mirror of
https://github.com/tommytran732/Arch-Setup-Script
synced 2024-11-09 04:01:33 -05:00
Sign grub
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
f46ebb9625
commit
c77d6c1e2d
@ -14,14 +14,17 @@
|
|||||||
# the License.
|
# the License.
|
||||||
|
|
||||||
# Install new grub version
|
# Install new grub version
|
||||||
grub-install --target=x86_64-efi --efi-directory=/boot/efi --bootloader-id=GRUB --modules="normal test efi_gop efi_uga search echo linux all_video gfxmenu gfxterm_background gfxterm_menu gfxterm loadenv configfile gzio part_gpt cryptodisk luks gcry_rijndael gcry_sha256 btrfs" --disable-shim-lock
|
sudo grub-install --target=x86_64-efi --efi-directory=/boot/efi --bootloader-id=GRUB --modules="normal test efi_gop efi_uga search echo linux all_video gfxmenu gfxterm_background gfxterm_menu gfxterm loadenv configfile gzio part_gpt cryptodisk luks gcry_rijndael gcry_sha256 btrfs" --disable-shim-lock
|
||||||
|
|
||||||
|
# Sign grub
|
||||||
|
sudo sbctl sign-all
|
||||||
|
|
||||||
# Disable root subvol pinning.
|
# Disable root subvol pinning.
|
||||||
## This is **extremely** important, as snapper expects to be able to set the default btrfs subvol.
|
## This is **extremely** important, as snapper expects to be able to set the default btrfs subvol.
|
||||||
# shellcheck disable=SC2016
|
# shellcheck disable=SC2016
|
||||||
sed -i 's/rootflags=subvol=${rootsubvol}//g' /mnt/etc/grub.d/10_linux
|
sudo sed -i 's/rootflags=subvol=${rootsubvol}//g' /mnt/etc/grub.d/10_linux
|
||||||
# shellcheck disable=SC2016
|
# shellcheck disable=SC2016
|
||||||
sed -i 's/rootflags=subvol=${rootsubvol}//g' /mnt/etc/grub.d/20_linux_xen
|
sudo sed -i 's/rootflags=subvol=${rootsubvol}//g' /mnt/etc/grub.d/20_linux_xen
|
||||||
|
|
||||||
# Generate grub config
|
# Generate grub config
|
||||||
grub-mkconfig -o /boot/grub/grub.cfg
|
sudo grub-mkconfig -o /boot/grub/grub.cfg
|
Loading…
Reference in New Issue
Block a user