starlingx/tools
Code Issues Proposed changes

Debian: LAT: upgrade to 20221008

Browse Source 
Update the shim/grub-efi signed images in the target sysroots of
lat sdk according to the compiling results in debian stx
(out of sdk).
The shim/grub images are signed by keys on signing server.

Please refer to the commits that porting efitools/shim/grub
from LAT to stx debian:
(1)efitools:
https://review.opendev.org/c/starlingx/integ/+/859223
(2)shim:
https://review.opendev.org/c/starlingx/integ/+/859224
(3)grub2:
https://review.opendev.org/c/starlingx/integ/+/859225
(4)grub-efi:
https://review.opendev.org/c/starlingx/integ/+/859226
(5)Debian: integ: add new packages to debian_pkg_dirs
https://review.opendev.org/c/starlingx/integ/+/859227

Test Plan:
 The tests are done with all the changes for this porting,
 which involves efitools/shim/grub2/grub-efi/lat-sdk.sh, because
 they are in a chain for secure boot verification.
 - PASS: secure boot OK on qemu.
 - PASS: secure boot OK on PowerEdge R430 lab.
 - PASS: secure boot NG on qemu/hardware when shim/grub-efi images
         are without the right signatures.

Story: 2009221
Task: 46402

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Change-Id: I6d53898cb1a524c5e8d44948435969965abefde2
This commit is contained in:
Li Zhou 2022-10-19 09:57:08 +08:00
parent ecd435f6e9
commit b3883281b2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
stx/dockerfiles/stx-lat-tool.Dockerfile
View File

@ -16,7 +16,7 @@ FROM debian:bullseye
MAINTAINER Chen Qi <Qi.Chen@windriver.com>
ARG LAT_BINARY_RESOURCE_PATH=http://mirror.starlingx.cengn.ca/mirror/lat-sdk/lat-sdk-20220920
ARG LAT_BINARY_RESOURCE_PATH=http://mirror.starlingx.cengn.ca/mirror/lat-sdk/lat-sdk-20221008
# Install necessary packages
RUN apt-get -y update && apt-get --no-install-recommends -y install \