This variable was need for rEFInd (it no longer support). The
variable was added to grub menu, but was not in needed.
In server V, this has remained since rEFInd.

These utilities are superfluous in the installed and Live systems,
which are used as normal systems.
Request by Alexey Shabalin @shaba

c10f1, c10f2...

Note: efi shell is not signed.

Now use/memtest instead of him.

See commit 1f066d54

Why are they there?

5.18 kernel uses CONFIG_DRM_SIMPLEDRM as its base framebuffer.

This packages needed on UEFI Secure Boot for diagnostic.
Suggested-by: nikel@

For riscv64 available grub-efi.
Needed added support for mkimage (mki-copy-efiboot-chrooted).

CONFIG_EFI_VARS is deprecated, and removed for aarch64 (Linux >= 5.10.0).

A space in the THE_PACKAGES list makes it impossible to install
the system.

$$(EFI_BOOTLOADER)) is a bootloader for STAGE1 only.

Module efivars will be loaded by udev now.

This is necessary to prevent unintentional assignment of rEFInd
as EFI_BOOTLOADER.
I also want to hope that memtest86.efi can be made to work from
grub-efi in the future.

Signed UEFI loader not required for aarch64.

NB: i586 images don't need UEFI SB either
and 32-bit shim is used for x86_64 images
along with proper 64-bit one.

These got removed from Sisyphus during OpenSSL 1.1 transition.

Those few places lacking "; @:" replacement for a real recipe
have been finally -spotted- identified with `make check'
and fixed.

THE_* variables serve user needs while shim belongs
to either SYSTEM or COMMON level packages, not needed
explicitly for stage1 though (mkimage will put it there
when needed) so it's just COMMON.

It's been missing roughly from the start there :-/

It's not supported anymore:
http://git.altlinux.org/tasks/archive/done/_133/136193/

The newly-introduced STAGE1_KCONFIG variable serves
to keep those kernel configuration options that are
required to be present in the kernel to boot.

That reflects the packaging and distribution practice
having formed during last year or so...

I've noted that this bit of code should be fixed up
before pushing but managed to overlook that in the end :(

mkimage version bump is due to the somewhat changed layout
of EFI packages and binaries within those (linked message in Russian):
http://lists.altlinux.org/pipermail/devel-distro/2013-December/001283.html

It's at least as worthy as sbsigntools are.

It's implemented just like EFI_SHELL and will definitely
change someday but so far it's like this...

We chose to provide methods to sign packages but to avoid
signing these by default (with some arbitrary test keys)
the signatures are being added *after* the build by means
of rpmrebuild-pesign; all of this is made significantly
more complicated if there are separate -signed subpackages.

So these are being dropped in the packages; account for that.