[RFC,2/3] Add imagetype Discoverable Disk Image(DDI)

Message ID 20251110105140.1609372-3-Quirin.Gylstorff@siemens.com
State RFC
Headers show
Series Add support of Discoverable Disk Image | expand

Commit Message

Quirin Gylstorff Nov. 10, 2025, 10:50 a.m. UTC
From: Quirin Gylstorff <quirin.gylstorff@siemens.com>

This allows to generate with the help of systemd-repart Discoverable
Disk Images[1] like systemd-sysext and systemd-confext.

Systemd-repart was choose as is easier to setup multiple partitions
which depend on each other. As for example a SYSEXT image contains
three partitions.

[1]: https://uapi-group.org/specifications/specs/discoverable_disk_image/

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
---
 meta/classes/imagetypes_ddi.bbclass | 47 +++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 meta/classes/imagetypes_ddi.bbclass

Patch

diff --git a/meta/classes/imagetypes_ddi.bbclass b/meta/classes/imagetypes_ddi.bbclass
new file mode 100644
index 00000000..7020508a
--- /dev/null
+++ b/meta/classes/imagetypes_ddi.bbclass
@@ -0,0 +1,47 @@ 
+# This software is a part of ISAR.
+# Copyright (c) Siemens AG, 2025
+#
+# SPDX-License-Identifier: MIT
+# Class to generate discoverable disk images (DDI)
+
+DEPENDS += "isar-ddi-definitions"
+IMAGER_BUILD_DEPS:ddi += " isar-ddi-definitions"
+IMAGER_INSTALL:ddi += " isar-ddi-definitions"
+
+DDI_SIGNING_KEY_PATH ?= ""
+DDI_SIGNING_CERTIFICATE_PATH ?= ""
+DDI_TYPE ?= "sysext"
+DDI_DEFINITION_PATH ?= "/usr/share/isar-ddi-definitions/${DDI_TYPE}.repart.d"
+DDI_OUTPUT_IMAGE ?= "${IMAGE_FULLNAME}.ddi"
+ddi_not_supported() {
+    bberror "IMAGE TYPE DDI is not supported in distribution Release '${BASE_DISTRO_CODENAME}'"
+}
+
+create_ddi_image() {
+  local_extra_arguments=""
+  if [ -n "${DDI_SIGNING_KEY_PATH}" ]; then
+    local_extra_arguments="${local_extra_arguments} --private-key=${DDI_SIGNING_KEY_PATH}"
+  fi
+  if [ -n "${DDI_SIGNING_CERTIFICATE_PATH}" ]; then
+    local_extra_arguments="${local_extra_arguments} --certificate=${DDI_SIGNING_CERTIFICATE_PATH}"
+  fi
+
+  rm -rf ${DEPLOY_DIR_IMAGE}/${DDI_OUTPUT_IMAGE}
+
+  ${SUDO_CHROOT} << EOF
+    if [ -z ${DDI_SIGNING_KEY_PATH} ]; then
+      rm -f ${DDI_DEFINITION_PATH}/30-root-verity-sig.conf
+    fi
+    /usr/bin/systemd-repart \
+      --definitions='${DDI_DEFINITION_PATH}' \
+      --copy-source=${PP_ROOTFS} \
+      --empty=create --size=auto --dry-run=no  \
+      --no-pager $local_extra_arguments \
+      ${PP_DEPLOY}/${DDI_OUTPUT_IMAGE}
+EOF
+}
+
+IMAGE_CMD:ddi:buster = "ddi_not_supported"
+IMAGE_CMD:ddi:bullseye = "ddi_not_supported"
+IMAGE_CMD:ddi:bookworm = "ddi_not_supported"
+IMAGE_CMD:ddi = "create_ddi_image"