summaryrefslogtreecommitdiff
path: root/scripts
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2025-12-15 17:07:10 +0200
committerViacheslav Hletenko <v.gletenko@vyos.io>2025-12-15 17:07:10 +0200
commit9fd7f46b06564f427bdf23829ecc1da8913dd45a (patch)
tree96ea80e0ab442f3898413be6b859109aec9389d5 /scripts
parentb86671dbf490ba5b422d4358594acd190e4c8856 (diff)
downloadvyos-build-9fd7f46b06564f427bdf23829ecc1da8913dd45a.tar.gz
vyos-build-9fd7f46b06564f427bdf23829ecc1da8913dd45a.zip
T8101: Add secure boot Kernel kexec options
Add Secure Boot - compatible kexec Kernel options - Required if system uses Secure Boot - Allows systemctl kexec or kexec to load signed kernels safely
Diffstat (limited to 'scripts')
-rw-r--r--scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig3
-rw-r--r--scripts/package-build/linux-kernel/arch/x86/configs/vyos_defconfig3
2 files changed, 4 insertions, 2 deletions
diff --git a/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig b/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig
index b7c4ccd9..8132ffe0 100644
--- a/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig
+++ b/scripts/package-build/linux-kernel/arch/arm64/configs/vyos_defconfig
@@ -267,7 +267,8 @@ CONFIG_TRACEPOINTS=y
CONFIG_CRASH_CORE=y
CONFIG_KEXEC_CORE=y
CONFIG_KEXEC=y
-# CONFIG_KEXEC_FILE is not set
+CONFIG_KEXEC_FILE=y
+CONFIG_KEXEC_SIG=y
# CONFIG_CRASH_DUMP is not set
# end of Kexec and crash features
# end of General setup
diff --git a/scripts/package-build/linux-kernel/arch/x86/configs/vyos_defconfig b/scripts/package-build/linux-kernel/arch/x86/configs/vyos_defconfig
index 87e89f2a..3af8327c 100644
--- a/scripts/package-build/linux-kernel/arch/x86/configs/vyos_defconfig
+++ b/scripts/package-build/linux-kernel/arch/x86/configs/vyos_defconfig
@@ -292,7 +292,8 @@ CONFIG_TRACEPOINTS=y
CONFIG_CRASH_CORE=y
CONFIG_KEXEC_CORE=y
CONFIG_KEXEC=y
-# CONFIG_KEXEC_FILE is not set
+CONFIG_KEXEC_FILE=y
+CONFIG_KEXEC_SIG=y
# CONFIG_CRASH_DUMP is not set
# end of Kexec and crash features
# end of General setup