From 39f892b24fbfb92a75f0f40dbb95736c82273b92 Mon Sep 17 00:00:00 2001 From: Andrew Ammerlaan Date: Wed, 12 Jul 2023 09:57:48 +0200 Subject: [PATCH] sys-firmware/edk2-ovmf: use secureboot.eclass to sign efi exec Signed-off-by: Andrew Ammerlaan --- sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild | 5 ++++- sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild | 9 ++++++++- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild b/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild index 889f4431214d5..e7b13c536c1f2 100644 --- a/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild +++ b/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild @@ -6,7 +6,7 @@ EAPI=7 PYTHON_REQ_USE="sqlite" PYTHON_COMPAT=( python3_{9,10,11} ) -inherit python-any-r1 readme.gentoo-r1 +inherit python-any-r1 readme.gentoo-r1 secureboot DESCRIPTION="UEFI firmware for 64-bit x86 virtual machines" HOMEPAGE="https://github.com/tianocore/edk2" @@ -90,6 +90,7 @@ In order to use the firmware you can run qemu the following way pkg_setup() { [[ ${PV} != "999999" ]] && use binary || python-any-r1_pkg_setup + secureboot_pkg_setup } src_prepare() { @@ -169,6 +170,8 @@ src_install() { doins qemu/* rm "${ED}"/usr/share/qemu/firmware/40-edk2-ovmf-x64-sb-enrolled.json || die "rm failed" + secureboot_auto_sign --in-place + readme.gentoo_create_doc } diff --git a/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild b/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild index 0a1469b2cbc97..322c5a16bc5df 100644 --- a/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild +++ b/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild @@ -6,7 +6,7 @@ EAPI=8 PYTHON_REQ_USE="sqlite" PYTHON_COMPAT=( python3_{9,10,11} ) -inherit python-any-r1 readme.gentoo-r1 +inherit python-any-r1 readme.gentoo-r1 secureboot DESCRIPTION="UEFI firmware for 64-bit x86 virtual machines" HOMEPAGE="https://github.com/tianocore/edk2" @@ -69,6 +69,11 @@ In order to use the firmware you can run qemu the following way -drive file=/usr/share/edk2-ovmf/OVMF.fd,if=pflash,format=raw,unit=0,readonly=on \ ..." +pkg_setup() { + python-any-r1_pkg_setup + secureboot_pkg_setup +} + src_prepare() { # Bundled submodules cp -rl "${WORKDIR}/openssl-${BUNDLED_OPENSSL_SUBMODULE_SHA}"/* "CryptoPkg/Library/OpensslLib/openssl/" @@ -140,6 +145,8 @@ src_install() { doins qemu/* rm "${ED}"/usr/share/qemu/firmware/40-edk2-ovmf-x64-sb-enrolled.json || die "rm failed" + secureboot_auto_sign --in-place + readme.gentoo_create_doc }