sudo dnf install gcab guestfs-tools make qemu-system-x86-core edk2-ovmf
sudo dnf copr enable rhughes/fwupd
sudo dnf update fwupd
- Create a new directory, with the format
Vendor - Model. - Dump the UEFI variables using
make dump. - Extract them using
make -C ../ extract - Build some
custom_*.builder.xmlwith the certs you want to include in the NVRAM - Build a
custom_VARS.fdby runningmake custom_VARS.fd - Run the emulator using
make run - Commit the raw only, for instance
git add *.builder.xml PK* KEK* db*
You can get an old DBX from the LVFS using:
wget https://fwupd.org/downloads/093e6913dfecefbdaa9374a2e1caee7bf7e74c7eda847624e456e344884ba5f6-DBXUpdate-20241101-x64.cab
gcab -x *DBXUpdate-20241101-x64.cab