File: efi-secure-boot.patch

package info (click to toggle)
u-boot 2023.01%2Bdfsg-2%2Bdeb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 167,504 kB
  • sloc: ansic: 2,036,483; python: 39,879; asm: 21,501; makefile: 11,365; perl: 11,111; sh: 3,657; cpp: 1,868; yacc: 1,100; lex: 747; awk: 57; tcl: 28; sed: 24
file content (22 lines) | stat: -rw-r--r-- 773 bytes parent folder | download 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
 
Author: Luca Boccassi <bluca@debian.org>
Description: enable support for secure boot on qemu arm64/amd64
 Secure boot is now supported upstream in EFI mode. It is disabled
 by default, and can be enabled by loading keys from the console:

 https://u-boot.readthedocs.io/en/latest/develop/uefi/uefi.html#configuring-uefi-secure-boot
--- a/configs/qemu-x86_64_defconfig
+++ b/configs/qemu-x86_64_defconfig
@@ -78,3 +78,5 @@
 CONFIG_CONSOLE_SCROLL_LINES=5
 CONFIG_GENERATE_ACPI_TABLE=y
 # CONFIG_GZIP is not set
+CONFIG_EFI_SECURE_BOOT=y
+CONFIG_EFI_SIGNATURE_SUPPORT=y
--- a/configs/qemu_arm64_defconfig
+++ b/configs/qemu_arm64_defconfig
@@ -68,3 +68,5 @@
 CONFIG_USB_EHCI_HCD=y
 CONFIG_USB_EHCI_PCI=y
 CONFIG_TPM=y
+CONFIG_EFI_SECURE_BOOT=y
+CONFIG_EFI_SIGNATURE_SUPPORT=y