[PATCH v1] configs: socfpga: stratix10: Disable mkeficapsule tool build

[Chee, Tien Fong]

Hi Boon Khai,


On 14/4/2026 11:34 am, NG, BOON KHAI wrote:
> Hi Tom,
>
> Thank you for the clarification and for looping in the EFI Loader custodians.
>
> I'm okay with the implementation to improve the Kconfig logic to only enable
> `CONFIG_TOOLS_MKEFICAPSULE` by default on platforms that actually support
> EFI capsule updates would be the best long-term solution.
> This would prevent misleading configurations and avoid unnecessary
> build failures on platforms that do not use the tool.
>
> I'm happy to help test or review any proposed changes in this area.
>
> In the meantime, could we set the setting
>
> +# CONFIG_TOOLS_MKEFICAPSULE is not set
>
> at the defonfig first? as I believe disabling the tool
> explicitly in the SoCFPGA defconfig remains the most
> accurate way to reflect the board's capabilities and
> avoid confusion for users.

I agree with the rationale discussed in this thread: Stratix10 SoCFPGA
platforms are not using UEFI capsule update flows today, so defaulting
CONFIG_TOOLS_MKEFICAPSULE on solely via CONFIG_EFI_LOADER does not reflect
what we ship or test, and it pulls in a GNUTLS host dependency that is
easy to hit in minimal build environments.


Disabling CONFIG_TOOLS_MKEFICAPSULE explicitly in the Stratix10 defconfigs
is therefore an accurate representation of the board feature set, not
only a workaround for missing host packages.


I'm fine with this going in as an interim measure while the broader
Kconfig/default discussion (default y only when capsule update is actually
in use) is handled separately with the EFI custodians as Tom suggested.


Please post a v2 with an updated commit message that briefly states:
   (1) the observed failure (missing gnutls/gnutls.h when building the 
tool),
   (2) that SoCFPGA Stratix10 does not use EFI capsule updates, and
   (3) that this explicitly disables the host tool to match that.


Thanks.


Best regards,

Tien Fong