github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-07-21 02:40:57 +00:00
Code Issues Projects Releases Wiki Activity

build: cache: Cache root_hash.txt used by the shim-v2

Browse Source 
Let's cache the root_hash.txt from the confidential image so we can use
them later on to decide whether there was a rootfs change that would
require shim-v2 to be rebuilt.

Signed-off-by: Fabiano Fidêncio <fabiano@fidencio.org>
This commit is contained in:
Fabiano Fidêncio 2024-10-23 19:38:40 +02:00
parent d2d9792720
commit 9c84998de9
No known key found for this signature in database
GPG Key ID: EE926C2BDACC177B
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
tools/packaging/kata-deploy/local-build/kata-deploy-binaries.sh
View File

@ -1145,6 +1145,21 @@ handle_build() {
fi fi
tar tvf "${modules_final_tarball_path}" tar tvf "${modules_final_tarball_path}"
;; ;;
shim-v2)
if [ "${MEASURED_ROOTFS}" = "yes" ]; then
local image_conf_tarball="${workdir}/kata-static-rootfs-image-confidential.tar.xz"
if [ ! -f "${image_conf_tarball}" ]; then
die "Building the shim-v2 with MEASURED_ROOTFS support requires a rootfs confidential image tarball"
fi
local root_hash_basedir="./opt/kata/share/kata-containers/"
if ! tar xvf ${image_conf_tarball} ${root_hash_basedir}root_hash.txt --transform s,${root_hash_basedir},,; then
die "Building the shim-v2 with MEASURED_ROOTFS support requres a rootfs confidential image tarball built with MEASURED_ROOTFS support"
fi
mv root_hash.txt shim-v2-root_hash.txt
fi
;;
esac esac
pushd ${workdir} pushd ${workdir}
@ -1210,6 +1225,13 @@ handle_build() {
"kata-static-${build_target}-modules.tar.xz" "kata-static-${build_target}-modules.tar.xz"
) )
;; ;;
shim-v2)
if [ "${MEASURED_ROOTFS}" = "yes" ]; then
files_to_push+=(
"shim-v2-root_hash.txt"
)
fi
;;
*) *)
;; ;;
esac esac