Secure Boot related refine

siemens / meta-iot2050

SIMATIC IOT2050 Isar/Debian Board Support Package

MIT License

130 stars 79 forks source link

Secure Boot related refine #329

Closed BaochengSu closed 2 years ago

BaochengSu commented 2 years ago

Re-organize the secure boot keys
Add OTP provisioning to menu
Warn usage of dummy key

BaochengSu commented 2 years ago

file://dir is fine with links inside dir. file://dir/* had problems, no? I don't see the need for explicit key listing yet.

No, neither does work.

jan-kiszka commented 2 years ago

You need to describe better the boundary conditions when this starts to break. Currently, it works. I suppose it fails when the links we have in keys/ are pointing outside of the keys/ folder, right?

BaochengSu commented 2 years ago

You need to describe better the boundary conditions when this starts to break. Currently, it works. I suppose it fails when the links we have in keys/ are pointing outside of the keys/ folder, right?

Yep.

BaochengSu commented 2 years ago

Commit refacted to:

Meanwhile format `file://dir` in SRC_URI does not handle symbolics very
well, if the symbolics are linked to files outside of the dir. So expand
it to cover such case.