From: Reichel Andreas <[email protected]> Add ToDo list for integration into yocto projects Add an example for a .wks file to use efibootguard as boot loader.
Signed-off-by: Andreas Reichel <[email protected]> --- README.md | 78 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 78 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..fce877c --- /dev/null +++ b/README.md @@ -0,0 +1,78 @@ +# EFI Boot Guard meta layer # + +A meta-layer for integration of `efibootguard` into a yocto project. + +## Development ## + +Mailing list: +[[email protected]]([email protected]) + +Archive: +[https://www.mail-archive.com/[email protected]](https://www.mail-archive.com/[email protected]) + +## Current status ## + +Tested with: + +poky (morty): 7d5822bf4cb2089687c3c9a908cf4a4ef4e9a53a +https://git.yoctoproject.org/git/poky + +meta-intel: 6add41510412ca196efb3e4f949d403a8b6f35d7 +https://git.yoctoproject.org/git/meta-intel + +meta-intel-iot-middleware: fc8eabfa4fb54802d3f97123b9d2954450175e33 +https://git.yoctoproject.org/git/meta-intel-iot-middleware + +meta-nodejs: eec531e97a17bfd406f3bf76dee4057dcf5286a4 +https://github.com/imyller/meta-nodejs + +meta-openembedded: fe5c83312de11e80b85680ef237f8acb04b4b26e +http://git.openembedded.org/meta-openembedded + +meta-iot2000: 774746e44ee248306881ffae7f02370025fda77e +https://github.com/siemens/meta-iot2000 + +## project integration ## + +Steps: + +1. Include this meta layer into your project + +2. Set `EFI_PROVIDER` to "efibootguard" in your local.conf or in your + `conf/machine/<MACHINE>.conf`: +``` +EFI_PROVIDER="efibootguard" +``` + +3. Provide a project-specific .wks file using the python source plugins + of this layer for image creation + +4. Build the roots and the hdd image using the new .wks file + +## Example .wks file ## + +``` +# short-description: Create a bootable disk image with efibootguard +# long-description: Creates a partitioned EFI disk image, +# using efibootguard, that the user can directly dd to boot media. + +# EFI partition containing efibootguard +part --source efibootguard-efi --size 32 --extra-space 0 --overhead-factor 1 --ondisk mmcblk0 --label efi --part-type=EF00 --align 1024 + +# Two root partitions for updateability, leave away 2nd if not used +part / --source rootfs --size 1024 --extra-space 0 --overhead-factor 1 --ondisk mmcblk0 --fstype=ext4 --label platform0 --align 1024 +part --source rootfs --size 1024 --extra-space 0 --overhead-factor 1 --ondisk mmcblk0 --fstype=ext4 --label plaftorm1 --align 1024 + +# Two config partitions to load boot configuration and kernel +part --source efibootguard-boot --size 32 --extra-space 0 --overhead-factor 1 --ondisk mmcblk0 --label boot0 --align 1024 --part-type=0700 --sourceparams "watchdog=60,revision=2" +part --source efibootguard-boot --size 32 --extra-space 0 --overhead-factor 1 --ondisk mmcblk0 --label boot1 --align 1024 --part-type=0700 --sourceparams "watchdog=60,revision=1" + +# Other partitions +part --size 1024 --extra-space 0 --overhead-factor 1 --ondisk mmcblk0 --label persistent --align 1024 --fstype=ext4 +part swap --ondisk mmcblk0 --size 512 --fstype=swap --label swap --align 1024 + +# Important for type of partition table +bootloader --ptable gpt --append="console=ttyS1,115200n8 reboot=efi,warm rw debugshell=5 rootwait" +``` + +*NOTE*: The `--append` option to the bootloader gives kernel parameters that are written into the efibootguard environment file. -- 2.14.1 -- You received this message because you are subscribed to the Google Groups "EFI Boot Guard" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/efibootguard-dev/20170905123727.24381-7-andreas.reichel.ext%40siemens.com. For more options, visit https://groups.google.com/d/optout.
