.2.3