summaryrefslogtreecommitdiffstats
path: root/meta-efi-secure-boot
Commit message (Collapse)AuthorAgeFilesLines
...
* shim: refresh fallback patchsetLans Zhang2017-08-116-14/+294
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: sync up with upstreamLans Zhang2017-08-091-2/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: sync up with upstreamLans Zhang2017-08-032-8/+8
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: don't set CSV boot entry as the first boot optionLans Zhang2017-08-012-0/+50
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* README.md: simplify the commits for boot flowLans Zhang2017-07-311-5/+5
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-secure-core: code style fixupLans Zhang2017-07-282-5/+5
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* grub-efi: remove the depreciated replacement for initrd= parameterLans Zhang2017-07-281-7/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* grub/boot-menu.inc: use linux and initrd commands instead of chainloader to ↵Lans Zhang2017-07-271-2/+4
| | | | | | | | boot kernel Since bzImage is not signed during the build. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-efi-secure-boot/README: update to reflect using fallback to chainloader ↵Lans Zhang2017-07-251-12/+17
| | | | | | SELoader Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: use fallback loading SELoaderLans Zhang2017-07-244-24/+69
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* sbsigntool: code style fixupLans Zhang2017-07-241-21/+40
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* efivar: clean upLans Zhang2017-07-242-57/+0
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-efi-secure-boot: depend on meta-perlLans Zhang2017-07-242-17/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: update to the latestLans Zhang2017-07-242-35/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-secure-core: define the oe index nameLans Zhang2017-07-201-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader: sync up with upstreamLans Zhang2017-07-131-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-efi-secure-boot/README.md: updateLans Zhang2017-07-131-134/+162
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* libfile-slurp: code style fixupLans Zhang2017-07-131-4/+6
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader,libsign: fix homepage URLsLans Zhang2017-07-132-2/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* efitools: code style fixupLans Zhang2017-07-133-21/+22
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader, libsign, cryptfs-tpm2: code style fixupLans Zhang2017-07-132-19/+27
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* grub-efi: carry forward mok2verify to grub-2.02Lans Zhang2017-07-132-76/+156
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* packagegroup-efi-secure-boot: make sure grub never be installedLans Zhang2017-07-121-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* grub-efi: rebased to 2.02Lans Zhang2017-07-124-110/+24
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Fix the occurrence of checking the existence of signing keysLans Zhang2017-07-127-5/+6
| | | | | | packagegroups are not the end consumers of using user-key-store. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* packagegroup-efi-secure-boot/packagegroup-ima: depend on check_deploy_keysLans Zhang2017-07-111-0/+5
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* mokutil: code style fixupLans Zhang2017-07-111-7/+9
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* mokutil: add the COMPATIBLE_HOSTLans Zhang2017-07-111-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: enable http boot supportLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* seloader: sync up with upstreamLans Zhang2017-07-031-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* Rename .pem to .crtLans Zhang2017-07-033-17/+17
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* kernel-initramfs: define this package to include the initramfs image for ↵Lans Zhang2017-07-031-0/+58
| | | | | | kernel boot Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: fix OVMF crashLans Zhang2017-06-303-13/+45
| | | | | | | | - httpboot.o cannot be built if ".PRECIOUS: " is placed ahead of "<tab>CFLAGS +=". - uri pointer should not be freed if NULL. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: clean up the code styleLans Zhang2017-06-301-27/+29
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* code style fixupLans Zhang2017-06-299-39/+46
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* shim: enable http boot supportLans Zhang2017-06-261-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* linux-yocto-efi-secure-boot: don't use sccs to define the included kernel cfgLans Zhang2017-06-261-3/+3
| | | | | | | The variable sccs is used internally and thus it will be corrupted by the external definition. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-secure-core: initial commitLans Zhang2017-06-2269-0/+5734
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>