forked from openkylin/platform_build
releasetools: Support verity signer args. am: c7814837a0
am: 8a6d94c9aa
am: b31f486d75
Change-Id: I871181398a41da89f1851a0b9a5599de23f6100e
This commit is contained in:
commit
53a1acf53b
|
@ -68,7 +68,7 @@ def GetVerityTreeSize(partition_size):
|
||||||
return True, int(output)
|
return True, int(output)
|
||||||
|
|
||||||
def GetVerityMetadataSize(partition_size):
|
def GetVerityMetadataSize(partition_size):
|
||||||
cmd = "system/extras/verity/build_verity_metadata.py -s %d"
|
cmd = "system/extras/verity/build_verity_metadata.py size %d"
|
||||||
cmd %= partition_size
|
cmd %= partition_size
|
||||||
|
|
||||||
status, output = commands.getstatusoutput(cmd)
|
status, output = commands.getstatusoutput(cmd)
|
||||||
|
@ -163,11 +163,14 @@ def BuildVerityTree(sparse_image_path, verity_image_path, prop_dict):
|
||||||
return True
|
return True
|
||||||
|
|
||||||
def BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt,
|
def BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt,
|
||||||
block_device, signer_path, key):
|
block_device, signer_path, key, signer_args):
|
||||||
cmd_template = (
|
cmd_template = (
|
||||||
"system/extras/verity/build_verity_metadata.py %s %s %s %s %s %s %s")
|
"system/extras/verity/build_verity_metadata.py build " +
|
||||||
|
"%s %s %s %s %s %s %s")
|
||||||
cmd = cmd_template % (image_size, verity_metadata_path, root_hash, salt,
|
cmd = cmd_template % (image_size, verity_metadata_path, root_hash, salt,
|
||||||
block_device, signer_path, key)
|
block_device, signer_path, key)
|
||||||
|
if signer_args:
|
||||||
|
cmd += " --signer_args=\"%s\"" % (' '.join(signer_args),)
|
||||||
print cmd
|
print cmd
|
||||||
status, output = commands.getstatusoutput(cmd)
|
status, output = commands.getstatusoutput(cmd)
|
||||||
if status:
|
if status:
|
||||||
|
@ -254,10 +257,10 @@ def MakeVerityEnabledImage(out_file, fec_supported, prop_dict):
|
||||||
block_dev = prop_dict["verity_block_device"]
|
block_dev = prop_dict["verity_block_device"]
|
||||||
signer_key = prop_dict["verity_key"] + ".pk8"
|
signer_key = prop_dict["verity_key"] + ".pk8"
|
||||||
if OPTIONS.verity_signer_path is not None:
|
if OPTIONS.verity_signer_path is not None:
|
||||||
signer_path = OPTIONS.verity_signer_path + ' '
|
signer_path = OPTIONS.verity_signer_path
|
||||||
signer_path += ' '.join(OPTIONS.verity_signer_args)
|
|
||||||
else:
|
else:
|
||||||
signer_path = prop_dict["verity_signer_cmd"]
|
signer_path = prop_dict["verity_signer_cmd"]
|
||||||
|
signer_args = OPTIONS.verity_signer_args
|
||||||
|
|
||||||
# make a tempdir
|
# make a tempdir
|
||||||
tempdir_name = tempfile.mkdtemp(suffix="_verity_images")
|
tempdir_name = tempfile.mkdtemp(suffix="_verity_images")
|
||||||
|
@ -276,7 +279,7 @@ def MakeVerityEnabledImage(out_file, fec_supported, prop_dict):
|
||||||
root_hash = prop_dict["verity_root_hash"]
|
root_hash = prop_dict["verity_root_hash"]
|
||||||
salt = prop_dict["verity_salt"]
|
salt = prop_dict["verity_salt"]
|
||||||
if not BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt,
|
if not BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt,
|
||||||
block_dev, signer_path, signer_key):
|
block_dev, signer_path, signer_key, signer_args):
|
||||||
shutil.rmtree(tempdir_name, ignore_errors=True)
|
shutil.rmtree(tempdir_name, ignore_errors=True)
|
||||||
return False
|
return False
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue