sbctl: Do not run sbctl pacman hook last

With the systemd 250 approach of placing a signed copy of the boot loader at /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed for bootctl update to install (see #111) it’s rather inconvenient that zz-sbctl.hook runs last, because it leaves no way for a hook to update the bootloader after the signed copy was updated by sbctl.

I’ve removed my custom hook for now and let systemd-boot-update.service do its job after reboot, but I’d prefer to implement the systemd suggestion of having the package manager update the bootloader proactively. Unfortunately with the current name of the sbctl hook that’s not really possible.

Would you mind to rename the hook to e.g. yy-sbctl.hook? Or zz-00-sbctl.hook? So that there’s at least some means to have another hook after sbctl?

About this issue

Original URL
State: open
Created 2 years ago
Comments: 16 (12 by maintainers)

Most upvoted comments

I’m contemplating if renaming it to 50-sbctl-sign.hook would be Good Enough™️. I need to think a bit and see what other distros name the bootctl hook if they provide it.

Foxboron on Jan 3, 2022

I’m contemplating if renaming it to 50-sbctl-sign.hook would be Good Enoughtm. I need to think a bit and see what other distros name the bootctl hook if they provide it.

Nitpick, but wouldn’t that mean it gets run before mkinitcpio generates the new initramfs or unified images since that hook is currently named 90-mkinitcpio-install.hook?

ludvigng on Feb 17, 2022