Bug 13438

Summary:	OVMF needs upgrading
Product:	[Build System, Metadata & Runtime] OE-Core	Reporter:	Ross Burton <ross.burton>
Component:	kernel	Assignee:	Ricardo Neri <ricardo.neri>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Medium+	CC:	anuj.mittal, randy.macleod, tom.zanussi
Version:	0.0.0
Target Milestone:	2.8 M3
Hardware:	x86
OS:	Multiple
Whiteboard:
OS type for building Yocto:	---	Type of Regression:	---
Verified:		Documentation change:	No (bug/feature does not impact docs)

Description Ross Burton 2019-07-11 15:08:39 UTC

The current ovmf srcrev is some point before edk2-stable201808.  That's old and there are several good reasons to upgrade:
1) new openssl with less security issues
2) ability to build with Python 3

Regarding (2) any tag from edk2-stable201903 onwards can be built with Python 3.

Comment 1 Ross Burton 2019-07-11 23:49:51 UTC

There's a *very rough* work in progress upgrade in poky-contrib:ross/nopy2.

Comment 2 Ricardo Neri 2019-07-29 21:11:39 UTC

Completed recipe updates. Now testing OVMF with and without secure boot.

Comment 3 Ricardo Neri 2019-08-06 11:27:24 UTC

Completed testing. Getting ready for review.

Comment 4 Ricardo Neri 2019-08-07 01:54:33 UTC

Patches submitted here: http://lists.openembedded.org/pipermail/openembedded-core/2019-August/285473.html

Comment 5 Ricardo Neri 2019-08-12 23:13:35 UTC

Patches have been merged into the master branch of openembedded-core:

https://git.openembedded.org/openembedded-core/commit/?id=5e47316ae62f7632fb62bc3b8093ac42f9e3541c