Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

efi: remove deprecated APIs #274

Merged

Conversation

chrisccoulson
Copy link
Collaborator

@chrisccoulson chrisccoulson commented Nov 21, 2023

This removes deprecated APIs and test data, and will make it easier to
generate new mock binaries without having to adjust digests in associated
unit tests. I want to generate new mock grub binaries in another PR to add
the EFI prefix.

Note that this removes some data that is used by tools/gen-compattest-data,
but it turns out that a previous PR (#156)
already removed test data required by it and it hasn't worked since then. I need
to rework how we test that changes are backwards compatible, so I'll fix that in
another PR.

@chrisccoulson chrisccoulson marked this pull request as ready for review November 21, 2023 19:20
@chrisccoulson chrisccoulson force-pushed the efi-remove-deprecated-apis branch from 967dcf0 to fadf272 Compare November 22, 2023 23:29
@chrisccoulson
Copy link
Collaborator Author

Ugh, of course, this also makes tools/gen-compatdata unusable, so I'll need to fix that first

Copy link
Collaborator

@pedronis pedronis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Ugh, of course, this also makes tools/gen-compatdata unusable, so I'll need to fix that first

if the data is checked in as we discussed and the tests pass and do not want to block on this, you can leave a TODO there and come back in a different PR

You can also comment out code at the same time to help landing things

This tool hasn't worked since canonical#156.
As canonical#274 also makes it
unbuildable, comment out the unbuildable code for now and return an
error.
@chrisccoulson chrisccoulson merged commit 3db8128 into canonical:master Nov 27, 2023
2 checks passed
chrisccoulson added a commit to chrisccoulson/secboot that referenced this pull request Nov 28, 2023
canonical#274 deleted a test key that was
used by the mock dual signed shim. Rather than resurrecting the entire
certificate chain, this brings back one deleted leak key and then
uses this to create one of the signatures on the mock dual signed
binary.
chrisccoulson added a commit that referenced this pull request Nov 28, 2023
…-key

efi: resurrect a deleted test key.

#274 deleted a test key that was used by the mock dual signed shim.
Rather than resurrecting the entire certificate chain, this brings back
one deleted leaf key and then uses this to create one of the signatures
on the mock dual signed binary.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants