ubuntu-trusty-signed/0000755000000000000000000000000012315146630012106 5ustar ubuntu-trusty-signed/debian/0000775000000000000000000000000012321307733013332 5ustar ubuntu-trusty-signed/debian/source/0000775000000000000000000000000012315146630014632 5ustar ubuntu-trusty-signed/debian/source/format0000664000000000000000000000001512315146630016041 0ustar 3.0 (native) ubuntu-trusty-signed/debian/compat0000664000000000000000000000000212315146630014530 0ustar 9 ubuntu-trusty-signed/debian/control-scripts.stub0000775000000000000000000000070312315146630017401 0ustar #!/bin/sh -e kernel='KERNEL' case "$0-$1" in *.postinst-configure) rm -f /boot/$kernel.efi.signed cp /boot/$kernel /boot/$kernel.efi.signed sbattach --attach /usr/lib/linux/$kernel.efi.signature /boot/$kernel.efi.signed if which update-grub >/dev/null 2>&1; then update-grub || true fi ;; *.postrm-remove) rm -f /boot/$kernel.efi.signed if which update-grub >/dev/null 2>&1; then update-grub || true fi ;; esac #DEBHELPER# exit 0 ubuntu-trusty-signed/debian/control.stub0000664000000000000000000000035212315146630015711 0ustar Source: linux-signed Section: utils Priority: optional Maintainer: Canonical Kernel Team Build-Depends: debhelper (>= 9), lsb-release, python3, python3-apt, sbsigntool, BINARIES Standards-Version: 3.9.4 ubuntu-trusty-signed/debian/copyright0000664000000000000000000000266012315146630015271 0ustar This package exists to take the signed version of the kernel binaries and insert them into packages. The source is as per the source for the main kernel package. This is the Ubuntu prepackaged version of the Linux kernel. Linux was written by Linus Torvalds and others. This package was put together by the Ubuntu Kernel Team, from sources retrieved from upstream linux git. The sources may be found at most Linux ftp sites, including ftp://ftp.kernel.org/pub/linux/kernel/ This package is currently maintained by the Ubuntu Kernel Team Linux is copyrighted by Linus Torvalds and others. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; version 2 dated June, 1991. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA On Ubuntu Linux systems, the complete text of the GNU General Public License v2 can be found in `/usr/share/common-licenses/GPL-2'. ubuntu-trusty-signed/debian/flavour.stub0000664000000000000000000000150112315146630015704 0ustar Package: linux-signed-image-ABI-FLAVOUR Architecture: linux-amd64 Depends: ${misc:Depends}, sbsigntool, linux-image-ABI-FLAVOUR (= VERSION), linux-image-extra-ABI-FLAVOUR (= VERSION) Built-Using: linux (= ${linux:Version}) Description: Signed kernel image FLAVOUR A kernel image for FLAVOUR. This version of it is signed with Canonical's UEFI signing key. Package: kernel-signed-image-ABI-FLAVOUR-di Package-Type: udeb Section: debian-installer Priority: extra Provides: kernel-signed-image Architecture: linux-amd64 Built-Using: linux (= ${linux:Version}) Description: Signed kernel image FLAVOUR for the Debian installer A kernel image for FLAVOUR. This version of it is signed with Canonical's UEFI signing key. It is intended for the Debian installer, it does _not_ provide a usable kernel for your full Debian system. ubuntu-trusty-signed/debian/rules0000775000000000000000000000513412315146630014415 0ustar #! /usr/bin/make -f export DH_VERBOSE := 1 #VERSION := $(shell LC_ALL=C dpkg-parsechangelog | grep ^Version: | cut -d ' ' -f 2) # Work out the source package name and version. We assume the source package # is the name of this package with -signed stripped. The version is identical # to this package less any rebuild suffic (+signedN). src_package := $(shell LC_ALL=C dpkg-parsechangelog | grep ^Source: | cut -d ' ' -f 2 | sed -e 's/-signed//') src_version = $(shell LC_ALL=C dpkg-parsechangelog | grep ^Version: | cut -d ' ' -f 2 | sed -e 's/+signed[0-9]*.*//') src_abi = $(shell echo "$(src_version)" | sed -ne 's/\([0-9]*\.[0-9]*\.[0-9]*\-[0-9]*\)\..*/\1/p') # Flavours in the master package. flavours = generic flavour_first = $(firstword $(flavours)) binaries = $(foreach flavour,$(flavours),linux-image-$(src_abi)-$(flavour) \(>= $(src_version)\)) # We build our control file. This has to be done before dh runs otherwise # we have no binary files and we will not run the appropriate targets. pre-clean: { \ cat debian/control.stub; \ for flavour in $(flavours); do \ sed debian/control \ -e "s/ABI/$(src_abi)/g" \ -e "s/BINARIES/$(binaries)/g" \ -e "s/VERSION/$(src_version)/g" rm -f version flavours *.signed \ debian/linux-signed-image-*.install \ debian/linux-signed-image-*.postinst \ debian/linux-signed-image-*.postrm pre-binary: download-signed ./download-signed "linux-image-$(src_abi)-$(flavour_first)" \ "$(src_version)" "$(src_package)" for flavour in $(flavours); do \ sbattach --detach vmlinuz-$(src_abi)-$$flavour.efi.signature \ vmlinuz-$(src_abi)-$$flavour.efi.signed; \ done PHONY: pre-clean pre-binary clean:: pre-clean binary:: pre-binary binary-arch:: pre-binary %: dh $@ override_dh_auto_install: for flavour in $(flavours); do \ echo "vmlinuz-$(src_abi)-$$flavour.efi.signature usr/lib/linux" \ >"debian/linux-signed-image-$(src_abi)-$$flavour.install"; \ echo "vmlinuz-$(src_abi)-$$flavour.efi.signed boot" \ >"debian/kernel-signed-image-$(src_abi)-$$flavour-di.install"; \ done dh_install override_dh_installdeb: for flavour in $(flavours); do \ sed debian/linux-signed-image-$(src_abi)-$$flavour.postinst; \ cp debian/linux-signed-image-$(src_abi)-$$flavour.postinst \ debian/linux-signed-image-$(src_abi)-$$flavour.postrm; \ done dh_installdeb override_dh_gencontrol: dh_gencontrol -- -Vlinux:Version=$(shell cat version) ubuntu-trusty-signed/debian/changelog0000664000000000000000000005014512321307677015220 0ustar linux-signed (3.13.0-24.46) trusty; urgency=medium * Version 3.13.0-24.46 -- Tim Gardner Wed, 09 Apr 2014 18:21:51 +0000 linux-signed (3.13.0-23.45) trusty; urgency=medium * Version 3.13.0-23.45 -- Tim Gardner Thu, 03 Apr 2014 18:31:20 +0000 linux-signed (3.13.0-22.44) trusty; urgency=medium * Version 3.13.0-22.44 -- Tim Gardner Wed, 02 Apr 2014 19:44:29 +0000 linux-signed (3.13.0-21.43) trusty; urgency=medium * Version 3.13.0-21.43 -- Tim Gardner Mon, 31 Mar 2014 22:07:58 +0000 linux-signed (3.13.0-20.42) trusty; urgency=medium * Version 3.13.0-20.42 -- Andy Whitcroft Fri, 28 Mar 2014 09:57:55 +0000 linux-signed (3.13.0-20.41) trusty; urgency=medium * Version 3.13.0-20.41 -- Tim Gardner Thu, 27 Mar 2014 19:19:14 -0600 linux-signed (3.13.0-19.40) trusty; urgency=medium * Version 3.13.0-19.40 -- Tim Gardner Mon, 24 Mar 2014 02:32:12 +0000 linux-signed (3.13.0-18.38) trusty; urgency=medium * Version 3.13.0-18.38 -- Tim Gardner Mon, 17 Mar 2014 20:46:00 +0000 linux-signed (3.13.0-17.37) trusty; urgency=medium * Version 3.13.0-17.37 -- Andy Whitcroft Mon, 10 Mar 2014 21:48:17 +0000 linux-signed (3.13.0-16.36) trusty; urgency=medium * Version 3.13.0-16.36 -- Tim Gardner Tue, 04 Mar 2014 22:59:36 +0000 linux-signed (3.13.0-15.35) trusty; urgency=medium * Version 3.13.0-15.35 -- Tim Gardner Mon, 03 Mar 2014 15:52:44 +0000 linux-signed (3.13.0-14.34) trusty; urgency=medium * Version 3.13.0-14.34 -- Tim Gardner Thu, 27 Feb 2014 22:32:07 +0000 linux-signed (3.13.0-13.33) trusty; urgency=medium * Version 3.13.0-13.33 -- Andy Whitcroft Tue, 25 Feb 2014 18:16:51 +0000 linux-signed (3.13.0-12.32) trusty; urgency=medium * Version 3.13.0-12.32 -- Andy Whitcroft Fri, 21 Feb 2014 17:42:27 +0000 linux-signed (3.13.0-11.31) trusty; urgency=medium * Version 3.13.0-11.31 -- Tim Gardner Wed, 19 Feb 2014 12:54:18 -0700 linux-signed (3.13.0-10.30) trusty; urgency=medium * Version 3.13.0-10.30 -- Tim Gardner Tue, 18 Feb 2014 23:03:04 +0000 linux-signed (3.13.0-9.29) trusty; urgency=medium * Version 3.13.0-9.29 -- Andy Whitcroft Fri, 14 Feb 2014 15:42:28 +0000 linux-signed (3.13.0-8.28) trusty; urgency=medium * Version 3.13.0-8.28 -- Tim Gardner Tue, 11 Feb 2014 17:48:42 +0000 linux-signed (3.13.0-8.27) trusty; urgency=medium * Version 3.13.0-8.27 -- Tim Gardner Fri, 07 Feb 2014 01:57:53 +0000 linux-signed (3.13.0-7.26) trusty; urgency=medium * Version 3.13.0-7.26 -- Tim Gardner Wed, 05 Feb 2014 21:24:01 +0000 linux-signed (3.13.0-7.25) trusty; urgency=medium * Version 3.13.0-7.25 -- Andy Whitcroft Tue, 04 Feb 2014 11:26:55 +0000 linux-signed (3.13.0-7.24) trusty; urgency=medium * Version 3.13.0-7.24 -- Tim Gardner Mon, 03 Feb 2014 21:16:14 +0000 linux-signed (3.13.0-6.23) trusty; urgency=medium * Version 3.13.0-6.23 -- Andy Whitcroft Fri, 31 Jan 2014 13:28:40 +0000 linux-signed (3.13.0-5.20) trusty; urgency=medium * Version 3.13.0-5.20 -- Andy Whitcroft Mon, 20 Jan 2014 18:46:38 +0000 linux-signed (3.13.0-4.19) trusty; urgency=medium * Version 3.13.0-4.19 -- Tim Gardner Thu, 16 Jan 2014 18:04:56 +0000 linux-signed (3.13.0-3.18) trusty; urgency=medium * Version 3.13.0-3.18 -- Tim Gardner Mon, 13 Jan 2014 19:05:56 +0000 linux-signed (3.13.0-2.17) trusty; urgency=low * Version 3.13.0-2.17 -- Andy Whitcroft Fri, 10 Jan 2014 14:24:43 +0000 linux-signed (3.13.0-1.16) trusty; urgency=medium * Version 3.13.0-1.16 -- Tim Gardner Tue, 07 Jan 2014 19:47:21 +0000 linux-signed (3.13.0-0.14) trusty; urgency=medium * Version 3.13.0-0.14 -- Tim Gardner Fri, 03 Jan 2014 18:32:21 +0000 linux-signed (3.12.0-8.16) trusty; urgency=medium * Version 3.12.0-8.16 -- Tim Gardner Thu, 02 Jan 2014 16:07:01 +0000 linux-signed (3.12.0-6.14) trusty; urgency=low * Version 3.12.0-6.14 -- Tim Gardner Thu, 05 Dec 2013 20:02:36 +0000 linux-signed (3.12.0-5.13) trusty; urgency=low * Version 3.12.0-5.13 -- Tim Gardner Mon, 02 Dec 2013 17:59:52 +0000 linux-signed (3.12.0-4.12) trusty; urgency=low * Version 3.12.0-4.12 -- Tim Gardner Tue, 26 Nov 2013 22:23:45 +0000 linux-signed (3.12.0-4.11) trusty; urgency=low * Version 3.12.0-4.11 -- Tim Gardner Tue, 26 Nov 2013 20:56:10 +0000 linux-signed (3.12.0-4.10) trusty; urgency=low * Version 3.12.0-4.10 -- Tim Gardner Thu, 21 Nov 2013 21:47:27 +0000 linux-signed (3.12.0-3.9) trusty; urgency=low * Version 3.12.0-3.9 -- Tim Gardner Wed, 20 Nov 2013 23:05:28 +0000 linux-signed (3.12.0-3.8) trusty; urgency=low * Version 3.12.0-3.8 -- Tim Gardner Mon, 18 Nov 2013 21:14:23 +0000 linux-signed (3.12.0-2.7) trusty; urgency=low * Version 3.12.0-2.7 -- Tim Gardner Fri, 08 Nov 2013 23:53:06 +0000 linux-signed (3.12.0-2.6) trusty; urgency=low * Version 3.12.0-2.6 -- Tim Gardner Fri, 08 Nov 2013 19:59:25 +0000 linux-signed (3.12.0-2.5) trusty; urgency=low * Version 3.12.0-2.5 -- Adam Conrad Wed, 06 Nov 2013 16:42:50 -0700 linux-signed (3.12.0-2.4) trusty; urgency=low * Version 3.12.0-2.4 -- Andy Whitcroft Wed, 06 Nov 2013 22:03:04 +0000 linux-signed (3.12.0-1.3) trusty; urgency=low * Version 3.12.0-1.3 -- Tim Gardner Tue, 29 Oct 2013 18:40:47 +0000 linux-signed (3.12.0-0.2) trusty; urgency=low * Version 3.12.0-0.2 -- Tim Gardner Mon, 21 Oct 2013 18:05:00 +0000 linux-signed (3.12.0-0.1) trusty; urgency=low * Version 3.12.0-0.1 -- Tim Gardner Fri, 18 Oct 2013 18:56:23 +0000 linux-signed (3.11.0-12.19) saucy; urgency=low * Version 3.11.0-12.19 -- Andy Whitcroft Wed, 09 Oct 2013 12:46:10 +0100 linux-signed (3.11.0-12.18) saucy; urgency=low * Version 3.11.0-12.18 -- Tim Gardner Tue, 08 Oct 2013 20:33:37 +0000 linux-signed (3.11.0-11.17) saucy; urgency=low * Version 3.11.0-11.17 -- Tim Gardner Tue, 01 Oct 2013 19:26:07 +0000 linux-signed (3.11.0-9.16) saucy; urgency=low * Version 3.11.0-9.16 -- Tim Gardner Fri, 27 Sep 2013 14:50:12 +0000 linux-signed (3.11.0-8.15) saucy; urgency=low * Version 3.11.0-8.15 -- Tim Gardner Fri, 20 Sep 2013 04:05:02 +0000 linux-signed (3.11.0-7.14) saucy; urgency=low * Version 3.11.0-7.14 -- Tim Gardner Mon, 16 Sep 2013 18:37:41 +0000 linux-signed (3.11.0-7.13) saucy; urgency=low * Version 3.11.0-7.13 -- Tim Gardner Tue, 10 Sep 2013 20:23:06 +0000 linux-signed (3.11.0-6.12) saucy; urgency=low * Version 3.11.0-6.12 -- Tim Gardner Mon, 09 Sep 2013 15:57:08 +0000 linux-signed (3.11.0-5.11) saucy; urgency=low * Version 3.11.0-5.11 -- Tim Gardner Fri, 06 Sep 2013 19:02:05 +0000 linux-signed (3.11.0-5.10) saucy; urgency=low * Version 3.11.0-5.10 -- Andy Whitcroft Wed, 04 Sep 2013 10:44:54 +0100 linux-signed (3.11.0-4.9) saucy; urgency=low * Version 3.11.0-4.9 -- Tim Gardner Mon, 26 Aug 2013 15:18:15 +0000 linux-signed (3.11.0-3.8) saucy; urgency=low * Version 3.11.0-3.8 -- Tim Gardner Fri, 23 Aug 2013 16:46:52 +0000 linux-signed (3.11.0-3.7) saucy; urgency=low * Version 3.11.0-3.7 -- Tim Gardner Tue, 20 Aug 2013 15:21:15 +0000 linux-signed (3.11.0-3.6) saucy; urgency=low * Version 3.11.0-3.6 -- Tim Gardner Mon, 19 Aug 2013 14:41:01 +0000 linux-signed (3.11.0-2.5) saucy; urgency=low * Version 3.11.0-2.5 -- Tim Gardner Mon, 12 Aug 2013 16:09:36 +0000 linux-signed (3.11.0-1.4) saucy; urgency=low * Version 3.11.0-1.4 -- Tim Gardner Fri, 09 Aug 2013 02:27:26 +0000 linux-signed (3.11.0-0.3) saucy; urgency=low * Version 3.11.0-0.3 -- Tim Gardner Thu, 08 Aug 2013 13:44:39 +0000 linux-signed (3.11.0-0.2) saucy; urgency=low * Version 3.11.0-0.2 -- Andy Whitcroft Wed, 07 Aug 2013 19:48:05 +0100 linux-signed (3.10.0-6.17) saucy; urgency=low * Version 3.10.0-6.17 -- Tim Gardner Fri, 26 Jul 2013 18:43:37 +0000 linux-signed (3.10.0-5.15) saucy; urgency=low * Version 3.10.0-5.15 -- Tim Gardner Wed, 24 Jul 2013 19:39:21 +0000 linux-signed (3.10.0-5.14) saucy; urgency=low * Version 3.10.0-5.14 -- Andy Whitcroft Mon, 22 Jul 2013 16:13:03 +0100 linux-signed (3.10.0-4.13) saucy; urgency=low * Version 3.10.0-4.13 -- Tim Gardner Thu, 18 Jul 2013 19:16:22 +0000 linux-signed (3.10.0-3.12) saucy; urgency=low * Fix the version number constraint between linux and linux-signed to be '=' to ensure we cannot migrate linux without linux-signed being in lock step. (LP: #1201444) * Version 3.10.0-3.12 -- Andy Whitcroft Mon, 15 Jul 2013 17:31:09 +0100 linux-signed (3.10.0-2.11) saucy; urgency=low * Version 3.10.0-2.11 -- Tim Gardner Thu, 11 Jul 2013 16:08:26 +0000 linux-signed (3.10.0-2.10) saucy; urgency=low * Version 3.10.0-2.10 -- Andy Whitcroft Fri, 05 Jul 2013 18:58:08 +0100 linux-signed (3.10.0-2.9) saucy; urgency=low * Version 3.10.0-2.9 -- Andy Whitcroft Mon, 01 Jul 2013 19:30:09 +0100 linux-signed (3.10.0-1.8) saucy; urgency=low * Version 3.10.0-1.8 -- Andy Whitcroft Fri, 28 Jun 2013 14:45:36 +0100 linux-signed (3.10.0-0.7) saucy; urgency=low * Version 3.10.0-0.7 -- Andy Whitcroft Tue, 25 Jun 2013 18:46:54 +0100 linux-signed (3.10.0-0.6) saucy; urgency=low * Version 3.10.0-0.6 -- Tim Gardner Mon, 24 Jun 2013 13:33:31 -0600 linux-signed (3.9.0-7.15) saucy; urgency=low * Version 3.9.0-7.15 -- Tim Gardner Fri, 21 Jun 2013 06:19:51 -0600 linux-signed (3.9.0-6.13) saucy; urgency=low * Version 3.9.0-6.13 -- Tim Gardner Fri, 14 Jun 2013 09:46:26 -0600 linux-signed (3.9.0-5.11) saucy; urgency=low * Version 3.9.0-5.11 -- Tim Gardner Tue, 11 Jun 2013 11:51:37 -0600 linux-signed (3.9.0-5.10) saucy; urgency=low * Version 3.9.0-5.10 -- Tim Gardner Tue, 11 Jun 2013 08:39:38 -0600 linux-signed (3.9.0-4.9) saucy; urgency=low * Version 3.9.0-4.9 -- Andy Whitcroft Wed, 05 Jun 2013 15:31:21 +0100 linux-signed (3.9.0-3.8) saucy; urgency=low * Version 3.9.0-3.8 -- Tim Gardner Tue, 28 May 2013 12:36:05 -0600 linux-signed (3.9.0-2.7) saucy; urgency=low * Version 3.9.0-2.7 -- Tim Gardner Mon, 20 May 2013 08:26:18 -0600 linux-signed (3.9.0-2.6) saucy; urgency=low * Version 3.9.0-2.6 -- Tim Gardner Tue, 14 May 2013 10:53:54 -0600 linux-signed (3.9.0-1.5) saucy; urgency=low * Version 3.9.0-1.5 -- Tim Gardner Wed, 08 May 2013 14:49:31 -0600 linux-signed (3.9.0-0.4) saucy; urgency=low * Version 3.9.0-0.4 -- Tim Gardner Thu, 02 May 2013 15:39:51 -0600 linux-signed (3.9.0-0.3) saucy; urgency=low * Version 3.9.0-0.3 -- Tim Gardner Mon, 29 Apr 2013 17:12:33 -0600 linux-signed (3.9.0-0.2) saucy; urgency=low * Version 3.9.0-0.2 -- Tim Gardner Mon, 29 Apr 2013 07:09:47 -0600 linux-signed (3.9.0-0.1) saucy; urgency=low * Version 3.9.0-0.1 -- Tim Gardner Fri, 26 Apr 2013 09:49:26 -0600 linux-signed (3.8.0-19.29) raring; urgency=low * Version 3.8.0-19.29 -- Tim Gardner Wed, 17 Apr 2013 12:10:02 -0600 linux-signed (3.8.0-18.28) raring; urgency=low * Version 3.8.0-18.28 -- Tim Gardner Thu, 11 Apr 2013 13:19:16 -0600 linux-signed (3.8.0-16.26) raring; urgency=low * Version 3.8.0-16.26 -- Tim Gardner Mon, 01 Apr 2013 13:10:30 -0600 linux-signed (3.8.0-15.25) raring; urgency=low * Version 3.8.0-15.25 -- Tim Gardner Wed, 27 Mar 2013 13:15:41 -0600 linux-signed (3.8.0-14.24) raring; urgency=low * Version 3.8.0-14.24 -- Tim Gardner Fri, 22 Mar 2013 13:07:31 -0600 linux-signed (3.8.0-13.23) raring; urgency=low * Version 3.8.0-13.23 -- Tim Gardner Mon, 18 Mar 2013 12:05:14 -0600 linux-signed (3.8.0-13.22) raring; urgency=low * Version 3.8.0-13.22 -- Tim Gardner Fri, 15 Mar 2013 11:45:34 -0600 linux-signed (3.8.0-12.21) raring; urgency=low * Version 3.8.0-12.21 -- Tim Gardner Thu, 07 Mar 2013 10:06:49 -0700 linux-signed (3.8.0-11.20) raring; urgency=low * Version 3.8.0-11.20 -- Tim Gardner Tue, 05 Mar 2013 13:28:24 -0700 linux-signed (3.8.0-10.19) raring; urgency=low * Version 3.8.0-10.19 -- Tim Gardner Mon, 04 Mar 2013 08:47:42 -0700 linux-signed (3.8.0-9.18) raring; urgency=low * Version 3.8.0-9.18 -- Tim Gardner Thu, 28 Feb 2013 09:57:25 -0700 linux-signed (3.8.0-8.17) raring; urgency=low * Version 3.8.0-8.17 -- Tim Gardner Tue, 26 Feb 2013 13:25:04 -0700 linux-signed (3.8.0-7.16) raring; urgency=low * Version 3.8.0-7.16 -- Tim Gardner Tue, 26 Feb 2013 06:24:33 -0700 linux-signed (3.8.0-7.15) raring; urgency=low * Version 3.8.0-7.15 -- Tim Gardner Thu, 21 Feb 2013 13:04:03 -0700 linux-signed (3.8.0-7.14) raring; urgency=low * Version 3.8.0-7.14 -- Tim Gardner Tue, 19 Feb 2013 08:49:33 -0700 linux-signed (3.8.0-6.13) raring; urgency=low * Version 3.8.0-6.13 -- Tim Gardner Thu, 14 Feb 2013 10:20:03 -0700 linux-signed (3.8.0-6.11) raring; urgency=low * Version 3.8.0-6.11 -- Tim Gardner Mon, 11 Feb 2013 08:54:54 -0700 linux-signed (3.8.0-5.10) raring; urgency=low * Version 3.8.0-5.10 -- Tim Gardner Thu, 07 Feb 2013 10:55:33 -0700 linux-signed (3.8.0-4.8) raring; urgency=low * Version 3.8.0-4.8 -- Leann Ogasawara Fri, 01 Feb 2013 07:32:58 -0800 linux-signed (3.8.0-3.7) raring; urgency=low * Version 3.8.0-3.7 -- Leann Ogasawara Thu, 31 Jan 2013 06:49:24 -0800 linux-signed (3.8.0-2.6) raring; urgency=low * Version 3.8.0-2.6 -- Leann Ogasawara Fri, 25 Jan 2013 12:08:13 -0800 linux-signed (3.8.0-1.5) raring; urgency=low * Version 3.8.0-1.5 -- Tim Gardner Fri, 18 Jan 2013 08:18:07 -0700 linux-signed (3.8.0-0.4) raring; urgency=low * Version 3.8.0-0.4 -- Tim Gardner Tue, 15 Jan 2013 13:34:27 -0700 linux-signed (3.8.0-0.2) raring; urgency=low * Version 3.8.0-0.2 -- Tim Gardner Thu, 10 Jan 2013 21:16:49 -0700 linux-signed (3.8.0-0.1) raring; urgency=low * Version 3.8.0-0.1 -- Tim Gardner Thu, 10 Jan 2013 07:35:18 -0700 linux-signed (3.7.0-7.15) raring; urgency=low * Version 3.7.0-7.15 -- Tim Gardner Sat, 15 Dec 2012 07:19:28 -0700 linux-signed (3.7.0-6.14) raring; urgency=low * Version 3.7.0-6.14 -- Tim Gardner Tue, 11 Dec 2012 06:10:36 -0700 linux-signed (3.7.0-5.13) raring; urgency=low * Version 3.7.0-5.13 -- Tim Gardner Wed, 05 Dec 2012 05:21:25 -0700 linux-signed (3.7.0-4.12) raring; urgency=low * Version 3.7.0-4.12 -- Leann Ogasawara Tue, 27 Nov 2012 13:16:54 -0800 linux-signed (3.7.0-4.11) raring; urgency=low * Version 3.7.0-4.11 -- Tim Gardner Tue, 27 Nov 2012 13:14:44 -0800 linux-signed (3.7.0-4.10) raring; urgency=low * Version 3.7.0-4.10 -- Tim Gardner Tue, 27 Nov 2012 07:18:48 -0700 linux-signed (3.7.0-3.9) raring; urgency=low * Version 3.7.0-3.9 * Add Built-Using: fields pointing to the original linux source packages. * Standard-Version: 3.9.4 -- Leann Ogasawara Tue, 20 Nov 2012 14:10:53 -0800 linux-signed (3.7.0-2.8) raring; urgency=low * Version 3.7.0-2.8 -- Andy Whitcroft Thu, 15 Nov 2012 16:19:35 +0000 linux-signed (3.7.0-1.6) raring; urgency=low * linux 3.7.0-1.6 -- Tim Gardner Wed, 14 Nov 2012 06:54:40 -0700 linux-signed (3.7.0-0.5+signed1) raring; urgency=low * control-scripts.stub: update-grub may fail in a livefs environment and in that context is not fatal. For now just ignore update-grub errors. -- Andy Whitcroft Wed, 14 Nov 2012 11:53:51 +0000 linux-signed (3.7.0-0.5) raring; urgency=low * update-version: fix commit command * Version 3.7.0-0.5 -- Andy Whitcroft Fri, 09 Nov 2012 11:05:42 +0000 linux-signed (3.7.0-0.4) raring; urgency=low * rules: include only the signature for the kernel image. (LP: #1075181) * control.stub: add sbsigntool build-dep: to allow signature manipulation. * flavour.stub: add sbsigntool depends: to allow signature manipulation. * rules: fix version handling for PPA use. * Version 3.7.0-0.4 -- Andy Whitcroft Thu, 08 Nov 2012 18:24:03 +0000 linux-signed (3.5.0-17.28+signed2) quantal-proposed; urgency=low * download-signed: add the -security pocket to the search list. * update-version: handle an UNRELEASED version stanza. * update-version: dump proposed commit and tag commands. * rules: add signed udebs for the Debian installer. -- Andy Whitcroft Wed, 10 Oct 2012 01:53:37 +0100 linux-signed (3.5.0-17.28+signed1) quantal-proposed; urgency=low * Search all pockets for the appropriate binary. -- Andy Whitcroft Wed, 10 Oct 2012 00:44:59 +0100 linux-signed (3.5.0-17.28) quantal-proposed; urgency=low * Version 3.5.0-17.28 -- Andy Whitcroft Tue, 09 Oct 2012 20:44:50 +0100 linux-signed (3.5.0-17.27+signed2) quantal-proposed; urgency=low * Add linux-image-extra to dependancies to pull in full set of kernel modules. -- Andy Whitcroft Mon, 08 Oct 2012 13:07:30 +0100 linux-signed (3.5.0-17.27+signed1) quantal-proposed; urgency=low * Add initial postinst and postrm support. Simply calls out to update-grub. * Add versioned dependancies to the main linux-image binaries as we need the approriate modules and initramfs. -- Andy Whitcroft Fri, 05 Oct 2012 15:21:39 +0100 linux-signed (3.5.0-17.27) quantal-proposed; urgency=low * Version 3.5.0-17.27 * Initial release. -- Andy Whitcroft Fri, 05 Oct 2012 08:35:22 +0100 ubuntu-trusty-signed/debian/control0000664000000000000000000000216412321307736014743 0ustar Source: linux-signed Section: utils Priority: optional Maintainer: Canonical Kernel Team Build-Depends: debhelper (>= 9), lsb-release, python3, python3-apt, sbsigntool, linux-image-3.13.0-24-generic (>= 3.13.0-24.46) Standards-Version: 3.9.4 Package: linux-signed-image-3.13.0-24-generic Architecture: linux-amd64 Depends: ${misc:Depends}, sbsigntool, linux-image-3.13.0-24-generic (= 3.13.0-24.46), linux-image-extra-3.13.0-24-generic (= 3.13.0-24.46) Built-Using: linux (= ${linux:Version}) Description: Signed kernel image generic A kernel image for generic. This version of it is signed with Canonical's UEFI signing key. Package: kernel-signed-image-3.13.0-24-generic-di Package-Type: udeb Section: debian-installer Priority: extra Provides: kernel-signed-image Architecture: linux-amd64 Built-Using: linux (= ${linux:Version}) Description: Signed kernel image generic for the Debian installer A kernel image for generic. This version of it is signed with Canonical's UEFI signing key. It is intended for the Debian installer, it does _not_ provide a usable kernel for your full Debian system. ubuntu-trusty-signed/download-signed0000775000000000000000000000377612315146630015131 0ustar #! /usr/bin/python3 import sys import re import shutil from urllib.parse import urlparse, urlunparse from urllib.request import urlopen from urllib.error import HTTPError import apt from aptsources.distro import get_distro (package_name, package_version, src_package) = sys.argv[1:] # Find the package in the available archive repositories. Use a _binary_ # package name and version to locate the appropriate archive. Then use the # URI there to look for and find the appropriate binary. cache = apt.Cache() package = None for version in cache[package_name].versions: if version.version == package_version: package = version break if not package: raise KeyError("{0}: package version not found".format(package_name)) pool_parsed = urlparse(package.uri) distro = get_distro().codename #distro = 'quantal' package_dir = "/main/uefi/%s-%s/%s/" % ( src_package, package.architecture, package_version) def download(base): for pocket in ('-proposed', '-updates', '-security', '', '-backports'): dists_parsed = list(pool_parsed) dists_parsed[2] = re.sub(r"/pool/.*", "/dists/" + distro + \ pocket + package_dir + base, dists_parsed[2]) dists_uri = urlunparse(dists_parsed) print("Downloading %s ... " % dists_uri, end='') try: with urlopen(dists_uri) as dists, open(base, "wb") as out: shutil.copyfileobj(dists, out) except HTTPError as e: if e.code == 404: print("not found") continue raise else: print("found") return True return False for base in "flavours", "version": if not download(base): print('download-signed: {0}: not found'.format(base)) sys.exit(1) with open("flavours") as fd: for line in fd: filename = line.rstrip() filename += '.signed' if not download(filename): print('download-signed: {0}: not found'.format(filename)) sys.exit(1) ubuntu-trusty-signed/update-version0000775000000000000000000000222212315146630015001 0ustar #!/bin/bash if [ "$#" -ne 1 ]; then echo "Usage: $0 " 1>&2 exit 1 fi master_dir="$1" here_version=`LC_ALL=C dpkg-parsechangelog | grep ^Version: | cut -d ' ' -f 2` here_series=`LC_ALL=C dpkg-parsechangelog | grep ^Distribution: | cut -d ' ' -f 2` if [ "$here_series" = "UNRELEASED" ]; then here_series=`LC_ALL=C dpkg-parsechangelog --until "$here_version" | grep ^Distribution: | cut -d ' ' -f 2` fi if [ -f "$master_dir/debian/debian.env" ]; then branch=`sed -ne 's/DEBIAN=//p' <"$master_dir/debian/debian.env"` changelog="-l$branch/changelog" else changelog="" fi master_version=`(cd "$master_dir" && LC_ALL=C dpkg-parsechangelog $changelog | grep ^Version: | cut -d ' ' -f 2)` #echo "here_version: <$here_version>" #echo "master_version: <$master_version>" if dpkg --compare-versions "$here_version" lt "$master_version"; then dch --newversion "$master_version" "Version $master_version" dch --distribution "$here_series" --release "" echo "Updated to version: $master_version" echo "git commit -s -m 'UBUNTU: Ubuntu-$master_version' debian/changelog" echo "git tag -s -m 'Ubuntu-$master_version' 'Ubuntu-$master_version'" fi