From 30c14f482e78922114210e30aee98328d977ea7f Mon Sep 17 00:00:00 2001 From: Eduard Tolosa Date: Thu, 6 Mar 2025 18:32:37 +0000 Subject: [PATCH] (post-update): UKI + Secure Boot with sbctl on ArchLinux: systemd-boot walkthrough Pacman hooks Exec are not run in a shell so bash syntax is not supported. Using /bin/sh -c '...' is the way to go. --- ...-04-uki-secure-boot-on-archlinux-systemd-boot-walkthrough.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_posts/2025-03-04-uki-secure-boot-on-archlinux-systemd-boot-walkthrough.md b/_posts/2025-03-04-uki-secure-boot-on-archlinux-systemd-boot-walkthrough.md index 7d88501..2bdf36a 100644 --- a/_posts/2025-03-04-uki-secure-boot-on-archlinux-systemd-boot-walkthrough.md +++ b/_posts/2025-03-04-uki-secure-boot-on-archlinux-systemd-boot-walkthrough.md @@ -171,7 +171,7 @@ Target = systemd [Action] Description = Gracefully upgrading systemd-boot... When = PostTransaction -Exec = /usr/bin/sbctl sign -s -o /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed /usr/lib/systemd/boot/efi/systemd-bootx64.efi && /usr/bin/systemctl restart systemd-boot-update.service +Exec = /bin/sh -c '/usr/bin/sbctl sign -s -o /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed /usr/lib/systemd/boot/efi/systemd-bootx64.efi && /usr/bin/systemctl restart systemd-boot-update.service' ``` This hook will sign the boot loader whenever systemd is installed or upgraded. You can trigger it manually by reinstalling systemd: