Skip to content
This repository has been archived by the owner on Jan 6, 2023. It is now read-only.

[mixer] Inject Swupd_Root.pem when custom signing #88

Closed
wants to merge 1 commit into from
Closed

[mixer] Inject Swupd_Root.pem when custom signing #88

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 17 additions & 2 deletions build/mixer.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@ if ! "${IS_DOWNSTREAM}" && [[ ${MIXER_OPTS} != *"--offline"* ]]; then
fi

build_bundles() {
local mix_ver="$1"

section "Bundles"
log_line "Updating Bundles List:"
# Clean bundles file, otherwise mixer will use the outdated list
Expand Down Expand Up @@ -52,6 +54,19 @@ build_bundles() {
# shellcheck disable=SC2086
sudo_mixer_cmd build bundles ${mixer_opts_bundles}
log_line

if function_exists sign_update; then
log_line "Injecting Swupd_Root.pem into full chroot"
local chroot_cert_file="/usr/share/clear/update-ca/Swupd_Root.pem"
local chroot_cert_dir="$(dirname "${chroot_cert_file}")"
local mix_ver_chroot_dir="update/image/${mix_ver}/full"
sudo mkdir -p "${mix_ver_chroot_dir}${chroot_cert_dir}"
sudo cp -f Swupd_Root.pem "${mix_ver_chroot_dir}${chroot_cert_file}"
echo "${chroot_cert_dir}" > update/os-core-update-extra-files
echo "${chroot_cert_file}" >> update/os-core-update-extra-files
else
rm -f update/os-core-update-extra-files
fi
}

build_update() {
Expand Down Expand Up @@ -139,7 +154,7 @@ generate_bump() {
# shellcheck disable=SC2086
mixer_cmd versions update ${mixer_opts}

build_bundles
build_bundles "${mix_ver}"

# Remove bundles pending deletion
section "Bundle Deletion"
Expand Down Expand Up @@ -224,7 +239,7 @@ generate_mix() {
# shellcheck disable=SC2086
mixer_cmd versions update ${mixer_opts}

build_bundles
build_bundles "${mix_ver}"

build_update "${mix_ver}"

Expand Down