add DBXDATE define

This commit is contained in:
Gerd Hoffmann 2023-03-15 12:11:22 +01:00
parent 89339b8a86
commit 5c1f07cad8

View File

@ -14,6 +14,8 @@ ExclusiveArch: x86_64 aarch64
%define TOOLCHAIN GCC5 %define TOOLCHAIN GCC5
%define OPENSSL_VER 1.1.1k %define OPENSSL_VER 1.1.1k
%define DBXDATE 20220812
%if %{defined rhel} %if %{defined rhel}
%define build_ovmf 0 %define build_ovmf 0
%define build_aarch64 0 %define build_aarch64 0
@ -76,8 +78,8 @@ Source81: edk2-build.fedora
Source82: edk2-build.fedora.platforms Source82: edk2-build.fedora.platforms
Source83: edk2-build.rhel-9 Source83: edk2-build.rhel-9
Source90: DBXUpdate-20220812.x64.bin Source90: DBXUpdate-%{DBXDATE}.x64.bin
Source91: DBXUpdate-20220812.ia32.bin Source91: DBXUpdate-%{DBXDATE}.ia32.bin
Patch0001: 0001-BaseTools-do-not-build-BrotliCompress-RH-only.patch Patch0001: 0001-BaseTools-do-not-build-BrotliCompress-RH-only.patch
Patch0002: 0002-MdeModulePkg-remove-package-private-Brotli-include-p.patch Patch0002: 0002-MdeModulePkg-remove-package-private-Brotli-include-p.patch
@ -335,7 +337,7 @@ touch OvmfPkg/AmdSev/Grub/grub.efi # dummy
./edk2-build.py --config edk2-build.rhel-9 --silent --release-date "$RELEASE_DATE" -m ovmf ./edk2-build.py --config edk2-build.rhel-9 --silent --release-date "$RELEASE_DATE" -m ovmf
virt-fw-vars --input RHEL-9/ovmf/OVMF_VARS.fd \ virt-fw-vars --input RHEL-9/ovmf/OVMF_VARS.fd \
--output RHEL-9/ovmf/OVMF_VARS.secboot.fd \ --output RHEL-9/ovmf/OVMF_VARS.secboot.fd \
--set-dbx DBXUpdate-20220812.x64.bin \ --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
--enroll-redhat --secure-boot --enroll-redhat --secure-boot
build_iso RHEL-9/ovmf build_iso RHEL-9/ovmf
@ -345,15 +347,15 @@ build_iso RHEL-9/ovmf
./edk2-build.py --config edk2-build.fedora.platforms --silent -m x64 ./edk2-build.py --config edk2-build.fedora.platforms --silent -m x64
virt-fw-vars --input Fedora/ovmf/OVMF_VARS.fd \ virt-fw-vars --input Fedora/ovmf/OVMF_VARS.fd \
--output Fedora/ovmf/OVMF_VARS.secboot.fd \ --output Fedora/ovmf/OVMF_VARS.secboot.fd \
--set-dbx DBXUpdate-20220812.x64.bin \ --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
--enroll-redhat --secure-boot --enroll-redhat --secure-boot
virt-fw-vars --input Fedora/ovmf-4m/OVMF_VARS.fd \ virt-fw-vars --input Fedora/ovmf-4m/OVMF_VARS.fd \
--output Fedora/ovmf-4m/OVMF_VARS.secboot.fd \ --output Fedora/ovmf-4m/OVMF_VARS.secboot.fd \
--set-dbx DBXUpdate-20220812.x64.bin \ --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
--enroll-redhat --secure-boot --enroll-redhat --secure-boot
virt-fw-vars --input Fedora/ovmf-ia32/OVMF_VARS.fd \ virt-fw-vars --input Fedora/ovmf-ia32/OVMF_VARS.fd \
--output Fedora/ovmf-ia32/OVMF_VARS.secboot.fd \ --output Fedora/ovmf-ia32/OVMF_VARS.secboot.fd \
--set-dbx DBXUpdate-20220812.ia32.bin \ --set-dbx DBXUpdate-%{DBXDATE}.ia32.bin \
--enroll-redhat --secure-boot --enroll-redhat --secure-boot
build_iso Fedora/ovmf build_iso Fedora/ovmf
build_iso Fedora/ovmf-ia32 build_iso Fedora/ovmf-ia32
@ -361,7 +363,7 @@ build_iso Fedora/ovmf-ia32
# experimental stateless builds # experimental stateless builds
virt-fw-vars --input Fedora/experimental/OVMF.stateless.fd \ virt-fw-vars --input Fedora/experimental/OVMF.stateless.fd \
--output Fedora/experimental/OVMF.stateless.secboot.fd \ --output Fedora/experimental/OVMF.stateless.secboot.fd \
--set-dbx DBXUpdate-20220812.x64.bin \ --set-dbx DBXUpdate-%{DBXDATE}.x64.bin \
--enroll-redhat --secure-boot --enroll-redhat --secure-boot
for image in \ for image in \