mirror of
https://github.com/jiazhang0/meta-secure-core.git
synced 2026-07-17 05:06:59 +00:00
Jason Wessel
31d2105b7a
This commit makes the SELoader entire optional and allows it to be removed, with the intended replacement being to use grub's built in gpg key verification. It will be possible in a template or local.conf: UEFI_SELOADER = "0" GRUB_SIGN_VERIFY = "1" [ Issue: LINUXEXEC-2450 ] Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
33 lines
658 B
BlitzBasic
33 lines
658 B
BlitzBasic
DESCRIPTION = "EFI Secure Boot packages for secure-environment."
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "\
|
|
file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302 \
|
|
"
|
|
|
|
S = "${WORKDIR}"
|
|
|
|
SELOADER_PKG = "${@'seloader' if d.getVar('UEFI_SELOADER', True) == '1' else ''}"
|
|
ALLOW_EMPTY_${PN} = "1"
|
|
|
|
pkgs = "\
|
|
grub-efi \
|
|
efitools \
|
|
efibootmgr \
|
|
mokutil \
|
|
${SELOADER_PKG} \
|
|
shim \
|
|
"
|
|
|
|
RDEPENDS_${PN}_x86 = "${pkgs}"
|
|
RDEPENDS_${PN}_x86-64 = "${pkgs}"
|
|
|
|
kmods = "\
|
|
kernel-module-efivarfs \
|
|
kernel-module-efivars \
|
|
"
|
|
|
|
RRECOMMENDS_${PN}_x86 += "${kmods}"
|
|
RRECOMMENDS_${PN}_x86-64 += "${kmods}"
|
|
|
|
IMAGE_INSTALL_remove += "grub"
|