Package: efitools
Version: 1.9.2-3
Severity: important
Dear Maintainer,
This experiment was done in the debian bookworm docker image. I have used QEMU
virtual machine to verity secureboot.
efitools:armhf version is 1.9.2-3.
I tried to launch KeyTool.efi (armhf) in the EFI shell to store the keys for
secureboot but encountered a below error.
FS1:\> KeyTool.efi
Undefined OpCode Exception PC at 0x7C747B88 CPSR 0x600F0133
Undefined OpCode Exception PC at 0x7C747B88 CPSR 0x600F0133
Binary path: /usr/lib/efitools/arm-linux-gnueabihf/KeyTool.efi
QEMU options:
------------------------------------------------------------------------------------------
ovmf_code=$(ls ./secureboot-keys/armhf/AAVMF32_CODE.fd)
ovmf_vars=$(ls ./secureboot-keys/armhf/AAVMF32_VARS.fd)
qemu-system-arm \
-m $MEMORY_SIZE \
-cpu cortex-a15 \
-machine virt \
-device virtio-scsi-pci \
-device scsi-hd,drive=hd0 \
-blockdev driver=file,node-name=hd0,filename=test.img \
-device e1000,netdev=net0 \
-netdev
user,hostfwd=tcp:127.0.0.1:5555-:22,id=net0,hostfwd=tcp:127.0.0.1:2159-:2159 \
-nographic -serial mon:stdio \
-drive if=pflash,format=raw,unit=0,readonly=on,file=${ovmf_code} \
-drive if=pflash,format=raw,file=${ovmf_vars} \
-drive file=fat:rw:./secureboot-keys
Note:
* “secureboot-keys” is a folder where all secureboot keys are present.
* AAMVF CODE and VARS are installed from package
https://packages.debian.org/bookworm/qemu-efi-arm
-- System Information:
Debian Release: 12.1
Architecture: amd64 (x86_64)
Foreign Architectures: armhf
Kernel: Linux 6.1.0-9-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect
Versions of packages efitools:armhf depends on:
ii libc6 2.36-9+deb12u1
ii libssl3 3.0.9-1
ii sbsigntool 0.9.4-3.1
efitools:armhf recommends no packages.
efitools:armhf suggests no packages.
-- no debconf information
Thanks & Regards
Shivanand Kunijadar
