commit 2bf25c429345b58c27a35c1195d2fe0739bef5e6
Author: Li Zhou <email address hidden>
Date: Fri Jan 6 16:43:05 2023 +0800
debian-image: add mokutil to iso image
Mokutil provides the means to enroll and erase the machine
owner keys (MOK) stored in the database of shim.
The mokutil tool is a convenience utility and we want to add it
into the iso image.
Test Plan:
The tests are done with all 3 commits for root/tools/kernel
repos.
PASS: build and install the iso image and boot up with secure boot
enabled, run "sudo mokutil --sb-state", the result is: "SecureBoot enabled".
PASS: run "sudo mokutil --import example.der";
reboot the target;
select to enroll the key in MOK manager before grub menu starts;
check with "sudo mokutil --list-enrolled" to find the right key
there after system boots up.
PASS: above tests are done for both std and rt installations.
Reviewed: https:/ /review. opendev. org/c/starlingx /root/+ /869534 /opendev. org/starlingx/ root/commit/ 2bf25c429345b58 c27a35c1195d2fe 0739bef5e6
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit 2bf25c429345b58 c27a35c1195d2fe 0739bef5e6
Author: Li Zhou <email address hidden>
Date: Fri Jan 6 16:43:05 2023 +0800
debian-image: add mokutil to iso image
Mokutil provides the means to enroll and erase the machine
owner keys (MOK) stored in the database of shim.
The mokutil tool is a convenience utility and we want to add it
into the iso image.
Test Plan:
"SecureBoot enabled".
The tests are done with all 3 commits for root/tools/kernel
repos.
PASS: build and install the iso image and boot up with secure boot
enabled, run "sudo mokutil --sb-state", the result is:
PASS: run "sudo mokutil --import example.der";
reboot the target;
select to enroll the key in MOK manager before grub menu starts;
check with "sudo mokutil --list-enrolled" to find the right key
there after system boots up.
PASS: above tests are done for both std and rt installations.
Depends-On: https:/ /review. opendev. org/c/starlingx /tools/ +/869533
Partial-Bug: 2002259
Signed-off-by: Li Zhou <email address hidden> 63162d0b5236a4b f99b3a2492b
Change-Id: Ic460eaa07955cf