blob: 23ba065e04a5e11101ce6917af0e20b997d98e0b [file] [log] [blame]
Alexander Graf67ee7052016-03-04 01:10:07 +01001config EFI_LOADER
Heinrich Schuchardt96b236a2019-05-11 10:27:58 +02002 bool "Support running UEFI applications"
Heinrich Schuchardt79cea672019-11-17 10:44:16 +01003 depends on OF_LIBFDT && ( \
Heinrich Schuchardt30c3a5f2019-11-19 04:19:09 +01004 ARM && (SYS_CPU = arm1136 || \
5 SYS_CPU = arm1176 || \
6 SYS_CPU = armv7 || \
7 SYS_CPU = armv8) || \
Heinrich Schuchardt79cea672019-11-17 10:44:16 +01008 X86 || RISCV || SANDBOX)
Alexander Graf5e247172018-01-24 14:54:21 +01009 # We need EFI_STUB_64BIT to be set on x86_64 with EFI_STUB
10 depends on !EFI_STUB || !X86_64 || EFI_STUB_64BIT
11 # We need EFI_STUB_32BIT to be set on x86_32 with EFI_STUB
12 depends on !EFI_STUB || !X86 || X86_64 || EFI_STUB_32BIT
Heinrich Schuchardtac212dc2019-11-20 18:48:02 +010013 default y if !ARM || SYS_CPU = armv7 || SYS_CPU = armv8
Adam Ford70c8f052018-02-06 12:14:28 -060014 select LIB_UUID
Adam Fordb10ba902018-02-06 12:43:56 -060015 select HAVE_BLOCK_DEVICE
Heinrich Schuchardt9e18bfa2019-01-22 21:35:23 +010016 select REGEX
Heinrich Schuchardt35550cc2018-04-29 23:37:12 +020017 imply CFB_CONSOLE_ANSI
Heinrich Schuchardt6c46aaa2020-03-21 20:45:50 +010018 imply FAT
19 imply FAT_WRITE
Heinrich Schuchardt29db4c52019-12-04 22:58:58 +010020 imply USB_KEYBOARD_FN_KEYS
Heinrich Schuchardt8a7514a2020-01-15 00:49:35 +010021 imply VIDEO_ANSI
Alexander Graf67ee7052016-03-04 01:10:07 +010022 help
Heinrich Schuchardt96b236a2019-05-11 10:27:58 +020023 Select this option if you want to run UEFI applications (like GNU
24 GRUB or iPXE) on top of U-Boot. If this option is enabled, U-Boot
25 will expose the UEFI API to a loaded application, enabling it to
26 reuse U-Boot's device drivers.
Alexander Graf7c00a3c2016-05-11 18:25:48 +020027
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +020028if EFI_LOADER
29
AKASHI Takahiro87942ac2020-10-29 13:47:45 +090030config EFI_SETUP_EARLY
31 bool
32 default n
33
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +020034choice
35 prompt "Store for non-volatile UEFI variables"
36 default EFI_VARIABLE_FILE_STORE
37 help
38 Select where non-volatile UEFI variables shall be stored.
39
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +000040config EFI_VARIABLE_FILE_STORE
41 bool "Store non-volatile UEFI variables as file"
42 depends on FAT_WRITE
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +020043 help
44 Select this option if you want non-volatile UEFI variables to be
45 stored as file /ubootefi.var on the EFI system partition.
46
47config EFI_MM_COMM_TEE
48 bool "UEFI variables storage service via OP-TEE"
49 depends on OPTEE
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +000050 help
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +020051 If OP-TEE is present and running StandAloneMM, dispatch all UEFI
52 variable related operations to that. The application will verify,
53 authenticate and store the variables on an RPMB.
54
55endchoice
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +000056
Heinrich Schuchardt4b7d5c12020-07-14 21:25:28 +020057config EFI_VARIABLES_PRESEED
58 bool "Initial values for UEFI variables"
59 depends on EFI_VARIABLE_FILE_STORE
60 help
61 Include a file with the initial values for non-volatile UEFI variables
62 into the U-Boot binary. If this configuration option is set, changes
63 to authentication related variables (PK, KEK, db, dbx) are not
64 allowed.
65
66if EFI_VARIABLES_PRESEED
67
68config EFI_VAR_SEED_FILE
69 string "File with initial values of non-volatile UEFI variables"
70 default ubootefi.var
71 help
72 File with initial values of non-volatile UEFI variables. The file must
73 be in the same format as the storage in the EFI system partition. The
74 easiest way to create it is by setting the non-volatile variables in
75 U-Boot. If a relative file path is used, it is relative to the source
76 directory.
77
78endif
79
Heinrich Schuchardtf2856ad2019-05-31 22:56:02 +020080config EFI_GET_TIME
81 bool "GetTime() runtime service"
82 depends on DM_RTC
83 default y
84 help
85 Provide the GetTime() runtime service at boottime. This service
86 can be used by an EFI application to read the real time clock.
87
88config EFI_SET_TIME
89 bool "SetTime() runtime service"
90 depends on EFI_GET_TIME
Heinrich Schuchardt8da46252020-11-21 20:52:18 +010091 default y if ARCH_QEMU || SANDBOX
Heinrich Schuchardtf2856ad2019-05-31 22:56:02 +020092 default n
93 help
94 Provide the SetTime() runtime service at boottime. This service
95 can be used by an EFI application to adjust the real time clock.
96
AKASHI Takahiro473d9b32020-11-17 09:27:55 +090097config EFI_HAVE_CAPSULE_SUPPORT
98 bool
99
100config EFI_RUNTIME_UPDATE_CAPSULE
101 bool "UpdateCapsule() runtime service"
102 default n
103 select EFI_HAVE_CAPSULE_SUPPORT
104 help
105 Select this option if you want to use UpdateCapsule and
106 QueryCapsuleCapabilities API's.
107
AKASHI Takahiro45b819542020-11-17 09:27:56 +0900108config EFI_CAPSULE_ON_DISK
109 bool "Enable capsule-on-disk support"
110 select EFI_HAVE_CAPSULE_SUPPORT
111 default n
112 help
113 Select this option if you want to use capsule-on-disk feature,
114 that is, capsules can be fetched and executed from files
115 under a specific directory on UEFI system partition instead of
116 via UpdateCapsule API.
117
118config EFI_CAPSULE_ON_DISK_EARLY
119 bool "Initiate capsule-on-disk at U-Boot boottime"
120 depends on EFI_CAPSULE_ON_DISK
121 default n
122 select EFI_SETUP_EARLY
123 help
124 Normally, without this option enabled, capsules will be
125 executed only at the first time of invoking one of efi command.
126 If this option is enabled, capsules will be enforced to be
127 executed as part of U-Boot initialisation so that they will
128 surely take place whatever is set to distro_bootcmd.
129
Heinrich Schuchardt3db35912019-05-11 09:53:33 +0200130config EFI_DEVICE_PATH_TO_TEXT
131 bool "Device path to text protocol"
132 default y
133 help
134 The device path to text protocol converts device nodes and paths to
135 human readable strings.
136
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200137config EFI_LOADER_HII
138 bool "HII protocols"
139 default y
140 help
141 The Human Interface Infrastructure is a complicated framework that
142 allows UEFI applications to draw fancy menus and hook strings using
143 a translation framework.
144
145 U-Boot implements enough of its features to be able to run the UEFI
146 Shell, but not more than that.
147
Heinrich Schuchardtb3258842019-05-16 07:52:58 +0200148config EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200149 bool "Unicode collation protocol"
150 default y
151 help
152 The Unicode collation protocol is used for lexical comparisons. It is
153 required to run the UEFI shell.
154
Heinrich Schuchardtb3258842019-05-16 07:52:58 +0200155if EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200156
Heinrich Schuchardt58ddcd32018-09-04 19:34:56 +0200157config EFI_UNICODE_CAPITALIZATION
158 bool "Support Unicode capitalization"
Heinrich Schuchardt58ddcd32018-09-04 19:34:56 +0200159 default y
160 help
161 Select this option to enable correct handling of the capitalization of
162 Unicode codepoints in the range 0x0000-0xffff. If this option is not
163 set, only the the correct handling of the letters of the codepage
164 used by the FAT file system is ensured.
165
Heinrich Schuchardt18ed8cf2019-05-16 18:19:00 +0200166config EFI_UNICODE_COLLATION_PROTOCOL
167 bool "Deprecated version of the Unicode collation protocol"
168 default n
169 help
170 In EFI 1.10 a version of the Unicode collation protocol using ISO
171 639-2 language codes existed. This protocol is not part of the UEFI
172 specification any longer. Unfortunately it is required to run the
173 UEFI Self Certification Test (SCT) II, version 2.6, 2017.
174
175 Choose this option for testing only. It is bound to be removed.
176
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200177endif
178
Alexander Graf7c00a3c2016-05-11 18:25:48 +0200179config EFI_LOADER_BOUNCE_BUFFER
180 bool "EFI Applications use bounce buffers for DMA operations"
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200181 depends on ARM64
Alexander Graf7c00a3c2016-05-11 18:25:48 +0200182 default n
183 help
184 Some hardware does not support DMA to full 64bit addresses. For this
185 hardware we can create a bounce buffer so that payloads don't have to
186 worry about platform details.
Alexander Graf44be5da2019-02-11 15:24:00 +0100187
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200188config EFI_PLATFORM_LANG_CODES
189 string "Language codes supported by firmware"
190 default "en-US"
Alexander Graf44be5da2019-02-11 15:24:00 +0100191 help
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200192 This value is used to initialize the PlatformLangCodes variable. Its
193 value is a semicolon (;) separated list of language codes in native
194 RFC 4646 format, e.g. "en-US;de-DE". The first language code is used
195 to initialize the PlatformLang variable.
Alexander Graf44be5da2019-02-11 15:24:00 +0100196
Heinrich Schuchardt05874fb2019-07-05 18:12:16 +0200197config EFI_HAVE_RUNTIME_RESET
198 # bool "Reset runtime service is available"
199 bool
200 default y
201 depends on ARCH_BCM283X || FSL_LAYERSCAPE || PSCI_RESET || SYSRESET_X86
202
Heinrich Schuchardt149d5d42019-07-22 22:04:36 +0200203config EFI_GRUB_ARM32_WORKAROUND
204 bool "Workaround for GRUB on 32bit ARM"
Heinrich Schuchardt33542332020-09-17 19:09:23 +0200205 default n if ARCH_QEMU
Heinrich Schuchardt149d5d42019-07-22 22:04:36 +0200206 default y
207 depends on ARM && !ARM64
208 help
209 GRUB prior to version 2.04 requires U-Boot to disable caches. This
210 workaround currently is also needed on systems with caches that
211 cannot be managed via CP15.
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530212
213config EFI_RNG_PROTOCOL
214 bool "EFI_RNG_PROTOCOL support"
215 depends on DM_RNG
Peter Robinsonfa497522020-04-01 11:15:01 +0100216 default y
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530217 help
Heinrich Schuchardt7bcc7fc2020-02-14 23:28:58 +0100218 Provide a EFI_RNG_PROTOCOL implementation using the hardware random
219 number generator of the platform.
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530220
Ilias Apalodimas590fef62020-11-11 11:18:11 +0200221config EFI_TCG2_PROTOCOL
222 bool "EFI_TCG2_PROTOCOL support"
223 depends on TPM_V2
224 help
225 Provide a EFI_TCG2_PROTOCOL implementation using the TPM hardware
226 of the platform.
227
Ilias Apalodimas967650d2020-11-30 11:47:40 +0200228config EFI_TCG2_PROTOCOL_EVENTLOG_SIZE
229 int "EFI_TCG2_PROTOCOL EventLog size"
230 depends on EFI_TCG2_PROTOCOL
231 default 4096
232 help
233 Define the size of the EventLog for EFI_TCG2_PROTOCOL. Note that
234 this is going to be allocated twice. One for the eventlog it self
235 and one for the configuration table that is required from the spec
236
Ilias Apalodimas3510ba72020-02-21 09:55:45 +0200237config EFI_LOAD_FILE2_INITRD
238 bool "EFI_FILE_LOAD2_PROTOCOL for Linux initial ramdisk"
239 default n
240 help
241 Expose a EFI_FILE_LOAD2_PROTOCOL that the Linux UEFI stub can
242 use to load the initial ramdisk. Once this is enabled using
243 initrd=<ramdisk> will stop working.
244
245config EFI_INITRD_FILESPEC
246 string "initramfs path"
247 default "host 0:1 initrd"
248 depends on EFI_LOAD_FILE2_INITRD
249 help
250 Full path of the initramfs file, e.g. mmc 0:2 initramfs.cpio.gz.
251
AKASHI Takahiro1900a3b2020-04-14 11:51:38 +0900252config EFI_SECURE_BOOT
253 bool "Enable EFI secure boot support"
254 depends on EFI_LOADER
255 select SHA256
256 select RSA
257 select RSA_VERIFY_WITH_PKEY
258 select IMAGE_SIGN_INFO
259 select ASYMMETRIC_KEY_TYPE
260 select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
261 select X509_CERTIFICATE_PARSER
262 select PKCS7_MESSAGE_PARSER
AKASHI Takahiro14afd062020-07-21 19:35:22 +0900263 select PKCS7_VERIFY
AKASHI Takahiro1900a3b2020-04-14 11:51:38 +0900264 default n
265 help
266 Select this option to enable EFI secure boot support.
267 Once SecureBoot mode is enforced, any EFI binary can run only if
268 it is signed with a trusted key. To do that, you need to install,
269 at least, PK, KEK and db.
270
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200271endif