Comment 5 for bug 2002259

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kernel (master)

Reviewed: https://review.opendev.org/c/starlingx/kernel/+/870485
Committed: https://opendev.org/starlingx/kernel/commit/093e7940ff35b31b33e131a74058df0f9aa59b9d
Submitter: "Zuul (22348)"
Branch: master

commit 093e7940ff35b31b33e131a74058df0f9aa59b9d
Author: Li Zhou <email address hidden>
Date: Fri Jan 13 19:25:57 2023 +0800

    Debian: config: don't unset CONFIG_EFIVAR_FS

    When testing mokutil we found that import/delete functions don't
    work fine without efivarfs.
    The efivarfs at /sys/firmware/efi/efivars is a new way to access
    the efi-variables and it is better supported by efi tools than the
    old way /sys/firmware/efi/vars. So here compile the efivarfs as a
    module by default. This won't affect the old way.

    Test Plan:
     The tests are done with all 3 commits for root/tools/kernel
     repos.
     PASS: build and install the iso image and boot up with secure boot
           enabled, run "sudo mokutil --sb-state", the result is:
           "SecureBoot enabled".
     PASS: run "sudo mokutil --import example.der";
           reboot the target;
           select to enroll the key in MOK manager before grub menu starts;
           check with "sudo mokutil --list-enrolled" to find the right key
           there after system boots up.
     PASS: above tests are done for both std and rt installations.

    Depends-On: https://review.opendev.org/c/starlingx/tools/+/869533

    Partial-Bug: 2002259

    Signed-off-by: Li Zhou <email address hidden>
    Change-Id: I1cc818717cacd9546e3045840398589a84192d7d