gistfile1.txt

#!/bin/bash
# sbctl automatic kernel signing hook for Pop!_OS
# This script automatically signs new kernels with sbctl when they're installed

set -e

KERNEL_VERSION="$1"
KERNEL_IMAGE="$2"

if [ -z "$KERNEL_VERSION" ] || [ -z "$KERNEL_IMAGE" ]; then
    echo "Error: Missing kernel version or image path" >&2
    exit 1
fi

# Check if sbctl is installed
if ! command -v sbctl &> /dev/null; then
    echo "sbctl not found, skipping kernel signing" >&2
    exit 0
fi

echo "Signing kernel $KERNEL_VERSION with sbctl..."

# Sign the kernel image
sbctl sign -s "$KERNEL_IMAGE"

# Verify the signatures
echo "Verifying signatures..."
sbctl verify

echo "Kernel $KERNEL_VERSION signed successfully!"