Skip to content

Commit 1a7d136

Browse files
kastakhovsmira
kastakhov
authored and
smira
committed
feat: add Azure Secure Boot imager profile
Add profile for Azure with SecureBoot. Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
1 parent df68e73 commit 1a7d136

14 files changed

Lines changed: 362 additions & 0 deletions

‎pkg/imager/profile/default.go‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -135,6 +135,19 @@ var Default = map[string]Profile{
135135
},
136136
},
137137
},
138+
"secureboot-azure": {
139+
Platform: "azure",
140+
SecureBoot: new(true),
141+
Output: Output{
142+
Kind: OutKindImage,
143+
OutFormat: OutFormatZSTD,
144+
ImageOptions: &ImageOptions{
145+
DiskSize: DefaultRAWDiskSize,
146+
DiskFormat: DiskFormatVPC,
147+
DiskFormatOptions: "subformat=fixed,force_size",
148+
},
149+
},
150+
},
138151
"cloudstack": {
139152
Platform: "cloudstack",
140153
SecureBoot: new(false),

‎pkg/imager/profile/testdata/secureboot-azure-amd64-1.10.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: amd64
2+
platform: azure
3+
secureboot: true
4+
version: 1.10.0
5+
input:
6+
kernel:
7+
path: /usr/install/amd64/vmlinuz
8+
initramfs:
9+
path: /usr/install/amd64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/amd64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/amd64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.10.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 8589934592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-amd64-1.11.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: amd64
2+
platform: azure
3+
secureboot: true
4+
version: 1.11.0
5+
input:
6+
kernel:
7+
path: /usr/install/amd64/vmlinuz
8+
initramfs:
9+
path: /usr/install/amd64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/amd64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/amd64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.11.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 9638510592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-amd64-1.12.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: amd64
2+
platform: azure
3+
secureboot: true
4+
version: 1.12.0
5+
input:
6+
kernel:
7+
path: /usr/install/amd64/vmlinuz
8+
initramfs:
9+
path: /usr/install/amd64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/amd64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/amd64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.12.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 9638510592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-amd64-1.13.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: amd64
2+
platform: azure
3+
secureboot: true
4+
version: 1.13.0
5+
input:
6+
kernel:
7+
path: /usr/install/amd64/vmlinuz
8+
initramfs:
9+
path: /usr/install/amd64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/amd64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/amd64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.13.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 9638510592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-amd64-1.14.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: amd64
2+
platform: azure
3+
secureboot: true
4+
version: 1.14.0
5+
input:
6+
kernel:
7+
path: /usr/install/amd64/vmlinuz
8+
initramfs:
9+
path: /usr/install/amd64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/amd64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/amd64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.14.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 9638510592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-amd64-1.9.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: amd64
2+
platform: azure
3+
secureboot: true
4+
version: 1.9.0
5+
input:
6+
kernel:
7+
path: /usr/install/amd64/vmlinuz
8+
initramfs:
9+
path: /usr/install/amd64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/amd64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/amd64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer:1.9.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 8589934592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-arm64-1.10.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: arm64
2+
platform: azure
3+
secureboot: true
4+
version: 1.10.0
5+
input:
6+
kernel:
7+
path: /usr/install/arm64/vmlinuz
8+
initramfs:
9+
path: /usr/install/arm64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/arm64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/arm64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.10.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 8589934592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-arm64-1.11.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: arm64
2+
platform: azure
3+
secureboot: true
4+
version: 1.11.0
5+
input:
6+
kernel:
7+
path: /usr/install/arm64/vmlinuz
8+
initramfs:
9+
path: /usr/install/arm64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/arm64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/arm64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.11.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 9638510592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

‎pkg/imager/profile/testdata/secureboot-azure-arm64-1.12.0.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
arch: arm64
2+
platform: azure
3+
secureboot: true
4+
version: 1.12.0
5+
input:
6+
kernel:
7+
path: /usr/install/arm64/vmlinuz
8+
initramfs:
9+
path: /usr/install/arm64/initramfs.xz
10+
sdStub:
11+
path: /usr/install/arm64/systemd-stub.efi
12+
sdBoot:
13+
path: /usr/install/arm64/systemd-boot.efi
14+
baseInstaller:
15+
imageRef: ghcr.io/siderolabs/installer-base:1.12.0
16+
secureboot:
17+
secureBootSigner:
18+
keyPath: /secureboot/uki-signing-key.pem
19+
certPath: /secureboot/uki-signing-cert.pem
20+
pcrSigner:
21+
keyPath: /secureboot/pcr-signing-key.pem
22+
output:
23+
kind: image
24+
imageOptions:
25+
diskSize: 9638510592
26+
diskFormat: vhd
27+
diskFormatOptions: subformat=fixed,force_size
28+
bootloader: sd-boot
29+
outFormat: .zst

0 commit comments

Comments
 (0)