genode/repos/ports/run/verify.run

if {[get_cmd_switch --autopilot] && [have_board virt_qemu_riscv]} {
	puts "Autopilot mode is not supported on this platform."
	exit 0
}

create_boot_directory

import_from_depot [depot_user]/src/[base_src] \
                  [depot_user]/src/init \
                  [depot_user]/src/report_rom \
                  [depot_user]/src/libc

install_config {
<config>
	<parent-provides>
		<service name="CPU"/>
		<service name="LOG"/>
		<service name="PD"/>
		<service name="ROM"/>
	</parent-provides>

	<default-route> <any-service> <parent/> <any-child/> </any-service> </default-route>

	<start name="report_rom" caps="100">
		<resource name="RAM" quantum="1M"/>
		<provides> <service name="Report"/> <service name="ROM"/> </provides>
		<config verbose="yes"/>
	</start>

	<start name="verify" caps="200">
		<resource name="RAM" quantum="12M"/>
		<config verbose="yes">
			<libc stdout="/dev/log" stderr="/dev/null" rtc="/dev/null"/>
			<vfs>
				<rom name="pubkey"/>
				<tar name="test.tar"/>
				<dir name="dev"> <log/> <null/> </dir>
			</vfs>
			<verify path="expect_valid.txt"   pubkey="/nonexistent_pubkey"/>
			<verify path="expect_valid.txt"   pubkey="/dev/null"/>
			<verify path="expect_valid.txt"   pubkey="/pubkey"/>
			<verify path="expect_invalid.txt" pubkey="/pubkey"/>
		</config>
	</start>
</config>
}

build { app/verify }

exec tar cf [run_dir]/genode/test.tar -C [genode_dir]/repos/ports/src/app/verify/test .

copy_file [select_from_repositories sculpt/depot/nfeske/pubkey] [run_dir]/genode/pubkey

build_boot_image { verify libc.lib.so vfs.lib.so }

append qemu_args " -nographic "

run_genode_until {</result>.*\n} 30

grep_output {\[init \-\> report_rom\]}

compare_output_to {
[init -> report_rom] report 'verify -> result'
[init -> report_rom]   <result>
[init -> report_rom]   	<bad path="expect_valid.txt" reason="public key unavailable"/>
[init -> report_rom]   	<bad path="expect_valid.txt" reason="malformed public key"/>
[init -> report_rom]   	<good path="expect_valid.txt"/>
[init -> report_rom]   	<bad path="expect_invalid.txt" reason="bad signature"/>
[init -> report_rom]   </result>
}