Binutils 2.38 now has proper PE/COFF output support for arm64. (And is in unstable and testing.) https://sourceware.org/pipermail/binutils/2022-February/119721.html
I think this is the relevant bit: "Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been added to objcopy in order to enable UEFI development using binutils." So we should now be able to build shim-signed on arm64 without the hackery that was previously used to simulate this format (and then had to be disabled because it broke things (AIUI)). I'm not sure how much work this is or if anyone else is already working on it? I presume it should be a simplification by removing the previous workarounds and bulding just as we do on x86 now? Happy to have a look if someone gives me some pointers. (A look round the package for an hour was not sufficient for me to work out how shim itself or the various other bits is all put together (shim-signed, shim-helpers-<arch>-signed etc) and where it needs poking). Wookey -- Principal hats: Debian, Wookware, ARM http://wookware.org/
signature.asc
Description: PGP signature
