For what it's worth, when I try to build meta-intel's bbappend of ovmf, it
fails. Specifically, meta-intel's addition of the "secureboot" PACKAGECONFIG
flag is what does it.

        | ERROR: Execution of 
'/z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/temp/run.do_deploy.7832'
 failed with exit code 1:
        | Generating a RSA private key
        | Error Generating Key
        | 140383841510400:error:2406C06E:random number 
generator:RAND_DRBG_instantiate:error retrieving 
entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
        | 140383841510400:error:2406C06E:random number 
generator:RAND_DRBG_instantiate:error retrieving 
entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
        | 140383841510400:error:2406B072:random number 
generator:RAND_DRBG_generate:in error 
state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
        | 140383841510400:error:2406C06E:random number 
generator:RAND_DRBG_instantiate:error retrieving 
entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
        | 140383841510400:error:2406C06E:random number 
generator:RAND_DRBG_instantiate:error retrieving 
entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
        | 140383841510400:error:2406B072:random number 
generator:RAND_DRBG_generate:in error 
state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
        | 140383841510400:error:2406C06E:random number 
generator:RAND_DRBG_instantiate:error retrieving 
entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342:
        | 140383841510400:error:2406B072:random number 
generator:RAND_DRBG_generate:in error 
state:../openssl-1.1.1d/crypto/rand/drbg_lib.c:589:
        | 140383841510400:error:04081003:rsa routines:rsa_builtin_keygen:BN 
lib:../openssl-1.1.1d/crypto/rsa/rsa_gen.c:387:
        | WARNING: 
/z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/temp/run.do_deploy.7832:1
 exit 1 from 'openssl req -new -x509 -newkey rsa:2048 -keyout 
/z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/deploy-ovmf/OvmfPkKek1.key
 -out 
/z/build-master/minnow/build/tmp-glibc/work/corei7-64-oe-linux/ovmf/edk2-stable201905-r0/deploy-ovmf/OvmfPkKek1.crt
 -nodes -days 20 -subj "/CN=OVMFSecBootTest"'

Googling for an answer all I find is "maybe my system doesn't have
/dev/urandom" and/or "maybe /dev/urandom isn't readable by the user" but my
/dev/urandom seems fine:

        $ ls -l /dev | grep random
        crw-rw-rw-   1 root   root      1,   8 Aug 27 19:44 random
        crw-rw-rw-   1 root   root      1,   9 Aug 27 19:44 urandom

but maybe the build environment is doing something unexpected :-(
-- 
_______________________________________________
meta-intel mailing list
[email protected]
https://lists.yoctoproject.org/listinfo/meta-intel

Reply via email to