T861: op-mode: add "install mok" CLI command

Deploy VyOS Secure Boot CA MOK (Machine Owner Key) into UEFI variables of the running machine.
vyos · Sep 11, 2024 · d3e673b · d3e673b
1 parent 97cb18f
commit d3e673b
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/op-mode-definitions/install-mok.xml.in b/op-mode-definitions/install-mok.xml.in
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<interfaceDefinition>
+  <node name="install">
+    <children>
+      <leafNode name="mok">
+        <properties>
+          <help>Install Secure Boot MOK (Machine Owner Key)</help>
+        </properties>
+        <command>sudo mokutil --ignore-keyring --import /var/lib/shim-signed/mok/MOK.der</command>
+      </leafNode>
+    </children>
+  </node>
+</interfaceDefinition>