[OE-core] [PATCH 0/5] ovmf: Bump to edk2-stable201905 and add improvements

[Richard Purdie]

On Tue, 2019-08-06 at 18:44 -0700, Ricardo Neri wrote:
> Hi,
> 
> Fixes [YOCTO #13438]
> 
> I have implemented this patchset to bump the OVMF recipe to the
> latest
> stable release of OVMF: edk2-stable201905. I continued Ross Burton's
> initial work to update the recipe [1].
> 
> The majority of the patches we were carrying with the recipe have
> been
> taken upstream in EDK2 and I have removed them. Plus, EDK2 now adds
> openssl as a git submodule and not a patching script. Thus, I removed
> support for this script and switched to the gitsm bitbake fetcher.
> 
> Also, now the EnrollDefaultKeys EFI application requires a separate
> Platform Key and first Key Exchange Key certificate instead of an
> hard-coded certificate embedded in the application. The hypervisor
> shall
> pass this certificated to EnrollDefaultKeys via the Type 11 SMBus
> table.
> I have updated the ovmf recipe to create the needed certificate and
> also updated runqemu to provide such certificate when using an OVMF
> binary with support for Secure Boot.
> 
> Lastly, I defined the recipe's PV and took Ross' change to use
> python3
> from HOSTTOOLS.

Thanks for the patches. I can't get the to apply at all. I know we have
problems due to the line endings in ovmf and the mailing list is
probably messing them up. Could you share a git tree with the patches
in somewhere please?

Cheers,

Richard