diff --git a/README.md b/README.md index fcd1206..1d1175b 100644 --- a/README.md +++ b/README.md @@ -1,10 +1,11 @@ -# uki-config +# tofugarden.secureboot -This repository contains an Ansible role to configure direct UKI booting on Fedora 40. +This repository contains an Ansible roles to configure secure boot. ## Overview -The `uki_config` role does the following high-level things: +Currently, only one role is provided by this collection: `uki_config`. It does the following +high-level things: 1. Enroll a valid machine owner key (MOK) for image signing 2. Configure `kernel-install` to generate a unified kernel image (UKI) instead of a separate @@ -20,18 +21,6 @@ This role requires that secure boot be enabled on each host. There are not many use UKIs without secure boot, so this was assumed. If you would like support for unsigned UKIs, please submit an issue/PR. -### Layout - -This repository does not (yet?) use the standardized collection directory structure. Instead, -the role is stored in `./roles/uki_config` relative to the project root. This should make it -easy to import for use in your own playbook. - -### Examples - -A test playbook is provided in the project root, under the name `playbook.yaml`. It is configued -to run the role with default arguments for all hosts in a "test" group. An inventory file is not -provided. - ### Interaction This playbook may require manual administrator interaction. If you choose to generate a new MOK diff --git a/galaxy.yaml b/galaxy.yaml new file mode 100644 index 0000000..efb4e7d --- /dev/null +++ b/galaxy.yaml @@ -0,0 +1,32 @@ +namespace: tofugarden + +name: secureboot + +version: 0.0.1 + +readme: README.md + +authors: + Christopher Palmer-Richez tofu.ansible@chorky.net @crichez + +description: A collection related to secure boot management. + +license: + - GPL-3.0-only + +tags: + - secureboot + - mok + - shim + - tpm + - uki + +dependencies: + community.crypto: "9.2.0 <10.0.0" + community.general: "2.21.1 <3.0.0" + +repository: https://github.com/crichez/tofugarden.secureboot.git + +documentation: https://github.com/crichez/tofugarden.secureboot + +issues: https://github.com/crichez/tofugarden.secureboot/issues