Fedora/CentOS:
sudo dnf install guestfs-tools make libvirt qemu-system-x86-core edk2-ovmf
sudo dnf install python3-lxml python3-requests
sudo dnf copr enable rhughes/fwupd
sudo dnf update fwupd
- run
./nvram.py add-currentin the parent directory. A new directory in format of VENDOR-FAMILY-MODEL of the current machine is created with EFI variables containing PK, KEK and DB certificates and DB exclusion lists are created along withcustom_VARS.builder.xmlfile. For the time being, an old DBX is added without the info gathered from the machine being used - Adjust the
custom_VARS.builder.xmlas needed to include the suitable certificates - Build a
custom_VARS.fdby running../nvram.py build custom_VARS.fd - Run the emulator using
../nvram.py run - Commit the raw only, for instance
git add *.builder.xml PK* KEK* db*
An old DBX is included in the repo but you can get it as well from the LVFS using:
wget https://fwupd.org/downloads/093e6913dfecefbdaa9374a2e1caee7bf7e74c7eda847624e456e344884ba5f6-DBXUpdate-20241101-x64.cab
You'll probably also need to install gcab to unpack it:
gcab -x *DBXUpdate-20241101-x64.cab