{"id":16896141,"url":"https://github.com/yhndnzj/sbupdate","last_synced_at":"2026-05-15T13:36:13.737Z","repository":{"id":137262935,"uuid":"602003136","full_name":"YHNdnzj/sbupdate","owner":"YHNdnzj","description":"Generate signed Unified Kernel Images","archived":false,"fork":false,"pushed_at":"2026-01-26T20:53:45.000Z","size":148,"stargazers_count":0,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-01-27T07:45:48.862Z","etag":null,"topics":["mkinitcpio","mkinitcpio-hook","secure-boot","systemd","uki","ukify"],"latest_commit_sha":null,"homepage":"https://aur.archlinux.org/packages/sbupdate-mkinitcpio","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"andreyv/sbupdate","license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/YHNdnzj.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2023-02-15T09:42:54.000Z","updated_at":"2026-01-26T20:53:42.000Z","dependencies_parsed_at":"2023-05-31T17:00:43.253Z","dependency_job_id":"79c2a158-b897-4523-aace-7f6bb045d049","html_url":"https://github.com/YHNdnzj/sbupdate","commit_stats":null,"previous_names":[],"tags_count":18,"template":false,"template_full_name":null,"purl":"pkg:github/YHNdnzj/sbupdate","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/YHNdnzj%2Fsbupdate","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/YHNdnzj%2Fsbupdate/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/YHNdnzj%2Fsbupdate/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/YHNdnzj%2Fsbupdate/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/YHNdnzj","download_url":"https://codeload.github.com/YHNdnzj/sbupdate/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/YHNdnzj%2Fsbupdate/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33068780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-15T11:35:32.926Z","status":"ssl_error","status_checked_at":"2026-05-15T11:35:31.362Z","response_time":103,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["mkinitcpio","mkinitcpio-hook","secure-boot","systemd","uki","ukify"],"created_at":"2024-10-13T17:28:26.173Z","updated_at":"2026-05-15T13:36:13.719Z","avatar_url":"https://github.com/YHNdnzj.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# sbupdate\n\nGenerate signed Unified Kernel Images\n\n\u003e This tool is originally developed by [Andrey Vihrov](https://github.com/andreyv/sbupdate),\n\u003e now rewritten as a mkinitcpio post hook by YHNdnzj\n\n## Installation\n\n```console\n$ aur_helper -S sbupdate-mkinitcpio\n```\n\n## Usage\n\n### Generate custom Secure Boot keys\n\nVarious ways of doing this can be found on [ArchWiki](https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Creating_keys),\nand the simplest of which is to use [sbkeys](https://github.com/electrickite/sbkeys):\n\n```console\n# mkdir -m 0700 /etc/efi-keys\n# cd /etc/efi-keys\n# sbkeys\n```\n\n`/etc/efi-keys` is the default location used by `sbupdate` to search for Secure Boot keys. This can be changed in `/etc/sbupdate.conf` through `KEY_DIR` setting.\n\n### Configure sbupdate\n\n`sbupdate` is a mkinitcpio post hook, so it automatically retrieves kernel image and initramfs locations.\n\nHowever, you need to configure which kernels to generate UKI for and kernel parameters. All available settings are listed in `/etc/sbupdate.conf` with examples.\n\n#### ESP mountpoint\n\n`sbupdate` uses `bootctl --print-boot-path` to acquire the mountpoint of EFI System Partition or XBOOTLDR. This shouldn't need manual configuration.\n\n#### EXTRA_SIGN\n\nThis is an extra function provided by `sbupdate` beside generating UKIs.\nA list of extra EFI binaries can be provided for `sbupdate` to sign using the configured Secure Boot keys.\nA [systemd.path(5)](https://man.archlinux.org/man/systemd.path.5.en) unit is also enabled to trigger re-signing when the binaries get modified.\n\n### Generate signed UKIs\n\n```console\n# mkinitcpio -P\n```\n\nAnd confirm that UKIs are put into place as configured using `UKI_DIR` 😉\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyhndnzj%2Fsbupdate","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fyhndnzj%2Fsbupdate","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyhndnzj%2Fsbupdate/lists"}