conf: keys: add the composefs keys

Verification of the composefs image. To generate the keys: openssl genpkey -algorithm ed25519 -outform PEM -out ed25519.pem PEMFILE=ed25519.pem PUBLIC="$(openssl pkey -outform DER -pubout -in ${PEMFILE} | tail -c 32 | base64)" SEED="$(openssl pkey -outform DER -in ${PEMFILE} | tail -c 32 | base64)" SECRET="$(echo ${SEED}${PUBLIC} | base64 -d | base64 -w 0)" echo "${SECRET}" > secret echo "${PUBLIC}" > public Signed-off-by: Jorge Ramirez-Ortiz <jorge@foundries.io>
foundriesio · Apr 18, 2024 · dd2eb08 · dd2eb08
1 parent 24734cb
commit dd2eb08
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 0 deletions.
diff --git a/conf/keys/cfs/cfs-dev.pub b/conf/keys/cfs/cfs-dev.pub
@@ -0,0 +1 @@
+KQwl5q4hQjwQxu+BYfm4GpFkdgdP2qG19KOmuv67xjM=
diff --git a/conf/keys/cfs/cfs-dev.sec b/conf/keys/cfs/cfs-dev.sec
@@ -0,0 +1,2 @@
+Ga5I1u55+hH9kNKLFzztqBpKL0uI/IoAOg0jhwAwAWIpDCXmriFCPBDG74Fh+bgakWR2B0/aobX0
+o6a6/rvGMw==
diff --git a/conf/local.conf b/conf/local.conf
@@ -109,3 +109,10 @@ UEFI_SIGN_KEYDIR[vardepsexclude] += "TOPDIR"
 STM32_ROT_KEY_PATH ??= "${TOPDIR}/../tools/lmp-tools/security/stm32mp1/"
 STM32_ROT_KEY_PATH[vardepsexclude] += "TOPDIR"
 STM32_ROT_KEY_PASSWORD ??= "foundries"
+
+#
+# ComposeFS signatures
+#
+CFS_SIGN_KEYDIR ??= "${TOPDIR}/conf/keys/cfs"
+CFS_SIGN_KEYNAME ?= "cfs-dev"
+CFS_SIGN_KEYDIR[vardepsexclude] += "TOPDIR"
diff --git a/setup-environment-internal b/setup-environment-internal
@@ -200,6 +200,10 @@ if [ -d "${MANIFESTS}"/conf/keys ]; then
     if [ ! -d "conf/keys/platform" ]; then
         ln -sf "${MANIFESTS}"/conf/keys/platform conf/keys/platform
     fi
+    # Link Composefs keys
+    if [ ! -d "conf/keys/cfs" ]; then
+        ln -sf "${MANIFESTS}"/conf/keys/cfs conf/keys/cfs
+    fi
 fi
 
 # Factory specific keys (unique per factory)
@@ -237,6 +241,10 @@ if [ -d "${MANIFESTS}"/factory-keys ]; then
     if [ -d "${MANIFESTS}"/factory-keys/platform ] && [ ! -d "conf/factory-keys/platform" ]; then
         ln -sf "${MANIFESTS}"/factory-keys/platform conf/factory-keys/platform
     fi
+    # Link Composefs keys if not set by the user
+    if [ -d "${MANIFESTS}"/factory-keys/cfs ] && [ ! -d "conf/factory-keys/cfs" ]; then
+        ln -sf "${MANIFESTS}"/conf/keys/cfs conf/keys/cfs
+    fi
 fi
 
 ln -sf "${MANIFESTS}"/conf/bblayers.conf conf/bblayers.conf
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		Ga5I1u55+hH9kNKLFzztqBpKL0uI/IoAOg0jhwAwAWIpDCXmriFCPBDG74Fh+bgakWR2B0/aobX0
		o6a6/rvGMw==