Wind River Support Network

HomeDefectsLIN1018-5758
Fixed

LIN1018-5758 : intel-x86-64_secure-boot: Failed to verify file /initrd (err:0x8000000000000002)

Created: Feb 24, 2020    Updated: Mar 27, 2020
Resolved Date: Mar 3, 2020
Found In Version: 10.18.44.13
Fix Version: 10.18.44.15
Severity: Critical
Applicable for: Wind River Linux LTS 18
Component/s: BSP

Description

TEST_STEP
setup.sh --machines=intel-x86-64 --distros=wrlinux --dl-layers --templates  feature/efi-secure-boot --accept-eula=yes
. ./oe-init-build-env build
bitbake wrlinux-image-std

Target is stopped at below:
Booting 'Wind River Linux LTS 19 Sample EFI boot'
failed to verify file /initrd (err: 0x8000000000000002)
unaligned pointer 0xe
Abordted. Press any key to exit.

Workaround

Symbolink link missing can be restored by doing:

# mount /dev/sdb2 /mnt

# cd /mnt

# ln -s secure-core-image-initramfs-4.18.45-yocto-standard.cpio.gz.p7b initrd.p7b

# umount /mnt

Steps to Reproduce

This issue has been seen only when useing the customer's host to build a project, following these steps:

Configure project with secure boot features:

$ ./wrlinux-x/setup.sh --distros wrlinux-std-sato --machines intel-x86-64 \    --templates \ feature/efi-secure-boot \ feature/encrypted-storage \ feature/firewall \ feature/ids-basic \ feature/ima \ feature/pam-tally2 \ feature/tpm2 \ feature/xfce

Setup environment and create a build directory:
$ . ./environment-setup-x86_64-wrlinuxsdk-linux

$ . ./oe-init-build-env <build>

Enable bitbake from being able to access the network by modifying your conf/local.conf:

BB_NO_NETWORK ?= '0'

Then, start yoir build using production-ready image wrlinux-image-glibc-std:

$ bitbake wrlinux-image-glibc-std

Navigate to the output images directory and use dd to install the .wic image into
your USB device. 
Locate you USB stick in the /dev devices and replace sdX with appropiate name:

$ cd tmp-glibc/deploy/images/intel-x86-64/
 $ dd if=wrlinux-image-glibc-std-intel-x86-64.wic of=/dev/sdX bs=1M

Boot the target.
Live chat
Online