summaryrefslogtreecommitdiffstats
path: root/rules/image-rauc.make
Commit message (Collapse)AuthorAgeFilesLines
* rauc/image-rauc: move BUNDLE_VERSION to image-raucMichael Tretter2024-04-101-1/+1
| | | | | | | | | | | | | | | | | | RAUC_BUNDLE_VERSION is only used by the image rule to generate the bundle. Therefore, it belongs into image-rauc. This fixes the issue that RAUC is rebuilt on every commit in a BSP, as a commit changes PTXDIST_BSP_AUTOVERSION, which in turn changes the configuration of RAUC. The rebuild is not necessary and only the RAUC bundle should be rebuilt if the version has changed. Rename the config, as the move to the image moves the item from the ptxconfig to the platformconfig. Signed-off-by: Michael Tretter <m.tretter@pengutronix.de> Message-Id: <20240410081234.3902043-1-m.tretter@pengutronix.de> [mol: fix indention] Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: improve error detection for hook scriptRoland Hieber2024-03-071-0/+4
| | | | | | | | | | | | If config/images/rauc-hooks.sh is not found, genimage will instead try to copy a file with an empty file name from the temporary build folder, resulting in the less helpful error message about "cp: -r not specified; omitting directory". Catch this case early and error out with a better message. Signed-off-by: Roland Hieber <rhi@pengutronix.de> Message-Id: <20240220101909.1090342-1-rhi@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: Fix quotation marks / whitespace handlingAlexander Dahl2024-02-041-1/+1
| | | | | | | | | | | | If you had set PTXCONF_IMAGE_RAUC_DESCRIPTION="${PTXCONF_PROJECT_VENDOR} ${PTXCONF_PROJECT}" like DistroKit-2023.12.0 does, target update.raucb failed with 'command not found' because of wrong quoting and interpreting parts of PTXCONF_IMAGE_RAUC_DESCRIPTION as command. Signed-off-by: Alexander Dahl <ada@thorsis.com> Message-Id: <20240202151209.2535721-6-ada@thorsis.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: pick up hook script if it existsRoland Hieber2023-11-171-0/+15
| | | | | | | | | | | | | | | | | | | Introduce a new kconfig option to package a hook script into the RAUC bundle and reference it in the manifest. Otherwise leave the [hooks] section in the manifest empty. The hook script is searched config/images/rauc-hooks.sh in the usual search locations. RAUC will complain if a hook script is referenced but no hook script is found in the image (i.e. IMAGE_RAUC_HOOK_SCRIPT is empty). As hooks that should be called by RAUC need to be mentioned in the manifest too (in the relevant slot or the [bundle] section), the image config will still need to be forked by BSPs in order to adapt the manifest for that use case. However, the mechanism to find the hook script is then already in place, and can be used as-is. Signed-off-by: Roland Hieber <rhi@pengutronix.de> Message-Id: <20231114220708.2816211-1-rhi@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: add support for crypt bundlesEnrico Jorns2022-06-171-1/+11
| | | | | | Signed-off-by: Enrico Jorns <ejo@pengutronix.de> Message-Id: <20220615142217.990960-5-ejo@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: add support for intermediate certificatesMichael Olbrich2021-11-261-1/+2
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: allow selecting the bundle type (plain or verity)Roland Hieber2021-10-081-0/+1
| | | | | | | | | | | | | Newer setups probably want to use the improved 'verity' format, while existing setups probably need to stay with 'plain' to provide an upgrade path. See the discussion of the differences between the formats in <https://rauc.readthedocs.io/en/latest/reference.html#sec-ref-formats>. Reported-by: Alexander Dahl <ada@thorsis.com> Signed-off-by: Roland Hieber <rhi@pengutronix.de> Tested-by: Alexander Dahl <ada@thorsis.com> Message-Id: <20210930223442.5820-1-rhi@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: enable keyring verificationBastian Krause2020-05-151-1/+2
| | | | | | | | Note: requires genimage v13 or later Signed-off-by: Bastian Krause <bst@pengutronix.de> Message-Id: <20200515142641.812-15-bst@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rauc/image-rauc: use code signing infrastructure for key retrievalBastian Krause2020-05-151-31/+5
| | | | | | | | | | | | | | Use the keys provided by the currently active key provider via PKCS#11 instead of key files placed in the platform config directory. In order to make sure the new mechanics are used after a BSP update the rauc.key file is no longer allowed to exist in the platformconfig directory. Note: requires genimage v13 or later and ptx-code-signing-dev 0.4 or later Signed-off-by: Bastian Krause <bst@pengutronix.de> Message-Id: <20200515142641.812-14-bst@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* CREDITS: remove unmaintained fileRoland Hieber2019-07-031-2/+0
| | | | | | | | | | | | | | | This file has been touched 2 times in the last 7 years, and is no longer up to date. Remove it to carry less unmaintained stuff around. Also remove all references to it from file headers using for file in `g grep -l 'See CREDITS for details about who has'`; do sed -i '/See CREDITS for details about who has/,+1d' $file done as well as the different wording from rules/other/Toplevel.make. Signed-off-by: Roland Hieber <rhi@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rules: introduce and use ptx/shMichael Olbrich2019-05-171-1/+1
| | | | | | Like ptx/force-sh but for 'shell' instead of 'ptx/force-shell'. Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: avoid shell calls if the package is not selectedMichael Olbrich2018-09-211-0/+4
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rules: implement & use ptx/in-platformconfigdirMichael Olbrich2018-09-201-2/+2
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rauc: Make rauc bundle version configurableGavin Schenk2018-08-311-1/+1
| | | | | | | | | | | In my usecase I need PTXCONF_PROJECT_VERSION in the rauc bundle instead of PTXDIST_BSP_AUTOVERSION that is hard coded in rules/image-rauc.make. Introduce a new switch RAUC_BUNDLE_VERSION to menuconfig that defaults to "${PTXDIST_BSP_AUTOVERSION}". Signed-off-by: Gavin Schenk <g.schenk@eckelmann.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: Fix quotingUwe Kleine-König2017-06-301-1/+1
| | | | | | | | | | | This is important when PTXCONF_RAUC_COMPATIBLE="${PTXCONF_PROJECT_VENDOR} ${PTXCONF_PROJECT}" (i.e. the default) and one of the two used variables contains a space. Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* image-rauc: new packageEnrico Jorns2017-03-241-0/+69
This adds a default image recipe for building a RAUC update Bundle out of the systems rootfs. In order to sign your update (mandatory) you need to place a valid certificate and key file in your BSP. Their location is default they are currently expected to be located at: $(PTXDIST_PLATFORMCONFIGDIR)/config/rauc/rauc.key.pem (key) $(PTXDIST_PLATFORMCONFIGDIR)/config/rauc/rauc.cert.pem (cert) PTXdist will then create the bundle during a run of `ptxdist images`. Signed-off-by: Enrico Jorns <ejo@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>