| commit | 9c8c27be725df83963ff8a188d33e20a4a3d7043 | [log] [tgz] |
|---|---|---|
| author | Alexander Filippov <a.filippov@yadro.com> | Wed May 27 14:57:27 2020 +0300 |
| committer | Andrew Geissler <geissonator@yahoo.com> | Fri May 29 15:49:16 2020 -0500 |
| tree | c4baa2765d1aadd70dabada65639ab85de57ee41 | |
| parent | 3b76fc97c12c5ba670e0f2802b777589637daf05 [diff] |
meta-nicole: Add image signature verification Adds a firmware image signature verification. This brings: - The key is stored in `/etc/activationdata` folder. - The software item activation now begins with signature verification. The verification failure stops the activation only when the `fieldMode` is set to true. See https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/xyz/openbmc_project/Control/FieldMode.interface.yaml (From meta-yadro rev: f9e0ad9f1bb2a2520651f771e2b873bef384423a) Change-Id: I91cf92d15d29737a9cd05120b194189eb767636e Signed-off-by: Alexander Filippov <a.filippov@yadro.com> Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
diff --git a/meta-yadro/meta-nicole/recipes-phosphor/flash/openpower-software-manager_%.bbappend b/meta-yadro/meta-nicole/recipes-phosphor/flash/openpower-software-manager_%.bbappend new file mode 100644 index 0000000..a2df9cf --- /dev/null +++ b/meta-yadro/meta-nicole/recipes-phosphor/flash/openpower-software-manager_%.bbappend
@@ -0,0 +1 @@ +PACKAGECONFIG_append = " verify_pnor_signature"
diff --git a/meta-yadro/meta-nicole/recipes-phosphor/flash/phosphor-software-manager_%.bbappend b/meta-yadro/meta-nicole/recipes-phosphor/flash/phosphor-software-manager_%.bbappend new file mode 100644 index 0000000..c92b1a8 --- /dev/null +++ b/meta-yadro/meta-nicole/recipes-phosphor/flash/phosphor-software-manager_%.bbappend
@@ -0,0 +1 @@ +PACKAGECONFIG_append = " verify_signature"
diff --git a/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend b/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend index 31e4f5b..26e64be 100644 --- a/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend +++ b/meta-yadro/meta-nicole/recipes-phosphor/packagegroups/packagegroup-obmc-apps.bbappend
@@ -2,6 +2,9 @@ RDEPENDS_${PN}-extras_append = " \ phosphor-hostlogger \ openpower-esel-parser \ - obmc-yadro-fwupdate \ obmc-yadro-lssensors \ " +RDEPENDS_${PN}-software_append = " \ + obmc-yadro-fwupdate \ + phosphor-image-signing \ +"