more cleanup

Author: h908714124

Makefile

@@ -4,7 +4,8 @@ export TOPDIR	:= $(shell pwd)/
 
 include Make.rules
 
-efiupdate: efi-updatevar
+efi-updatevar: efi-updatevar.o lib/lib.a
+	$(CC) $(ARCH3264) -o $@ $< lib/lib.a
 
 all: $(BINARIES) $(MANPAGES)
 
@@ -19,9 +20,6 @@ install: all
 lib/lib.a:
 	$(MAKE) -C lib $(notdir $@)
 
-efi-updatevar: efi-updatevar.o lib/lib.a
-	$(CC) $(ARCH3264) -o $@ $< lib/lib.a
-
 clean:
 	rm -f $(BINARIES) *.o
 	rm -f doc/*.1

README.md

@@ -10,7 +10,7 @@ The upstream efi-updatevar was modified so that it doesn't write to the efivars
 
 ```sh
 sudo dnf group install c-development
-sudo dnf install efivar-devel gnu-efi-devel openssl openssl-devel openssl-devel-engine help2man
+sudo dnf install gnu-efi-devel openssl-devel
 ```
 
 ### Building efi-updatevar
@@ -42,13 +42,7 @@ sbctl create-keys
 sbctl enroll-keys --microsoft --export auth
 ```
 
-Allow writing to efivarfs:
-
-```sh
-chattr -i /sys/firmware/efi/efivars/*
-```
-
-Create the vardata files:
+Convert auth to vardata:
 
 ```sh
 ./efi-updatevar db.auth /tmp/db.vardata db
@@ -60,6 +54,7 @@ To update the efi variables, simply copy the vardata files to their correct dest
 The destination filenames in the efivars fs look random, but they are always the same:
 
 ```sh
+chattr -i /sys/firmware/efi/efivars/*
 cp /tmp/db.vardata /sys/firmware/efi/efivars/db-d719b2cb-3d3a-4596-a3bc-dad00e67656f
 cp /tmp/KEK.vardata /sys/firmware/efi/efivars/KEK-8be4df61-93ca-11d2-aa0d-00e098032b8c
 cp /tmp/PK.vardata /sys/firmware/efi/efivars/PK-8be4df61-93ca-11d2-aa0d-00e098032b8c