1#!/bin/bash 2 3# Copyright (c) 2014 The Chromium OS Authors. All rights reserved. 4# Use of this source code is governed by a BSD-style license that can be 5# found in the LICENSE file. 6# 7# End-to-end test for vboot2 kernel verification 8 9# Load common constants and variables. 10. "$(dirname "$0")/common.sh" 11 12set -e 13 14CGPT=${BIN_DIR}/cgpt 15 16echo 'Creating test kernel' 17 18# Run tests in a dedicated directory for easy cleanup or debugging. 19DIR="${TEST_DIR}/load_kernel_test_dir" 20[ -d "$DIR" ] || mkdir -p "$DIR" 21echo "Testing kernel verification in $DIR" 22cd "$DIR" 23 24# Dummy kernel data 25echo "hi there" > "dummy_config.txt" 26dd if=/dev/urandom bs=16384 count=1 of="dummy_bootloader.bin" 27dd if=/dev/urandom bs=32768 count=1 of="dummy_kernel.bin" 28 29# Pack kernel data key using original vboot utilities. 30${FUTILITY} vbutil_key --pack datakey.test \ 31 --key ${TESTKEY_DIR}/key_rsa2048.keyb --algorithm 4 32 33# Keyblock with kernel data key is signed by kernel subkey 34# Flags=5 means dev=0 rec=0 35${FUTILITY} vbutil_keyblock --pack keyblock.test \ 36 --datapubkey datakey.test \ 37 --flags 5 \ 38 --signprivate ${SCRIPT_DIR}/devkeys/kernel_subkey.vbprivk 39 40# Kernel preamble is signed with the kernel data key 41${FUTILITY} vbutil_kernel \ 42 --pack "kernel.test" \ 43 --keyblock "keyblock.test" \ 44 --signprivate ${TESTKEY_DIR}/key_rsa2048.sha256.vbprivk \ 45 --version 1 \ 46 --arch arm \ 47 --vmlinuz "dummy_kernel.bin" \ 48 --bootloader "dummy_bootloader.bin" \ 49 --config "dummy_config.txt" 50 51echo 'Verifying test kernel' 52 53# Verify the kernel 54${FUTILITY} vbutil_kernel \ 55 --verify "kernel.test" \ 56 --signpubkey ${SCRIPT_DIR}/devkeys/kernel_subkey.vbpubk 57 58happy 'Kernel verification succeeded' 59 60# Now create a dummy disk image 61echo 'Creating test disk image' 62dd if=/dev/zero of=disk.test bs=1024 count=1024 63${CGPT} create disk.test 64${CGPT} add -i 1 -S 1 -P 1 -b 64 -s 960 -t kernel -l kernelA disk.test 65${CGPT} show disk.test 66 67# And insert the kernel into it 68dd if=kernel.test of=disk.test bs=512 seek=64 conv=notrunc 69 70# And verify it using futility 71echo 'Verifying test disk image' 72${BUILD_RUN}/tests/verify_kernel disk.test \ 73 ${SCRIPT_DIR}/devkeys/kernel_subkey.vbpubk 74 75happy 'Image verification succeeded' 76