mbox series

[0/4] uefi secureboot with Unified Kernel Image (UKI)

Message ID 20241122133904.202082-1-mikko.rapeli@linaro.org
Headers show
Series uefi secureboot with Unified Kernel Image (UKI) | expand

Message

Mikko Rapeli Nov. 22, 2024, 1:39 p.m. UTC 
Change uefi-secureboot to use UKI which extends secure boot coverage from kernel
to initramfs and kernel command line. Tested on qemu with qemuarm64-secureboot and
genericarm64 machines:

$ kas build ci/qemuarm64-secureboot.yml:ci/uefi-secureboot.yml:ci/testimage.yml
$ kas build ci/genericarm64.yml:ci/uefi-secureboot.yml:ci/testimage.yml

Mikko Rapeli (4):
  qemuarm64-secureboot.conf: append to WKS_FILE_DEPENDS
  uefi-secureboot.yml: remove duplicate distro features
  uefi-secureboot.yml: switch to Unified Kernel Image (UKI)
  linux-yocto: remove signing

 ci/uefi-secureboot.yml                        | 20 ++++++++++++++++---
 .../conf/machine/qemuarm64-secureboot.conf    |  2 +-
 .../linux/linux-yocto-uefi-secureboot.inc     | 10 ----------
 3 files changed, 18 insertions(+), 14 deletions(-)