Package: edk2
Version: 0~20160104.c2a892d7-1
Severity: normal
Tags: patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Adding SECURE_BOOT_ENABLE option to qemu-efi build will allow UEFI Secure
Boot support on aarch64, as is already enabled on x86.

I have attached a patch to debian/rules to enable this. Thanks.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=yE2S
-----END PGP SIGNATURE-----
>From 0d62883b306cb31f9e536b1fa7f3ebc1d595aecf Mon Sep 17 00:00:00 2001
From: Linn Crosetto <l...@hpe.com>
Date: Fri, 1 Apr 2016 10:44:15 -0600
Subject: [PATCH] Add support for UEFI Secure Boot to qemu-efi

Add SECURE_BOOT_ENABLE flag to aarch64 build to enable support for UEFI
Secure Boot.

Signed-off-by: Linn Crosetto <l...@hpe.com>
---
 debian/changelog | 1 +
 debian/rules     | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index 6578138..3539c95 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
 edk2 (0~20160104.c2a892d7-2+l4tm1) UNRELEASED; urgency=low
 
   * Initial release for L4TM based on Debian's source
+  * Add support for UEFI Secure Boot to qemu-efi
 
  -- Linn Crosetto <l...@hpe.com>  Thu, 31 Mar 2016 17:21:41 -0600
 
diff --git a/debian/rules b/debian/rules
index 13560c2..54e22e1 100755
--- a/debian/rules
+++ b/debian/rules
@@ -49,11 +49,11 @@ setup-build:
 	# single shell invocation
 	. ./edksetup.sh
 	QUILT_PC=.pc-post QUILT_PATCHES=debian/post-patches quilt push -a || [ $$? = 2 ]
+	cd CryptoPkg/Library/OpensslLib/ && ./Install.sh
 
 build-ovmf: EDK2_ARCH_DIR=X64
 build-ovmf:
 ifneq (,$(findstring ovmf, $(shell dh_listpackages)))
-	cd CryptoPkg/Library/OpensslLib/ && ./Install.sh
 	cd UefiCpuPkg/ResetVector/Vtf0 && python Build.py
 	mkdir -p EdkShellBinPkg/FullShell/$(EDK2_ARCH_DIR) \
 	         FatBinPkg/EnhancedFatDxe/$(EDK2_ARCH_DIR)
@@ -86,6 +86,7 @@ build-qemu-efi:
 		GCC49_AARCH64_PREFIX=$(GCC49_AARCH64_PREFIX) build -a $(EDK2_HOST_ARCH) \
 			-t $(EDK2_TOOLCHAIN) \
 			-p ArmVirtPkg/ArmVirtQemu.dsc \
+			-DSECURE_BOOT_ENABLE=TRUE \
 			-DINTEL_BDS \
 			-b RELEASE
 
-- 
2.8.0.rc3

Reply via email to