Comment 4 for bug 2002259

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tools (master)

Reviewed: https://review.opendev.org/c/starlingx/tools/+/869533
Committed: https://opendev.org/starlingx/tools/commit/bb85f8348a46d348868e94205c1fd5c4d08752d6
Submitter: "Zuul (22348)"
Branch: master

commit bb85f8348a46d348868e94205c1fd5c4d08752d6
Author: Li Zhou <email address hidden>
Date: Fri Jan 6 16:53:38 2023 +0800

    Debian: add mokutil to downloader list

    Mokutil provides the means to enroll and erase the machine
    owner keys (MOK) stored in the database of shim.
    The mokutil tool is a convenience utility and we want to add it
    into the iso image.
    Here download mokutil package to prepare for the installation.

    Test Plan:
     The tests are done with all 3 commits for root/tools/kernel
     repos.
     PASS: build and install the iso image and boot up with secure boot
           enabled, run "sudo mokutil --sb-state", the result is:
           "SecureBoot enabled".
     PASS: run "sudo mokutil --import example.der";
           reboot the target;
           select to enroll the key in MOK manager before grub menu starts;
           check with "sudo mokutil --list-enrolled" to find the right key
           there after system boots up.
     PASS: above tests are done for both std and rt installations.

    This commit works together with below commits to add mokutil:
    https://review.opendev.org/c/starlingx/root/+/869534
    https://review.opendev.org/c/starlingx/kernel/+/870485

    Closes-Bug: 2002259

    Signed-off-by: Li Zhou <email address hidden>
    Change-Id: I287ca99797fb7ef6d3cb6ab10d738c7492b19f42