EFI Secure boot default keys

[Heinrich Schuchardt]

>> On Wed, Jun 28, 2023 at 04:26:58PM +0000, Neil Jones wrote:
>>> Please can someone describe the format of the file needed for the default / built-in EFI secure boot keys (ubootefi.var)
>>>
>>> The only docs I have found suggest its best to enroll the keys from within u-boot onto some removable media, then copy this off and use this as the default, this is not very helpful and doesn't work for me:

The file format is described in
https://github.com/ARM-software/ebbr/blob/main/source/chapter5-variable-storage.rst

U-Boot comes with tools/efivar.py to edit ubootefi.var.

Best regards

Heinrich