From 40a558ec09f2e85b19bfad458228063175ef90bb Mon Sep 17 00:00:00 2001 From: Antony Messerli Date: Sat, 21 Mar 2026 01:27:30 -0500 Subject: [PATCH] Add Secure Boot shim support for Devuan and Kali Both distros publish bootnetx64.efi/bootnetaa64.efi as part of their debian-installer netboot tree, matching the pattern already used by Debian. - devuan.ipxe.j2: add missing arm64 arch mapping, add shim lines - kali.ipxe.j2: add shim lines for amd64 and arm64 --- roles/netbootxyz/templates/menu/devuan.ipxe.j2 | 3 +++ roles/netbootxyz/templates/menu/kali.ipxe.j2 | 2 ++ 2 files changed, 5 insertions(+) diff --git a/roles/netbootxyz/templates/menu/devuan.ipxe.j2 b/roles/netbootxyz/templates/menu/devuan.ipxe.j2 index 5b8b71d7..a3f95129 100644 --- a/roles/netbootxyz/templates/menu/devuan.ipxe.j2 +++ b/roles/netbootxyz/templates/menu/devuan.ipxe.j2 @@ -9,6 +9,7 @@ goto ${menu} set os Devuan set os_arch ${arch} iseq ${os_arch} x86_64 && set os_arch amd64 || +iseq ${os_arch} arm64 && set os_arch arm64 || clear devuan_version clear older_release menu ${os} - ${os_arch} @@ -71,6 +72,8 @@ initrd ${devuan_mirror}/${dir}/initrd.gz echo echo MD5sums: md5sum linux initrd.gz +iseq ${os_arch} amd64 && shim ${devuan_mirror}/${dir}/bootnetx64.efi || +iseq ${os_arch} arm64 && shim ${devuan_mirror}/${dir}/bootnetaa64.efi || boot :devuan_exit diff --git a/roles/netbootxyz/templates/menu/kali.ipxe.j2 b/roles/netbootxyz/templates/menu/kali.ipxe.j2 index 0d295ee8..cf44416e 100644 --- a/roles/netbootxyz/templates/menu/kali.ipxe.j2 +++ b/roles/netbootxyz/templates/menu/kali.ipxe.j2 @@ -37,6 +37,8 @@ initrd ${kali_mirror}/${dir}/initrd.gz echo echo MD5sums: md5sum linux initrd.gz +iseq ${os_arch} amd64 && shim ${kali_mirror}/${dir}/bootnetx64.efi || +iseq ${os_arch} arm64 && shim ${kali_mirror}/${dir}/bootnetaa64.efi || boot :kali_exit