versions: Bump td-shim to v0.2.0

Let's bump the td-shim to its `v0.2.0` release.
Together with the bump, let's also adapt its build scripts so we're able
to build the `v0.2.0` as part of our infra.

Fixes: #5593

Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>

tools/packaging/static-build/td-shim/Dockerfile

@@ -15,7 +15,9 @@ RUN apt-get update && \
         gcc \
         git \
         llvm \
-        nasm && \
+        make \
+        nasm \
+        patch && \
     apt-get clean && rm -rf /var/lib/lists/ && \
     curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain ${RUST_TOOLCHAIN} && \
     source "$HOME/.cargo/env" && \

tools/packaging/static-build/td-shim/build-td-shim.sh

@@ -27,11 +27,13 @@ pushd ${build_root}
 git clone --single-branch "${tdshim_repo}"
 pushd td-shim
 git checkout "${tdshim_version}"
+git submodule update --init
+make preparation
 bash sh_script/build_final.sh boot_kernel
 
 install_dir="${DESTDIR}/${PREFIX}/share/td-shim"
 mkdir -p ${install_dir}
-install target/x86_64-unknown-uefi/release/final-boot-kernel.bin ${install_dir}/td-shim.bin
+install target/release/final-boot-kernel.bin ${install_dir}/td-shim.bin
 popd #td-shim
 popd #${build_root}
 

versions.yaml

@@ -307,7 +307,7 @@ externals:
   td-shim:
     description: "Confidential Containers Shim Firmware"
     url: "https://github.com/confidential-containers/td-shim"
-    version: "cf9592ef70bd6ba4c7ab1330d278a743f5ba3133"
+    version: "v0.2.0"
     toolchain: "nightly-2022-05-15"
 
   virtiofsd: