diff options
| author | Michał Żygowski <michal.zygowski@3mdeb.com> | 2020-09-24 15:46:55 +0200 |
|---|---|---|
| committer | Felix Held <felix-coreboot@felixheld.de> | 2024-09-06 13:55:50 +0000 |
| commit | b14ec5fbab3a7e74853b24af103ba8e9409a7d66 (patch) | |
| tree | bc8b8508f08537efeeb8778687cb32edfa91b904 /Makefile.mk | |
| parent | 30394db47564a231f775fa9c06796f4b18ee1203 (diff) | |
3rdparty/open-power-signing-utils: add SecureBoot utility for OpenPOWER
Signing is performed with test keys by default, set
CONFIG_SIGNING_KEYS_DIR to a non-empty value to use other keys.
Depending on the version of the Talos II firmware this alone might not
allow booting because coreboot replaces only part of the stock firmware
and its newer versions enable secure boot by default (not to be confused
with SecureBoot in EFI). The signing performed in this commit is still
a prerequisite and might as well be done on its own. Fixing operation
with newer stock firmware will be done in a follow-up change.
Change-Id: Id88baef5ecb1f8ffd74a7f464bbbaaaea0ca643d
Signed-off-by: Michał Żygowski <michal.zygowski@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/67065
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Krystian Hebel <krystian.hebel@3mdeb.com>
Diffstat (limited to 'Makefile.mk')
| -rw-r--r-- | Makefile.mk | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/Makefile.mk b/Makefile.mk index 2b67947a43..a0464385d7 100644 --- a/Makefile.mk +++ b/Makefile.mk @@ -679,6 +679,7 @@ AMDCOMPRESS:=$(objutil)/cbfstool/amdcompress CSE_FPT:=$(objutil)/cbfstool/cse_fpt CSE_SERGER:=$(objutil)/cbfstool/cse_serger ECCTOOL:=$(objutil)/ffs/ecc/ecc +CREATE_CONTAINER:=$(objutil)/open-power-signing-utils/create-container $(obj)/cbfstool: $(CBFSTOOL) cp $< $@ @@ -726,6 +727,12 @@ $(ECCTOOL): cd $(objutil)/ffs && autoreconf -i && ./configure $(MAKE) -C $(objutil)/ffs +$(CREATE_CONTAINER): + @printf " Compile Open-Power SecureBoot Signing Utils\n" + cp -r $(top)/3rdparty/open-power-signing-utils $(objutil) + cd $(objutil)/open-power-signing-utils && autoreconf -i -Wno-unsupported && ./configure + $(MAKE) -C $(objutil)/open-power-signing-utils + APCB_EDIT_TOOL:=$(top)/util/apcb/apcb_edit.py APCB_V3_EDIT_TOOL:=$(top)/util/apcb/apcb_v3_edit.py @@ -836,7 +843,7 @@ install-git-commit-clangfmt: include util/crossgcc/Makefile.mk .PHONY: tools -tools: $(objutil)/kconfig/conf $(objutil)/kconfig/toada $(CBFSTOOL) $(objutil)/cbfstool/cbfs-compression-tool $(FMAPTOOL) $(RMODTOOL) $(IFWITOOL) $(objutil)/nvramtool/nvramtool $(objutil)/sconfig/sconfig $(IFDTOOL) $(CBOOTIMAGE) $(AMDFWTOOL) $(AMDCOMPRESS) $(FUTILITY) $(BINCFG) $(IFITTOOL) $(objutil)/supermicro/smcbiosinfo $(CSE_FPT) $(CSE_SERGER) $(AMDFWREAD) $(ECCTOOL) +tools: $(objutil)/kconfig/conf $(objutil)/kconfig/toada $(CBFSTOOL) $(objutil)/cbfstool/cbfs-compression-tool $(FMAPTOOL) $(RMODTOOL) $(IFWITOOL) $(objutil)/nvramtool/nvramtool $(objutil)/sconfig/sconfig $(IFDTOOL) $(CBOOTIMAGE) $(AMDFWTOOL) $(AMDCOMPRESS) $(FUTILITY) $(BINCFG) $(IFITTOOL) $(objutil)/supermicro/smcbiosinfo $(CSE_FPT) $(CSE_SERGER) $(AMDFWREAD) $(ECCTOOL) $(CREATE_CONTAINER) ########################################################################### # Common recipes for all stages |