tce-load -i compiletc openssl-dev gnu-efi-dev sbsigntool help2man

wget https://github.com/vathpela/efitools/archive/refs/tags/v1.9.2.tar.gz
wget https://github.com/Wind-River/meta-secure-core/blob/nanbield/meta-efi-secure-boot/recipes-bsp/efitools/efitools/0007-Add-static-keyword-for-IsValidVariableHeader.patch

sudo cpan install File::Slurp

edit Make.rules

LDFLAGS		+= -shared -Bsymbolic $(CRTOBJS) -L $(CRTPATH) -L /usr/lib -L /usr/local/lib -T $(LDSCRIPT)
CRTPATHS	= /lib /lib/efi /usr/lib /usr/lib/efi /usr/local/lib /usr/local/lib/efi /usr/local/lib/gnuefi

cd efitools-1.9.2

patch -Np1 -i ../Add-static-keyword-for-IsValidVariableHeader.patch

find . -name Make.rules -type f -exec sed -i 's/-O2 -g//g' {} \;

make CC="gcc -mtune=generic -Os -pipe -I/usr/local/include/efi -I/usr/local/include/efi/x86_64" [0m 7.78s]
sudo make install

[-flto fails]