From 970a7654f20527c5eb7cd1d87a00af1f060d0b52 Mon Sep 17 00:00:00 2001 From: Li Zhou Date: Fri, 23 Sep 2022 17:32:48 +0800 Subject: [PATCH] Debian: integ: add new packages to debian_pkg_dirs Add UEFI related tools, efitools and grub-efi to facilitate secure boot. This is done here instead of via LAT as was done previously. Test Plan: The tests are done with all the changes for this porting, which involves efitools/shim/grub2/grub-efi/lat-sdk.sh, because they are in a chain for secure boot verification. - PASS: secure boot OK on qemu. - PASS: secure boot OK on PowerEdge R430 lab. - PASS: secure boot NG on qemu/hardware when shim/grub-efi images are without the right signatures. Story: 2009221 Task: 46402 Signed-off-by: Li Zhou Change-Id: I4a29536dad7fef9e88c8de0cefb54b7cb6dfde4f --- debian_pkg_dirs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/debian_pkg_dirs b/debian_pkg_dirs index afd6b6352..91fd38918 100644 --- a/debian_pkg_dirs +++ b/debian_pkg_dirs @@ -45,6 +45,7 @@ golang-github-dev/golang-github-coreos-go-systemd-dev golang-github-dev/golang-github-opencontainers-specs-dev golang-github-dev/golang-github-vishvananda-netlink gpu/gpu-operator +grub/grub-efi grub/grub2 grub/grubby kubernetes/armada @@ -78,6 +79,7 @@ ostree/ostree-upgrade-mgr python/dh-python python/python-nss python/python3-setuptools +security/efitools security/keyrings.alt security/python-keyring security/shim-unsigned