#169 Hardened build system for releases with blobs

Chiuso
shmalebx9 vorrebbe unire 2 commit da shmalebx9/blobrelease a libreboot/master
shmalebx9 commented 1 anno fa

The release script now adds a blobhashes file to the release archive which contains the hash for each rom with blobs included.

The inject script can now take the path to a release archive as an argument. When that is done, it will check to make sure that the hash of each rom matches the expected hash.

The two additions are:

  • A release archive can be given to the inject script directly; which makes it easier on the user
  • The release roms will always be identical to locally compiled ones after running the inject script.

I will add this new feature to the docs if the PR is accepted. I plan to make it the default way, since it is easier on the user and prevents issues with blobs.

The release script now adds a `blobhashes` file to the release archive which contains the hash for each rom *with blobs included.* The inject script can now take the path to a release archive as an argument. When that is done, it will check to make sure that the hash of each rom matches the expected hash. The two additions are: - A release archive can be given to the inject script directly; which makes it easier on the user - The release roms will always be identical to locally compiled ones after running the inject script. I will add this new feature to the docs if the PR is accepted. I plan to make it the *default* way, since it is easier on the user and prevents issues with blobs.
Leah Rowe commented 1 anno fa
Proprietario

closing, because i merged this manually. the code is perfect, but you used "lbmkplaceholder" as author. i changed it for you, to the author name you normally use (shmalebx9, and then your email address). see:

https://codeberg.org/libreboot/lbmk/commit/4719d733efd4a66063a667b816d62d178194f1c3

https://codeberg.org/libreboot/lbmk/commit/257ca17b349afbb502c609f361969b0be1f865d6

will do the lbwww PR next

closing, because i merged this manually. the code is perfect, but you used "lbmkplaceholder" as author. i changed it for you, to the author name you normally use (shmalebx9, and then your email address). see: https://codeberg.org/libreboot/lbmk/commit/4719d733efd4a66063a667b816d62d178194f1c3 https://codeberg.org/libreboot/lbmk/commit/257ca17b349afbb502c609f361969b0be1f865d6 will do the lbwww PR next
Riapri questa pull request per effettuare il merge.
Sign in to join this conversation.
Nessuna etichetta
Nessuna milestone
Nessun assegnatario
2 Partecipanti
Caricamento...
Annulla
Salva
Non ci sono ancora contenuti.