Add rollback support

Signed-off-by: Carlo Kretzschmann <kretzschmann@3dvisionlabs.com>

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-bsp/tegra-binaries/tegra-redundant-boot/nv_update_verifier.init

@@ -0,0 +1,20 @@
+#! /bin/sh
+NAME=nv_update_verifier
+DESC="OTA bootloader update verifier"
+
+case "$1" in
+  start|restart)
+      echo -n "Running $DESC: "
+      /usr/sbin/nv_update_verifier < /dev/null
+      echo "[OK]"
+      ;;
+  stop)
+      ;;
+  *)
+      N=/etc/init.d/$NAME
+      echo "Usage: $N {start|stop|restart}" >&2
+      exit 1
+      ;;
+esac
+
+exit 0

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-bsp/tegra-binaries/tegra-redundant-boot/nv_update_verifier.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=OTA bootloader update verifier
+After=nvstartup.service
+
+[Service]
+Type=simple
+ExecStart=/usr/sbin/nv_update_verifier
+
+[Install]
+WantedBy=basic.target

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-bsp/tegra-binaries/tegra-redundant-boot/nv_update_verifier.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+upgrade_available=$(/sbin/fw_printenv upgrade_available | cut -d "=" -f2)
+
+# Only verify booted slot if we are not in an upgrade process
+# since mender will do that on commit (through fw_setenv)
+if [ "$upgrade_available" == "0" ]; then
+	/usr/sbin/nvbootctrl verify
+fi

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-bsp/tegra-binaries/tegra-redundant-boot_%.bbappend

@@ -4,3 +4,13 @@ EXTRADEPS:tegra210 = ""
 EXTRADEPS:tegra234 = ""
 RDEPENDS:${PN} += "${EXTRADEPS}"
 
+FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
+
+SRC_URI:append = "\
+    file://nv_update_verifier.sh \
+"
+
+do_install:append:tegra234() {
+    install -d ${D}/${sbindir}
+    install -m 0755 ${S}/nv_update_verifier.sh ${D}/${sbindir}/nv_update_verifier
+}

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-bsp/uefi/edk2-firmware-tegra_%.bbappend

@@ -2,7 +2,6 @@
 FILESEXTRAPATHS:prepend := "${THISDIR}/files:"
 
 SRC_URI += "file://0007-runtime-access-for-KernelCommandLine-efivar.patch;patchdir=.."
-SRC_URI += "file://0008-enable-rootfs-redundancy.patch;patchdir=.."
 SRC_URI += "file://0009-BootChainDxe-fix.patch;patchdir=.."
 
 

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-bsp/uefi/files/L4TConfiguration-RootfsRedundancyLevelABEnable.dtsi

@@ -0,0 +1,41 @@
+/dts-v1/;
+
+/ {
+        overlay-name = "L4T Configuration Settings";
+
+        fragment@0 {
+                target-path = "/";
+
+                board_config {
+                        sw-modules = "uefi";
+                };
+
+                __overlay__ {
+
+                        firmware {
+
+                                uefi {
+
+                                        variables {
+
+                                                gNVIDIAPublicVariableGuid {
+
+                                                        RootfsRedundancyLevel {
+                                                                data = [01 00 00 00];
+                                                                runtime;
+                                                                locked;
+                                                        };
+
+                                                        RootfsRetryCountMax {
+                                                                data =  [ 01 00 00 00 ]; 
+                                                                runtime;
+                                                        };
+
+                                                };
+
+                                        };
+                                };
+                        };
+                };
+        };
+};

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-mender/tegra-state-scripts/files/verify-slot

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+/usr/sbin/nvbootctrl verify

meta-mender-tegra/meta-mender-tegra-jetpack5/recipes-mender/tegra-state-scripts/tegra-state-scripts_1.0.bb

@@ -1,5 +1,6 @@
 SRC_URI = " \
     file://switch-rootfs \
+    file://verify-slot \
 "
 
 LICENSE = "Apache-2.0"
@@ -14,6 +15,7 @@ PERSIST_MACHINE_ID:mender-persist-systemd-machine-id = "yes"
 
 do_compile() {
     cp ${S}/switch-rootfs ${MENDER_STATE_SCRIPTS_DIR}/ArtifactInstall_Leave_50_switch-rootfs
+    cp ${S}/verify-slot ${MENDER_STATE_SCRIPTS_DIR}/ArtifactCommit_Leave_50_verify-slot
 }
 
 # Make sure scripts aren't left around from old builds