Add secure boot helper

2026-06-20 06:04:04 +00:00
parent 417f36d1b7
commit e3978bb210
6 changed files with 216 additions and 38 deletions
@@ -2,3 +2,10 @@ reports
 keys
 # Throwaway USBGuard mass-storage test image (see the USBGuard verify steps)
 /usbguard-test.img
+
+# Secure Boot enrollment material baked into the image. The *.auth are PUBLIC but
+# environment-specific, so keep the repo neutral: supply via CI secrets
+# (SB_*_AUTH_B64) or `git add -f` if you choose to commit them. Keep README/.gitkeep.
+/files/secureboot/keys/*.auth
+/files/secureboot/keys/*.esl
+/files/secureboot/keys/*.crt