/usr/share/dell/scripts/non-negotiable/99-secure-boot.sh is in dell-recovery 1.48.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 | #!/bin/sh
EFI_APP=/usr/lib/dell/x86_64/MokSBStateSet.efi
#test if SB is enabled
efi_vars_dir=/sys/firmware/efi/vars
EFI_GLOBAL_VARIABLE=8be4df61-93ca-11d2-aa0d-00e098032b8c
SB="$efi_vars_dir/SecureBoot-$EFI_GLOBAL_VARIABLE/data"
if [ -e "$SB" ] && \
[ "$(( $(printf 0x%x \'"$(cat $SB | cut -b1)") & 1 ))" = 1 ]; then
SECURE_BOOT="1"
fi
#if we don't already have secure boot on
#disable module verification
if [ -z "$SECURE_BOOT" ] && [ -f "$EFI_APP" ]; then
cp -v "$EFI_APP" /boot/efi/EFI/ubuntu/
PARTITION_NODE=$(mount | sed '/\/boot\/efi/!d; s, .*,,; s,/dev/,,;')
DEVICE=$(readlink /sys/class/block/$PARTITION_NODE | sed "s,/$PARTITION_NODE,,; s,.*/,,")
PARTITION_NUMBER=$(cat /sys/class/block/$PARTITION_NODE/partition)
efibootmgr -C -l '\EFI\ubuntu\MokSBStateSet.efi' -L 'MokSBStateSet' -d /dev/$DEVICE -p $PARTITION_NUMBER
BOOTNUM=$(efibootmgr | sed '/MokSBStateSet/!d; s,\* .*,,; s,Boot,,')
efibootmgr -v -n $BOOTNUM
fi
|