blob: 8895b66d203446ac4604ffa12fdea0ad9c3c5199 [file] [log] [blame]
config BR2_PACKAGE_MOKUTIL
bool "mokutil"
# We're not selecting shim, but this package only makes sense
# on architectures on which shim is supported
depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS
depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS
depends on BR2_USE_MMU # keyutils
depends on !BR2_STATIC_LIBS # efivar, keyutils
depends on !BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS # efivar
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # efivar
depends on BR2_TOOLCHAIN_HAS_THREADS # efivar
depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12 # efivar
select BR2_PACKAGE_EFIVAR
select BR2_PACKAGE_KEYUTILS
select BR2_PACKAGE_LIBXCRYPT if BR2_TOOLCHAIN_USES_GLIBC
select BR2_PACKAGE_OPENSSL
select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL
help
mokutil is a tool to import or delete the machines owner
keys (MOK) stored in the database of shim.
"shim" is the first stage bootloader to support UEFI Secure
Boot. See also the "shim" package in the bootloaders
section.
https://github.com/lcp/mokutil
comment "mokutil needs a toolchain w/ dynamic library, threads, gcc >= 4.9, headers >= 3.12"
depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS
depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS
depends on BR2_USE_MMU
depends on BR2_STATIC_LIBS || \
BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 || \
!BR2_TOOLCHAIN_HAS_THREADS || \
BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12