fix

Author: LegitCamper

README.md

@@ -42,7 +42,7 @@ A [bootc](https://containers.github.io/bootc/) image — the OS is an OCI contai
 
 ## Secure Boot
 
-The CachyOS kernel is signed with a custom MOK key during the CI build. The public cert is at `/etc/pki/sb-certs/bootc-os-sb.pem` in the image. See `build-scripts/initramfs.sh` for key management notes.
+The CachyOS kernel is signed with a custom MOK key during the CI build. The public cert is at `/etc/pki/sb-certs/bootc-os-sb.cer` in the image. See `build-scripts/initramfs.sh` for key management notes.
 
 ## Building locally
 

build-scripts/initramfs.sh

@@ -43,7 +43,7 @@ chmod 0600 "/usr/lib/modules/$KVER/initramfs.img"
 #
 SB_KEY=/run/secrets/sb_key
 # cert is committed to the repo and copied into the image via system-files/
-SB_CERT=/etc/pki/sb-certs/bootc-os-sb.pem
+SB_CERT=/etc/pki/sb-certs/bootc-os-sb.cer
 
 if [ -f "$SB_KEY" ] && [ -f "$SB_CERT" ]; then
   echo "Signing kernel for Secure Boot: $KIMAGE"