Hi Aswin On Wed, 1 Jul 2026 at 15:22, Aswin Murugan <[email protected]> wrote: > > Add a common configuration fragment for EFI Secure Boot and the > required hash algorithm configs to reuse across Qualcomm boards. > > Signed-off-by: Aswin Murugan <[email protected]> > --- > board/qualcomm/secure-boot.config | 6 ++++++ > 1 file changed, 6 insertions(+) > create mode 100644 board/qualcomm/secure-boot.config > > diff --git a/board/qualcomm/secure-boot.config > b/board/qualcomm/secure-boot.config > new file mode 100644 > index 00000000000..21f567e1a45 > --- /dev/null > +++ b/board/qualcomm/secure-boot.config > @@ -0,0 +1,6 @@ > +# Enables EFI Secure Boot support > +CONFIG_EFI_VARIABLES_PRESEED=y
Enabling this on it's own doesn't make too much sense since the compilation will fail. What we could do is amend our EFI makefiles and generate the file if it's not already there using tools/efivar.py Cheers /Ilias > +CONFIG_EFI_SECURE_BOOT=y > +CONFIG_FIT_SIGNATURE=y > +CONFIG_SHA512=y > +CONFIG_SHA384=y > -- > 2.34.1 >
