From: Michael Brown <mcb30@ipxe.org>
Date: Thu, 21 May 2026 14:41:08 +0000 (+0100)
Subject: [ci] Include UEFI Secure Boot builds for RISC-V 64 and LoongArch64
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=fa473fd138832bbffe8d58ecf65480f1bae2f6ff;p=thirdparty%2Fipxe.git

[ci] Include UEFI Secure Boot builds for RISC-V 64 and LoongArch64

The usage pattern for UEFI Secure Boot on RISC-V 64 and LoongArch64 is
not yet well defined: there is no equivalent on those architectures
for the UEFI shim or the Microsoft signing submission infrastructure.

Include signed binaries for these architectures within the release
artifacts.  Users may choose to enrol the iPXE Secure Boot CA
certificate on their own systems in order to use these binaries with
UEFI Secure Boot enabled.

OEMs such as Loongson may choose to include the iPXE Secure Boot CA
certificate within their default enrolled certificate list, or to
issue a cross-signed version of the iPXE Secure Boot CA certificate
(which could then be included within the official iPXE binaries in
future releases).

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1589c0877..7b0911838 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -154,6 +154,8 @@ jobs:
       matrix:
         arch:
           - arm64
+          - loong64
+          - riscv64
           - x86_64
     container:
       image: ghcr.io/ipxe/ipxe-builder-${{ matrix.arch }}
@@ -199,6 +201,8 @@ jobs:
       matrix:
         arch:
           - arm64
+          - loong64
+          - riscv64
           - x86_64
     container:
       image: ghcr.io/ipxe/ipxe-signer
@@ -384,6 +388,8 @@ jobs:
         bin-x86_64-efi/${DRIVERS}.efi
       sbarchs: >-
         arm64
+        loong64
+        riscv64
         x86_64
       sbbinaries: >-
         bin-${ARCH}-efi-sb/ipxe.efi
@@ -405,12 +411,16 @@ jobs:
         bin-loong64-efi/ipxe.efi
         bin-loong64-efi/ipxe-legacy.efi
         bin-loong64-efi/snponly.efi
+        bin-loong64-efi-sb/ipxe.efi
+        bin-loong64-efi-sb/snponly.efi
         bin-riscv32-efi/ipxe.efi
         bin-riscv32-efi/ipxe-legacy.efi
         bin-riscv32-efi/snponly.efi
         bin-riscv64-efi/ipxe.efi
         bin-riscv64-efi/ipxe-legacy.efi
         bin-riscv64-efi/snponly.efi
+        bin-riscv64-efi-sb/ipxe.efi
+        bin-riscv64-efi-sb/snponly.efi
         bin-x86_64-efi/ipxe.efi
         bin-x86_64-efi/ipxe-legacy.efi
         bin-x86_64-efi/snponly.efi
@@ -474,6 +484,10 @@ jobs:
             ipxe-legacy.usb
             ipxe-arm64-sb.iso
             ipxe-arm64-sb.usb
+            ipxe-loong64-sb.iso
+            ipxe-loong64-sb.usb
+            ipxe-riscv64-sb.iso
+            ipxe-riscv64-sb.usb
             ipxe-x86_64-sb.iso
             ipxe-x86_64-sb.usb
             ipxeboot.tar.gz
@@ -590,5 +604,7 @@ jobs:
               --notes-file version/relnotes.md \
               bin-combi/ipxe.iso bin-combi/ipxe.usb \
               bin-combi/ipxe-arm64-sb.iso bin-combi/ipxe-arm64-sb.usb \
+              bin-combi/ipxe-loong64-sb.iso bin-combi/ipxe-loong64-sb.usb \
+              bin-combi/ipxe-riscv64-sb.iso bin-combi/ipxe-riscv64-sb.usb \
               bin-combi/ipxe-x86_64-sb.iso bin-combi/ipxe-x86_64-sb.usb \
               bin-combi/ipxeboot.tar.gz