From: Luca Boccassi Date: Wed, 10 Jan 2024 21:34:04 +0000 (-0800) Subject: enable support for secure boot on qemu arm64/amd64 X-Git-Tag: archive/raspbian/2024.01+dfsg-5+rpi1~3^2^2~2 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=8bde4e7c07c1a00f394a4687d46a1c1785a3bae8;p=u-boot.git enable support for secure boot on qemu arm64/amd64 Secure boot is now supported upstream in EFI mode. It is disabled by default, and can be enabled by loading keys from the console: https://u-boot.readthedocs.io/en/latest/develop/uefi/uefi.html#configuring-uefi-secure-boot Gbp-Pq: Topic qemu Gbp-Pq: Name efi-secure-boot.patch --- diff --git a/configs/qemu-x86_64_defconfig b/configs/qemu-x86_64_defconfig index 2ff49fbd6..e8991bdca 100644 --- a/configs/qemu-x86_64_defconfig +++ b/configs/qemu-x86_64_defconfig @@ -90,3 +90,5 @@ CONFIG_SPL_VIDEO=y # CONFIG_SPL_USE_TINY_PRINTF is not set CONFIG_GENERATE_ACPI_TABLE=y # CONFIG_GZIP is not set +CONFIG_EFI_SECURE_BOOT=y +CONFIG_EFI_SIGNATURE_SUPPORT=y diff --git a/configs/qemu_arm64_defconfig b/configs/qemu_arm64_defconfig index c010c25a9..ca1fc5edd 100644 --- a/configs/qemu_arm64_defconfig +++ b/configs/qemu_arm64_defconfig @@ -69,3 +69,5 @@ CONFIG_USB_EHCI_HCD=y CONFIG_USB_EHCI_PCI=y CONFIG_SEMIHOSTING=y CONFIG_TPM=y +CONFIG_EFI_SECURE_BOOT=y +CONFIG_EFI_SIGNATURE_SUPPORT=y