1config BR2_PACKAGE_MOKUTIL
2	bool "mokutil"
3	# We're not selecting shim, but this package only makes sense
4	# on architectures on which shim is supported
5	depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS
6	depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS
7	depends on BR2_USE_MMU # keyutils
8	depends on !BR2_STATIC_LIBS # efivar, keyutils
9	depends on !BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS # efivar
10	depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # efivar
11	depends on BR2_TOOLCHAIN_HAS_THREADS # efivar
12	depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12 # efivar
13	select BR2_PACKAGE_EFIVAR
14	select BR2_PACKAGE_KEYUTILS
15	select BR2_PACKAGE_LIBXCRYPT if BR2_TOOLCHAIN_USES_GLIBC
16	select BR2_PACKAGE_OPENSSL
17	help
18	  mokutil is a tool to import or delete the machines owner
19	  keys (MOK) stored in the database of shim.
20
21	  "shim" is the first stage bootloader to support UEFI Secure
22	  Boot. See also the "shim" package in the bootloaders
23	  section.
24
25	  https://github.com/lcp/mokutil
26
27comment "mokutil needs a toolchain w/ dynamic library, threads, gcc >= 4.9, headers >= 3.12"
28	depends on BR2_PACKAGE_EFIVAR_ARCH_SUPPORTS
29	depends on BR2_PACKAGE_SHIM_ARCH_SUPPORTS
30	depends on BR2_USE_MMU
31	depends on BR2_STATIC_LIBS || \
32		BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 || \
33		!BR2_TOOLCHAIN_HAS_THREADS || \
34		BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12
35