From 580e9c2c2c4c85a9aab868c8b793840e7134f6f0 Mon Sep 17 00:00:00 2001 From: "William A. Kennington III" Date: Mon, 13 Apr 2020 13:18:11 -0700 Subject: noverify-bmc-update: Add definition This will be used by some platforms by default when enabling phosphor-ipmi-flash so that the BMC image can be updated without any signature verification checks in place. (From meta-phosphor rev: e076ee3295c74be2de43f496d7e0f4934d21ec2a) Change-Id: Ibe22f1189a3bda1dba535a8ade5043312c72a953 Signed-off-by: William A. Kennington III Signed-off-by: Andrew Geissler --- .../flash/noverify-bmc-update/config-bmc.json | 20 ++++++++++++++++++++ .../noverify-bmc-update/noverify-bmc-verify.service | 6 ++++++ 2 files changed, 26 insertions(+) create mode 100644 meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json create mode 100644 meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service (limited to 'meta-phosphor/recipes-phosphor/flash/noverify-bmc-update') diff --git a/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json new file mode 100644 index 0000000000..86afb3ba3b --- /dev/null +++ b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/config-bmc.json @@ -0,0 +1,20 @@ +[{ + "blob": "/flash/image", + "handler": { + "type": "file", + "path": "/run/initramfs/bmc-image" + }, + "actions": { + "preparation": { + "type": "skip" + }, + "verification": { + "type": "systemd", + "unit": "noverify-bmc-verify.service" + }, + "update": { + "type": "systemd", + "unit": "reboot.target" + } + } +}] diff --git a/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service new file mode 100644 index 0000000000..50855b6b27 --- /dev/null +++ b/meta-phosphor/recipes-phosphor/flash/noverify-bmc-update/noverify-bmc-verify.service @@ -0,0 +1,6 @@ +[Unit] +Description=Don't verify the image, just stage it for update + +[Service] +Type=oneshot +ExecStart=/bin/mv /run/initramfs/bmc-image /run/initramfs/image-bmc -- cgit v1.2.3