summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTom Rini <trini@konsulko.com>2018-05-05 11:09:50 -0400
committerJia Zhang <zhang.jia@linux.alibaba.com>2018-05-13 14:16:05 +0800
commit1c96c0d09614a3a692a8bee201e34694f26c436a (patch)
tree2e8d11d77dbdf268b5834e0dee5d621b235f4855
parent7bbeefe9bd000b66f5c517f34954f744ca2d4666 (diff)
downloadmeta-secure-core-1c96c0d09614a3a692a8bee201e34694f26c436a.tar.gz
linux-yocto-efi-secure-boot: Package unversioned signature as symlink
To match the usual user experience of having /boot/${KERNEL_IMAGETYPE} exist as a symlink to the real kernrel, also have our signature file exist for that as a symlink and include it in the package file. Signed-off-by: Tom Rini <trini@konsulko.com>
-rw-r--r--meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc4
1 files changed, 3 insertions, 1 deletions
diff --git a/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc b/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc
index 62e869d..ae2aeca 100644
--- a/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc
+++ b/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc
@@ -31,7 +31,8 @@ fakeroot python do_sign() {
31 uks_sel_sign(kernel, d) 31 uks_sel_sign(kernel, d)
32 32
33 shutil.copyfile(kernel, d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}')) 33 shutil.copyfile(kernel, d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}'))
34 shutil.copyfile(kernel + '.p7b', d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}.p7b')) 34 shutil.move(kernel + '.p7b', d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}.p7b'))
35 os.symlink(type + d.expand('-${KERNEL_RELEASE}.p7b'), d.expand('${D}/boot/') + type + '.p7b')
35} 36}
36 37
37# Make sure the kernel image has been signed before kernel_do_deploy() 38# Make sure the kernel image has been signed before kernel_do_deploy()
@@ -99,4 +100,5 @@ python do_package_prepend() {
99 for type in d.expand('${KERNEL_IMAGETYPES}').split(): 100 for type in d.expand('${KERNEL_IMAGETYPES}').split():
100 typelower = type.lower() 101 typelower = type.lower()
101 d.appendVar('FILES_kernel-image-' + typelower, ' /boot/' + type + d.expand('-${KERNEL_VERSION_NAME}.p7b')) 102 d.appendVar('FILES_kernel-image-' + typelower, ' /boot/' + type + d.expand('-${KERNEL_VERSION_NAME}.p7b'))
103 d.appendVar('FILES_kernel-image-' + typelower, ' /boot/' + type + '.p7b')
102} 104}