package/sbsigntools: new package

PATCH New Thomas Devoogdt 1 participant 1 message Dec 23, 2025

lore

Share & tools

lore

Thomas Devoogdt

author

2025-12-23 22:15 UTC #0 lore raw

PATCH 1/1 package/sbsigntools: new package

From: Hendrik De Vloed <[email protected]>

A Linux user-space application to sign and verify application for UEFI Secure Boot.

Inspired by https://lists.buildroot.org/pipermail/buildroot/2018-July/213212.html.

Signed-off-by Hendrik De Vloed <[email protected]>

Signed-off-by Thomas Devoogdt <[email protected]>

---
 package/Config.in                             |  1 +
 package/Config.in.host                        |  1 +
 ...-configure-fix-AM_INIT_AUTOMAKE-call.patch | 36 ++++++++++
 ...error-handling-in-__fileio_read_file.patch | 70 +++++++++++++++++++
 ...uilding-of-docs-and-tests-by-default.patch | 34 +++++++++
 package/sbsigntools/Config.in                 | 19 +++++
 package/sbsigntools/Config.in.host            | 15 ++++
 package/sbsigntools/sbsigntools.hash          |  9 +++
 package/sbsigntools/sbsigntools.mk            | 53 ++++++++++++++
 9 files changed, 238 insertions(+)
 create mode 100644 package/sbsigntools/0001-configure-fix-AM_INIT_AUTOMAKE-call.patch
 create mode 100644 package/sbsigntools/0002-fileio-improve-error-handling-in-__fileio_read_file.patch
 create mode 100644 package/sbsigntools/0003-disable-building-of-docs-and-tests-by-default.patch
 create mode 100644 package/sbsigntools/Config.in
 create mode 100644 package/sbsigntools/Config.in.host
 create mode 100644 package/sbsigntools/sbsigntools.hash
 create mode 100644 package/sbsigntools/sbsigntools.mk

package/Config.in +1 -0

index c1f812973a2..44e4eff5e47 100644
@@ -241,6 +241,7 @@ menu "Filesystem and flash utilities"
 	source "package/nfs-utils/Config.in"
 	source "package/nilfs-utils/Config.in"
 	source "package/ntfs-3g/Config.in"
+	source "package/sbsigntools/Config.in"
 	source "package/sp-oops-extract/Config.in"
 	source "package/squashfs/Config.in"
 	source "package/sshfs/Config.in"

package/Config.in.host +1 -0

index f6e6f6c965f..90d3db2b5a8 100644
@@ -108,6 +108,7 @@ menu "Host utilities"
 	source "package/rustc/Config.in.host"
 	source "package/s6-rc/Config.in.host"
 	source "package/sam-ba/Config.in.host"
+	source "package/sbsigntools/Config.in.host"
 	source "package/sdbus-cpp/Config.in.host"
 	source "package/sdbusplus/Config.in.host"
 	source "package/sentry-cli/Config.in.host"

package/sbsigntools/0001-configure-fix-AM_INIT_AUTOMAKE-call.patch new file +36 -0

new file mode 100644
index 00000000000..caee43fc7d0
@@ -0,0 +1,36 @@
+From 12ac736442a92d010b6b4bb3216ef93b060b5279 Mon Sep 17 00:00:00 2001
+From: Carlos Santos <[email protected]>
+Date: Tue, 3 Jul 2018 15:45:04 -0300
+Subject: [PATCH] configure: fix AM_INIT_AUTOMAKE call
+
+Requires subdir-objects to prevent warning messages:
+
+    lib/ccan/Makefile.am:2: warning: source file 'ccan/time/time.c' is in a subdirectory,
+    lib/ccan/Makefile.am:2: but option 'subdir-objects' is disabled
+    automake: warning: possible forward-incompatibility.
+    automake: At least a source file is in a subdirectory, but the 'subdir-objects'
+
+Added foreign to avoid complaints about missing AUTHORS and ChangeLog.
+
+Upstream: N/A
+Signed-off-by: Carlos Santos <[email protected]>
+Signed-off-by: Hendrik De Vloed <[email protected]>
+---
+ configure.ac | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/configure.ac b/configure.ac
+index 8a5340a..7f38fb8 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -1,6 +1,6 @@
+ AC_INIT([sbsigntool], [0.9.5], [[email protected]])
+ 
+-AM_INIT_AUTOMAKE()
++AM_INIT_AUTOMAKE([foreign subdir-objects])
+ 
+ AC_PREREQ(2.60)
+ 
+-- 
+2.43.0
+

package/sbsigntools/0002-fileio-improve-error-handling-in-__fileio_read_file.patch new file +70 -0

70 lines not on this page · raw message

package/sbsigntools/0003-disable-building-of-docs-and-tests-by-default.patch new file +34 -0

new file mode 100644
index 00000000000..44d67173880
@@ -0,0 +1,34 @@
+From d07966827cfa7d4efd6aecf8d8e6d62e96d68bc6 Mon Sep 17 00:00:00 2001
+From: Hendrik De Vloed <[email protected]>
+Date: Wed, 3 Dec 2025 16:10:40 +0100
+Subject: [PATCH] disable building of docs and tests by default
+
+Upstream: N/A
+Signed-off-by: Hendrik De Vloed <[email protected]>
+---
+ Makefile.am  | 2 +-
+ configure.ac | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/Makefile.am b/Makefile.am
+index d347e9b..336797b 100644
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -1,2 +1,2 @@
+ 
+-SUBDIRS = lib/ccan src docs tests
++SUBDIRS = lib/ccan src
+diff --git a/configure.ac b/configure.ac
+index 7f38fb8..d2860cf 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -93,5 +93,5 @@ AC_SUBST(EFI_ARCH, $EFI_ARCH)
+ AC_SUBST(CRTPATH, $CRTPATH)
+ 
+ AC_CONFIG_FILES([Makefile src/Makefile lib/ccan/Makefile]
+-		[docs/Makefile tests/Makefile])
++		[ ])
+ AC_OUTPUT
+-- 
+2.43.0
+

package/sbsigntools/Config.in new file +19 -0

new file mode 100644
index 00000000000..70d48034d7f
@@ -0,0 +1,19 @@
+config BR2_PACKAGE_SBSIGNTOOLS
+	bool "sbsigntools"
+	depends on BR2_PACKAGE_GNU_EFI_ARCH_SUPPORTS
+	depends on BR2_USE_WCHAR # binutils
+	select BR2_PACKAGE_BINUTILS
+	select BR2_PACKAGE_GNU_EFI
+	select BR2_PACKAGE_LIBOPENSSL_ENGINES
+	select BR2_PACKAGE_OPENSSL
+	select BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL
+	select BR2_PACKAGE_UTIL_LINUX
+	select BR2_PACKAGE_UTIL_LINUX_LIBUUID
+	help
+	  A Linux user-space application to sign and verify application
+	  for UEFI Secure Boot.
+
+	  https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/about/
+
+comment "sbsigntools needs a toolchain w/ wchar"
+	depends on !BR2_USE_WCHAR

package/sbsigntools/Config.in.host new file +15 -0

new file mode 100644
index 00000000000..847073482e2
@@ -0,0 +1,15 @@
+config BR2_PACKAGE_HOST_SBSIGNTOOLS
+	bool "host sbsigntools"
+	select BR2_PACKAGE_HOST_BINUTILS
+	select BR2_PACKAGE_HOST_GNU_EFI
+	select BR2_PACKAGE_HOST_GNU_EFI
+	select BR2_PACKAGE_HOST_LIBOPENSSL_ENGINES
+	select BR2_PACKAGE_HOST_OPENSSL
+	select BR2_PACKAGE_HOST_OPENSSL_FORCE_LIBOPENSSL
+	select BR2_PACKAGE_HOST_UTIL_LINUX
+	select BR2_PACKAGE_HOST_UTIL_LINUX_LIBUUID
+	help
+	  A Linux user-space application to sign and verify application
+	  for UEFI Secure Boot.
+
+	  https://git.kernel.org/pub/scm/linux/kernel/git/jejb/sbsigntools.git/about/

package/sbsigntools/sbsigntools.hash new file +9 -0

new file mode 100644
index 00000000000..2c2c38714e2
@@ -0,0 +1,9 @@
+# Locally computed
+sha256  d25c26b834be5d66fe3881a3eb8890e0a18fffa3fa1cea4a62cee53d860e3f9e  sbsigntools-v0.9.5-git4.tar.gz
+sha256  7f424707cdb69df658b7b66ea1f9c9ab3ea0a0988999ecba3dad10a811db654f  COPYING
+sha256  02a66d6af5a4ef501849a33e6d8a0624e2b4284c8bed19ba0b0c24e8ac1add4e  lib/ccan.git/licenses/BSD-3CLAUSE
+sha256  89807acf2309bd285f033404ee78581602f3cd9b819a16ac2f0e5f60ff4a473e  lib/ccan.git/licenses/BSD-MIT
+sha256  ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6  lib/ccan.git/licenses/GPL-2
+sha256  fc82ca8b6fdb18d4e3e85cfd8ab58d1bcd3f1b29abe782895abd91d64763f8e7  lib/ccan.git/licenses/GPL-3
+sha256  a9bdde5616ecdd1e980b44f360600ee8783b1f99b8cc83a2beb163a0a390e861  lib/ccan.git/licenses/LGPL-2.1
+sha256  a853c2ffec17057872340eee242ae4d96cbf2b520ae27d903e1b2fef1a5f9d1c  lib/ccan.git/licenses/LGPL-3

package/sbsigntools/sbsigntools.mk new file +53 -0

53 lines not on this page · raw message

Signature · 6 lines

2.43.0

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot