diff mbox series

[isar-cip-core] kas/opt/ebg-secure-boot-*: Make Backports for OVMF version depended

Message ID 20211217151139.1353130-1-Quirin.Gylstorff@siemens.com (mailing list archive)
State Handled Elsewhere
Headers show
Series [isar-cip-core] kas/opt/ebg-secure-boot-*: Make Backports for OVMF version depended | expand

Commit Message

Quirin Gylstorff Dec. 17, 2021, 3:11 p.m. UTC
From: Quirin Gylstorff <quirin.gylstorff@siemens.com>

For Debian Buster we need to backport a new version of the OVMF package
with contains the necessary option for secureboot with qemu.

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
---

Changes since RFC:
 - move back to ebg-secure-boot-snakeoil.yml

 kas/opt/ebg-secure-boot-snakeoil.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

Comments

Jan Kiszka Dec. 17, 2021, 3:18 p.m. UTC | #1
On 17.12.21 16:11, Q. Gylstorff wrote:
> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
> 
> For Debian Buster we need to backport a new version of the OVMF package
> with contains the necessary option for secureboot with qemu.
> 
> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
> ---
> 
> Changes since RFC:
>  - move back to ebg-secure-boot-snakeoil.yml
> 
>  kas/opt/ebg-secure-boot-snakeoil.yml | 7 ++++---
>  1 file changed, 4 insertions(+), 3 deletions(-)
> 
> diff --git a/kas/opt/ebg-secure-boot-snakeoil.yml b/kas/opt/ebg-secure-boot-snakeoil.yml
> index 9f3eae9..5aa5eff 100644
> --- a/kas/opt/ebg-secure-boot-snakeoil.yml
> +++ b/kas/opt/ebg-secure-boot-snakeoil.yml
> @@ -33,6 +33,7 @@ local_conf_header:
>      IMAGER_INSTALL += "ebg-secure-boot-snakeoil"
>  
>    ovmf: |
> -    # snakeoil certs are only part of backports
> -    DISTRO_APT_SOURCES_append = " conf/distro/debian-buster-backports.list"
> -    DISTRO_APT_PREFERENCES_append = " conf/distro/preferences.ovmf-snakeoil.conf"
> +    # snakeoil certs are only part of backports, for Debian 11 and later the are not necessary
> +    OVERRIDES_append = ":${BASE_DISTRO_CODENAME}"
> +    DISTRO_APT_SOURCES_append_buster = " conf/distro/debian-buster-backports.list"
> +    DISTRO_APT_PREFERENCES_append_buster = " conf/distro/preferences.ovmf-snakeoil.conf"
> 

Thanks, applied to next.

Jan
diff mbox series

Patch

diff --git a/kas/opt/ebg-secure-boot-snakeoil.yml b/kas/opt/ebg-secure-boot-snakeoil.yml
index 9f3eae9..5aa5eff 100644
--- a/kas/opt/ebg-secure-boot-snakeoil.yml
+++ b/kas/opt/ebg-secure-boot-snakeoil.yml
@@ -33,6 +33,7 @@  local_conf_header:
     IMAGER_INSTALL += "ebg-secure-boot-snakeoil"
 
   ovmf: |
-    # snakeoil certs are only part of backports
-    DISTRO_APT_SOURCES_append = " conf/distro/debian-buster-backports.list"
-    DISTRO_APT_PREFERENCES_append = " conf/distro/preferences.ovmf-snakeoil.conf"
+    # snakeoil certs are only part of backports, for Debian 11 and later the are not necessary
+    OVERRIDES_append = ":${BASE_DISTRO_CODENAME}"
+    DISTRO_APT_SOURCES_append_buster = " conf/distro/debian-buster-backports.list"
+    DISTRO_APT_PREFERENCES_append_buster = " conf/distro/preferences.ovmf-snakeoil.conf"