commit bb85f8348a46d348868e94205c1fd5c4d08752d6
Author: Li Zhou <email address hidden>
Date: Fri Jan 6 16:53:38 2023 +0800
Debian: add mokutil to downloader list
Mokutil provides the means to enroll and erase the machine
owner keys (MOK) stored in the database of shim.
The mokutil tool is a convenience utility and we want to add it
into the iso image.
Here download mokutil package to prepare for the installation.
Test Plan:
The tests are done with all 3 commits for root/tools/kernel
repos.
PASS: build and install the iso image and boot up with secure boot
enabled, run "sudo mokutil --sb-state", the result is: "SecureBoot enabled".
PASS: run "sudo mokutil --import example.der";
reboot the target;
select to enroll the key in MOK manager before grub menu starts;
check with "sudo mokutil --list-enrolled" to find the right key
there after system boots up.
PASS: above tests are done for both std and rt installations.
Reviewed: https:/ /review. opendev. org/c/starlingx /tools/ +/869533 /opendev. org/starlingx/ tools/commit/ bb85f8348a46d34 8868e94205c1fd5 c4d08752d6
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit bb85f8348a46d34 8868e94205c1fd5 c4d08752d6
Author: Li Zhou <email address hidden>
Date: Fri Jan 6 16:53:38 2023 +0800
Debian: add mokutil to downloader list
Mokutil provides the means to enroll and erase the machine
owner keys (MOK) stored in the database of shim.
The mokutil tool is a convenience utility and we want to add it
into the iso image.
Here download mokutil package to prepare for the installation.
Test Plan:
"SecureBoot enabled".
The tests are done with all 3 commits for root/tools/kernel
repos.
PASS: build and install the iso image and boot up with secure boot
enabled, run "sudo mokutil --sb-state", the result is:
PASS: run "sudo mokutil --import example.der";
reboot the target;
select to enroll the key in MOK manager before grub menu starts;
check with "sudo mokutil --list-enrolled" to find the right key
there after system boots up.
PASS: above tests are done for both std and rt installations.
This commit works together with below commits to add mokutil: /review. opendev. org/c/starlingx /root/+ /869534 /review. opendev. org/c/starlingx /kernel/ +/870485
https:/
https:/
Closes-Bug: 2002259
Signed-off-by: Li Zhou <email address hidden> f6d3cb6ab10d738 c7492b19f42
Change-Id: I287ca99797fb7e