1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
2 #pragma once
3
4 #if !ENABLE_EFI
5 # include <errno.h>
6 #endif
7 #include <stdbool.h>
8 #include <stddef.h>
9 #include <stdint.h>
10
11 #include "sd-id128.h"
12
13 #include "efivars-fundamental.h"
14 #include "time-util.h"
15
16 #define EFI_VENDOR_LOADER SD_ID128_MAKE(4a,67,b0,82,0a,4c,41,cf,b6,c7,44,0b,29,bb,8c,4f)
17 #define EFI_VENDOR_LOADER_STR SD_ID128_MAKE_UUID_STR(4a,67,b0,82,0a,4c,41,cf,b6,c7,44,0b,29,bb,8c,4f)
18 #define EFI_VENDOR_GLOBAL SD_ID128_MAKE(8b,e4,df,61,93,ca,11,d2,aa,0d,00,e0,98,03,2b,8c)
19 #define EFI_VENDOR_GLOBAL_STR SD_ID128_MAKE_UUID_STR(8b,e4,df,61,93,ca,11,d2,aa,0d,00,e0,98,03,2b,8c)
20 #define EFI_VENDOR_SYSTEMD SD_ID128_MAKE(8c,f2,64,4b,4b,0b,42,8f,93,87,6d,87,60,50,dc,67)
21 #define EFI_VENDOR_SYSTEMD_STR SD_ID128_MAKE_UUID_STR(8c,f2,64,4b,4b,0b,42,8f,93,87,6d,87,60,50,dc,67)
22
23 #define EFI_VARIABLE_NON_VOLATILE UINT32_C(0x00000001)
24 #define EFI_VARIABLE_BOOTSERVICE_ACCESS UINT32_C(0x00000002)
25 #define EFI_VARIABLE_RUNTIME_ACCESS UINT32_C(0x00000004)
26
27 /* Note that the <lowercaseuuid>-<varname> naming scheme is an efivarfs convention, i.e. part of the Linux
28 * API file system implementation for EFI. EFI itself processes UIDS in binary form.
29 */
30
31 #define EFI_VENDOR_VARIABLE_STR(vendor, name) name "-" vendor
32
33 #define EFI_GLOBAL_VARIABLE_STR(name) EFI_VENDOR_VARIABLE_STR(EFI_VENDOR_GLOBAL_STR, name)
34 #define EFI_LOADER_VARIABLE_STR(name) EFI_VENDOR_VARIABLE_STR(EFI_VENDOR_LOADER_STR, name)
35 #define EFI_SYSTEMD_VARIABLE_STR(name) EFI_VENDOR_VARIABLE_STR(EFI_VENDOR_SYSTEMD_STR, name)
36
37 #define EFI_GLOBAL_VARIABLE(name) EFI_GLOBAL_VARIABLE_STR(STRINGIFY(name))
38 #define EFI_LOADER_VARIABLE(name) EFI_LOADER_VARIABLE_STR(STRINGIFY(name))
39 #define EFI_SYSTEMD_VARIABLE(name) EFI_SYSTEMD_VARIABLE_STR(STRINGIFY(name))
40
41 #define EFIVAR_PATH(variable) "/sys/firmware/efi/efivars/" variable
42 #define EFIVAR_CACHE_PATH(variable) "/run/systemd/efivars/" variable
43
44 #if ENABLE_EFI
45
46 int efi_get_variable(const char *variable, uint32_t *attribute, void **ret_value, size_t *ret_size);
47 int efi_get_variable_string(const char *variable, char **ret);
48 int efi_set_variable(const char *variable, const void *value, size_t size);
49 int efi_set_variable_string(const char *variable, const char *p);
50
51 bool is_efi_boot(void);
52 bool is_efi_secure_boot(void);
53 SecureBootMode efi_get_secure_boot_mode(void);
54
55 int cache_efi_options_variable(void);
56 int systemd_efi_options_variable(char **ret);
57 int systemd_efi_options_efivarfs_if_newer(char **ret);
58
59 #else
60
efi_get_variable(const char * variable,uint32_t * attribute,void ** value,size_t * size)61 static inline int efi_get_variable(const char *variable, uint32_t *attribute, void **value, size_t *size) {
62 return -EOPNOTSUPP;
63 }
64
efi_get_variable_string(const char * variable,char ** ret)65 static inline int efi_get_variable_string(const char *variable, char **ret) {
66 return -EOPNOTSUPP;
67 }
68
efi_set_variable(const char * variable,const void * value,size_t size)69 static inline int efi_set_variable(const char *variable, const void *value, size_t size) {
70 return -EOPNOTSUPP;
71 }
72
efi_set_variable_string(const char * variable,const char * p)73 static inline int efi_set_variable_string(const char *variable, const char *p) {
74 return -EOPNOTSUPP;
75 }
76
is_efi_boot(void)77 static inline bool is_efi_boot(void) {
78 return false;
79 }
80
is_efi_secure_boot(void)81 static inline bool is_efi_secure_boot(void) {
82 return false;
83 }
84
efi_get_secure_boot_mode(void)85 static inline SecureBootMode efi_get_secure_boot_mode(void) {
86 return SECURE_BOOT_UNKNOWN;
87 }
88
cache_efi_options_variable(void)89 static inline int cache_efi_options_variable(void) {
90 return -EOPNOTSUPP;
91 }
92
systemd_efi_options_variable(char ** line)93 static inline int systemd_efi_options_variable(char **line) {
94 return -ENODATA;
95 }
96
systemd_efi_options_efivarfs_if_newer(char ** line)97 static inline int systemd_efi_options_efivarfs_if_newer(char **line) {
98 return -ENODATA;
99 }
100 #endif
101