[gentoo-commits] repo/gentoo:master commit in: sys-firmware/edk2-ovmf/

[Andrew Ammerlaan]

commit:     39f892b24fbfb92a75f0f40dbb95736c82273b92
Author:     Andrew Ammerlaan <andrewammerlaan <AT> gentoo <DOT> org>
AuthorDate: Wed Jul 12 07:57:48 2023 +0000
Commit:     Andrew Ammerlaan <andrewammerlaan <AT> gentoo <DOT> org>
CommitDate: Thu Aug 17 07:48:42 2023 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=39f892b2

sys-firmware/edk2-ovmf: use secureboot.eclass to sign efi exec

Signed-off-by: Andrew Ammerlaan <andrewammerlaan <AT> gentoo.org>

 sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild | 5 ++++-
 sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild    | 9 ++++++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild 
b/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild
index 889f4431214d..e7b13c536c1f 100644
--- a/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild
+++ b/sys-firmware/edk2-ovmf/edk2-ovmf-202105-r2.ebuild
@@ -6,7 +6,7 @@ EAPI=7
 PYTHON_REQ_USE="sqlite"
 PYTHON_COMPAT=( python3_{9,10,11} )
 
-inherit python-any-r1 readme.gentoo-r1
+inherit python-any-r1 readme.gentoo-r1 secureboot
 
 DESCRIPTION="UEFI firmware for 64-bit x86 virtual machines"
 HOMEPAGE="https://github.com/tianocore/edk2";
@@ -90,6 +90,7 @@ In order to use the firmware you can run qemu the following 
way
 
 pkg_setup() {
        [[ ${PV} != "999999" ]] && use binary || python-any-r1_pkg_setup
+       secureboot_pkg_setup
 }
 
 src_prepare() {
@@ -169,6 +170,8 @@ src_install() {
        doins qemu/*
        rm "${ED}"/usr/share/qemu/firmware/40-edk2-ovmf-x64-sb-enrolled.json || 
die "rm failed"
 
+       secureboot_auto_sign --in-place
+
        readme.gentoo_create_doc
 }
 

diff --git a/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild 
b/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild
index 0a1469b2cbc9..322c5a16bc5d 100644
--- a/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild
+++ b/sys-firmware/edk2-ovmf/edk2-ovmf-202202.ebuild
@@ -6,7 +6,7 @@ EAPI=8
 PYTHON_REQ_USE="sqlite"
 PYTHON_COMPAT=( python3_{9,10,11} )
 
-inherit python-any-r1 readme.gentoo-r1
+inherit python-any-r1 readme.gentoo-r1 secureboot
 
 DESCRIPTION="UEFI firmware for 64-bit x86 virtual machines"
 HOMEPAGE="https://github.com/tianocore/edk2";
@@ -69,6 +69,11 @@ In order to use the firmware you can run qemu the following 
way
                -drive 
file=/usr/share/edk2-ovmf/OVMF.fd,if=pflash,format=raw,unit=0,readonly=on \
                ..."
 
+pkg_setup() {
+       python-any-r1_pkg_setup
+       secureboot_pkg_setup
+}
+
 src_prepare() {
        # Bundled submodules
        cp -rl "${WORKDIR}/openssl-${BUNDLED_OPENSSL_SUBMODULE_SHA}"/* 
"CryptoPkg/Library/OpensslLib/openssl/"
@@ -140,6 +145,8 @@ src_install() {
        doins qemu/*
        rm "${ED}"/usr/share/qemu/firmware/40-edk2-ovmf-x64-sb-enrolled.json || 
die "rm failed"
 
+       secureboot_auto_sign --in-place
+
        readme.gentoo_create_doc
 }