WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity

efi: sign the x86_64_efi reference kernel with an authenticated HDR_CMDLINE

pull/850/head
David Garske 2026-08-03 14:22:19 -07:00 committed by Daniele Lacamera
parent 4a16dce4f8
commit 18b525f53c
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
tools/efi/compile_efi_linux.sh
View File

@ -20,8 +20,13 @@ make -C $WORK_DIR/$BR_DIR O=$IMAGE_DIR
SIGN_TOOL="./tools/keytools/sign"
$SIGN_TOOL --ed25519 $IMAGE_DIR/images/bzImage wolfboot_signing_private_key.der 1
$SIGN_TOOL --ed25519 $IMAGE_DIR/images/bzImage wolfboot_signing_private_key.der 2
# Carry the kernel command line in the signed manifest (HDR_CMDLINE TLV) so it
# is authenticated with the image; wolfBoot passes it to the kernel EFI stub
# via LoadOptions. console=ttyS0 keeps the kernel log on the QEMU serial port.
CMDLINE="console=ttyS0 wolfboot_efi_cmdline=1"
$SIGN_TOOL --ed25519 --cmdline "$CMDLINE" $IMAGE_DIR/images/bzImage wolfboot_signing_private_key.der 1
$SIGN_TOOL --ed25519 --cmdline "$CMDLINE" $IMAGE_DIR/images/bzImage wolfboot_signing_private_key.der 2
mkdir -p /tmp/efi
sudo mount /tmp/efi.disk /tmp/efi