efi: initial signed bootloader support

The implementation goes the shim[1] way as described here[2]; many thanks to Matthew Garrett and Rod Smith. [1] http://mjg59.dreamwidth.org/20303.html [2] http://www.rodsbooks.com/efi-bootloaders/secureboot.html

efi: initial signed bootloader support
8c8d7c24 · Michael Shigorin · 084c5af4 · 8c8d7c24
Commit 8c8d7c24 authored Jan 10, 2013 by Michael Shigorin
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

config.mk features.in/efi/config.mk +4 -1

No files found.
--- a/features.in/efi/config.mk
+++ b/features.in/efi/config.mk
@@ -10,6 +10,9 @@ use/efi:
 	@$(call add,INSTALL2_PACKAGES,dosfstools)
 	@$(call set,EFI_BOOTLOADER,elilo)	### no choice right now

+use/efi/signed: use/efi
+	@$(call set,EFI_CERT,altlinux)
+
 use/efi/debug: use/efi
 	@$(call add,STAGE2_PACKAGES,efibootmgr gdisk)
 	@$(call set,KFLAVOURS,led-ws)
@@ -17,6 +20,6 @@ use/efi/debug: use/efi
 else

 # ignore on an unsupported target arch but make it hybrid at least
-use/efi use/efi/debug: use/isohybrid
+use/efi use/efi/signed use/efi/debug: use/isohybrid

 endif