secureboot

Documentation

Overview

Package secureboot implements handling SecureBoot options.

Index

• Variables
• type Options
• type Service
  • func NewService(opts Options) (*Service, error)
  • func (s *Service) GetSecureBootAssets() (*profile.SecureBootAssets, error)
  • func (s *Service) GetSecureBootSigningCert() ([]byte, error)

Variables

var ErrDisabled = fmt.Errorf("secure boot is disabled")

ErrDisabled is returned when SecureBoot is disabled.

Types

type Options

type Options struct {
	// Enable SecureBoot asset generation.
	Enabled bool

	// File-based approach.
	SigningKeyPath, SigningCertPath string
	PCRKeyPath                      string

	// Azure Key Vault approach.
	AzureKeyVaultURL     string
	AzureCertificateName string
	AzureKeyName         string
}

Options configures SecureBoot.

type Service

type Service struct {
	// contains filtered or unexported fields
}

Service handles SecureBoot configuration.

func NewService

func NewService(opts Options) (*Service, error)

NewService initializes SecureBoot from configuration.

func (*Service) GetSecureBootAssets

func (s *Service) GetSecureBootAssets() (*profile.SecureBootAssets, error)

GetSecureBootAssets returns SecureBoot assets for the imager profile.

func (*Service) GetSecureBootSigningCert

func (s *Service) GetSecureBootSigningCert() ([]byte, error)

GetSecureBootSigningCert returns SecureBoot signing key PEM-encoded.