From: Ben Whitten <ben.whitten@gmail.com>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH RESEND 0/2] Verified boot tooling
Date: Fri, 23 Mar 2018 18:21:17 +0000 [thread overview]
Message-ID: <1521829279-5156-1-git-send-email-ben.whitten@gmail.com> (raw)
Hi,
As my previous patches were eaten by the mailman because I hadn't subscribed
to the mailing list, this is a resend so that all can see.
From the comments currently this is probbably not the way to approach what
I am trying to do, but is interesting nevertheless.
My goal is to have a UBI containing a squashfs volume, dm-verity hash table,
and kernel FIT.
Currently the way to do that would be get buildroot to generate the individual
artifacts, rootfs.squashfs, zImage, some.dtb, then assemble the UBI per board.
Using post_image processingi, hash the rootfs.squashfs with veritysetup,
assemble the FIT, then assemble with ubinize directly (or genimage now that I
see there is FIT support ~4 days ago).
As there are already KConfigs around the various ubinize options for ubi+ubifs
I split these apart and added depends so that the UBI step came last. This meant
that my ubinize.cfg could point at the squashfs and verity artifacts.
I'm happy either way, if post processing is the way to go so be it but it seems
there may be a lot of duplicated code of people attempting the same sort of
things, quite a lot just point at or wrap genimage.
Thanks,
Ben Whitten (2):
fs/ubi: decouple ubi & ubifs
fs/squashfs: enable squashfs to generate a verity hashtable
fs/Config.in | 3 ++-
fs/squashfs/Config.in | 6 ++++++
fs/squashfs/squashfs.mk | 10 ++++++++++
fs/ubi/Config.in | 34 +++++++++++++++++++++++++++++++---
fs/ubi/ubi.mk | 14 +++++++++++++-
fs/ubi/ubinize.cfg | 4 ++--
fs/ubifs/Config.in | 2 ++
7 files changed, 66 insertions(+), 7 deletions(-)
--
2.7.4
next reply other threads:[~2018-03-23 18:21 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-03-23 18:21 Ben Whitten [this message]
2018-03-23 18:21 ` [Buildroot] [PATCH RESEND 1/2] fs/ubi: decouple ubi & ubifs Ben Whitten
2018-03-24 3:17 ` Matthew Weber
2018-03-26 21:05 ` Ben Whitten
2018-03-31 9:35 ` Arnout Vandecappelle
2018-03-23 18:21 ` [Buildroot] [PATCH RESEND 2/2] fs/squashfs: enable squashfs to generate a verity hashtable Ben Whitten
2018-03-31 13:06 ` Peter Korsgaard
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1521829279-5156-1-git-send-email-ben.whitten@gmail.com \
--to=ben.whitten@gmail.com \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox