Re: [cip-dev][isar-cip-core][PATCH] initramfs-verity-hook: Ensure sync on rebuild

[Gylstorff Quirin <quirin.gylstorff@siemens.com>]

On 8/28/23 08:47, Jan Kiszka wrote:
> On 23.08.23 15:28, Quirin Gylstorff wrote:
>> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
>>
>> Disable the timestamp of the do_install() task to
>> re-execute when ever a dependency on do_install
>> is executed.
>>
>> Without this change the sstate needs to be clean for
>> every rebuild.
>>
>> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
>> ---
>>   .../initramfs-verity-hook/initramfs-verity-hook_0.1.bb         | 3 +++
>>   1 file changed, 3 insertions(+)
>>
>> diff --git a/recipes-initramfs/initramfs-verity-hook/initramfs-verity-hook_0.1.bb b/recipes-initramfs/initramfs-verity-hook/initramfs-verity-hook_0.1.bb
>> index 3fc63ed..7435649 100644
>> --- a/recipes-initramfs/initramfs-verity-hook/initramfs-verity-hook_0.1.bb
>> +++ b/recipes-initramfs/initramfs-verity-hook/initramfs-verity-hook_0.1.bb
>> @@ -40,6 +40,9 @@ do_install[cleandirs] += " \
>>       ${D}/usr/share/initramfs-tools/scripts/local-top \
>>       ${D}/usr/share/initramfs-tools/conf-hooks.d"
>>   
>> +# Ensure VERITY_ENV_FILE is updated also when rebuilding initramfs-verity-hook
>> +do_install[nostamp] = "1"
>> +
>>   do_install() {
>>       # Insert the veritysetup commandline into the script
>>       if [ -f "${VERITY_ENV_FILE}" ]; then
> 
> No other dpkg-raw packages require this, do they? What makes initramfs
> packages special here? And what about those in isar upstream?
>

This is necessary for the initramfs package which contain the 
checksum/uuid from the root file system build.
This ensure that the checksum/uuid is refreshed.

It fixes the problem that an rebuild of a verity image leads to a broken 
boot after the build.

I will send a v2 to clarify.

Quirin