config BR2_PACKAGE_MOKUTIL
	bool "mokutil"
	# We're not selecting shim, but this package only makes sense
	# on architectures on which shim is supported
	depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS
	depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS
	depends on BR2_USE_MMU # keyutils
	depends on !BR2_STATIC_LIBS # efivar, keyutils
	depends on !BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS # efivar
	depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # efivar
	depends on BR2_TOOLCHAIN_HAS_THREADS # efivar
	depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12 # efivar
	select BR2_PACKAGE_EFIVAR
	select BR2_PACKAGE_KEYUTILS
	select BR2_PACKAGE_LIBXCRYPT if BR2_TOOLCHAIN_USES_GLIBC
	select BR2_PACKAGE_OPENSSL
	help
	  mokutil is a tool to import or delete the machines owner
	  keys (MOK) stored in the database of shim.

	  "shim" is the first stage bootloader to support UEFI Secure
	  Boot. See also the "shim" package in the bootloaders
	  section.

	  https://github.com/lcp/mokutil

comment "mokutil needs a toolchain w/ dynamic library, threads, gcc >= 4.9, headers >= 3.12"
	depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS
	depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS
	depends on BR2_USE_MMU
	depends on BR2_STATIC_LIBS || \
		BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 || \
		!BR2_TOOLCHAIN_HAS_THREADS || \
		BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12