shim for iPXE

This is a lightly modified version of the general-purpose shim used to enable UEFI Secure Boot for open source projects.

This fork includes modifications to simplify the use of shim with iPXE. In particular, this shim is built to trust the iPXE project's EV code signing certificate, and includes logic to automatically determine the iPXE filename based on the name used for the shim itself, by stripping out the shim portion of the filename. For example:

shim filename	iPXE filename
ipxe-shimx64.efi	ipxe.efi
intel-shimx64.efi	intel.efi
snponly-shimx64.efi	snponly.efi

The UEFI Secure Boot signed binaries can be downloaded from the releases listed at https://github.com/ipxe/shim/releases

(Note that only full releases are signed: prereleases will contain unsigned binaries.)

Name		Name	Last commit message	Last commit date
Latest commit History 1,136 Commits
.github		.github
Cryptlib		Cryptlib
data		data
gnu-efi @ 328951d		gnu-efi @ 328951d
include		include
lib		lib
test-data		test-data
.clang-format		.clang-format
.gitignore		.gitignore
.gitmodules		.gitmodules
BUILDING		BUILDING
CODE_OF_CONDUCT.md		CODE_OF_CONDUCT.md
COPYRIGHT		COPYRIGHT
Make.defaults		Make.defaults
Make.local		Make.local
Make.rules		Make.rules
Makefile		Makefile
MokManager.c		MokManager.c
MokVars.txt		MokVars.txt
PasswordCrypt.c		PasswordCrypt.c
README.fallback		README.fallback
README.md		README.md
README.tpm		README.tpm
SBAT.example.md		SBAT.example.md
SBAT.md		SBAT.md
SbatLevel_Variable.txt		SbatLevel_Variable.txt
TODO		TODO
buildid.c		buildid.c
cert.S		cert.S
crypt_blowfish.c		crypt_blowfish.c
csv.c		csv.c
elf_aarch64_efi.lds		elf_aarch64_efi.lds
elf_arm_efi.lds		elf_arm_efi.lds
elf_ia32_efi.lds		elf_ia32_efi.lds
elf_ia64_efi.lds		elf_ia64_efi.lds
elf_x86_64_efi.lds		elf_x86_64_efi.lds
errlog.c		errlog.c
fallback.c		fallback.c
fuzz-csv.c		fuzz-csv.c
fuzz-pe-relocate.c		fuzz-pe-relocate.c
fuzz-sbat.c		fuzz-sbat.c
globals.c		globals.c
httpboot.c		httpboot.c
ipxe.der		ipxe.der
load-options.c		load-options.c
make-archive		make-archive
make-certs		make-certs
mock-variables.c		mock-variables.c
model.c		model.c
mok.c		mok.c
netboot.c		netboot.c
pe-relocate.c		pe-relocate.c
pe.c		pe.c
post-process-pe.c		post-process-pe.c
replacements.c		replacements.c
sbat.c		sbat.c
sbat_var.S		sbat_var.S
shim.c		shim.c
shim.h		shim.h
test-csv.c		test-csv.c
test-load-options.c		test-load-options.c
test-mock-variables.c		test-mock-variables.c
test-mok-mirror.c		test-mok-mirror.c
test-pe-relocate.c		test-pe-relocate.c
test-pe-util.c		test-pe-util.c
test-sbat.c		test-sbat.c
test-str.c		test-str.c
test.c		test.c
testplan.txt		testplan.txt
tpm.c		tpm.c
version.c.in		version.c.in
version.h		version.h

ipxe/shim

Folders and files

Latest commit

History