Wind River Support Network

Description

setup project:
setup.sh --machines intel-x86-64 --templates feature/ostree feature/efi-secure-boot feature/encrypted-storage feature/ima --layers meta-lat --distro wrlinux --dl-layers=1 --accept-eula=yes
source environment-setup-x86_64-wrlinuxsdk-linux
source oe-init-build-env build


Result:

intel-x86-64 login: root
Password:
root@intel-x86-64:~# touch testing
root@intel-x86-64:~# echo "for testing" > testing
root@intel-x86-64:~# sync
root@intel-x86-64:~# reboot
root@intel-x86-64:~# watchdog: watchdog0: watchdog did not stop!
watchdog: watchdog0: watchdog did not stop!
systemd-shutdown[1]: Failed to finalize DM devices, ignoring.
reboot: Restarting system


or 


root@intel-x86-64:~#
root@intel-x86-64:~# ostree_upgrade.sh -b
Validating refs...
Validating refs in collections...
Enumerating commits...
Verifying conten integrity of 1 commit objects...
fsck objects (22786/22786) [=============] 100%
object fsck of 1 commits completed successfully - no errors found.
Validating refs...
Validating refs in collections...
Enumerating commits...
Verifying content integrity of 1 commit objects...
fsck objects (786/22786) [=============] 100%9%
object fsck of 1 commits completed successfully - no errors found.


GPG: Verification enabled, found 1 signature:

  Signature made Fri May 26 09:08:39 2023 using RSA key ID CFA856DFC7CB87BE
  Good signature from "Wind-River-Linux-Sample <svc-linux@gmail.com>"
2 metadata, 0 content objects fetched; 532 B transferred in 0 seconds; 0 bytes content written
Copying /etc chages: 2 modified, 3 removed, 21 added
Transaction complete; bootconfig swap: yes; bootversion: boot.0.1, deployment count change: 1
root@intel-x86-64:~# watchdog: watchdog0: watchdog did not stop!
watchdog: watchdog0: watchdog did not stop!
systemd-shutdown[1]: Failed to finalize DM devices, ignoring.
reboot: Restarting system
Linux version 6.29-yocto-standard (oe-user@oe-host) (x86_64-wrs-linux-gcc (GCC) 12.2.0, GNU ld (GNU Binutils) 2.40.20230119) #1 SMP PREEMPT_DYNAMIC Fri May 19 14:45:44 UTC 2023
Command line: BOOT_IMAGE=/1/vmlinuz rw rootwait ostree_boot=LABEL=otaboot ostree_root=LABEL=otaroot flux=fluxdata ostree=/ostree/1 console=ttyS0,115200 console=tty1 devmd=0 ostree_efi=LABEL=otaefi
KERNEL supported cpus:
  Intel GenuineIntel
  AMD AuthenticAMD

Steps to Reproduce

Build steps:

/lpg-build/cdc/fast_prod/WRL10_23/WRL10_23_GIT/wrlinux-10/setup.sh --machines intel-x86-64 --templates feature/ostree feature/efi-secure-boot feature/encrypted-storage feature/ima --layers meta-lat --distro wrlinux --dl-layers=1 --accept-eula=yes
source environment-setup-x86_64-wrlinuxsdk-linux
source oe-init-build-env build
echo 'GPG_PATH = "/tmp/tmp.13GW9ZPlut"' >> conf/local.conf
echo '
TEST_SPIN = "GIT_20230526"
TEST_SPRINT = "S230523(LTS23)"
TEST_PLAN_WEEK = "2023WW21"' >> conf/local.conf

cat << EOF >> customized_test_plan.ini
[Test_Case]
ostree_basic_norpmdata
ostree_basic_fluxdata
ostree_basic_watchdog_clearbootflag
ostree_basic_grub_entry
ostree_basic_readonly_bootenv
ostree_cmd_add-remotes-config-dir
ostree_cmd_fsck
ostree_cmd_diff
ostree_system-export
ostree_reset_simple
ostree_reset_noflux
ostree_reset_everything
ostree_basic_systemd_service
ostree_basic_add_user
disk_encryption_luks
secure_boot_grubentry
secure_boot_trust_keys
secure_boot_DB_cert
secure_boot_PK_cert
secure_boot_mok_vendor_cert
secure_boot_mokutil_sb-state
ima_bash_denied
ima_kernel-module_denied
ima_ordinary-user_denied
ima_python_denied
disk_encryption_cryptsetup_example
secure_boot_mokutil_enroll_shim
secure_boot_gpg_grubcfg
secure_boot_gpg_kernel-initrd
secure_boot_gpg_lockdownefi
ostree_upgrade
ostree_unified_repo
ostree_failover
ostree_basic_ostree_checksum
ostree_basic_ostree_diff
ostree_basic_ostree_fsck
ostree_basic_ostree_pull
ostree_basic_ostree_remote_refs
ostree_basic_ostree_remote_show-url
ostree_basic_ostree_rev-parse
ostree_basic_ostree_show
ostree_basic_ostree_prune
ostree_basic_ostree_commit
ostree_basic_ostree_log
ostree_basic_ostree-system-generator
[Test_HW]
EOF

echo 'OSTREE_REMOTE_URL = "http://pek-lpgtest7408.wrs.com/buildarea1/SharedImage/LTS23/BSP/intel-x86-64_standard_glibc-std_OSTree_AB_sb_ima_luks3/20230526_150525/ostree_repo/"' >> conf/local.conf
echo 'OSTREE_BRANCH = "wrlinux-image-std"' >> conf/local.conf
bitbake-layers add-layer /lpg-build/cdc/WASSP_LINUX_1023/testcases/wrlinux/wr-testing/bts-dev

#####To Clone a whole new testcases layer#####
git clone --depth 1 -b WRLINUX_10_23_HEAD git://lxgit.wrs.com/wrlinux-testing/testcases.git ../layers/testcases/wrlinux/
bitbake-layers add-layer ../layers/testcases/wrlinux/wr-testing/bts-dev
#####End#####

echo '
require templates/feature/bts/template.conf
IMAGE_FSTYPES += " tar.bz2"
BB_NO_NETWORK:pn-lmbench = "0"
ACTIVE_PLAN = "customized_test_plan.ini"' >> conf/local.conf
echo 'IMAGE_FSTYPES:remove = " live hddimg iso"' >> conf/local.conf
echo '
#Bellow is basic env, used by wr-test_0.1.0.bb
TEST_RELEASE_NAME = "WRLinux 10.23"
TEST_ROOTFS_TYPE = "glibc-std"
TEST_MULTILIB = ""
TEST_TESTER_NAME = ""
TEST_REQUIREMANTS = "LINUXEXEC-27575"
TEST_TARGET_NAME = "builder"
TEST_TAGS = ""' >> conf/local.conf
echo 'TEST_KEYWORD = ""' >> conf/local.conf
echo 'IMAGE_INSTALL:append = " nfs-utils-mount"
OSTREE_USE_AB = "1"
INITRAMFS_MAXSIZE = "409600"
OSTREE_INST_ARGS:append = " LUKS=3"' >> conf/local.conf
bitbake wrlinux-image-std wrlinux-image-small

http://pek-lpgtest7408.wrs.com/buildarea1/SharedImage/LTS23/BSP/intel-x86-64_standard_glibc-std_OSTree_AB_sb_ima_luks3/20230526_150525/build_steps.log

1. dd below ustart image into A Udisk
/net/pek-lpgtest7408/buildarea1/SharedImage/LTS23/BSP/intel-x86-64_standard_glibc-std_OSTree_AB_sb_ima_luks3/20230526_150525/ustart_intel-x86-64_glibc-std_USB3_Install_sb_ima.img

2. Then, boot this A Udisk on 29157(secure boot is enabled)

3. To execute some commands, touch file or run ostree_upgrade.sh -b