Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1174961 > unrolled thread

Bug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images

Started bydann frazier <dannf@dannf.org>
First post2023-11-15 14:00 +0100
Last post2023-12-17 21:00 +0100
Articles 5 — 2 participants

Back to article view | Back to linux.debian.bugs.dist


Contents

  Bug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images dann frazier <dannf@dannf.org> - 2023-11-15 14:00 +0100
    Bug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images Luca Boccassi <bluca@debian.org> - 2023-12-07 22:10 +0100
      Bug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images dann frazier <dannf@dannf.org> - 2023-12-17 17:50 +0100
        Bug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images Luca Boccassi <bluca@debian.org> - 2023-12-17 20:00 +0100
          Bug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images dann frazier <dannf@dannf.org> - 2023-12-17 21:00 +0100

#1174961 — Bug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images

Fromdann frazier <dannf@dannf.org>
Date2023-11-15 14:00 +0100
SubjectBug#1055987: ITP: virt-firmware -- Tools for manipulating edk2 (ovmf/qemu-efi) firmware images
Message-ID<HAnER-5C8n-1@gated-at.bofh.it>
Package: wnpp
Severity: wishlist
Owner: dann frazier <dannf@debian.org>
X-Debbugs-Cc: debian-devel@lists.debian.org

* Package name    : virt-firmware
  Version         : 23.10
  Upstream Contact: Gerd Hoffmann <kraxel@redhat.com>
* URL             : https://gitlab.com/kraxel/virt-firmware
* License         : GPL-2+
  Programming Lang: Python
  Description     : Tools for manipulating edk2 (ovmf/qemu-efi) firmware images

This is a collection of tools for edk2 firmware images. They support
decoding and printing the content of firmware volumes. Variable stores
(e.g. OVMF_VARS.fd) can be modified, for example to enroll secure boot
certificates. Tools included:

 virt-fw-dump - Decodes and prints the content of firmware volumes.

 virt-fw-vars - Print and edit variable store volumes. Currently focused on
                enrolling certificates and enabling secure boot.

 virt-fw-sigdb - Print and edit EFI signature database files.

 host-efi-vars - Read efi variables from linux efivarfs and decode/print them.

 kernel-bootcfg - Manage efi boot configuration for UKIs (unified kernel
                  images) when using direct boot (without boot loader like
		  grub or systemd-boot).

 pe-dumpinfo - Information dump for pe (the format used by EFI) binaries.

 pe-listsigs - List signatures and certificate chain for pe binaries. Can also
               extract certificates & signatures.


My immediate motivation for packaging this is that, as the maintainer of
the edk2 package, I need to remove some deprecated image types - specifically
the OVMF 2M images. These utilities can help users migrate their VMs to
supported types by dumping/loading the variable stores.

In the future, I expect edk2 packaging to evolve into using these tools
to modify images out-of-band, instead of launching QEMU instances to
modify them in-band as part of the build.

[toc] | [next] | [standalone]


#1177688

FromLuca Boccassi <bluca@debian.org>
Date2023-12-07 22:10 +0100
Message-ID<HItN8-c1CI-1@gated-at.bofh.it>
In reply to#1174961

[Multipart message — attachments visible in raw view] — view raw

On Wed, 15 Nov 2023 05:54:23 -0700 dann frazier <dannf@dannf.org>
wrote:
> Package: wnpp
> Severity: wishlist
> Owner: dann frazier <dannf@debian.org>
> X-Debbugs-Cc: debian-devel@lists.debian.org
> 
> * Package name    : virt-firmware
>   Version         : 23.10
>   Upstream Contact: Gerd Hoffmann <kraxel@redhat.com>
> * URL             : https://gitlab.com/kraxel/virt-firmware
> * License         : GPL-2+
>   Programming Lang: Python
>   Description     : Tools for manipulating edk2 (ovmf/qemu-efi)
firmware images
> 
> This is a collection of tools for edk2 firmware images. They support
> decoding and printing the content of firmware volumes. Variable
stores
> (e.g. OVMF_VARS.fd) can be modified, for example to enroll secure
boot
> certificates. Tools included:
> 
>  virt-fw-dump - Decodes and prints the content of firmware volumes.
> 
>  virt-fw-vars - Print and edit variable store volumes. Currently
focused on
>                 enrolling certificates and enabling secure boot.
> 
>  virt-fw-sigdb - Print and edit EFI signature database files.
> 
>  host-efi-vars - Read efi variables from linux efivarfs and
decode/print them.
> 
>  kernel-bootcfg - Manage efi boot configuration for UKIs (unified
kernel
>                   images) when using direct boot (without boot loader
like
>                 grub or systemd-boot).
> 
>  pe-dumpinfo - Information dump for pe (the format used by EFI)
binaries.
> 
>  pe-listsigs - List signatures and certificate chain for pe binaries.
Can also
>                extract certificates & signatures.
> 
> 
> My immediate motivation for packaging this is that, as the maintainer
of
> the edk2 package, I need to remove some deprecated image types -
specifically
> the OVMF 2M images. These utilities can help users migrate their VMs
to
> supported types by dumping/loading the variable stores.
> 
> In the future, I expect edk2 packaging to evolve into using these
tools
> to modify images out-of-band, instead of launching QEMU instances to
> modify them in-band as part of the build.
> 

Hello Dann,

I find myself in need of this package for some CI usage as well, are
you planning to work on this soon? Do you need any help?

Thanks!

-- 
Kind regards,
Luca Boccassi

[toc] | [prev] | [next] | [standalone]


#1179065

Fromdann frazier <dannf@dannf.org>
Date2023-12-17 17:50 +0100
Message-ID<HM2uZ-eelB-1@gated-at.bofh.it>
In reply to#1177688
On Thu, Dec 07, 2023 at 08:58:23PM +0000, Luca Boccassi wrote:
> On Wed, 15 Nov 2023 05:54:23 -0700 dann frazier <dannf@dannf.org>
> wrote:
> > Package: wnpp
> > Severity: wishlist
> > Owner: dann frazier <dannf@debian.org>
> > X-Debbugs-Cc: debian-devel@lists.debian.org
> > 
> > * Package name    : virt-firmware
> >   Version         : 23.10
> >   Upstream Contact: Gerd Hoffmann <kraxel@redhat.com>
> > * URL             : https://gitlab.com/kraxel/virt-firmware
> > * License         : GPL-2+
> >   Programming Lang: Python
> >   Description     : Tools for manipulating edk2 (ovmf/qemu-efi)
> firmware images
> > 
> > This is a collection of tools for edk2 firmware images. They support
> > decoding and printing the content of firmware volumes. Variable
> stores
> > (e.g. OVMF_VARS.fd) can be modified, for example to enroll secure
> boot
> > certificates. Tools included:
> > 
> >  virt-fw-dump - Decodes and prints the content of firmware volumes.
> > 
> >  virt-fw-vars - Print and edit variable store volumes. Currently
> focused on
> >                 enrolling certificates and enabling secure boot.
> > 
> >  virt-fw-sigdb - Print and edit EFI signature database files.
> > 
> >  host-efi-vars - Read efi variables from linux efivarfs and
> decode/print them.
> > 
> >  kernel-bootcfg - Manage efi boot configuration for UKIs (unified
> kernel
> >                   images) when using direct boot (without boot loader
> like
> >                 grub or systemd-boot).
> > 
> >  pe-dumpinfo - Information dump for pe (the format used by EFI)
> binaries.
> > 
> >  pe-listsigs - List signatures and certificate chain for pe binaries.
> Can also
> >                extract certificates & signatures.
> > 
> > 
> > My immediate motivation for packaging this is that, as the maintainer
> of
> > the edk2 package, I need to remove some deprecated image types -
> specifically
> > the OVMF 2M images. These utilities can help users migrate their VMs
> to
> > supported types by dumping/loading the variable stores.
> > 
> > In the future, I expect edk2 packaging to evolve into using these
> tools
> > to modify images out-of-band, instead of launching QEMU instances to
> > modify them in-band as part of the build.
> > 
> 
> Hello Dann,
> 
> I find myself in need of this package for some CI usage as well, are
> you planning to work on this soon? Do you need any help?

Hi Luca,

Apologies for the delayed response. I believe I have completed the
packaging and am prepared to upload:

  https://salsa.debian.org/dannf/virt-firmware

Feel free to review and let me know if you have any feedback.

  -dann

[toc] | [prev] | [next] | [standalone]


#1179070

FromLuca Boccassi <bluca@debian.org>
Date2023-12-17 20:00 +0100
Message-ID<HM4wN-efyY-1@gated-at.bofh.it>
In reply to#1179065

[Multipart message — attachments visible in raw view] — view raw

On Sun, 17 Dec 2023, 17:45 dann frazier, <dannf@dannf.org> wrote:

> On Thu, Dec 07, 2023 at 08:58:23PM +0000, Luca Boccassi wrote:
> > On Wed, 15 Nov 2023 05:54:23 -0700 dann frazier <dannf@dannf.org>
> > wrote:
> > > Package: wnpp
> > > Severity: wishlist
> > > Owner: dann frazier <dannf@debian.org>
> > > X-Debbugs-Cc: debian-devel@lists.debian.org
> > >
> > > * Package name    : virt-firmware
> > >   Version         : 23.10
> > >   Upstream Contact: Gerd Hoffmann <kraxel@redhat.com>
> > > * URL             : https://gitlab.com/kraxel/virt-firmware
> > > * License         : GPL-2+
> > >   Programming Lang: Python
> > >   Description     : Tools for manipulating edk2 (ovmf/qemu-efi)
> > firmware images
> > >
> > > This is a collection of tools for edk2 firmware images. They support
> > > decoding and printing the content of firmware volumes. Variable
> > stores
> > > (e.g. OVMF_VARS.fd) can be modified, for example to enroll secure
> > boot
> > > certificates. Tools included:
> > >
> > >  virt-fw-dump - Decodes and prints the content of firmware volumes.
> > >
> > >  virt-fw-vars - Print and edit variable store volumes. Currently
> > focused on
> > >                 enrolling certificates and enabling secure boot.
> > >
> > >  virt-fw-sigdb - Print and edit EFI signature database files.
> > >
> > >  host-efi-vars - Read efi variables from linux efivarfs and
> > decode/print them.
> > >
> > >  kernel-bootcfg - Manage efi boot configuration for UKIs (unified
> > kernel
> > >                   images) when using direct boot (without boot loader
> > like
> > >                 grub or systemd-boot).
> > >
> > >  pe-dumpinfo - Information dump for pe (the format used by EFI)
> > binaries.
> > >
> > >  pe-listsigs - List signatures and certificate chain for pe binaries.
> > Can also
> > >                extract certificates & signatures.
> > >
> > >
> > > My immediate motivation for packaging this is that, as the maintainer
> > of
> > > the edk2 package, I need to remove some deprecated image types -
> > specifically
> > > the OVMF 2M images. These utilities can help users migrate their VMs
> > to
> > > supported types by dumping/loading the variable stores.
> > >
> > > In the future, I expect edk2 packaging to evolve into using these
> > tools
> > > to modify images out-of-band, instead of launching QEMU instances to
> > > modify them in-band as part of the build.
> > >
> >
> > Hello Dann,
> >
> > I find myself in need of this package for some CI usage as well, are
> > you planning to work on this soon? Do you need any help?
>
> Hi Luca,
>
> Apologies for the delayed response. I believe I have completed the
> packaging and am prepared to upload:
>
>   https://salsa.debian.org/dannf/virt-firmware
>
> Feel free to review and let me know if you have any feedback.
>
>   -dann
>

Looks good to me, thanks. Ship it!

>

[toc] | [prev] | [next] | [standalone]


#1179075

Fromdann frazier <dannf@dannf.org>
Date2023-12-17 21:00 +0100
Message-ID<HM5sR-eg6P-3@gated-at.bofh.it>
In reply to#1179070
On Sun, Dec 17, 2023 at 07:53:52PM +0100, Luca Boccassi wrote:
> On Sun, 17 Dec 2023, 17:45 dann frazier, <dannf@dannf.org> wrote:
> 
> > On Thu, Dec 07, 2023 at 08:58:23PM +0000, Luca Boccassi wrote:
> > > On Wed, 15 Nov 2023 05:54:23 -0700 dann frazier <dannf@dannf.org>
> > > wrote:
> > > > Package: wnpp
> > > > Severity: wishlist
> > > > Owner: dann frazier <dannf@debian.org>
> > > > X-Debbugs-Cc: debian-devel@lists.debian.org
> > > >
> > > > * Package name    : virt-firmware
> > > >   Version         : 23.10
> > > >   Upstream Contact: Gerd Hoffmann <kraxel@redhat.com>
> > > > * URL             : https://gitlab.com/kraxel/virt-firmware
> > > > * License         : GPL-2+
> > > >   Programming Lang: Python
> > > >   Description     : Tools for manipulating edk2 (ovmf/qemu-efi)
> > > firmware images
> > > >
> > > > This is a collection of tools for edk2 firmware images. They support
> > > > decoding and printing the content of firmware volumes. Variable
> > > stores
> > > > (e.g. OVMF_VARS.fd) can be modified, for example to enroll secure
> > > boot
> > > > certificates. Tools included:
> > > >
> > > >  virt-fw-dump - Decodes and prints the content of firmware volumes.
> > > >
> > > >  virt-fw-vars - Print and edit variable store volumes. Currently
> > > focused on
> > > >                 enrolling certificates and enabling secure boot.
> > > >
> > > >  virt-fw-sigdb - Print and edit EFI signature database files.
> > > >
> > > >  host-efi-vars - Read efi variables from linux efivarfs and
> > > decode/print them.
> > > >
> > > >  kernel-bootcfg - Manage efi boot configuration for UKIs (unified
> > > kernel
> > > >                   images) when using direct boot (without boot loader
> > > like
> > > >                 grub or systemd-boot).
> > > >
> > > >  pe-dumpinfo - Information dump for pe (the format used by EFI)
> > > binaries.
> > > >
> > > >  pe-listsigs - List signatures and certificate chain for pe binaries.
> > > Can also
> > > >                extract certificates & signatures.
> > > >
> > > >
> > > > My immediate motivation for packaging this is that, as the maintainer
> > > of
> > > > the edk2 package, I need to remove some deprecated image types -
> > > specifically
> > > > the OVMF 2M images. These utilities can help users migrate their VMs
> > > to
> > > > supported types by dumping/loading the variable stores.
> > > >
> > > > In the future, I expect edk2 packaging to evolve into using these
> > > tools
> > > > to modify images out-of-band, instead of launching QEMU instances to
> > > > modify them in-band as part of the build.
> > > >
> > >
> > > Hello Dann,
> > >
> > > I find myself in need of this package for some CI usage as well, are
> > > you planning to work on this soon? Do you need any help?
> >
> > Hi Luca,
> >
> > Apologies for the delayed response. I believe I have completed the
> > packaging and am prepared to upload:
> >
> >   https://salsa.debian.org/dannf/virt-firmware
> >
> > Feel free to review and let me know if you have any feedback.
> >
> >   -dann
> >
> 
> Looks good to me, thanks. Ship it!

Shipped :)

  -dann
  

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.bugs.dist


csiph-web