On Thu, Dec 08, 2016 at 04:44:18PM +0100, Andreas Heinlein wrote:
> I do not think this should be done, it would make it difficult if not
> impossible to boot custom kernels. For your own use, you could always
> build your own signed kernel and add the signing key to the UEFI
> firmware, or turn of
tag 838714 pending
thanks
Date: Wed Sep 21 15:59:00 2016 -0600
Author: Linn Crosetto
Commit ID: c1b32fa62ee252e4cffb92a64b162ad8f98ca27a
Commit URL:
https://git.sigxcpu.org/cgit/git-buildpackage/;a=commitdiff;h=c1b32fa62ee252e4cffb92a64b162ad8f98ca27a
Patch URL:
https://git.sigxcpu.org/cgit
..Switched
to a new branch 'bar'
.Switched to a new branch 'bar'
...
[...]
-- Linn
From d5870bc950fc88cd120f832c93477ed560577be6 Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Wed, 21 Sep 20
-maintainer upload.
+ * UNRELEASED
- -- Linn Crosetto Fri, 23 Sep 2016 18:51:37 +
+ -- Linn Crosetto Fri, 23 Sep 2016 14:46:07 -0600
git-buildpackage (0.8.3) unstable; urgency=medium
Then after gbp dch --release:
-git-buildpackage (0.8.3+nmu1) UNRELEASED; urgency=medium
+git-buildpackage
.
I have attached a patch to add support for these variables to efi-readvar and to
remove MokList since it is not accessible.
Thanks.
>From dfcf6d3bc4c98c624cbc0f724afca8bc97117a49 Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Mon, 12 Sep 2016 15:43:34 -0600
Subject: [PATCH] efi-readvar:
Attaching updated patches (also included in #836140).
From f270003bb7a4fab42884b4f373644cebdb51769e Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Mon, 17 Nov 2014 11:55:40 -0700
Subject: [PATCH 1/2] Build UEFI images using prefix from lsb_release
Change prefix in build-efi-images from
Source: grub2
Version: 2.02~beta2-37
Severity: wishlist
Tags: patch
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
The attached patch sets add support for shim and Secure Boot on arm64.
The first set adds support to GRUB and many of the patches have been pulled
from upstream, with the Origin
On Mon, Aug 29, 2016 at 01:30:44PM -0700, Linn Crosetto wrote:
> On Sat, Aug 27, 2016 at 10:22:52PM +0100, Ben Hutchings wrote:
> > Control: tag -1 pending
> >
> > Applied, but:
> >
> > >
> > > --- a/drivers/firmware/efi/libstub/fdt.c
&
On Sat, Aug 27, 2016 at 10:22:52PM +0100, Ben Hutchings wrote:
> Control: tag -1 pending
>
> Applied, but:
>
> >
> > --- a/drivers/firmware/efi/libstub/fdt.c
> > +++ b/drivers/firmware/efi/libstub/fdt.c
> > @@ -139,6 +139,13 @@ efi_status_t update_fdt(efi_system_table_t
> > *sys_table, void *ori
:00 2001
From: Linn Crosetto
Date: Mon, 22 Feb 2016 12:54:37 -0700
Subject: [PATCH 1/2] arm64/efi: Disable secure boot if shim is in insecure
mode
Port to arm64 a patch originally written by Josh Boyer for the x86 EFI
stub.
A user can manually tell the shim boot loader to disable validation of
ima
Package: edk2
Version: 0~20160408.ffea0a2c-2
Severity: normal
Tags: patch
To support UEFI Secure Boot and the Linux persistent store with UEFI
variables, set PcdMaxVariableSize to 0x2000 bytes as is done in OvmfPkg.
Also increase the maximum size for Authenticated variables in order to
handle a la
/i3T2huoX85pKl5iVptpwSMx1qnR0KUtTyiSU9q609
t/krosiT/MQZ6+9zNpYn
=4XBN
-END PGP SIGNATURE-
>From 8457b1664a1fbb287dbc3eed26fa204c647acf32 Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Fri, 29 Apr 2016 14:26:11 -0600
Subject: [PATCH] kdump-tools: add support for UEFI Secure Boot
kd
/RahZdgLhwl42doC7LgjpYI
wN0JD88AfHJAuUtwbpxc
=fkO9
-END PGP SIGNATURE-
>From 52de74c85ef6a9aca426d9de8f188fe92241aff6 Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Tue, 5 Apr 2016 11:49:05 -0600
Subject: [PATCH] Disallow unsigned kernels if UEFI Secure Boot is enabled
If UEFI Secure Boot
Attaching a patch without the changelog entry.
From 99d3ceb650d4a05fdc26987e3dd436dccf3206bb Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Fri, 1 Apr 2016 10:44:15 -0600
Subject: [PATCH] Add support for UEFI Secure Boot to qemu-efi
Add SECURE_BOOT_ENABLE flag to aarch64 build to enable
00:00:00 2001
From: Linn Crosetto
Date: Fri, 1 Apr 2016 10:44:15 -0600
Subject: [PATCH] Add support for UEFI Secure Boot to qemu-efi
Add SECURE_BOOT_ENABLE flag to aarch64 build to enable support for UEFI
Secure Boot.
Signed-off-by: Linn Crosetto
---
debian/changelog | 1 +
debian/rules
+kHkXV4EJNV3YPUxE40nlyXKnAAYPgSqYD6z6mFjWKE+fgerZ/7vwP04v1E+
I/llAGLPGHxEnYNgSL5R+T4dN9VONAMeL1EWU+1unFc8T2DGR5xCeBHZP6LmK99/
FkcfixImAJqZakuC+ZHh
=bYSe
-END PGP SIGNATURE-
>From ddc31ebd53a5fdf8682d3618c3660eb2fd7231ca Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Thu, 19 Nov 2015 15:58
Here is a patch to debian/clean. I avoided wildcards for some files to be
consistent with autogen.sh.
--
Linn Crosetto
Linux for HP Helion OpenStack
From 14999e018b9f18187177b7ad75e6df6e0935ed0c Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Fri, 11 Sep 2015 12:12:16 -0600
Subject: [PATCH
status 2
>From 7e71ef3ee91b17fc1be084608bb569d466a74819 Mon Sep 17 00:00:00 2001
From: Linn Crosetto
Date: Fri, 4 Sep 2015 12:57:39 -0600
Subject: [PATCH] override_dh_clean cleanup
Remove files and soft links created during the build. The cleanup used to be
part of Makefile.in. Removed files:
g
manage and is cause by the ustr bug
(#778158), which is now closed. It builds correctly with GCC 5 and ustr
version 1.0.4-5.
--
Linn Crosetto
Linux for HP Helion
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
tags 777965 + patch
thanks
Here is a patch to mark the non-standard function identifier __FUNCTION__
with the __extension__ keyword to work around the build failure with GCC-5.
--
Linn Crosetto
Linux for HP Helion
diff -urN b/pam_chroot.c c/pam_chroot.c
--- b/pam_chroot.c 2015-07-09 18:32
tags 777964 + patch
thanks
Here is a patch to work around some unused variable warnings which cause a
build failure with GCC 5.
--
Linn Crosetto
Linux for HP Helion
Description: Suppress unused variable warnings in ptype.h
Fix FTBFS for GCC-5 by suppressing erroneous unused variable warnings
tags 777961 + patch
thanks
Here is a patch to fix the logical-not-parentheses warning.
--
Linn Crosetto
Linux for HP Helion
Description: Fix FTBFS for GCC-5
With -Werror=logical-not-parentheses enabled, a line such as the
following causes the build to fail:
if
tags 777958 + patch
thanks
libmoe was written to use GNU89 inline semantics for a few inline functions
declared in mb.h. Here is a patch to make them compatible with GCC 5.
--
Linn Crosetto
Linux for HP Helion
diff -urN b/iso2mb.c c/iso2mb.c
--- b/iso2mb.c 2015-07-06 21:38:49.129658661 +
Package gnat-5 is required to test with GCC 5, but the build-dep 'gnat'
still depends on gnat-4.9 in experimental.
--
Linn Crosetto
Linux for HP Helion
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trou
tags 777938 + patch
thanks
Here is a patch to force -std=gnu89 for libuna/ as a workaround for the
build failure on GCC 5 until it is fixed upstream.
--
Linn Crosetto
Linux for HP Helion
Description: Change libuna to use GNU89 inline semantics for GCC 5
libuna as written relies on the GNU89
On Wed, Nov 12, 2014 at 01:43:42AM +, Colin Watson wrote:
> Right now this script is only used when building for Ubuntu, so no, I
> won't apply this patch directly. When Debian sets up a Secure Boot
> signing key infrastructure (hopefully soon), it will then make sense to
> parameterise this.
Package: grub2
Version: 2.02~beta2-16
Severity: normal
Tags: patch
debian/build-efi-images should use /EFI/debian instead of /EFI/ubuntu for the
prefix:
@@ -137,7 +137,7 @@ NET_MODULES="$CD_MODULES
-p /boot/grub \
$CD_MODULES
"$grub_mkimage" -O "$platform" -o "$outdir/grub$efi_na
27 matches
Mail list logo
