diff options
| author | William A. Kennington III <wak@google.com> | 2020-04-13 23:18:11 +0300 |
|---|---|---|
| committer | Andrew Geissler <geissonator@yahoo.com> | 2020-05-13 15:42:00 +0300 |
| commit | 580e9c2c2c4c85a9aab868c8b793840e7134f6f0 (patch) | |
| tree | 550bb147063b501943915db35c3c1edf9883e48a /meta-phosphor/recipes-phosphor/flash/noverify-bmc-update | |
| parent | 43bac4f707825411b4d6520b16d9f2054a4519fc (diff) | |
| download | openbmc-580e9c2c2c4c85a9aab868c8b793840e7134f6f0.tar.xz | |
noverify-bmc-update: Add definition
This will be used by some platforms by default when enabling
phosphor-ipmi-flash so that the BMC image can be updated without any
signature verification checks in place.
(From meta-phosphor rev: e076ee3295c74be2de43f496d7e0f4934d21ec2a)
Change-Id: Ibe22f1189a3bda1dba535a8ade5043312c72a953
Signed-off-by: William A. Kennington III <wak@google.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Diffstat (limited to 'meta-phosphor/recipes-phosphor/flash/noverify-bmc-update')
| -rw-r--r-- | meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json | 20 | ||||
| -rw-r--r-- | meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service | 6 |
2 files changed, 26 insertions, 0 deletions
diff --git a/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json new file mode 100644 index 0000000000..86afb3ba3b --- /dev/null +++ b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json @@ -0,0 +1,20 @@ +[{ + "blob": "/flash/image", + "handler": { + "type": "file", + "path": "/run/initramfs/bmc-image" + }, + "actions": { + "preparation": { + "type": "skip" + }, + "verification": { + "type": "systemd", + "unit": "noverify-bmc-verify.service" + }, + "update": { + "type": "systemd", + "unit": "reboot.target" + } + } +}] diff --git a/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service new file mode 100644 index 0000000000..50855b6b27 --- /dev/null +++ b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service @@ -0,0 +1,6 @@ +[Unit] +Description=Don't verify the image, just stage it for update + +[Service] +Type=oneshot +ExecStart=/bin/mv /run/initramfs/bmc-image /run/initramfs/image-bmc |