Re: [cip-dev] [isar-cip-core][PATCH v2 1/7] secure-boot-efi-keys: Add recipe to create EFI certificates

[Jan Kiszka <jan.kiszka@siemens.com>]

On 14.09.26 08:59, Moessbauer, Felix (FT RPD CED OES-DE) wrote:
> On Wed, 2026-08-26 at 17:20 +0200, Jan Kiszka via lists.cip-project.org
> wrote:
>> From: Jan Kiszka <jan.kiszka@siemens.com>
>>
>> This recipe allows to derive the PK, KEK and db values from a single
>> signing key as we are using for demonstration/testing purposes and
>> simple scenarios. The recipe provides abstract "secure-boot-efi-certs"
>> which could also be offered by an alternative recipe/package that picks
>> up differently generated certificates and/or a proper hierarchy.
>>
>> Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
>> ---
>>  .../single-key-to-efi-certs_0.1.bb            | 41 +++++++++++++++++++
>>  1 file changed, 41 insertions(+)
>>  create mode 100644 recipes-devtools/secure-boot-efi-certs/single-key-to-efi-certs_0.1.bb
>>
>> diff --git a/recipes-devtools/secure-boot-efi-certs/single-key-to-efi-certs_0.1.bb b/recipes-devtools/secure-boot-efi-certs/single-key-to-efi-certs_0.1.bb
>> new file mode 100644
>> index 00000000..01d27041
>> --- /dev/null
>> +++ b/recipes-devtools/secure-boot-efi-certs/single-key-to-efi-certs_0.1.bb
>> @@ -0,0 +1,41 @@
>> +#
>> +# CIP Core, generic profile
>> +#
>> +# Copyright (c) Siemens AG, 2026
>> +#
>> +# Authors:
>> +#  Jan Kiszka <jan.kiszka@siemens.com>
>> +#
>> +# SPDX-License-Identifier: MIT
>> +#
>> +
>> +inherit dpkg
> 
> Hi, please either use dpkg-raw, or set DPKG_ARCH = "all", as
> this package does not depend on the architecture of the target.
> 

Added

DPKG_ARCH = "all"

in next.

Thanks,
Jan

-- 
Siemens AG, Foundational Technologies
Linux Expert Center