Digi
/
meta-digi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

trustfence: move CC8X read-only signature to the end of the image 

This commit moves the read-only container signature to the end of
rootfs image for the CC8X platform.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
This commit is contained in:
Mike Engel 2021-11-29 10:55:25 +01:00
parent 7c1ab66835
commit ddec434bc8
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
meta-digi-arm/recipes-digi/trustfence/trustfence-sign-tools/trustfence-sign-artifact.sh
View File

@ -366,6 +366,17 @@ elif [ "${CONFIG_SIGN_MODE}" = "AHAB" ]; then
echo "[ERROR] Could not generate CSF $?" echo "[ERROR] Could not generate CSF $?"
exit 1 exit 1
fi fi
if [ "${ARTIFACT_ROOTFS}" = "y" ]; then
echo "Get the AHAB container from the signed Squashfs"
dd if=${TARGET} of=ahab_signature_container bs=1 count=8192
# Create a copy of SquashFS without the AHAB container
dd if=${TARGET} of=${TARGET}-temp bs=8192 skip=1
echo "Append the AHAB container at the end of the Squashfs file"
cat ahab_signature_container >> ${TARGET}-temp
# overwrite the previously signed Squashfs
mv ${TARGET}-temp ${TARGET}
rm -f ahab_signature_container
fi
fi fi
[ "${ENCRYPT}" = "true" ] && ENCRYPTED_MSG="and encrypted " [ "${ENCRYPT}" = "true" ] && ENCRYPTED_MSG="and encrypted "