git: 46375fd00293 - main - sysutils/edk2: enable secure boot on bhyve

From: Corvin Köhne <corvink_at_FreeBSD.org>
Date: Fri, 15 Sep 2023 14:59:46 UTC
The branch main has been updated by corvink:

URL: https://cgit.FreeBSD.org/ports/commit/?id=46375fd002931ec59e73f02f78a0c228c3a85e36

commit 46375fd002931ec59e73f02f78a0c228c3a85e36
Author:     Corvin Köhne <corvink@FreeBSD.org>
AuthorDate: 2023-09-15 09:55:18 +0000
Commit:     Corvin Köhne <corvink@FreeBSD.org>
CommitDate: 2023-09-15 14:59:37 +0000

    sysutils/edk2: enable secure boot on bhyve
    
    Everything is ready in edk2 for secure boot. To make use of secure boot
    you have to boot into an EFI shell and install your keys. Booting an EFI
    shell can be done by starting bhyve without any image attached to it.
    More information on how to generate and install keys can be found in the
    ACRN documentation [1].
    
    Note that that secure boot capable UEFI implementation is required to
    meet the Windows 11 requirements.
    
    [1] https://projectacrn.github.io/3.2/tutorials/waag-secure-boot.html
    
    Reviewed by:            manu
    Approved by:            manu
    Sponsored by:           Beckhoff Automation GmbH & Co. KG
    Differential Revision:  https://reviews.freebsd.org/D41869
---
 sysutils/edk2/Makefile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sysutils/edk2/Makefile b/sysutils/edk2/Makefile
index a6131c3127c8..d68e296d2242 100644
--- a/sysutils/edk2/Makefile
+++ b/sysutils/edk2/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	edk2
 PORTVERSION=	g202308
-PORTREVISION=	1
+PORTREVISION=	2
 CATEGORIES=	sysutils
 
 PATCH_SITES=	https://github.com/${GH_ACCOUNT}/${GH_PROJECT}/commit/
@@ -115,6 +115,7 @@ ONLY_FOR_ARCHS=	amd64
 ONLY_FOR_ARCHS_REASON=	Bhyve only runs on x64
 PLAT=		bhyve
 PLAT_ARCH=	X64
+PLAT_ARGS+=	-D SECURE_BOOT_ENABLE=TRUE
 PLAT_TARGET=	RELEASE
 PLATFILE=	OvmfPkg/Bhyve/BhyveX64.dsc
 PLAT_RESULT=	BhyveX64/${PLAT_TARGET}_GCC5/FV/BHYVE.fd