mirror of
https://git.yoctoproject.org/meta-security
synced 2026-05-07 16:59:28 +00:00
Naveen Saini
e23767fc72
Detection of USB devices by the kernel is slow enough. We need to keep trying for a while (default: 5s seconds, controlled by roottimeout=<seconds>) and sleep between each attempt (default: one second, rootdelay=<seconds>). Fix is based on https://git.yoctoproject.org/cgit.cgi/poky/commit/meta/recipes-core/initrdscripts/initramfs-framework/rootfs?id=ee6a6c3461694ce09789bf4d852cea2e22fc95e4 Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
64 lines
1.7 KiB
Bash
64 lines
1.7 KiB
Bash
#!/bin/sh
|
|
|
|
dmverity_enabled() {
|
|
return 0
|
|
}
|
|
|
|
dmverity_run() {
|
|
DATA_SIZE="__not_set__"
|
|
ROOT_HASH="__not_set__"
|
|
|
|
. /usr/share/misc/dm-verity.env
|
|
|
|
C=0
|
|
delay=${bootparam_rootdelay:-1}
|
|
timeout=${bootparam_roottimeout:-5}
|
|
RDEV="$(realpath /dev/disk/by-partuuid/${bootparam_root#PARTUUID=})"
|
|
while [ ! -b "${RDEV}" ]; do
|
|
if [ $(( $C * $delay )) -gt $timeout ]; then
|
|
fatal "Root device resolution failed"
|
|
exit 1
|
|
fi
|
|
|
|
case "${bootparam_root}" in
|
|
ID=*)
|
|
RDEV="$(realpath /dev/disk/by-id/${bootparam_root#ID=})"
|
|
;;
|
|
LABEL=*)
|
|
RDEV="$(realpath /dev/disk/by-label/${bootparam_root#LABEL=})"
|
|
;;
|
|
PARTLABEL=*)
|
|
RDEV="$(realpath /dev/disk/by-partlabel/${bootparam_root#PARTLABEL=})"
|
|
;;
|
|
PARTUUID=*)
|
|
RDEV="$(realpath /dev/disk/by-partuuid/${bootparam_root#PARTUUID=})"
|
|
;;
|
|
PATH=*)
|
|
RDEV="$(realpath /dev/disk/by-path/${bootparam_root#PATH=})"
|
|
;;
|
|
UUID=*)
|
|
RDEV="$(realpath /dev/disk/by-uuid/${bootparam_root#UUID=})"
|
|
;;
|
|
*)
|
|
RDEV="${bootparam_root}"
|
|
esac
|
|
debug "Sleeping for $delay second(s) to wait root to settle..."
|
|
sleep $delay
|
|
C=$(( $C + 1 ))
|
|
|
|
done
|
|
|
|
veritysetup \
|
|
--data-block-size=1024 \
|
|
--hash-offset=${DATA_SIZE} \
|
|
create rootfs \
|
|
${RDEV} \
|
|
${RDEV} \
|
|
${ROOT_HASH}
|
|
|
|
mount \
|
|
-o ro \
|
|
/dev/mapper/rootfs \
|
|
${ROOTFS_DIR} || exit 2
|
|
}
|