[PATCH 1/1] tools: build mkeficapsule for CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y

[PATCH 1/1] tools: build mkeficapsule for CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y

[Heinrich Schuchardt]

Currently we build mkeficapsule by default even if we don't have EFI
capsule support enabled. This adds a host GnuTLS build dependency.

Only build mkeficapsule by default if CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y.

tools-only_defconfig explicitly selects CONFIG_TOOLS_MKEFICAPSULE=y.
Hence distro packages like Debian's u-boot-tools will still contain
mkeficapsule.

Reported-by: Linus Walleij <linusw@kernel.org>
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
---
 tools/Kconfig | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/Kconfig b/tools/Kconfig
index ef33295b8ec..e151b30217e 100644
--- a/tools/Kconfig
+++ b/tools/Kconfig
@@ -108,7 +108,7 @@ config TOOLS_SHA512
 
 config TOOLS_MKEFICAPSULE
 	bool "Build efimkcapsule command"
-	default y if EFI_LOADER
+	default y if EFI_HAVE_CAPSULE_SUPPORT
 	help
 	  This command allows users to create a UEFI capsule file and,
 	  optionally sign that file. If you want to enable UEFI capsule
-- 
2.53.0

Re: [PATCH 1/1] tools: build mkeficapsule for CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y

[Linus Walleij]

On Thu, Aug 20, 2026 at 9:27 AM Heinrich Schuchardt
<heinrich.schuchardt@canonical.com> wrote:

> Currently we build mkeficapsule by default even if we don't have EFI
> capsule support enabled. This adds a host GnuTLS build dependency.
>
> Only build mkeficapsule by default if CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y.
>
> tools-only_defconfig explicitly selects CONFIG_TOOLS_MKEFICAPSULE=y.
> Hence distro packages like Debian's u-boot-tools will still contain
> mkeficapsule.
>
> Reported-by: Linus Walleij <linusw@kernel.org>
> Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>

Looks right to me!
Reviewed-by: Linus Walleij <linusw@kernel.org>

Yours,
Linus Walleij

Re: [PATCH 1/1] tools: build mkeficapsule for CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y

[Tom Rini]

[-- Attachment #1: Type: text/plain, Size: 740 bytes --]

On Thu, Aug 20, 2026 at 09:26:45AM +0200, Heinrich Schuchardt wrote:

> Currently we build mkeficapsule by default even if we don't have EFI
> capsule support enabled. This adds a host GnuTLS build dependency.
> 
> Only build mkeficapsule by default if CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y.
> 
> tools-only_defconfig explicitly selects CONFIG_TOOLS_MKEFICAPSULE=y.
> Hence distro packages like Debian's u-boot-tools will still contain
> mkeficapsule.
> 
> Reported-by: Linus Walleij <linusw@kernel.org>
> Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>

This should address the similar type problems other people and platforms
have reported too.

Reviewed-by: Tom Rini <trini@konsulko.com>

-- 
Tom

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 228 bytes --]

Re: [PATCH 1/1] tools: build mkeficapsule for CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y

[Kory Maincent]

On 8/20/26 09:26, Heinrich Schuchardt wrote:
> Currently we build mkeficapsule by default even if we don't have EFI
> capsule support enabled. This adds a host GnuTLS build dependency.
> 
> Only build mkeficapsule by default if CONFIG_EFI_HAVE_CAPSULE_SUPPORT=y.
> 
> tools-only_defconfig explicitly selects CONFIG_TOOLS_MKEFICAPSULE=y.
> Hence distro packages like Debian's u-boot-tools will still contain
> mkeficapsule.

Reviewed-by: Kory Maincent <kory.maincent@bootlin.com>

Thank you!

--
Köry Maincent, Bootlin
Embedded Linux and kernel engineering
https://bootlin.com