search

siemens / meta-efibootguard

Yocto layer for EFI Boot Guard
GNU General Public License v2.0
7 stars 10 forks source link

Update 0.11 #15

Closed afreof closed 2 years ago

afreof commented 2 years ago

Is the mailing list for meta-efibootguard still the way to go? Or are PR acceptable?

jan-kiszka commented 2 years ago

Unless I miss something, you are not yet packaging the new linux-stub and the related tool (needed for unified kernel images / secure boot).

hoinmic commented 2 years ago

Thank you for the commit. For me a PR is ok. I think it would be an advantage if we could leave the license currently on "GPLv2". If someone is not yet on the latest Yocto version. I meant there is only a warning displayed.

afreof commented 2 years ago

I think it would be an advantage if we could leave the license currently on "GPLv2".

You are right, the SPDX license files are not available on the dunfell branch. They have been added with hardknott

Maybe we should create a dunfell branch which stays with efibootguard 0.10 and remove dunfell from LAYERSERIES_COMPAT on the master branch. Considering dunfell as a stable bugfix only branch would also have some advantages.

afreof commented 2 years ago

you are not yet packaging the new linux-stub and the related tool

You are right, this needs to be handled better. The last push splits these new features into separate optional packages.

My understanding is that bg_gen_unified_kernel is supposed to run on the build machine and does not necessarily end up on the target device. Therefore I split it into a separate package.

Also the new kernel-stub is going to an optional package which is used on the target device for secure boot.

jan-kiszka commented 2 years ago

Right, bg_gen_unified_kernel is not needed on a normal embedded device, nor is the stub if you generate the unified kernel image (which contains the stub) only during imaging.

hoinmic commented 2 years ago

The branch "dunfell" and "dunfell_next" for Yocto LTS Dunfell are now created. https://github.com/siemens/meta-efibootguard/tree/dunfell https://github.com/siemens/meta-efibootguard/tree/dunfell_next

hoinmic commented 2 years ago

The PR looks good. I'll take it on the next branch right away. Thank you.