SetupBootkit: sign kernel with production key

I accidentally had it signing with limited key. Signed-off-by: Serge Hallyn <[email protected]>
project-machine · Sep 1, 2023 · 85ef2a6 · 85ef2a6
1 parent 56bf07d
commit 85ef2a6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/trust/artifacts.go b/pkg/trust/artifacts.go
@@ -240,8 +240,8 @@ func SetupBootkit(keysetName, bootkitVersion string) error {
 		return errors.Wrapf(err, "Failed replacing manifest certificate")
 	}
 	cmd := []string{"sbsign",
-		"--key", filepath.Join(keysetPath, "uki-limited", "privkey.pem"),
-		"--cert", filepath.Join(keysetPath, "uki-limited", "cert.pem"),
+		"--key", filepath.Join(keysetPath, "uki-production", "privkey.pem"),
+		"--cert", filepath.Join(keysetPath, "uki-production", "cert.pem"),
 		"--output", filepath.Join(destDir, "kernel.efi"),
 		newKernel}
 	err = RunCommand(cmd...)