Files
start-os/build/image-recipe
Aiden McClelland effcec7e2e feat: add Secure Boot MOK key enrollment and module signing
Generate DKMS MOK key pair during OS install, sign all unsigned kernel
modules, and enroll the MOK certificate using the user's master password.
On reboot, MokManager prompts the user to complete enrollment. Re-enrolls
on every boot if the key exists but isn't enrolled yet. Adds setup wizard
dialog to inform the user about the MokManager prompt.
2026-03-11 15:18:46 -06:00
..
2025-12-22 13:39:38 -07:00
2025-12-22 13:39:38 -07:00

StartOS Image Recipes

Code and debos recipes that are used to create the StartOS live and installer images.

If you want to build a local image in the exact same environment used to build official StartOS images, you can use the run-local-build.sh helper script:

# Prerequisites
sudo apt-get install -y debspawn binfmt-support
sudo mkdir -p /etc/debspawn/ && echo "AllowUnsafePermissions=true" | sudo tee /etc/debspawn/global.toml

# Build image
./run-local-build.sh

In order for the build to work properly, you will need debspawn >= 0.5.1, the build may fail with prior versions.