| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: shim | Distribution: openSUSE Tumbleweed |
| Version: 16.1 | Vendor: openSUSE |
| Release: 4.2 | Build date: Wed Jun 17 07:14:51 2026 |
| Group: System/Boot | Build host: reproducible |
| Size: 3153949 | Source RPM: shim-leap-16.1-4.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Summary: UEFI shim loader | |
shim is a trivial EFI application that, when run, attempts to open and execute another application.
BSD-2-Clause
* Wed Jun 17 2026 Joey Lee <jlee@suse.com>
- Apply nx-shim, create non-nx shim boot entry:
shim-16.1-lp156.7.1.aarch64.rpm
shim-16.1-lp156.7.1.x86_64.rpm
RPMs are coming from openSUSE secure-boot shim 15.6:
https://build.opensuse.org/projects/openSUSE:Factory:secure-boot/packages/shim/repositories/15.6/binaries
- Version: 16.1, "Aug 14 2025"
- Include the bug fixes for bsc#1205588
- Use nx shim as the default shim binary.
Add Microsoft-signed nx-shim:
Source40 shim-opensuse.nx.x86.efi
Source41 shim-opensuse.nx.aarch64.efi
- Use ms-signed nx shim when the version equals with the version of
newly built shim
- Version mismatch indicates development of a new shim.
- Create non-nx shim boot entry as a fallback option
Because we apply nx shim as the default shim binary in
/boot/efi/EFI/opensuse/shim.efi
/boot/efi/EFI/boot/bootx64.efi or bootaa64.efi
In case that user got any problem when the machine boots with nx-shim,
so we create a new boot entry for non-nx shim as a fallback option by
efibootmgr.
- Removed the override shim-install. Let's direct use the shim-install
script from shim-16.1*.rpm.
* Thu Mar 12 2026 Joey Lee <jlee@suse.com>
- Modified the pretrans Lua script to work around the broken DB issue
caused by buggy firmware when Secure Boot is disabled.
It is impossible for the db to be empty while Secure Boot is enabled.
If the db is empty, the installation behavior will be treated the
same as when Secure Boot is disabled. We allow the shim installation
process to continue and display a message reminding the user to add
the appropriate certificate. (bsc#1259096)
* Wed Dec 10 2025 Joey Lee <jlee@suse.com>
- shim-leap.spec: Always put openSUSE Secure Boot CA to target array
Unlike shim.spec, shim-leap.spec does not have #needssslcertforbuild
because our shim.efi is already signed by openSUSE key in
openSUSE:Factory:secure-boot/shim. It causes that the _projectcert.crt
can not be found by shim-leap which means the openSUSE CA can not be
added to the target certificates array in pretrans Lua script.
I can not directly add '# needssslcertforbuild' to shim-leap.spec
because it will causes that shim.efi be signed by openSUSE key again.
Let's always put openSUSE Secure Boot CA to target certificates array
because the shim.efi already has openSUSE signature. (bsc#1254679)
* Mon Dec 08 2025 Joey Lee <jlee@suse.com>
- Update shim version to 16.1:
shim-16.1-lp156.4.1.aarch64.rpm
shim-16.1-lp156.4.1.x86_64.rpm
RPMs are coming from openSUSE secure-boot shim 15.6:
https://build.opensuse.org/projects/openSUSE:Factory:secure-boot/packages/shim/repositories/15.6/binaries
- Version: 16.1, "Aug 14 2025"
- Include the bug fixes for bsc#1205588
- Add a pretrans script to verify that the necessary certificate is
in the UEFI db.
- Add DER format certificate files for the pretrans script to verify
that the necessary certificate is in the UEFI db
- openSUSE Secure Boot CA, 2013-2035
openSUSE_Secure_Boot_CA_2013.crt
- SUSE Linux Enterprise Secure Boot CA, 2013-2035
SUSE_Linux_Enterprise_Secure_Boot_CA_2013.crt
- Microsoft Corporation UEFI CA 2011, 2011-2026
Microsoft_Corporation_UEFI_CA_2011.crt
- Microsoft UEFI CA 2023, 2023-2038
Microsoft_UEFI_CA_2023.crt
* Wed Feb 19 2025 Ana Guerrero <ana.guerrero@suse.com>
- Only copy uncompressed directories.
* Fri Sep 20 2024 Dominique Leuenberger <dleuenberger@suse.com>
- RelEng emergency fix: fix source number to install shim-install.
* Mon Sep 02 2024 Dennis Tseng <dennis.tseng@suse.com>
- Update shim version for aarch64 to shim-15.8-lp155.8.8.aarch64.rpm
coming from openSUSE secure-boot 15.5
+ To avoid failure check by robot, SOURCEs in spec file are redefined.
+ Version: 15.8, "Jan 23 2024"
+ Include the bug fixes for bsc#1215099,bsc#1215098,bsc#1215100,bsc#1215101,
bsc#1215102, and bsc#1215103.
* Tue Jul 23 2024 Dennis Tseng <dennis.tseng@suse.com>
- Update to shim to 15.8-shim-15.8-lp155.8.2.x86_64.rpm from
openSUSE secure-boot 15.5
+ Version: 15.8, "Jan 23 2024"
+ Align the outside shim-install with the one in RPM file.
This is because all important fixes in outside shim-install are
also fixed in shim-install of RPM file. For consistency purposes,
the outside shim-install is updated in this version.
+ Include the bug fixes for bsc#1215099,bsc#1215098,bsc#1215100,bsc#1215101,
bsc#1215102, and bsc#1215103.
* Thu Mar 14 2024 Gary Ching-Pang Lin <glin@suse.com>
- Update shim-install to set the SRK algorithm for grub2 TPM2
key protector (bsc#1213945)
+ 92d0f4305df73 Set the SRK algorithm for the TPM2 protector
- Build with update-bootloader-rpm-macros and
fde-tpm-helper-rpm-macros and update the %post and %posttrans
macros correctly
* Wed Jun 07 2023 Gary Ching-Pang Lin <glin@suse.com>
- Update shim-install to support FDE
+ Read GRUB_CRYPTODISK_PASSWORD and GRUB_TPM2_SEALED_KEY to
create the proper cryptomount command for grub.cfg
+ Save the PCR snapshot if grub2 supports the command
+ Support 'no_grub_install' to skip grub2-install
+ Detect the OS ID of openSUSE Leap
* Thu May 25 2023 Gary Ching-Pang Lin <glin@suse.com>
- Remove the sym-links in /usr/lib64/efi for the newer distro
versions since we don't use them anymore
/etc/uefi /etc/uefi/certs /etc/uefi/certs/4659838C-shim-opensuse.crt /usr/sbin/shim-install /usr/share/doc/packages/shim /usr/share/doc/packages/shim/COPYRIGHT /usr/share/doc/packages/shim/README /usr/share/efi /usr/share/efi/x86_64 /usr/share/efi/x86_64/MokManager.efi /usr/share/efi/x86_64/fallback.efi /usr/share/efi/x86_64/shim-opensuse.der /usr/share/efi/x86_64/shim-opensuse.efi /usr/share/efi/x86_64/shim-opensuse.nx.efi /usr/share/efi/x86_64/shim.efi /usr/share/efi/x86_64/shim.non-nx.efi /usr/share/efi/x86_64/shim.nx.efi
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Aug 15 00:13:46 2026