[PATCH v1] configs: qualcomm: Add secure boot config fragment

[Ilias Apalodimas]

Hi Aswin

On Wed, 1 Jul 2026 at 15:22, Aswin Murugan
<aswin.murugan at oss.qualcomm.com> wrote:
>
> Add a common configuration fragment for EFI Secure Boot and the
> required hash algorithm configs to reuse across Qualcomm boards.
>
> Signed-off-by: Aswin Murugan <aswin.murugan at oss.qualcomm.com>
> ---
>  board/qualcomm/secure-boot.config | 6 ++++++
>  1 file changed, 6 insertions(+)
>  create mode 100644 board/qualcomm/secure-boot.config
>
> diff --git a/board/qualcomm/secure-boot.config b/board/qualcomm/secure-boot.config
> new file mode 100644
> index 00000000000..21f567e1a45
> --- /dev/null
> +++ b/board/qualcomm/secure-boot.config
> @@ -0,0 +1,6 @@
> +# Enables EFI Secure Boot support
> +CONFIG_EFI_VARIABLES_PRESEED=y

Enabling this on it's own doesn't make too much sense since the
compilation will fail. What we could do is amend our EFI makefiles and
generate the file if it's not already there using tools/efivar.py

Cheers
/Ilias
> +CONFIG_EFI_SECURE_BOOT=y
> +CONFIG_FIT_SIGNATURE=y
> +CONFIG_SHA512=y
> +CONFIG_SHA384=y
> --
> 2.34.1
>