[PATCH v1] configs: socfpga: stratix10: Disable mkeficapsule tool build

[Tom Rini]

On Wed, Apr 22, 2026 at 03:25:50PM +0800, Chee, Tien Fong wrote:
> Hi Boon Khai,
> 
> 
> On 14/4/2026 11:34 am, NG, BOON KHAI wrote:
> > Hi Tom,
> > 
> > Thank you for the clarification and for looping in the EFI Loader custodians.
> > 
> > I'm okay with the implementation to improve the Kconfig logic to only enable
> > `CONFIG_TOOLS_MKEFICAPSULE` by default on platforms that actually support
> > EFI capsule updates would be the best long-term solution.
> > This would prevent misleading configurations and avoid unnecessary
> > build failures on platforms that do not use the tool.
> > 
> > I'm happy to help test or review any proposed changes in this area.
> > 
> > In the meantime, could we set the setting
> > 
> > +# CONFIG_TOOLS_MKEFICAPSULE is not set
> > 
> > at the defonfig first? as I believe disabling the tool
> > explicitly in the SoCFPGA defconfig remains the most
> > accurate way to reflect the board's capabilities and
> > avoid confusion for users.
> 
> I agree with the rationale discussed in this thread: Stratix10 SoCFPGA
> platforms are not using UEFI capsule update flows today, so defaulting
> CONFIG_TOOLS_MKEFICAPSULE on solely via CONFIG_EFI_LOADER does not reflect
> what we ship or test, and it pulls in a GNUTLS host dependency that is
> easy to hit in minimal build environments.
> 
> 
> Disabling CONFIG_TOOLS_MKEFICAPSULE explicitly in the Stratix10 defconfigs
> is therefore an accurate representation of the board feature set, not
> only a workaround for missing host packages.
> 
> 
> I'm fine with this going in as an interim measure while the broader
> Kconfig/default discussion (default y only when capsule update is actually
> in use) is handled separately with the EFI custodians as Tom suggested.
> 
> 
> Please post a v2 with an updated commit message that briefly states:
>   (1) the observed failure (missing gnutls/gnutls.h when building the tool),
>   (2) that SoCFPGA Stratix10 does not use EFI capsule updates, and
>   (3) that this explicitly disables the host tool to match that.

And you can add my:

Reviewed-by: Tom Rini <trini at konsulko.com>

to the v2 as well, thanks!

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20260422/59ced2c2/attachment.sig>