efi: initial signed bootloader support

The implementation goes the shim[1] way as described here[2];
many thanks to Matthew Garrett and Rod Smith.

[1] http://mjg59.dreamwidth.org/20303.html
[2] http://www.rodsbooks.com/efi-bootloaders/secureboot.html
This commit is contained in:
Michael Shigorin 2013-01-10 01:09:55 +04:00
parent 084c5af4cb
commit 8c8d7c24d1

View File

@ -10,6 +10,9 @@ use/efi:
@$(call add,INSTALL2_PACKAGES,dosfstools)
@$(call set,EFI_BOOTLOADER,elilo) ### no choice right now
use/efi/signed: use/efi
@$(call set,EFI_CERT,altlinux)
use/efi/debug: use/efi
@$(call add,STAGE2_PACKAGES,efibootmgr gdisk)
@$(call set,KFLAVOURS,led-ws)
@ -17,6 +20,6 @@ use/efi/debug: use/efi
else
# ignore on an unsupported target arch but make it hybrid at least
use/efi use/efi/debug: use/isohybrid
use/efi use/efi/signed use/efi/debug: use/isohybrid
endif