85 lines
3.0 KiB
BlitzBasic
85 lines
3.0 KiB
BlitzBasic
# Copyright (C) 2016-2023 Digi International Inc.
|
|
|
|
SUMMARY = "Recovery initramfs files"
|
|
LICENSE = "GPL-2.0-only"
|
|
LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/GPL-2.0-only;md5=801f80980d171dd6425610833a22dbe6"
|
|
|
|
SOC_SIGN_DEPENDS = " \
|
|
${@oe.utils.conditional('DEY_SOC_VENDOR', 'NXP', 'trustfence-cst-native', '', d)} \
|
|
"
|
|
DEPENDS += "${@oe.utils.conditional('TRUSTFENCE_SIGN', '1', \
|
|
'openssl-native ' \
|
|
'trustfence-sign-tools-native ' \
|
|
'${SOC_SIGN_DEPENDS}', '', d)}"
|
|
|
|
SRC_URI = " \
|
|
file://recovery-initramfs-init \
|
|
file://swupdate.cfg \
|
|
file://automount_block.sh \
|
|
file://automount_mtd.sh \
|
|
file://automount_ubi.sh \
|
|
file://mdev.conf \
|
|
${@bb.utils.contains('STORAGE_MEDIA', 'mmc', 'file://mount_cryptrootfs.sh', '', d)} \
|
|
"
|
|
|
|
S = "${WORKDIR}"
|
|
|
|
do_install() {
|
|
install -d ${D}${sysconfdir}
|
|
install -m 0755 ${WORKDIR}/recovery-initramfs-init ${D}/init
|
|
install -m 0644 ${WORKDIR}/swupdate.cfg ${D}${sysconfdir}
|
|
if [ "${STORAGE_MEDIA}" = "mmc" ]; then
|
|
install -m 0755 ${WORKDIR}/mount_cryptrootfs.sh ${D}${sysconfdir}
|
|
fi
|
|
install -d ${D}${base_libdir}/mdev
|
|
install -m 0755 ${WORKDIR}/automount_block.sh ${D}${base_libdir}/mdev/automount_block.sh
|
|
install -m 0755 ${WORKDIR}/automount_mtd.sh ${D}${base_libdir}/mdev/automount_mtd.sh
|
|
install -m 0755 ${WORKDIR}/automount_ubi.sh ${D}${base_libdir}/mdev/automount_ubi.sh
|
|
install -m 0644 ${WORKDIR}/mdev.conf ${D}${sysconfdir}
|
|
|
|
# If Trustfence is enabled, copy the public key that is going to be used into the
|
|
# initramfs '/etc/ssl/certs' folder in order to verify swupdate packages.
|
|
if [ "${TRUSTFENCE_SIGN}" = "1" ]; then
|
|
# Retrieve the key index to use.
|
|
KEY_INDEX="0"
|
|
if [ -n "${TRUSTFENCE_KEY_INDEX}" ]; then
|
|
KEY_INDEX="${TRUSTFENCE_KEY_INDEX}"
|
|
fi
|
|
KEY_INDEX_1=$(expr ${KEY_INDEX} + 1)
|
|
|
|
# Find the certificate to use.
|
|
if [ "${DEY_SOC_VENDOR}" = "NXP" ]; then
|
|
if [ "${TRUSTFENCE_SIGN_MODE}" = "HAB" ]; then
|
|
CERT_IMG="$(echo ${TRUSTFENCE_SIGN_KEYS_PATH}/crts/IMG${KEY_INDEX_1}*crt.pem)"
|
|
elif [ "${TRUSTFENCE_SIGN_MODE}" = "AHAB" ]; then
|
|
CERT_IMG="$(echo ${TRUSTFENCE_SIGN_KEYS_PATH}/crts/SRK${KEY_INDEX_1}*_ca_crt.pem)"
|
|
else
|
|
bberror "Unkown TRUSTFENCE_SIGN_MODE value"
|
|
exit 1
|
|
fi
|
|
# Extract the public key from the certificate.
|
|
install -d ${D}${sysconfdir}/ssl/certs
|
|
openssl x509 -pubkey -noout -in "${CERT_IMG}" > ${D}${sysconfdir}/ssl/certs/key.pub
|
|
elif [ "${DEY_SOC_VENDOR}" = "STM" ]; then
|
|
# Copy the public key to the rootfs
|
|
if [ "${DIGI_SOM}" = "ccmp15" ]; then
|
|
PUBLIC_KEY="${TRUSTFENCE_SIGN_KEYS_PATH}/keys/publicKey00.pem"
|
|
elif [ "${DIGI_SOM}" = "ccmp13" ]; then
|
|
PUBLIC_KEY="${TRUSTFENCE_SIGN_KEYS_PATH}/keys/publicKey0${KEY_INDEX}.pem"
|
|
else
|
|
bberror "Unknown DIGI_SOM"
|
|
exit 1
|
|
fi
|
|
install -d ${D}${sysconfdir}/ssl/certs
|
|
cp ${PUBLIC_KEY} ${D}${sysconfdir}/ssl/certs/key.pub
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Do not create debug/devel packages
|
|
PACKAGES = "${PN}"
|
|
|
|
FILES:${PN} = "/"
|
|
|
|
RDEPENDS:${PN}:append = "${@bb.utils.contains('STORAGE_MEDIA', 'mmc', ' cryptsetup', '', d)}"
|