heads/initrd/bin/flashrom-kgpe-d16-openbmc.sh

#!/bin/bash
. /etc/functions

TRACE "Under /bin/flashrom-kgpe-d16-openbmc.sh"

ROM="$1"
if [ -z "$1" ]; then
	die "Usage: $0 /media/kgpe-d16-openbmc.rom"
fi

cp "$ROM" /tmp/kgpe-d16-openbmc.rom
sha256sum /tmp/kgpe-d16-openbmc.rom

flashrom --programmer="ast1100:spibus=2,cpu=reset" -c "S25FL128P......0" -w /tmp/kgpe-d16-openbmc.rom \
|| die "$ROM: Flash failed"

warn "Reboot and hopefully it works"
exit 0
Add dual support for real bash and busybox's bash(ash) - modify bash to have it configured with -Os 2023-02-08 21:01:48 +00:00			`#!/bin/bash`
Board, linux and coreboot configs 2018-03-01 05:40:46 +00:00			`. /etc/functions`

Add TRACE function tracing function to output on console when enabled - Add TRACE function tracing output under etc/functions, depending on CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT enabled in board configs - Replace current DEBUG to TRACE calls in code, reserving DEBUG calls for more verbose debugging later on (output of variables etc) - add 'export CONFIG_ENABLE_FUNCTION_TRACING_OUTPUT=y' in qemu-coreboot(fb)whiptail-tpm1(-hotp) boards to see it in action 2023-02-20 16:01:17 +00:00			`TRACE "Under /bin/flashrom-kgpe-d16-openbmc.sh"`
All scripts and functions: Add DEBUG calling trace on console when CONFIG_DEBUG_OUTPUT is exported in board config -qemu-coreboot-*whiptail-tpm1(-hotp) boards have 'export CONFIG_DEBUG_OUTPUT=y' by default now 2023-02-18 17:58:43 +00:00
Board, linux and coreboot configs 2018-03-01 05:40:46 +00:00			`ROM="$1"`
			`if [ -z "$1" ]; then`
			`die "Usage: $0 /media/kgpe-d16-openbmc.rom"`
			`fi`

			`cp "$ROM" /tmp/kgpe-d16-openbmc.rom`
			`sha256sum /tmp/kgpe-d16-openbmc.rom`

			`flashrom --programmer="ast1100:spibus=2,cpu=reset" -c "S25FL128P......0" -w /tmp/kgpe-d16-openbmc.rom \`
			`\|\| die "$ROM: Flash failed"`

TPM Disk Unlock Key sealing/renewal cleanup (Triggered automatically when resealing TOTP) Changes: - As per master: when TOTP cannot unseal TOTP, user is prompted to either reset or regenerate TOTP - Now, when either is done and a previous TPM Disk Unlock Key was setuped, the user is guided into: - Regenerating checksums and signing them - Regenerating TPM disk Unlock Key and resealing TPM disk Unlock Key with passphrase into TPM - LUKS header being modified, user is asked to resign kexec.sig one last time prior of being able to default boot - When no previous Disk Unlock Key was setuped, the user is guided into: - The above, plus - Detection of LUKS containers,suggesting only relevant partitions - Addition of TRACE and DEBUG statements to troubleshoot actual vs expected behavior while coding - Were missing under TPM Disk Unlock Key setup codepaths - Fixes for #645 : We now check if only one slots exists and we do not use it if its slot1. - Also shows in DEBUG traces now Unrelated staged changes - ash_functions: warn and die now contains proper spacing and eye attaction - all warn and die calls modified if containing warnings and too much punctuation - unify usage of term TPM Disk Unlock Key and Disk Recovery Key 2023-08-22 18:34:29 +00:00			`warn "Reboot and hopefully it works"`
Board, linux and coreboot configs 2018-03-01 05:40:46 +00:00			`exit 0`