Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/eclass/secureboot.eclass
Commit message (Collapse)AuthorAgeFilesLines
* secureboot.eclass: QOL fixes based on user feedbackNowa Ammerlaan2025-01-051-30/+119
| | | | | | | | | | | | | | | | | | | | Previously there was some misalignment between how MODULES_SIGN_* and SECUREBOOT_SIGN_* are handled. - USE=modules-sign with unset MODULES_SIGN_* would cause the kernel build system to generate a new key, while USE=secureboot with unset SECUREBOOT_SIGN_* would die. Align this better by adding some sensible default locations to look for a key (sbctl and kernel) and by adding some logic to generate a new key. Use for the new key the same config files that the kernel would use if they exist. - USE=modules-sign infers the certificate from the key if the certificate is not set, whereas USE=secureboot would not do this. Align this better by setting the SECUREBOOT_SIGN_CERT to the SECUREBOOT_SIGN_KEY if the later is set but the former is not. Signed-off-by: Nowa Ammerlaan <nowa@gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/39974 Signed-off-by: Nowa Ammerlaan <nowa@gentoo.org>
* */*: rename account andrewammerlaan -> nowaNowa Ammerlaan2024-11-121-2/+2
| | | | | Closes: https://bugs.gentoo.org/940905 Signed-off-by: Nowa Ammerlaan <nowa@gentoo.org>
* eclass: canonicalize debug-print-function callsDavid Seifert2024-10-081-4/+4
| | | | | Closes: https://github.com/gentoo/gentoo/pull/37652 Signed-off-by: David Seifert <soap@gentoo.org>
* secureboot.eclass: check and fail early if key or cert in DER formatAndrew Ammerlaan2024-07-211-7/+19
| | | | | Bug: https://bugs.gentoo.org/936402 Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
* secureboot.eclass: secureboot_sign_efi_file allow call with 1 argAndrew Ammerlaan2023-08-271-3/+5
| | | | | | | | | | Use the input file as the output file if it is not specified. Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org> sb-fix Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
* secureboot.eclass: error out early if signing key not readableAndrew Ammerlaan2023-08-221-5/+5
| | | | Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>
* eclass/secureboot.eclass: add new eclassAndrew Ammerlaan2023-07-201-0/+173
Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org>