rpms/edk2
5
0
Fork 0
Code Issues Pull Requests Releases Activity

add experimental + testonly secure boot build for armvirt

Browse Source 
It isn't actually secure, but exposes the secure boot APIs
and might be useful for development + CI purposes.
This commit is contained in:
Gerd Hoffmann 2023-09-05 13:43:13 +02:00
parent 58f180d4ee
commit 08c69a778e
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
edk2-build.fedora
View File

@ -37,6 +37,9 @@ DEBUG_PRINT_ERROR_LEVEL = 0x8040004F
[opts.armvirt.silent] [opts.armvirt.silent]
DEBUG_PRINT_ERROR_LEVEL = 0x80000000 DEBUG_PRINT_ERROR_LEVEL = 0x80000000
[opts.armvirt.sb.testonly]
SECURE_BOOT_ENABLE = TRUE
[opts.armvirt.kernel] [opts.armvirt.kernel]
TPM2_ENABLE = FALSE TPM2_ENABLE = FALSE
TPM2_CONFIG_ENABLE = FALSE TPM2_CONFIG_ENABLE = FALSE
@ -285,3 +288,17 @@ dest = Fedora/experimental
cpy1 = FV/QEMU_EFI.fd QEMU_EFI.strictnx.fd cpy1 = FV/QEMU_EFI.fd QEMU_EFI.strictnx.fd
cpy3 = FV/QEMU_EFI.fd QEMU_EFI-strictnx-pflash.raw cpy3 = FV/QEMU_EFI.fd QEMU_EFI-strictnx-pflash.raw
pad3 = QEMU_EFI-strictnx-pflash.raw 64m pad3 = QEMU_EFI-strictnx-pflash.raw 64m
[build.armvirt.aa64.secboot.testonly]
desc = ArmVirt build for qemu, 64-bit (arm v8), secure boot
conf = ArmVirtPkg/ArmVirtQemu.dsc
arch = AARCH64
opts = ovmf.common
armvirt.verbose
armvirt.sb.testonly
pcds = nx.strict
plat = ArmVirtQemu-AARCH64
dest = Fedora/experimental
cpy1 = FV/QEMU_EFI.fd QEMU_EFI.secboot.testonly.fd
cpy3 = FV/QEMU_EFI.fd QEMU_EFI-secboot-testonly-pflash.raw
pad3 = QEMU_EFI-secboot-testonly-pflash.raw 64m

3
edk2.spec
View File

@ -426,6 +426,9 @@ done
%else %else
./edk2-build.py --config edk2-build.fedora --silent --release-date "$RELEASE_DATE" -m armvirt ./edk2-build.py --config edk2-build.fedora --silent --release-date "$RELEASE_DATE" -m armvirt
./edk2-build.py --config edk2-build.fedora.platforms --silent -m aa64 ./edk2-build.py --config edk2-build.fedora.platforms --silent -m aa64
virt-fw-vars --input Fedora/aarch64/vars-template-pflash.raw \
--output Fedora/experimental/vars-template-secboot-testonly-pflash.raw \
--enroll-redhat --secure-boot --distro-keys rhel
%endif %endif
for raw in */aarch64/*.raw; do for raw in */aarch64/*.raw; do
qcow2="${raw%.raw}.qcow2" qcow2="${raw%.raw}.qcow2"