33 lines
1.4 KiB
BlitzBasic
33 lines
1.4 KiB
BlitzBasic
SUMMARY = "A recipe to deploy UEFI public keys update files"
|
|
LICENSE = "CLOSED"
|
|
|
|
|
|
INHIBIT_DEFAULT_DEPS = "1"
|
|
inherit nopackages
|
|
|
|
inherit deploy
|
|
inherit coreos-efi-secureboot
|
|
|
|
# Public key needed by firmware very depending on the implementation
|
|
# So we copy all type of public key (*.auth, *.esl, *.crt, *der)
|
|
addtask deploy after do_compile
|
|
do_deploy() {
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/KEK.auth ${DEPLOYDIR}/KEK.auth
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/db.auth ${DEPLOYDIR}/db.auth
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/PK.auth ${DEPLOYDIR}/PK.auth
|
|
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/KEK.esl ${DEPLOYDIR}/KEK.esl
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/db.esl ${DEPLOYDIR}/db.esl
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/PK.esl ${DEPLOYDIR}/PK.esl
|
|
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/KEK.crt ${DEPLOYDIR}/KEK.crt
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/db.crt ${DEPLOYDIR}/db.crt
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/PK.crt ${DEPLOYDIR}/PK.crt
|
|
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/KEK.der ${DEPLOYDIR}/KEK.der
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/db.der ${DEPLOYDIR}/db.der
|
|
install -D -m 644 ${COREOS_EFI_SECUREBOOT_KEYDIR}/PK.der ${DEPLOYDIR}/PK.der
|
|
|
|
# !SECURITY WARNING!
|
|
# .key file are not copied to DEPLOYDIR, as they contains the PRIVATE keys
|
|
} |