jlobue10/rEFInd_GUI v3.4.7

rEFInd_GUI 3.4.7

on GitHub

rEFInd_GUI 3.4.7

Added

• EFI Utilities (#109, thanks @zany130). A new button beside the Showtools field opens a dialog that installs, updates or removes common rEFInd tools in EFI/tools on the ESP: netboot.xyz, the EDK2 UEFI shell, Memtest86+, HashTool, MokManager, KeyTool, gdisk and fwupd. Each tool is written under the filename rEFInd's showtools scan already recognizes, so it appears on the tools row once the matching Showtools entry is enabled.
• The privileged helper decides what it trusts, not the GUI. gdisk and HashTool must match a checksum built into the helper. MokManager, KeyTool and fwupd are copied by the helper straight from your distro's packaged files, which must be root-owned. The UEFI shell, netboot.xyz and Memtest86+ are checked against a checksum the helper downloads itself from the publisher. Removal only deletes a file this app installed and that is unchanged on disk.
• A publisher checksum shows that the download was not corrupted. It does not vouch for the publisher. Under Secure Boot, a tool only starts if your firmware or shim trusts its signature; this app does not enroll keys.

Upgrading

Re-run the installer for your platform:

curl -L https://github.com/jlobue10/rEFInd_GUI/raw/main/install-rEFInd-GUI.sh | bash

This step is needed for EFI Utilities. The installer adds one new exact command, rEFInd_GUI_helper efi-utility, to the passwordless sudoers rule. Updating only the deb, rpm or Arch package refreshes the GUI and helper but not the sudoers rule, so the EFI Utilities dialog cannot run until the installer is re-run. Everything else works as before.