mirror of
https://github.com/Telecominfraproject/OpenCellular.git
synced 2025-11-23 17:55:01 +00:00
a1d9fe6eec
We still create the symlinks (FOO -> futility), but this change invokes those built-in functions with "futility FOO ..." instead of using the FOO symlink. Note that the scripts/ directory is unchanged. That's a separate CL, since we don't have tests for that. BUG=chromium:231547 BRANCH=ToT TEST=make runtests In addition to running "make runtests", I temporarily modified the Makefile to avoid creating the symlinks at all. The tests still passed. Change-Id: I96863259b9df02a3611f759a7509bf4090ae03e8 Signed-off-by: Bill Richardson <wfrichar@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/216717 Reviewed-by: Randall Spangler <rspangler@chromium.org>
74 lines
2.1 KiB
Bash
Executable File
74 lines
2.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Copyright (c) 2014 The Chromium OS Authors. All rights reserved.
|
|
# Use of this source code is governed by a BSD-style license that can be
|
|
# found in the LICENSE file.
|
|
#
|
|
# End-to-end test for vboot2 kernel verification
|
|
|
|
# Load common constants and variables.
|
|
. "$(dirname "$0")/common.sh"
|
|
|
|
set -e
|
|
|
|
echo 'Creating test kernel'
|
|
|
|
# Run tests in a dedicated directory for easy cleanup or debugging.
|
|
DIR="${TEST_DIR}/load_kernel_test_dir"
|
|
[ -d "$DIR" ] || mkdir -p "$DIR"
|
|
echo "Testing kernel verification in $DIR"
|
|
cd "$DIR"
|
|
|
|
# Dummy kernel data
|
|
echo "hi there" > "dummy_config.txt"
|
|
dd if=/dev/urandom bs=16384 count=1 of="dummy_bootloader.bin"
|
|
dd if=/dev/urandom bs=32768 count=1 of="dummy_kernel.bin"
|
|
|
|
# Pack kernel data key using original vboot utilities.
|
|
${FUTILITY} vbutil_key --pack datakey.test \
|
|
--key ${TESTKEY_DIR}/key_rsa2048.keyb --algorithm 4
|
|
|
|
# Keyblock with kernel data key is signed by kernel subkey
|
|
# Flags=5 means dev=0 rec=0
|
|
${FUTILITY} vbutil_keyblock --pack keyblock.test \
|
|
--datapubkey datakey.test \
|
|
--flags 5 \
|
|
--signprivate ${SCRIPT_DIR}/devkeys/kernel_subkey.vbprivk
|
|
|
|
# Kernel preamble is signed with the kernel data key
|
|
${FUTILITY} vbutil_kernel \
|
|
--pack "kernel.test" \
|
|
--keyblock "keyblock.test" \
|
|
--signprivate ${TESTKEY_DIR}/key_rsa2048.sha256.vbprivk \
|
|
--version 1 \
|
|
--arch arm \
|
|
--vmlinuz "dummy_kernel.bin" \
|
|
--bootloader "dummy_bootloader.bin" \
|
|
--config "dummy_config.txt"
|
|
|
|
echo 'Verifying test kernel'
|
|
|
|
# Verify the kernel
|
|
${FUTILITY} vbutil_kernel \
|
|
--verify "kernel.test" \
|
|
--signpubkey ${SCRIPT_DIR}/devkeys/kernel_subkey.vbpubk
|
|
|
|
happy 'Kernel verification succeeded'
|
|
|
|
# Now create a dummy disk image
|
|
echo 'Creating test disk image'
|
|
dd if=/dev/zero of=disk.test bs=1024 count=1024
|
|
cgpt create disk.test
|
|
cgpt add -i 1 -S 1 -P 1 -b 64 -s 960 -t kernel -l kernelA disk.test
|
|
cgpt show disk.test
|
|
|
|
# And insert the kernel into it
|
|
dd if=kernel.test of=disk.test bs=512 seek=64 conv=notrunc
|
|
|
|
# And verify it using futility
|
|
echo 'Verifying test disk image'
|
|
${FUTILITY} verify_kernel disk.test \
|
|
${SCRIPT_DIR}/devkeys/kernel_subkey.vbpubk
|
|
|
|
happy 'Image verification succeeded'
|