From 68ae9f69b7b8d94b359b4c1fb33cc08d8025862c Mon Sep 17 00:00:00 2001 From: Tommy Date: Thu, 6 Jun 2024 12:57:02 -0700 Subject: [PATCH 1/3] Add sbctl --- easy-arch.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/easy-arch.sh b/easy-arch.sh index e84e4db..675950e 100755 --- a/easy-arch.sh +++ b/easy-arch.sh @@ -359,7 +359,7 @@ microcode_detector # Pacstrap (setting up a base sytem onto the new root). info_print "Installing the base system (it may take a while)." -pacstrap -K /mnt base "$kernel" "$microcode" linux-firmware "$kernel"-headers btrfs-progs grub grub-btrfs rsync efibootmgr snapper reflector snap-pac zram-generator sudo &>/dev/null +pacstrap -K /mnt base "$kernel" "$microcode" linux-firmware "$kernel"-headers sbctl btrfs-progs grub grub-btrfs rsync efibootmgr snapper reflector snap-pac zram-generator sudo &>/dev/null # Setting up the hostname. echo "$hostname" > /mnt/etc/hostname From d246fd5f0f09f43af32f2034cec37e43c76e520c Mon Sep 17 00:00:00 2001 From: Tommy Date: Thu, 6 Jun 2024 13:01:03 -0700 Subject: [PATCH 2/3] Generate secureboot keys in arch-chroot --- easy-arch.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/easy-arch.sh b/easy-arch.sh index 675950e..f000e38 100755 --- a/easy-arch.sh +++ b/easy-arch.sh @@ -411,6 +411,10 @@ arch-chroot /mnt /bin/bash -e </dev/null + # Create SecureBoot keys. + # This isn't strictly necessary, linux-hardened preset expects it and mkinitcpio will fail without it. + sbctl create-keys + # Generating a new initramfs. mkinitcpio -P &>/dev/null From f1138ebf86bd48f88b33ffd26d15c10f502eac29 Mon Sep 17 00:00:00 2001 From: Tommy Date: Thu, 6 Jun 2024 13:07:32 -0700 Subject: [PATCH 3/3] Update easy-arch.sh --- easy-arch.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/easy-arch.sh b/easy-arch.sh index f000e38..fc0cdde 100755 --- a/easy-arch.sh +++ b/easy-arch.sh @@ -412,7 +412,7 @@ arch-chroot /mnt /bin/bash -e </dev/null # Create SecureBoot keys. - # This isn't strictly necessary, linux-hardened preset expects it and mkinitcpio will fail without it. + # This isn't strictly necessary, linux-hardened preset expects it and mkinitcpio will fail without it sbctl create-keys # Generating a new initramfs.