diff options
| author | Alexander Filippov <a.filippov@yadro.com> | 2020-05-27 14:57:27 +0300 |
|---|---|---|
| committer | Andrew Geissler <geissonator@yahoo.com> | 2020-05-29 23:49:16 +0300 |
| commit | 9c8c27be725df83963ff8a188d33e20a4a3d7043 (patch) | |
| tree | c4baa2765d1aadd70dabada65639ab85de57ee41 /meta-yadro | |
| parent | 3b76fc97c12c5ba670e0f2802b777589637daf05 (diff) | |
| download | openbmc-9c8c27be725df83963ff8a188d33e20a4a3d7043.tar.xz | |
meta-nicole: Add image signature verification
Adds a firmware image signature verification.
This brings:
- The key is stored in `/etc/activationdata` folder.
- The software item activation now begins with signature verification.
The verification failure stops the activation only when the
`fieldMode` is set to true.
See https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/xyz/openbmc_project/Control/FieldMode.interface.yaml
(From meta-yadro rev: f9e0ad9f1bb2a2520651f771e2b873bef384423a)
Change-Id: I91cf92d15d29737a9cd05120b194189eb767636e
Signed-off-by: Alexander Filippov <a.filippov@yadro.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Diffstat (limited to 'meta-yadro')
3 files changed, 6 insertions, 1 deletions
diff --git a/meta-yadro/meta-nicole/recipes-phosphor/flash/openpower-software-manager_%.bbappend b/meta-yadro/meta-nicole/recipes-phosphor/flash/openpower-software-manager_%.bbappend new file mode 100644 index 000000000..a2df9cf70 --- /dev/null +++ b/meta-yadro/meta-nicole/recipes-phosphor/flash/openpower-software-manager_%.bbappend @@ -0,0 +1 @@ +PACKAGECONFIG_append = " verify_pnor_signature" diff --git a/meta-yadro/meta-nicole/recipes-phosphor/flash/phosphor-software-manager_%.bbappend b/meta-yadro/meta-nicole/recipes-phosphor/flash/phosphor-software-manager_%.bbappend new file mode 100644 index 000000000..c92b1a89c --- /dev/null +++ b/meta-yadro/meta-nicole/recipes-phosphor/flash/phosphor-software-manager_%.bbappend @@ -0,0 +1 @@ +PACKAGECONFIG_append = " verify_signature" diff --git a/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend b/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend index 31e4f5b71..26e64be50 100644 --- a/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend +++ b/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend @@ -2,6 +2,9 @@ RDEPENDS_${PN}-inventory_append = " openpower-occ-control" RDEPENDS_${PN}-extras_append = " \ phosphor-hostlogger \ openpower-esel-parser \ - obmc-yadro-fwupdate \ obmc-yadro-lssensors \ " +RDEPENDS_${PN}-software_append = " \ + obmc-yadro-fwupdate \ + phosphor-image-signing \ +" |