Add the infrastructure for shim signing & aarch64 support#2292

Closed

sayanchowdhury wants to merge 27 commits intomainfrom sayan/add-shim-signing

+46,994-662

Commits on Nov 6, 2024

app-emulation/virt-firmware: Import from Gentoo to replace efitools
chewi
committed
app-crypt/efitools: Drop in favour of app-emulation/virt-firmware
chewi
committed
sys-boot/shim: Add a use flag to use a DER files for shim builds

sayanchowdhury
authored and
chewi
committed
sys-boot/shim: Add the SBAT data to shim binary

sayanchowdhury
authored and
chewi
committed
sys-boot/shim: Append the suffix to the shim binary

sayanchowdhury
authored and
chewi
committed
sys-boot/shim-signed: Add shim-signed package to place signed binaries
chewi
committed
shim, shim-signed: Move the packages from SDK to BOARD packages

sayanchowdhury
authored and
chewi
committed
sys-boot/shim: Include @@Version @@ in SBAT for version

sayanchowdhury
authored and
chewi
committed
Switch from raw (.fd) EDK2 firmware images to QCOW2, plus 4MB on amd64
chewi
committed
sys-firmware/edk2-aarch64: Drop in favour of edk2-bin
chewi
committed
Reuse Secure Boot EFI variables image prepared by Gentoo
chewi
committed
sys-boot/mokutil: Install on arm64 now that it supports Secure Boot
chewi
committed
sys-boot/grub: Apply Red Hat's large patch set (and drop Gentoo's)
chewi
committed
ci-automation: Include --qemu-ovmf-vars in qemu_update test for arm64
chewi
committed
grub_install.sh: Remove redundant BOARD_GRUB logic
chewi
committed
dev-cpp/azure-core: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
dev-cpp/azure-security-keyvault-certificates: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
dev-cpp/azure-security-keyvault-keys: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
dev-cpp/azure-identity: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
app-crypt/azure-keyvault-pkcs11: Add new package

sayanchowdhury
authored and
chewi
committed
profiles: Add the azure keyvault pkcs11 packages to accept_keywords

sayanchowdhury
authored and
chewi
committed
coreos-devel/sdk-depends: Add azure-keyvault-pkcs11 and p11-kit
chewi
committed
sys-boot/grub: Fix fallback mechanism broken by Red Hat's patches
chewi
committed
coreos-base/coreos-sb-keys: Drop unnecessary PK and KEK certificates
chewi
committed
app-crypt/p11-kit: Sync and move from coreos-overlay to portage-stable
chewi
committed
app-crypt/p11-kit: Use unstable 0.25.5 because we need --provider option
chewi
committed
Refactor SB signing code and sign official builds with Azure Key Vault
chewi
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add the infrastructure for shim signing & aarch64 support#2292

Commits on Nov 6, 2024

app-emulation/virt-firmware: Import from Gentoo to replace efitools

app-crypt/efitools: Drop in favour of app-emulation/virt-firmware

sys-boot/shim: Add a use flag to use a DER files for shim builds

sys-boot/shim: Add the SBAT data to shim binary

sys-boot/shim: Append the suffix to the shim binary

sys-boot/shim-signed: Add shim-signed package to place signed binaries

shim, shim-signed: Move the packages from SDK to BOARD packages

sys-boot/shim: Include @@Version @@ in SBAT for version

Switch from raw (.fd) EDK2 firmware images to QCOW2, plus 4MB on amd64

sys-firmware/edk2-aarch64: Drop in favour of edk2-bin

Reuse Secure Boot EFI variables image prepared by Gentoo

sys-boot/mokutil: Install on arm64 now that it supports Secure Boot

sys-boot/grub: Apply Red Hat's large patch set (and drop Gentoo's)

ci-automation: Include --qemu-ovmf-vars in qemu_update test for arm64

grub_install.sh: Remove redundant BOARD_GRUB logic

dev-cpp/azure-core: Add from Gentoo

dev-cpp/azure-security-keyvault-certificates: Add from Gentoo

dev-cpp/azure-security-keyvault-keys: Add from Gentoo

dev-cpp/azure-identity: Add from Gentoo

app-crypt/azure-keyvault-pkcs11: Add new package

profiles: Add the azure keyvault pkcs11 packages to accept_keywords

coreos-devel/sdk-depends: Add azure-keyvault-pkcs11 and p11-kit

sys-boot/grub: Fix fallback mechanism broken by Red Hat's patches

coreos-base/coreos-sb-keys: Drop unnecessary PK and KEK certificates

app-crypt/p11-kit: Sync and move from coreos-overlay to portage-stable

app-crypt/p11-kit: Use unstable 0.25.5 because we need --provider option

Refactor SB signing code and sign official builds with Azure Key Vault