kernel-install: add uki.conf example

diff --git a/src/kernel-install/meson.build b/src/kernel-install/meson.build
index 7f61fcc5160fa1537a30f5fb3ec47f04a49bd5f1..edd0b7d360d14b6b87bcbc69427ce6caaf7adaf4 100644 (file)
--- a/src/kernel-install/meson.build
+++ b/src/kernel-install/meson.build
@@ -42,6 +42,9 @@ if want_kernel_install
 
         install_data('install.conf',
                      install_dir : kerneldir)
+ 
+        install_data('uki.conf',
+                     install_dir : kerneldir)
 
         if install_sysconfdir
                 install_emptydir(sysconfdir / 'kernel/install.d')

diff --git a/src/kernel-install/uki.conf b/src/kernel-install/uki.conf
new file mode 100644 (file)
index 0000000..fd48662
--- /dev/null
+++ b/src/kernel-install/uki.conf
@@ -0,0 +1,34 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it under the
+#  terms of the GNU Lesser General Public License as published by the Free
+#  Software Foundation; either version 2.1 of the License, or (at your option)
+#  any later version.
+#
+# Ini-style configuration file for ukify(1) which is only effective when
+# $KERNEL_INSTALL_LAYOUT or layout= in install.conf is set to uki and
+# $KERNEL_INSTALL_UKI_GENERATOR or uki_generator= in install.conf is set to
+# ukify, or is unset. $KERNEL_INSTALL_CONF_ROOT may be used to override the 
+# search path.
+#
+# See kernel-install(8) for details.
+
+#[UKI]
+#Initrd=
+#Microcode=
+#Splash=
+#PCRPKey=
+#PCRBanks=
+#SecureBootSigningTool=
+#SecureBootPrivateKey=/etc/kernel/secure-boot-private-key.pem
+#SecureBootCertificate=/etc/kernel/secure-boot-certificate.pem
+#SecureBootCertificateDir=
+#SecureBootCertificateName=
+#SecureBootCertificateValidity=
+#SigningEngine=
+#SignKernel=
+
+#[PCRSignature:NAME]
+#PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key.pem
+#PCRPublicKey=/etc/systemd/tpm2-pcr-public-key.pem
+#Phases=