notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

Port details
shim UEFI Secure Boot shim loader
0.9_5 sysutils on this many watch lists=1 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 0.9_5Version of this port present on the latest quarterly branch.
Maintainer: egypcio@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2015-01-15 10:09:48
Last Update: 2023-04-23 09:09:58
Commit Hash: 8d3e020
People watching this port, also watch:: ncrack, keyd, endless-sky, TkTopNetFlows, ratproxy
License: BSD2CLAUSE
WWW:
https://github.com/mjg59/shim
Description:
shim is a trivial EFI application that, when run, attempts to open and execute another application. It will initially attempt to do this via the standard EFI LoadImage() and StartImage() calls. If these fail (because secure boot is enabled and the binary is not signed with an appropriate key, for instance) it will then validate the binary against a built-in certificate. If this succeeds and if the binary or signing key are not blacklisted then shim will relocate and execute the binary.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (8 items)
Collapse this list.
  1. lib/shim/shim.pem
  2. lib/shim/shim.key
  3. lib/shim/MokManager.efi
  4. lib/shim/fallback.efi
  5. lib/shim/shim.efi
  6. /usr/local/share/licenses/shim-0.9_5/catalog.mk
  7. /usr/local/share/licenses/shim-0.9_5/LICENSE
  8. /usr/local/share/licenses/shim-0.9_5/BSD2CLAUSE
Collapse this list.
Dependency lines:
  • shim>0:sysutils/shim
To install the port:
cd /usr/ports/sysutils/shim/ && make install clean
To add the package, run one of these commands:
  • pkg install sysutils/shim
  • pkg install shim
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: shim
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1535569510 SHA256 (mjg59-shim-0.9_GH0.tar.gz) = d277d7bea0b5d554dacf284d84252a5e995fb4ef54b6de5ec6296c6c2a9a21bd SIZE (mjg59-shim-0.9_GH0.tar.gz) = 1302211

Packages (timestamps in pop-ups are UTC):
shim
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest-0.9_5--0.9_5---
FreeBSD:13:quarterly-0.9_5--0.9_5---
FreeBSD:14:latest-0.9_5--0.9_5---
FreeBSD:14:quarterly-0.9_5--0.9_5---
FreeBSD:15:latest-0.9_5n/a-n/a---
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. libgnuefi.a : devel/gnu-efi
  2. bash : shells/bash
  3. gmake>=4.3 : devel/gmake
  4. gcc12 : lang/gcc12
  5. as : devel/binutils
Runtime dependencies:
  1. gcc12 : lang/gcc12
There are no ports dependent upon this port

Configuration Options:
No options to configure
Options name:
sysutils_shim
USES:
compiler gmake shebangfix
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeload.github.com/mjg59/shim/tar.gz/0.9?dummy=/
Collapse this list.

Number of commits found: 26

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
0.9_5
23 Apr 2023 09:09:58
commit hash: 8d3e020ed032a8db00208994d0db646de7dc6f5bcommit hash: 8d3e020ed032a8db00208994d0db646de7dc6f5bcommit hash: 8d3e020ed032a8db00208994d0db646de7dc6f5bcommit hash: 8d3e020ed032a8db00208994d0db646de7dc6f5b files touched by this commit
Gerald Pfeifer (gerald) search for other commits by this committer
*: Bump PORTREVISIONs for math/mpc update to 1.3.1
07 Sep 2022 21:58:51
commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4commit hash: fb16dfecae4a6efac9f3a78e0b759fb7a3c53de4 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
0.9_4
07 Sep 2022 21:10:59
commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52commit hash: b7f05445c00f2625aa19b4154ebcbce5ed2daa52 files touched by this commit
Stefan Eßer (se) search for other commits by this committer
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
0.9_4
20 Jul 2022 14:23:05
commit hash: ea7123695aad83707eba8adaf42b29dac7f296e4commit hash: ea7123695aad83707eba8adaf42b29dac7f296e4commit hash: ea7123695aad83707eba8adaf42b29dac7f296e4commit hash: ea7123695aad83707eba8adaf42b29dac7f296e4 files touched by this commit
Tobias C. Berner (tcberner) search for other commits by this committer
sysutils: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <jsmith@resonatingmedia.com>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Aaron Landwehr <aaron@snaphat.com>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Adrian Chadd
  *  Adrian Chadd <adrian@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alan Eldridge <alane@FreeBSD.org>
  *  Alan Eldridge <alane@geeksrus.net>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Deiter <alex.deiter@gmail.com>
(Only the first 15 lines of the commit message are shown above View all of this commit message)
0.9_4
06 Apr 2021 14:31:07
commit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344ebcommit hash: 305f148f482daf30dcf728039d03d019f88344eb files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
Remove # $FreeBSD$ from Makefiles.
0.9_4
23 Oct 2019 08:19:02
Revision:515238Original commit files touched by this commit
egypcio search for other commits by this committer
sysutils/shim: fix building

  * files/
    patch-lib-console.c: %s/EFI_WARN_UNKOWN_GLYPH/EFI_WARN_UNKNOWN_GLYPH/g
0.9_4
26 Jul 2019 20:46:57
Revision:507372Original commit files touched by this commit
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
0.9_3
25 Jun 2019 13:32:34
Revision:505089Original commit files touched by this commit
egypcio search for other commits by this committer
sysutils/shim: unbreak build with GCC 9

PR:		238654
Submitted by:	tobik
Approved by:	mentors (implicit)
Obtained from:	https://github.com/rhboot/shim/pull/170
0.9_2
19 Dec 2018 17:30:22
Revision:487805Original commit files touched by this commit
egypcio search for other commits by this committer
sysutils/shim: introduce new ARCH support (i386)

    Makefile
        bump PORTREVISION;
        USE_CSTD: gnu89 became gnu99 [0];

    files/
        *: if ARCH=i386, replaces ARCH with ia32;
        elf_ia32_efi.lds: sync OUTPUT_FORMAT [1];
        MokManager.c: used UINT32 for MokNum.

Reported by:	pkg-fallout
Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D18572

[0] shim.c:2176:3: error: this decimal constant is unsigned only in ISO C90
[1] patch-elf_x86_64_efi.lds always appended -freebsd as OUTPUT_FORMAT
0.9_1
12 Dec 2018 01:35:36
Revision:487272Original commit files touched by this commit
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590
0.9
05 Dec 2018 14:09:12
Revision:486672Original commit files touched by this commit
egypcio search for other commits by this committer
use @FreeBSD.org as MAINTAINER instead of my private address

  benchmarks/vegeta
  devel/busybee
  devel/git-lfs
  devel/gnu-efi
  devel/hub
  devel/libe
  devel/py-fabric3
  devel/py-fabric3
  dns/dhisd
  dns/dnscrypt-proxy2
  dns/go-geodns
  emulators/hatari
  irc/weechat-otr
(Only the first 15 lines of the commit message are shown above View all of this commit message)
0.9
21 Nov 2018 13:27:07
Revision:485512Original commit files touched by this commit
egypcio search for other commits by this committer
sysutils/shim: update from 0.8 to 0.9

  - adopt the port;
  - original version from PR 231029 was modified;
  - add compiler, and shebangfix to USES;
  - reorder variables in Makefile (silent portlint);
  - rework do-install.

PR:		231029
Reviewed by:	fernape, mat, tcberner, trasz
Approved by:	rene (mentor)
Differential Revision:	https://reviews.freebsd.org/D17019
0.8_6
29 Jul 2018 22:18:46
Revision:475857Original commit files touched by this commit
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.

This includes ports
 - featuring USE_GCC=yes or USE_GCC=any,
 - featuring USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and those
 - with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
   c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.

PR:		222542
0.8_5
10 Mar 2018 17:46:06
Revision:464084Original commit files touched by this commit
gerald search for other commits by this committer
Bump PORTREVISIONs of all users of math/mpc that we just updated to
version 1.1.0 (via revision 464079).
0.8_4
10 Sep 2017 20:55:39
Revision:449591Original commit files touched by this commit
gerald search for other commits by this committer
Bump PORTREVISION for ports depending on the canonical version of GCC
(via Mk/bsd.default-versions.mk and lang/gcc) which has moved from
GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
0.8_3
01 Apr 2017 15:23:32
Revision:437439Original commit files touched by this commit
gerald search for other commits by this committer
Bump PORTREVISIONs for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some
circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
0.8_2
05 Feb 2017 04:36:22
Revision:433350Original commit files touched by this commit
jbeich search for other commits by this committer
sysutils/shim: unbreak with gcc5 or later

In file included from /usr/local/include/efi/efi.h:35:0,
                 from shim.c:36:
/usr/local/include/efi/x86_64/efibind.h:88:24: fatal error: stdint.h: No such
file or directory

PR:		216707
Reported by:	antoine (via exp-run)
0.8_2
20 Nov 2016 09:38:09
Revision:426566Original commit files touched by this commit
gerald search for other commits by this committer
Bump PORTREVISIONS for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.8.5 to GCC 4.9.4 (at least under some
circumstances such as versions of FreeBSD or platforms).

In particular that is ports with USE_GCC=yes, USE_GCC=any, or one of
gcc-c++11-lib, openmp, nestedfct, c++11-lib as well as c++14-lang,
c++11-lang, c++0x, c11 requested via USES=compiler.
0.8_1
22 Jun 2016 10:12:46
Revision:417298Original commit files touched by this commit
trasz search for other commits by this committer
Drop maintainership for some of my ports.
0.8_1
01 Apr 2016 14:25:18
Revision:412349Original commit files touched by this commit
mat search for other commits by this committer
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
0.8_1
07 May 2015 20:24:16
Revision:385665Original commit files touched by this commit
mat search for other commits by this committer
Update ports in the remaining categories to not use GH_COMMIT.

With minor cleanups to make things simpler.

With hat:	portmgr
Sponsored by:	Absolight
0.8_1
23 Apr 2015 20:52:36
Revision:384611Original commit files touched by this commit
antoine search for other commits by this committer
Fix BUILD_DEPENDS
0.8_1
21 Mar 2015 12:12:03
Revision:381793Original commit files touched by this commit
marino search for other commits by this committer
For traz@ ports: Change USE_GCC=4.8+ to preferred USE_GCC=yes

Approved by:	just fix it
0.8_1
23 Jan 2015 10:35:09
Revision:377720Original commit files touched by this commit
trasz search for other commits by this committer
Install certificate and key matching what's embedded in the shim itself.

Sponsored by:	The FreeBSD Foundation
0.8
21 Jan 2015 13:48:36
Revision:377608Original commit files touched by this commit
trasz search for other commits by this committer
Don't hardcode "gcc48"; it would break after GCC upgrade.  Don't install
*.efi files as executables; from the strip(1) point of view they are data
files (actually, they are executables, but PE, not ELF).

Sponsored by:	The FreeBSD Foundation
0.8
15 Jan 2015 10:09:36
Revision:377070Original commit files touched by this commit
trasz search for other commits by this committer
New port: sysutils/shim

shim is a trivial EFI application that, when run, attempts to open and
execute another application. It will initially attempt to do this via the
standard EFI LoadImage() and StartImage() calls. If these fail (because secure
boot is enabled and the binary is not signed with an appropriate key, for
instance) it will then validate the binary against a built-in certificate. If
this succeeds and if the binary or signing key are not blacklisted then shim
will relocate and execute the binary.

Sponsored by:	The FreeBSD Foundation

Number of commits found: 26