Versions
v202502 :: 0 :: gentoo
- Modified
- License
- BSD-2 MIT
- Keywords
- -* ~amd64 ~loong ~riscv
- USE flags
- secureboot
v202411 :: 0 :: gentoo
- Modified
- License
- BSD-2 MIT
- Keywords
- -* arm64 ~amd64 ~loong ~riscv
- USE flags
- secureboot
v202408 :: 0 :: gentoo
- Modified
- License
- BSD-2 MIT
- Keywords
- -* amd64 arm64
- USE flags
- secureboot
v202202 :: 0 :: gentoo
- Modified
- License
- BSD-2 MIT
- Keywords
- -* amd64
- USE flags
- secureboot
USE flags
General
- secureboot
- Automatically sign efi executables using user specified key
Runtime Dependencies
sys-firmware / edk2-bin : TianoCore EDK II UEFI firmware for virtual machines
Depending packages
app-admin / mkosi : Build Bespoke OS Images
app-emulation / qemu : QEMU + Kernel-based Virtual Machine userland tools
sys-firmware / edk2-bin : TianoCore EDK II UEFI firmware for virtual machines
x11-misc / grub2-theme-preview : Preview a GRUB 2.x theme using KVM/QEMU
Bugs
Change logs
- Repository mirror & CI · gentoo
Merge updates from master - James Le Cuirot · gentoo
sys-firmware/edk2: Drop arm64 from 202502 for now
It fails to build due to a DT_TEXTREL and linker warnings now being fatal. I will investigate soon. Signed-off-by: James Le Cuirot <chewi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - James Le Cuirot · gentoo
sys-firmware/edk2: Add python3_13t to 202502
Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2: Drop unused flag-o-matic eclass inherit
Signed-off-by: James Le Cuirot <chewi@gentoo.org> - WANG Xuerui · gentoo
sys-firmware/edk2: re-enable loong network TLS support for 202502
The previous crash observed on 202411 simply disappeared on 202502 without any apparent relevant code change. Signed-off-by: WANG Xuerui <xen0n@gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/41014 Signed-off-by: James Le Cuirot <chewi@gentoo.org> - WANG Xuerui · gentoo
sys-firmware/edk2: convert loong firmware images to QCOW2
Actually they work fine. Signed-off-by: WANG Xuerui <xen0n@gentoo.org> Signed-off-by: James Le Cuirot <chewi@gentoo.org> - WANG Xuerui · gentoo
sys-firmware/edk2: add 202502
Signed-off-by: WANG Xuerui <xen0n@gentoo.org> Signed-off-by: James Le Cuirot <chewi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - WANG Xuerui · gentoo
sys-firmware/edk2: fix build with GCC 15
Reviewed-by: Sam James <sam@gentoo.org> Signed-off-by: WANG Xuerui <xen0n@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
sys-firmware/edk2: Stabilize 202411 arm64, #950518
Signed-off-by: Sam James <sam@gentoo.org> - WANG Xuerui · gentoo
sys-firmware/edk2: keyword 202411 for ~loong
Closes: https://github.com/gentoo/gentoo/pull/40681 Reviewed-by: Sam James <sam@gentoo.org> Signed-off-by: WANG Xuerui <xen0n@gentoo.org> - WANG Xuerui · gentoo
sys-firmware/edk2: add build support for loong
Reviewed-by: Sam James <sam@gentoo.org> Signed-off-by: WANG Xuerui <xen0n@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - James Le Cuirot · gentoo
sys-firmware/edk2: Drop old 202405
Signed-off-by: James Le Cuirot <chewi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
sys-firmware/edk2: Stabilize 202408 amd64, #947251
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - James Le Cuirot · gentoo
sys-firmware/edk2: Keyword 202411 for ~riscv
Signed-off-by: James Le Cuirot <chewi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - James Le Cuirot · gentoo
sys-firmware/edk2: Add riscv support to 202411
Can't keyword it yet though because of unkeyworded dependencies. Use edk2-bin instead. Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2: Version bump to 202411
Signed-off-by: James Le Cuirot <chewi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
sys-firmware/edk2: Stabilize 202408 arm64, #947251
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - James Le Cuirot · gentoo
sys-firmware/edk2-ovmf-bin: Rename to edk2-bin to support other platforms
The source package now supports other platforms so follow suit. Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2: Add arm64 VM support to 202408
The filenames used here differ from Fedora, which ships far more variants. I felt it unnecessary to include the raw and unpadded images when the padded QCOW2 images should be all you need. QEMU_EFI.secboot_INSECURE.qcow2 does have Secure Boot enabled, but it must not be used in production. The lack of an SMM implementation for arm64 in this firmware means that the EFI variable store is unprotected, making the firmware unsafe. Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2: Add missing BDEPEND on sys-apps/which
The new version bump won't use this. Closes: https://bugs.gentoo.org/853271 Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2: Apply missing -Werror and hardened patches to 202405
Closes: https://bugs.gentoo.org/937610 Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2: Drop obsolete reference to USE=binary and update URL
I don't think using UefiShell.img actually works any more, but the new version bump will automatically create OVMF_VARS.secboot.fd for you. Closes: https://bugs.gentoo.org/926630 Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2-ovmf: Rename to edk2 to support other platforms
There is a lot of overlap in building firmware for other platforms from source, so it makes sense to have one source package. Signed-off-by: James Le Cuirot <chewi@gentoo.org> - James Le Cuirot · gentoo
sys-firmware/edk2: Bump to 202408, Python 3.13, many other improvements
The ebuild has been largely rewritten. It now: * Respects CC, CXX, and flags when building the base tools. * Doesn't use gcc/cc when building the firmware, enabling cross. * Prepares the ground for supporting platforms other than OVMF for x64. * Installs OVMF_VARS.secboot.fd prepared with virt-fw-vars. * Includes the latest UEFI DBX update in OVMF_VARS.secboot.fd. * Adds 4MB variants of the .fd images (in QCOW2 format). * Fixes network support broken by a recent bump. * Drops EnrollDefaultKeys.efi and UefiShell.img The enrollment tool hasn't actually worked for a while and is no longer needed now that we provide OVMF_VARS.secboot.fd. UefiShell.img is therefore of little use, and other distros now provide UefiShell.iso instead anyway. We can do the same if there is sufficient interest. This moves us closer to Fedora, but they ship far more variants. They have a large Python wrapper around upstream's build system, which is unusual in itself. Building all these would make the ebuild much more complex, take a long time, and use up more disk space. Perhaps USE flags could help here, but I'm not sure what all these variants are for. I also decided to install to paths based on upstream's names, e.g. edk2/ArmVirtQemu-AARCH64 as opposed to Fedora's edk2/aarch64 because mixing QEMU with Xen and others would be confusing when there are many similarly named files, even within a single architecture. Closes: https://bugs.gentoo.org/891191 Closes: https://bugs.gentoo.org/921819 Closes: https://bugs.gentoo.org/929838 Signed-off-by: James Le Cuirot <chewi@gentoo.org>