From patchwork Thu Nov 20 10:12:45 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Quirin Gylstorff X-Patchwork-Id: 4616 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 20 Nov 2025 11:15:21 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-lj1-f183.google.com (mail-lj1-f183.google.com [209.85.208.183]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5AKAFKRB009395 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 20 Nov 2025 11:15:21 +0100 Received: by mail-lj1-f183.google.com with SMTP id 38308e7fff4ca-37a39ed76c8sf6466681fa.2 for ; Thu, 20 Nov 2025 02:15:21 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1763633715; cv=pass; d=google.com; s=arc-20240605; b=CmIvgA+s53b+9tvRZ6nFigD0caVNUiT0k1lxpzv2g1bJ08oAAeCBaFmvIawjgrxSnH n1pfFE+49onR32qCk7ei783JJXvdqMdy0AzUye89JPT6/8OzDAgP6nP6tT90e5MNaGqW njLFxM1DX2yF0I5AhGGltoBy1OBqrv8rbLcmUVQnJ/IPpa2TVZvCvsueF2NWKob6txYm BjiYJzyHfGEVjFt2cuWLsbia9YByL7bNe4ZoUWIvsAW3kdFrF9ztXN2yuDJnTwEH4drE nf5ey5xFn2MZqslt4BeKyE8zGlLzYYIAj0v7Nenh9bcS9jzX1sjtCr83fKKq+3GePzyj 9pMg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :message-id:date:subject:to:from:dkim-signature; bh=tTjDIzAkqJL1KcfQe2Ndawb3AC7mEekIAKXtpZ8spTU=; fh=wxq0pd2PhU3i3UG3M/llVL7jnnNQg2nhlpXrhceK+fo=; b=joe5tNhAzW0vBwhiTuGiDTDZ1LdaFJadDc0SXtSUJtdUSFjdsOu4pJzJ+2Z2QqwZFn koQ+v7Exp/dKLi+Uo7KmoIERmWfVy8IBF/Tu81sBP6FQC3j+kzEUd8lLRZG3GV4Vd8H+ 0vXZyDsvqsdq/2mjsIp6o6pPgtPmTBCVXUP8E5viN1td6KZnJYKn9z79vDcGkPHLehqX YL7hlojzPgvR1HfFdaDHQ1IMPasgRckq2cvBF/m7+ZBrENsF9VwVauZl045lrz+6FNe7 ax0fnuC5Ui05ThfYDCbmI0XrZCQWeyg98bPwapwHbpbrEM3YrXZ3GIGMlW+hVSUA/bPE t4aQ==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b="XV/yeqU3"; spf=pass (google.com: domain of fm-51332-20251120101510646ad16c9800020757-rtdhpj@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) smtp.mailfrom=fm-51332-20251120101510646ad16c9800020757-RtDhpj@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1763633715; x=1764238515; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=tTjDIzAkqJL1KcfQe2Ndawb3AC7mEekIAKXtpZ8spTU=; b=FFUBmmfFZrB7t/PsLExff3m3qAePKAJYAtAHLFMeMTFrza6lB0dgYATeAQIwvkzFAE sAHa8shKol8JhpAX3CNzaewr9SNn/ubhj5gXNzPCa9XFwHrI7+CLtv6GP/SX2N/FSoM5 qq03+scwXAgz5tpx1oh3WjpUrOLBgLF034PMiBhTEd++sFpn+qebqkESsJ0aBKCyq1vH 8qR2M600Jw3dRpqZVJj/rUmJYyGj/j4BiLs58aBUcLqcGFw8DKqQQg796B2RtweSHiPi y7WLDc2zvLiNfAwrPigTU60ac0a6gtp01aqw87Gfmvj+ojRYYUi66RRI0Jhk9rR6uTRS xE/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763633715; x=1764238515; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=tTjDIzAkqJL1KcfQe2Ndawb3AC7mEekIAKXtpZ8spTU=; b=iKz9gClaumEJmY0QWuiXySzyCi4M96HNqFzbd4Pddw/k/UeWzPe7iEbP/wTtNmFdQL NWAt7u2j6RMw/vww8y+LsQE7CVhMR7qxiYQ1tBLZ4nrfcYB8m1PC78UkW1AHFwYpFydj 5uYecn/VpPVqrdQ+hlS+O7QY7DpRuf3R2La/3jpZXl3NEGAwFLzwp1k+vYDVVgr8HCGe tP7/zbpDeCcbRE8efcqiZzRbi9jemOP4cdC5zR+Vj4HnedmR9uNY6ZKa28R1r2x8qz6F 6Id2RWXVDjngQEYa7peB62JZeXADIFswXilR+GJVKGK99JaVxcny4s5zBBNEm8WSuJ4M dDzw== X-Forwarded-Encrypted: i=2; AJvYcCUmbEuUkmIzAr13u19gv1o4Li8OI4VC42igsfgZo659CyCu+4U5y0G7dbJB9uVm01AGUjAQgb8=@isar-build.org X-Gm-Message-State: AOJu0Yye5Ij5+9+JMwgz5tsYZNGEMWzsHheyqikfTwbStbgT02291Zko YmKOVY+jJioB+E4KI3ezMw3ctvAGnr7ZI9WKTUZh/OAazaNZt+9OqMAt X-Google-Smtp-Source: AGHT+IFrodcXQ3zwFw07O8HgolRB35rYKiRnOEfY7Jod0IwCIrPYo8aVby92nzSHI1wCBV3k8AZdHg== X-Received: by 2002:a2e:9c13:0:b0:37b:a737:d42a with SMTP id 38308e7fff4ca-37cc6752b68mr5908201fa.5.1763633715026; Thu, 20 Nov 2025 02:15:15 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+a8zBPRVBQI+sbO9yc1zsTcbsbNA1eBCa9s6b2soIGRGA==" Received: by 2002:a05:651c:4343:20b0:37b:9692:7e83 with SMTP id 38308e7fff4ca-37cc693dbbcls1432481fa.0.-pod-prod-06-eu; Thu, 20 Nov 2025 02:15:11 -0800 (PST) X-Received: by 2002:a2e:95c1:0:b0:372:8d61:c26f with SMTP id 38308e7fff4ca-37cc675e482mr6077771fa.11.1763633711539; Thu, 20 Nov 2025 02:15:11 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1763633711; cv=none; d=google.com; s=arc-20240605; b=bvz4ybbju3x62NVNbGLwiClT+taiGhJDxnEUs4QyGB180ci4bj/BJ6GpPSIGQtw4Ew 3TASO/9H7N4o8fi6hsx8P6FFo6NFdcUZzV2HZu430FBOn3avtvceKIK2fWMyxiaK1NBu odI5PXrYSFmzzCkzNmzIVlwiF+2n2Y/ZygnGKXo+8X/lTWvb8SRvgzfhO2HsqbtRzDkY 0Jd6AmIegYendQcsZTMH4JSeLh+eXZ8zzpkUwrSLbOGLB7lfvc0BKfWOn1vqpLqqS4pN 5IGyLZRjBMd8B7UQinGiuu9o9tGVJOg0Tg947cKTf2tUD3zgX6oXJ74bcH9uuZ7V++JM WYjA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:message-id:date :subject:to:from:dkim-signature; bh=JKvH2Z/CosRxau1w2V+MrquSw0MJhWNkww8GmfWGL+s=; fh=7tclEdh7YbwSQowgJ6LNq720O7H5HTEaqj22NJWRE2E=; b=Lb9W3WV1tC4M+I0opGHnZKUfNkhMO11xwhkmOwb3MNg5Nujr5MaX1NY1ykPAx5uXmS ZRtt1zBr3EXZEhFw3GnKOLC51+TPITOS28IVKw7JBpBxXMOjwZaSPGrCYpvAl5oEQQLa Sdc5wuajpc/0KiMSiJns6L2rLW4B/ZhnVG9zx8QLHNreGaii0mWX64M6TN0V9PyZ2q3l IPDuyejiW/X2yTDMBQNNX1tfo1Zm6Xt7Raor2efraUxWO3RjuEJ+RAuPyJ3P4vgzfVPI aRetfkaXlSRn9dUfT4xwjVo4d7kOCrdhLhsQzZYw+ZHoAQOnr0a331V/U5hCLv89eYqN tM1g==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b="XV/yeqU3"; spf=pass (google.com: domain of fm-51332-20251120101510646ad16c9800020757-rtdhpj@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) smtp.mailfrom=fm-51332-20251120101510646ad16c9800020757-RtDhpj@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net. [185.136.64.225]) by gmr-mx.google.com with ESMTPS id 38308e7fff4ca-37cc6bb362csi280521fa.10.2025.11.20.02.15.11 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Nov 2025 02:15:11 -0800 (PST) Received-SPF: pass (google.com: domain of fm-51332-20251120101510646ad16c9800020757-rtdhpj@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) client-ip=185.136.64.225; Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 20251120101510646ad16c9800020757 for ; Thu, 20 Nov 2025 11:15:10 +0100 X-Patchwork-Original-From: "'Quirin Gylstorff' via isar-users" From: Quirin Gylstorff To: isar-users@googlegroups.com Subject: [PATCH 1/2] bootimg-efi-isar: Add payload source_params Date: Thu, 20 Nov 2025 11:12:45 +0100 Message-ID: <20251120101510.2530415-1-Quirin.Gylstorff@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-51332:519-21489:flowmailer X-Original-Sender: quirin.gylstorff@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b="XV/yeqU3"; spf=pass (google.com: domain of fm-51332-20251120101510646ad16c9800020757-rtdhpj@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) smtp.mailfrom=fm-51332-20251120101510646ad16c9800020757-RtDhpj@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Quirin Gylstorff Reply-To: Quirin Gylstorff Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= From: Quirin Gylstorff This allows to add additional payload to the boot-img partition. e.g. Additional efi scripts for updating the BIOS. Signed-off-by: Quirin Gylstorff --- .../lib/wic/plugins/source/bootimg-efi-isar.py | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py b/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py index 446398d0..661dcbb4 100644 --- a/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py +++ b/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py @@ -298,6 +298,19 @@ class BootimgEFIPlugin(SourcePlugin): else: cls.install_task.append((src, dst)) + @staticmethod + def _install_payload(source_params, iso_dir): + """ + Copies contents of payload directory (as specified in 'payload_dir' param) into iso_dir + """ + + if source_params.get('payload_dir'): + payload_dir = source_params['payload_dir'] + + logger.debug("Payload directory: %s", payload_dir) + shutil.copytree(payload_dir, iso_dir, symlinks=True, dirs_exist_ok=True) + + @classmethod def do_prepare_partition(cls, part, source_params, creator, cr_workdir, oe_builddir, bootimg_dir, kernel_dir, @@ -394,6 +407,7 @@ class BootimgEFIPlugin(SourcePlugin): install_cmd = isar_populate_boot_cmd(rootfs_dir['ROOTFS_DIR'], hdddir) exec_cmd(install_cmd) + cls._install_payload(source_params, hdddir) if get_bitbake_var("IMAGE_EFI_BOOT_FILES"): for src_path, dst_path in cls.install_task: From patchwork Thu Nov 20 10:12:46 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Quirin Gylstorff X-Patchwork-Id: 4617 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 20 Nov 2025 11:15:22 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-lf1-f55.google.com (mail-lf1-f55.google.com [209.85.167.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5AKAFLBu009409 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 20 Nov 2025 11:15:21 +0100 Received: by mail-lf1-f55.google.com with SMTP id 2adb3069b0e04-5944b3cb6fcsf467278e87.2 for ; Thu, 20 Nov 2025 02:15:21 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1763633716; cv=pass; d=google.com; s=arc-20240605; b=WL5lND5Rlm6CFvx++voG2vyngrQXnLuU0PmD+K5Ynhh9Er7bBupGlh4ssgiVdR79Lg I8DxqO4RzoflN9gaXRbm+hLJmCfLxnyT2RcDabJCeY1RJ3lSjPDR7aUsondLrGSF14lb NQgRLAZuAzZxpSBWfSJIfaINPhf2PeAdF3dLBBqmMS7TlpAt4ok0cufvHLGOjdebIDgI FSMkcqEEUrSZBFUxJmm9YquUMONoksHKeFqGTXTzXUd20ecLnE1ZyK+giwaqQKE4J1om 5d5+Co6xs+jM6fHgRyVxAb0s250ApJa2k5+cpynn/1nCzbMDqv7mpikD3nhBy/79KT0S J9HQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :references:in-reply-to:message-id:date:subject:to:from :dkim-signature; bh=UOQM79d0aLEj7QA2LSP2rgyxRbf/U9+rZNdxQxi2N5k=; fh=14018Pwlg8Yrfl/HJqsFxBL6cazMvkzej10aHugh5l0=; b=ISl63/9/vi45FilxR/alqICtSLcIFfkVASE8XeY5g0HAIx4onpI6zVzGm9eeYQDxU0 VFCcT7HCbbhyXZY7YUIz1lTgYazskAIriYHhQpDzyB52sC2nEuzcjaP0ZnyMAMW2Kz8O 5O5zzubRseG1hHtCBqhCBnle7b7bHb3AcMYeV4mOeQaUZjKKbEdJVY5cdextLvwzRsDs 8WeZfjVNdgBCy9WfejJH4rs/VIvGDezXjUYtrrK9Zr6Pv4TBnVgpmBENS1M6cP1Yt/JY JWzcIIIW9EwMWSU8pk5Y7wn9qN+VG+4f/DR0OLSzP96gL95sCrbKdGUU1M9cog8xRpia X9HA==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=mXtpiCsq; spf=pass (google.com: domain of fm-51332-20251120101510674216b04b0002070d-ayt1lk@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-51332-20251120101510674216b04b0002070d-AyT1Lk@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1763633716; x=1764238516; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:to:from :from:to:cc:subject:date:message-id:reply-to; bh=UOQM79d0aLEj7QA2LSP2rgyxRbf/U9+rZNdxQxi2N5k=; b=P36gTy8p50HOxVKWMX5iuGyBhl6HfYnSr8rOxRW+YFIp88BV2EbFsi2jsFu4tPCLyn 1CbtTj/nZWa1KaWboYLe/OlrzZYOA458ikJ8vtxJrXt4KZkkA/HX3myepP8SD4He+wcz lCPKEyf7Txxz7pyr/jFs6JLQbFlmaqV8GUR8VRe19KppX99JK2gnldC+nj22EzAUviwF Bu/t9f0HHc1MhT2R63EoYt5OD/WdJSfpfLGDFN3IeFPjFRvi+v6yGKcIgoeeNaUNlcWE HqmnR0d4BtIlPqIUy17Q/VeIe/79ohVw8sPK361E744Uu0ucH8FO41cyx+WpO9kN9Zzi Cj1g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763633716; x=1764238516; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=UOQM79d0aLEj7QA2LSP2rgyxRbf/U9+rZNdxQxi2N5k=; b=QrxEZurYIVkkjY8Rphjof9fdWYyuu59wK2Awut1LzamV2CBJzknZoZMYDrJ5I98w6l Dz+U7FLi9ftPq1HOxfvb88ZytLfBSWGbAYi2/4KFbIS7lQUOoOBCRRGsKljFWktXmt2p VuJpdYevbwbdvK19KCL8FKfVTHDDcqGbJtlOyJw0Mbo/he8XvlrX5eP7/kF47lHEfQ2D cyZOGdQPMO//8Ls8GQF6M7D7ik86s68Pvtb+i1Zb/X0xKjdvsGNoDffBbGPCcxUCcZbK gPp/Lzf7JaNaTjF9PkQzMVXre9+3yERM92YVLx6wenK4TDR0jON1hs7i3IQ9rRxGeFWQ XN1Q== X-Forwarded-Encrypted: i=2; AJvYcCUGrCrHPnvSfHA24cSsn4+85O7gFZ5JJhy2We+RWNm0SVkYMx37ozZ8i0o1sGvkZJx49k6x3iY=@isar-build.org X-Gm-Message-State: AOJu0Yy8nzAVEehrmK/MUvIU+g5HISobmb1LwJSEk6NQ/SCGGvgtAhEB uB00tjEvBf4TQhEb7QVPwqHHnhMQN3cxEv9GHjOZ0tAYxZ93VZL5QNqG X-Google-Smtp-Source: AGHT+IEWEg/7lx4txc9IS6vrrOb3xTLhMe+zq4z6s/QV75z+sr/BSUiIWsZJWx7Dw2/2N3oPNUf4Tg== X-Received: by 2002:a05:6512:b9d:b0:594:2b58:ab83 with SMTP id 2adb3069b0e04-5969e306a16mr810179e87.40.1763633715487; Thu, 20 Nov 2025 02:15:15 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+aeu/kXxUcTzQ2cViw09g4E6/aKwWdNoz2k0rWF4W9OvQ==" Received: by 2002:a2e:3c0e:0:b0:378:cfe9:cbdd with SMTP id 38308e7fff4ca-37cc6a06abfls1175631fa.1.-pod-prod-07-eu; Thu, 20 Nov 2025 02:15:11 -0800 (PST) X-Received: by 2002:a05:651c:31cc:b0:336:bd8c:5e53 with SMTP id 38308e7fff4ca-37cc675e707mr7566011fa.5.1763633711595; Thu, 20 Nov 2025 02:15:11 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1763633711; cv=none; d=google.com; s=arc-20240605; b=Z4fMf8bNPszE9toMnsNM4TWO+LfED/W23iolsqEC1jYBkX2Ry6D6qKnIsYUeNcG/vG 0fFvlwEE3ZVWvKUHxmx9eCCptqx0endtVaRf1PqUuytvso4rrWT0tW+eNje1me9O0KkG 9yWFRPui9EmqSGPThI/7D8+9dH8NefXJ5GsjhIUNdFcimsNQiwRjxXWTlZ8M1oDd4zVy 77vUN2IMdh30N15np5ZFJ+2qdJbkDuTve3aaLcHwyAQzzNjhNmkA02uKsIJrCCwGfuNe pe9kzbJ5hCTuNhFjxPm3VThE5ziafrwZT5p/clP19j5zwrrvb/LFVZXhoOYEcN0M2rq6 XRLg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:references :in-reply-to:message-id:date:subject:to:from:dkim-signature; bh=sMog+qje3EhqQPEF+w02zB08hV9uLQmBhuLArkirJDo=; fh=7tclEdh7YbwSQowgJ6LNq720O7H5HTEaqj22NJWRE2E=; b=hD5Nmiq6YRWVMcNy0BCLtYA+sUXQyCLJIdVu2m9pO80UFkK+evC9BM90buUbAC5BjS xhxm1uLamldwGPAX2G0Ip+8/UWgT/26OaCUabE/ozvgZPT7Su0EosxYTCF3/GCDAVkt+ V+02Moms992tujFDn84Ljloqo6y6Ek8jgv2PSUfX50MrwruY7EPPOxUoI+6y0nbwKFjv cVXs36RpZBH+P0ubdbFzW2Ynsi+1wz0T2F1F8MOLYFVWajX5OXLlIRqAAA4Mq/HTYgvf ryPcNWYAHqy2+fPC/RD7BR+DJsHvd5rIhQHv/qUx51OT/M3vjKoDc6jaMOCmQtYzzuvK vptg==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=mXtpiCsq; spf=pass (google.com: domain of fm-51332-20251120101510674216b04b0002070d-ayt1lk@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-51332-20251120101510674216b04b0002070d-AyT1Lk@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net. [185.136.64.227]) by gmr-mx.google.com with ESMTPS id 38308e7fff4ca-37cc6b974f0si307281fa.7.2025.11.20.02.15.11 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Nov 2025 02:15:11 -0800 (PST) Received-SPF: pass (google.com: domain of fm-51332-20251120101510674216b04b0002070d-ayt1lk@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) client-ip=185.136.64.227; Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 20251120101510674216b04b0002070d for ; Thu, 20 Nov 2025 11:15:10 +0100 X-Patchwork-Original-From: "'Quirin Gylstorff' via isar-users" From: Quirin Gylstorff To: isar-users@googlegroups.com Subject: [PATCH 2/2] wic/plugins/bootimg-efi-isar: Add option to sign systemd bootloader and kernel Date: Thu, 20 Nov 2025 11:12:46 +0100 Message-ID: <20251120101510.2530415-2-Quirin.Gylstorff@siemens.com> In-Reply-To: <20251120101510.2530415-1-Quirin.Gylstorff@siemens.com> References: <20251120101510.2530415-1-Quirin.Gylstorff@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-51332:519-21489:flowmailer X-Original-Sender: quirin.gylstorff@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=mXtpiCsq; spf=pass (google.com: domain of fm-51332-20251120101510674216b04b0002070d-ayt1lk@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-51332-20251120101510674216b04b0002070d-AyT1Lk@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Quirin Gylstorff Reply-To: Quirin Gylstorff Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= From: Quirin Gylstorff This allows to generate a signed installer image. Signed-off-by: Quirin Gylstorff --- .../lib/wic/plugins/source/bootimg-efi-isar.py | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py b/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py index 661dcbb4..fd4d6017 100644 --- a/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py +++ b/meta/scripts/lib/wic/plugins/source/bootimg-efi-isar.py @@ -310,6 +310,20 @@ class BootimgEFIPlugin(SourcePlugin): logger.debug("Payload directory: %s", payload_dir) shutil.copytree(payload_dir, iso_dir, symlinks=True, dirs_exist_ok=True) + @classmethod + def _sign_file(cls, signee, source_params): + sign_script = source_params.get("signwith") + if sign_script and os.path.exists(sign_script): + logger.info("sign with script %s", sign_script) + orig_signee = signee + ".unsigned" + os.rename(signee, orig_signee) + sign_cmd = "{sign_script} {orig_signee} {signee}"\ + .format(sign_script=sign_script, orig_signee=orig_signee, + signee=signee) + exec_cmd(sign_cmd) + elif sign_script and not os.path.exists(sign_script): + logger.error("Could not find script %s", sign_script) + exit(1) @classmethod def do_prepare_partition(cls, part, source_params, creator, cr_workdir, @@ -406,6 +420,8 @@ class BootimgEFIPlugin(SourcePlugin): install_cmd = isar_populate_boot_cmd(rootfs_dir['ROOTFS_DIR'], hdddir) exec_cmd(install_cmd) + for mod in [x for x in os.listdir(hdddir) if x.startswith("vmlinu")]: + cls._sign_file(f"{hdddir}/{mod}", source_params) cls._install_payload(source_params, hdddir) @@ -488,6 +504,7 @@ class BootimgEFIPlugin(SourcePlugin): target = target[:-7] cp_cmd = "cp %s/%s %s/EFI/BOOT/%s" % (kernel_dir, mod, hdddir, target) exec_cmd(cp_cmd, True) + cls._sign_file(f"{hdddir}/EFI/BOOT/{mod[8:]}", source_params) kernel_dir = kernel_dir_orig else: