From: Luca Boccassi <bluca@debian.org>
Date: Fri, 7 Feb 2025 17:14:45 +0000 (+0000)
Subject: ukify: add --pcrsig and --join-pcrsig arguments to append offline signature (#36181)
X-Git-Tag: v258-rc1~1389
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3477e9bd454094a7e5d089287730e0591b40525b;p=thirdparty%2Fsystemd.git

ukify: add --pcrsig and --join-pcrsig arguments to append offline signature (#36181)

Add a build parameter to take an existing UKI and attach a .pcrsig
section
to it. This allows one to create a UKI with a .pcrpkey section with
--policy-digest to get the json output from sd-measure, sign the digest
offline, and attach the .pcrsig section with the signature later.
---

3477e9bd454094a7e5d089287730e0591b40525b