| config BR2_PACKAGE_MOKUTIL |
| bool "mokutil" |
| # We're not selecting shim, but this package only makes sense |
| # on architectures on which shim is supported |
| depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS |
| depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS |
| depends on BR2_USE_MMU # keyutils |
| depends on !BR2_STATIC_LIBS # efivar, keyutils |
| depends on !BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS # efivar |
| depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # efivar |
| depends on BR2_TOOLCHAIN_HAS_THREADS # efivar |
| depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12 # efivar |
| select BR2_PACKAGE_EFIVAR |
| select BR2_PACKAGE_KEYUTILS |
| select BR2_PACKAGE_LIBXCRYPT if BR2_TOOLCHAIN_USES_GLIBC |
| select BR2_PACKAGE_OPENSSL |
| select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL |
| help |
| mokutil is a tool to import or delete the machines owner |
| keys (MOK) stored in the database of shim. |
| |
| "shim" is the first stage bootloader to support UEFI Secure |
| Boot. See also the "shim" package in the bootloaders |
| section. |
| |
| https://github.com/lcp/mokutil |
| |
| comment "mokutil needs a toolchain w/ dynamic library, threads, gcc >= 4.9, headers >= 3.12" |
| depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS |
| depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS |
| depends on BR2_USE_MMU |
| depends on BR2_STATIC_LIBS || \ |
| BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 || \ |
| !BR2_TOOLCHAIN_HAS_THREADS || \ |
| BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12 |