diff options
| author | Tom Rini <trini@konsulko.com> | 2018-05-05 11:09:50 -0400 |
|---|---|---|
| committer | Jia Zhang <zhang.jia@linux.alibaba.com> | 2018-05-13 14:16:05 +0800 |
| commit | 1c96c0d09614a3a692a8bee201e34694f26c436a (patch) | |
| tree | 2e8d11d77dbdf268b5834e0dee5d621b235f4855 | |
| parent | 7bbeefe9bd000b66f5c517f34954f744ca2d4666 (diff) | |
| download | meta-secure-core-1c96c0d09614a3a692a8bee201e34694f26c436a.tar.gz | |
linux-yocto-efi-secure-boot: Package unversioned signature as symlink
To match the usual user experience of having /boot/${KERNEL_IMAGETYPE}
exist as a symlink to the real kernrel, also have our signature file
exist for that as a symlink and include it in the package file.
Signed-off-by: Tom Rini <trini@konsulko.com>
| -rw-r--r-- | meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc b/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc index 62e869d..ae2aeca 100644 --- a/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc +++ b/meta-efi-secure-boot/recipes-kernel/linux/linux-yocto-efi-secure-boot.inc | |||
| @@ -31,7 +31,8 @@ fakeroot python do_sign() { | |||
| 31 | uks_sel_sign(kernel, d) | 31 | uks_sel_sign(kernel, d) |
| 32 | 32 | ||
| 33 | shutil.copyfile(kernel, d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}')) | 33 | shutil.copyfile(kernel, d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}')) |
| 34 | shutil.copyfile(kernel + '.p7b', d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}.p7b')) | 34 | shutil.move(kernel + '.p7b', d.expand('${D}/boot/') + type + d.expand('-${KERNEL_RELEASE}.p7b')) |
| 35 | os.symlink(type + d.expand('-${KERNEL_RELEASE}.p7b'), d.expand('${D}/boot/') + type + '.p7b') | ||
| 35 | } | 36 | } |
| 36 | 37 | ||
| 37 | # Make sure the kernel image has been signed before kernel_do_deploy() | 38 | # Make sure the kernel image has been signed before kernel_do_deploy() |
| @@ -99,4 +100,5 @@ python do_package_prepend() { | |||
| 99 | for type in d.expand('${KERNEL_IMAGETYPES}').split(): | 100 | for type in d.expand('${KERNEL_IMAGETYPES}').split(): |
| 100 | typelower = type.lower() | 101 | typelower = type.lower() |
| 101 | d.appendVar('FILES_kernel-image-' + typelower, ' /boot/' + type + d.expand('-${KERNEL_VERSION_NAME}.p7b')) | 102 | d.appendVar('FILES_kernel-image-' + typelower, ' /boot/' + type + d.expand('-${KERNEL_VERSION_NAME}.p7b')) |
| 103 | d.appendVar('FILES_kernel-image-' + typelower, ' /boot/' + type + '.p7b') | ||
| 102 | } | 104 | } |
