mirror of
https://github.com/Dasharo/dasharo-tools.git
synced 2026-06-13 10:16:14 -07:00
Maciej Pijanowski
251da89c8c
With v1.1.2 signing works fine, but key generation does not :) See: https://github.com/Dasharo/open-source-firmware-validation/pull/237#issuecomment-2025749706 Signed-off-by: Maciej Pijanowski <maciej.pijanowski@3mdeb.com>
36 lines
908 B
Bash
Executable File
36 lines
908 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
|
|
|
|
source "${SCRIPT_DIR}/../common.sh"
|
|
|
|
usage() {
|
|
cat <<EOF
|
|
|
|
This script generates keys for Verified Boot in the KEYS_DIRECTORY. Please refer
|
|
to the Dasharo documentation for more information:
|
|
https://docs.dasharo.com/common-coreboot-docs/vboot_signing/
|
|
|
|
Usage: $0 KEYS_DIRECTORY
|
|
|
|
Arguments:
|
|
KEYS_DIRECTORY path to directory where generated keys should be located
|
|
|
|
Example usage:
|
|
$0 keys
|
|
EOF
|
|
exit 0
|
|
}
|
|
|
|
KEYS_DIRECTORY="$(readlink -f $1)"
|
|
|
|
[ -z "$KEYS_DIRECTORY" ] && echo "KEYS_DIRECTORY not given" && usage
|
|
|
|
docker run --rm -it -v $PWD:$PWD -w $PWD \
|
|
ghcr.io/dasharo/dasharo-sdk:v1.1.0 \
|
|
/vboot/scripts/keygeneration/create_new_keys.sh --output "$KEYS_DIRECTORY"
|
|
|
|
errorCheck "Failed to generate keys"
|
|
|
|
echo "The Verified Boot keys were generated into following directory: $KEYS_DIRECTORY"
|