summaryrefslogtreecommitdiff
path: root/src/shared/efi-loader.h
Commit message (Collapse)AuthorAgeFilesLines
* efi-loader: add efi_has_tpm2() helperLennart Poettering2021-02-111-0/+6
| | | | | | | | The helper checks if the UEFI firmware is hooked up to a TPM2 chip. This is useful to know in trusted boot scenarios, in particular during early boot in auto-enroll scenarios where we want to know whether TPM2 is available or not, and the Linux drivers are not loaded yet, and where it might or not be worth waiting for it.
* efi: create symbolic link to efi/loader-feature.hYu Watanabe2021-01-191-2/+3
| | | | To drop src/boot/efi from include directories for binaries later.
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
|
* logind: also cache LoaderEntryOneShot EFI variableLennart Poettering2020-06-261-0/+7
| | | | | | | | | With this we are now caching all EFI variables that we expose as property in logind. Thus a client invoking GetAllProperties() should only trgger a single read of each variable, but never repeated ones. Obsoletes: #16190 Fixes: #14828
* efi-loader: cache LoaderConfigTimeoutOneShot tooLennart Poettering2020-06-261-0/+6
| | | | | | | The data from this EFI variable is exposed as dbus property, and gdbus clients are happy to issue GetAllProperties() as if it was free. Hence make sure it's actually free and cache LoaderConfigTimeoutOneShot, since it's easy.
* Disable reading SystemdOptions EFI Var when in SecureBoot modeArian van Putten2020-01-161-15/+0
| | | | | | | | | In SecureBoot mode this is probably not what you want. As your cmdline is cryptographically signed like when using Type #2 EFI Unified Kernel Images (https://systemd.io/BOOT_LOADER_SPECIFICATION/) The user's intention is then that the cmdline should not be modified. You want to make sure that the system starts up as exactly specified in the signed artifact.
* util-lib: split shared/efivars into basic/efivars and shared/efi-loaderZbigniew Jędrzejewski-Szmek2019-09-161-0/+99
I want to use efivars.[ch] in proc-cmdline.c, but most of the efivars stuff is not needed in basic/. Move the file from shared/ to basic/, but then move back most of the higher-level functions to the new shared/efi-loader.c file.