Add a stub and generator script to build inified Linux images that contain kernel, command line, initrd and device trees into a single UEFI executable. This is an important building block for secure boot under UEFI.
In contrast to the existing solution by systemd, this one comes with support for multiple device trees that permits running the same image on similar but not identical hardware platforms. Although the trend goes towards firmware provided device tree, replacements in lock-step with kernel updates will remains important in the foreseeable future, and this stub accounts for it. Futhermore, this approach here has a more user-friendly python-based generator script which does not depend on too-new binutils or LLVM versions and allows to simplify the Linux stub by arranging data in the required way already during generation. These patches have been moderately tested only, primarily on ARM64. The next planned step is a test integration with isar-cip-core. Still, reviews would already be welcome. Jan Jan Kiszka (2): Add stub for unified Linux images scripts: Add generator for unified Linux images Makefile.am | 29 +++- linux-stub/fdt.c | 182 +++++++++++++++++++++++++ linux-stub/initrd.c | 103 ++++++++++++++ linux-stub/linux-stub.h | 23 ++++ linux-stub/main.c | 170 +++++++++++++++++++++++ scripts/gen_unified_linux.py | 252 +++++++++++++++++++++++++++++++++++ 6 files changed, 757 insertions(+), 2 deletions(-) create mode 100644 linux-stub/fdt.c create mode 100644 linux-stub/initrd.c create mode 100644 linux-stub/linux-stub.h create mode 100644 linux-stub/main.c create mode 100755 scripts/gen_unified_linux.py -- 2.34.1 -- You received this message because you are subscribed to the Google Groups "EFI Boot Guard" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/efibootguard-dev/cover.1649070513.git.jan.kiszka%40siemens.com.
