From dcb621efd6645d3f3a227c8c9113cc717e903389 Mon Sep 17 00:00:00 2001
From: Warner Losh <imp@FreeBSD.org>
Date: Thu, 22 Feb 2024 10:05:40 -0700
Subject: [PATCH] loader: Mark BEARSSL broken on powerpc

When BEARSSL is enabled, we pull in libsecureboot, which has EFI
dependencies which don't exist on powerpc. This needs to be detangled,
but until then mark it as broken.

Sponsored by:		Netflix
---
 share/mk/src.opts.mk | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/share/mk/src.opts.mk b/share/mk/src.opts.mk
index e154fbd4059..3eec831db2c 100644
--- a/share/mk/src.opts.mk
+++ b/share/mk/src.opts.mk
@@ -313,6 +313,9 @@ BROKEN_OPTIONS+=LIB32
 .if ${__T:Mpowerpc*} || ${__T} == "i386"
 BROKEN_OPTIONS+=EFI
 .endif
+# Bad coupling for libsecure stuff with bearssl and efi, so broken on EFI
+.if ${__T:Mpowerpc*}
+BROKEN_OPTIONS+=BEARSSL		# bearssl brings in secure efi stuff xxx
 # OFW is only for powerpc, exclude others
 .if ${__T:Mpowerpc*} == ""
 BROKEN_OPTIONS+=LOADER_OFW