Name shim
Version 12+gitX (5202f80c32bdcab0469785e953bf9fa8dd4eaaa1)
Summary shim is a trivial EFI application.
Description shim is a trivial EFI application that, when run, attempts to open and execute another application. It will initially attempt to do this via the standard EFI LoadImage() and StartImage() calls. If these fail (because secure boot is enabled and the binary is not signed with an appropriate key, for instance) it will then validate the binary against a built-in certificate. If this succeeds and if the binary or signing key are not blacklisted then shim will relocate and execute the binary.
Section bootloaders
License BSD-2-Clause
Recipe file recipes-bsp/shim/
Layer meta-efi-secure-boot (sumo branch)
  • deploy
  • user-key-store
  • gnu-efi
  • libsign-native
  • openssl
  • openssl-native
  • sbsigntool-native
  • util-linux-native




Patch Status
shim/0006-Prevent-from-removing-intermediate-.efi.patch Pending
shim/0008-Fix-the-world-build-failure-due-to-the-missing-rule-.patch Pending
shim/0012-netboot-replace-the-depreciated-EFI_PXE_BASE_CODE.patch Unknown

Other branches

This recipe in other branches of meta-efi-secure-boot:

Branch Recipe
master shim 15.8
scarthgap (Yocto Project 5.0) shim 15.8
nanbield (Yocto Project 4.3) shim 15.7
mickledore (Yocto Project 4.2) shim 12+gitX
kirkstone (Yocto Project 4.0) shim 12+gitX
honister (Yocto Project 3.4) shim 12+gitX
gatesgarth (Yocto Project 3.2) shim 12+gitX
thud (Yocto Project 2.6) shim 12+gitX
sumo (Yocto Project 2.5) shim 12+gitX (this recipe)
rocko (Yocto Project 2.4) shim 12+gitX