Add (temporary) signed shim and sign official builds with Azure Key Vault#2441

Merged

chewi merged 20 commits intomainfrom chewi/akv-signing

Nov 14, 2024

+1,838-190

Commits on Nov 13, 2024

sys-boot/shim: Add a use flag to use a DER files for shim builds

sayanchowdhury
authored and
chewi
committed
sys-boot/shim: Add the SBAT data to shim binary

sayanchowdhury
authored and
chewi
committed
sys-boot/shim: Include @@Version @@ in SBAT for version

sayanchowdhury
authored and
chewi
committed
sys-boot/shim: Append the suffix to the shim binary

sayanchowdhury
authored and
chewi
committed
sys-boot/shim-signed: Add shim-signed package to place signed binaries
chewi
committed
shim, shim-signed: Move the packages from SDK to BOARD packages

sayanchowdhury
authored and
chewi
committed
dev-cpp/azure-core: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
dev-cpp/azure-security-keyvault-certificates: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
dev-cpp/azure-security-keyvault-keys: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
dev-cpp/azure-identity: Add from Gentoo

sayanchowdhury
authored and
chewi
committed
app-crypt/azure-keyvault-pkcs11: Add new package

sayanchowdhury
authored and
chewi
committed
profiles: Add the azure-keyvault-pkcs11 to accept_keywords

sayanchowdhury
authored and
chewi
committed
coreos-devel/sdk-depends: Add azure-keyvault-pkcs11 and p11-kit
chewi
committed
app-crypt/p11-kit: Sync and move from coreos-overlay to portage-stable
chewi
committed
app-crypt/p11-kit: Use unstable 0.25.5 because we need --provider option
chewi
committed
grub_install.sh: Remove redundant BOARD_GRUB logic
chewi
committed
Refactor SB signing code and sign official builds with Azure Key Vault
chewi
committed
ci-automation: Allow the arm64 tests to run on qemu_uefi_secure
chewi
committed
Temporarily undo AKV signing while we complete the shim review
chewi
committed
sys-boot/shim: Add the README for the shim repo
sayanchowdhury
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add (temporary) signed shim and sign official builds with Azure Key Vault#2441

Commits on Nov 13, 2024

sys-boot/shim: Add a use flag to use a DER files for shim builds

sys-boot/shim: Add the SBAT data to shim binary

sys-boot/shim: Include @@Version @@ in SBAT for version

sys-boot/shim: Append the suffix to the shim binary

sys-boot/shim-signed: Add shim-signed package to place signed binaries

shim, shim-signed: Move the packages from SDK to BOARD packages

dev-cpp/azure-core: Add from Gentoo

dev-cpp/azure-security-keyvault-certificates: Add from Gentoo

dev-cpp/azure-security-keyvault-keys: Add from Gentoo

dev-cpp/azure-identity: Add from Gentoo

app-crypt/azure-keyvault-pkcs11: Add new package

profiles: Add the azure-keyvault-pkcs11 to accept_keywords

coreos-devel/sdk-depends: Add azure-keyvault-pkcs11 and p11-kit

app-crypt/p11-kit: Sync and move from coreos-overlay to portage-stable

app-crypt/p11-kit: Use unstable 0.25.5 because we need --provider option

grub_install.sh: Remove redundant BOARD_GRUB logic

Refactor SB signing code and sign official builds with Azure Key Vault

ci-automation: Allow the arm64 tests to run on qemu_uefi_secure

Temporarily undo AKV signing while we complete the shim review

sys-boot/shim: Add the README for the shim repo