diff --git a/ci/uefi-secureboot.yml b/ci/uefi-secureboot.yml index 4e9572cc..e8aa6004 100644 --- a/ci/uefi-secureboot.yml +++ b/ci/uefi-secureboot.yml @@ -23,7 +23,7 @@ local_conf_header: WKS_FILE = "efi-disk.wks.in" KERNEL_IMAGETYPE = "Image" - MACHINE_FEATURES:append = " efi uefi-secureboot uefi-http-boot" + MACHINE_FEATURES:append = " efi uefi-secureboot uefi-http-boot uefi-capsule-updates" EFI_PROVIDER = "systemd-boot" @@ -34,4 +34,4 @@ local_conf_header: IMAGE_INSTALL:append = " systemd systemd-boot util-linux coreutils" - TEST_SUITES:append = " uefi_secureboot" \ No newline at end of file + TEST_SUITES:append = " uefi_secureboot" diff --git a/meta-arm/recipes-bsp/u-boot/u-boot-uefi-capsule-update.inc b/meta-arm/recipes-bsp/u-boot/u-boot-uefi-capsule-update.inc new file mode 100644 index 00000000..6b6913ad --- /dev/null +++ b/meta-arm/recipes-bsp/u-boot/u-boot-uefi-capsule-update.inc @@ -0,0 +1,3 @@ +FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:" + +SRC_URI += "file://uefi-capsule-update.cfg" diff --git a/meta-arm/recipes-bsp/u-boot/u-boot-uefi-secureboot.inc b/meta-arm/recipes-bsp/u-boot/u-boot-uefi-secureboot.inc index 48c2de86..cb2fed15 100644 --- a/meta-arm/recipes-bsp/u-boot/u-boot-uefi-secureboot.inc +++ b/meta-arm/recipes-bsp/u-boot/u-boot-uefi-secureboot.inc @@ -5,6 +5,7 @@ SRC_URI += "file://uefi-secureboot.cfg" inherit sbsign require ${@bb.utils.contains('MACHINE_FEATURES', 'uefi-http-boot', 'u-boot-uefi-http-boot.inc', '', d)} +require ${@bb.utils.contains('MACHINE_FEATURES', 'uefi-capsule-update', 'u-boot-capsule-update.inc', '', d)} DEPENDS += 'python3-pyopenssl-native' diff --git a/meta-arm/recipes-bsp/u-boot/u-boot/uefi-capsule-update.cfg b/meta-arm/recipes-bsp/u-boot/u-boot/uefi-capsule-update.cfg new file mode 100644 index 00000000..8cc4a453 --- /dev/null +++ b/meta-arm/recipes-bsp/u-boot/u-boot/uefi-capsule-update.cfg @@ -0,0 +1,5 @@ +CONFIG_EFI_RUNTIME_UPDATE_CAPSULE=y +CONFIG_EFI_CAPSULE_ON_DISK=y +CONFIG_EFI_IGNORE_OSINDICATIONS=y +CONFIG_EFI_CAPSULE_ON_DISK_EARLY=y +CONFIG_EFI_CAPSULE_FIRMWARE_RAW=y \ No newline at end of file