Comment 6 for bug 2002259

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to root (master)

Reviewed: https://review.opendev.org/c/starlingx/root/+/869534
Committed: https://opendev.org/starlingx/root/commit/2bf25c429345b58c27a35c1195d2fe0739bef5e6
Submitter: "Zuul (22348)"
Branch: master

commit 2bf25c429345b58c27a35c1195d2fe0739bef5e6
Author: Li Zhou <email address hidden>
Date: Fri Jan 6 16:43:05 2023 +0800

    debian-image: add mokutil to iso image

    Mokutil provides the means to enroll and erase the machine
    owner keys (MOK) stored in the database of shim.
    The mokutil tool is a convenience utility and we want to add it
    into the iso image.

    Test Plan:
     The tests are done with all 3 commits for root/tools/kernel
     repos.
     PASS: build and install the iso image and boot up with secure boot
           enabled, run "sudo mokutil --sb-state", the result is:
           "SecureBoot enabled".
     PASS: run "sudo mokutil --import example.der";
           reboot the target;
           select to enroll the key in MOK manager before grub menu starts;
           check with "sudo mokutil --list-enrolled" to find the right key
           there after system boots up.
     PASS: above tests are done for both std and rt installations.

    Depends-On: https://review.opendev.org/c/starlingx/tools/+/869533

    Partial-Bug: 2002259

    Signed-off-by: Li Zhou <email address hidden>
    Change-Id: Ic460eaa07955cf63162d0b5236a4bf99b3a2492b