From: Cole Robinson <crobinso@redhat.com>
Date: Fri, 4 Nov 2022 20:46:41 +0000 (-0400)
Subject: feat(qemu): add efi_secret driver
X-Git-Tag: 058~97
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8194f72af2e9b6ab3cdb01412381023b0a58c852;p=thirdparty%2Fdracut.git

feat(qemu): add efi_secret driver

Despite the generic name, the only current use of the `efi_secret`
is exposing data in /sys that's been injected into a SEV/SEV-ES
virtual machine. More info:

https://docs.kernel.org/security/secrets/coco.html

This secret is probably a luks password, so we need this driver at
boot time.

Signed-off-by: Cole Robinson <crobinso@redhat.com>
---

diff --git a/modules.d/90qemu/module-setup.sh b/modules.d/90qemu/module-setup.sh
index 01bc0c3de..d11f37778 100755
--- a/modules.d/90qemu/module-setup.sh
+++ b/modules.d/90qemu/module-setup.sh
@@ -18,5 +18,6 @@ installkernel() {
         virtio_blk virtio virtio_ring virtio_pci \
         virtio_scsi virtio_console virtio_rng virtio_mem \
         spapr-vscsi \
-        qemu_fw_cfg
+        qemu_fw_cfg \
+        efi_secret
 }