github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-01 15:57:20 +00:00
Code Issues Projects Releases Wiki Activity

local-build: Do not use measured rootfs on s390x

Browse Source 
IBM SE ensures to make initrd measured by genprotimg and verified by ultravisor.
Let's not build the measured rootf on s390x.

Signed-off-by: Hyounggyu Choi <Hyounggyu.Choi@ibm.com>
This commit is contained in:
Hyounggyu Choi 2025-02-05 15:10:32 +01:00
parent 429b2654f4
commit 27ce3eef12
1 changed files with 18 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh
View File

@ -389,7 +389,11 @@ install_image() {
#Install guest image for confidential guests
install_image_confidential() {
export MEASURED_ROOTFS=yes
if [ "${ARCH}" == "s390x" ]; then
export MEASURED_ROOTFS=no
else
export MEASURED_ROOTFS=yes
fi
export PULL_TYPE=default
install_image "confidential"
}
@ -467,7 +471,11 @@ install_initrd() {
#Install guest initrd for confidential guests
install_initrd_confidential() {
export MEASURED_ROOTFS=yes
if [ "${ARCH}" == "s390x" ]; then
export MEASURED_ROOTFS=no
else
export MEASURED_ROOTFS=yes
fi
export PULL_TYPE=default
install_initrd "confidential"
}
@ -610,7 +618,11 @@ install_kernel() {
}
install_kernel_confidential() {
export MEASURED_ROOTFS=yes
if [ "${ARCH}" == "s390x" ]; then
export MEASURED_ROOTFS=no
else
export MEASURED_ROOTFS=yes
fi
install_kernel_helper \
"assets.kernel.confidential" \
@ -850,6 +862,9 @@ install_shimv2() {
export GO_VERSION
export RUST_VERSION
export MEASURED_ROOTFS
if [ "${ARCH}" == "s390x" ]; then
export MEASURED_ROOTFS=no
fi
DESTDIR="${destdir}" PREFIX="${prefix}" "${shimv2_builder}"
}