You've already forked osfv-test-data
mirror of
https://github.com/Dasharo/osfv-test-data.git
synced 2026-06-13 19:16:20 -07:00
README.md: added more details on hello-dasharo.efi building and signing
hello-dasharo/README.md - added list of dependencies, artifacts and detailed instructions on build process secure-boot/README.md - added image creation instructions and reference to hello-dasharo/README.md Signed-off-by: Mateusz Maciejewski <mateusz.maciejewski@3mdeb.com>
This commit is contained in:
@@ -0,0 +1,23 @@
|
||||
## Hello, Dasharo Universe! - Secure Boot test program
|
||||
An UEFI hello-world program, but with intentionally-added delays: pre- and post;
|
||||
output to capture in tests: `UEFI Hello, Dasharo Universe!`
|
||||
|
||||
Build prerequisites for Fedora:
|
||||
- mingw64-gcc
|
||||
- openssl
|
||||
- sbsigntools
|
||||
|
||||
Installation of mingw64-gcc compiler, or any other required package on Fedora:
|
||||
`sudo dnf install mingw64-gcc`
|
||||
|
||||
Building `dist/` sub-directory, containing complete set of files for BAD_INFLUE Secure Boot USB stick:
|
||||
`make clean && make dist`
|
||||
|
||||
List of files created in `dist/` sub-directory:
|
||||
- `cert_fake.der` - fake certificate file with bad contents.
|
||||
- `cert_good.der` - proper certificate file, can be enrolled with Secure Boot menu.
|
||||
- `hello-dasharo.efi` - unsigned program binary, can be executed with Secure Boot disabled.
|
||||
- `hello-dasharo-signed-bad.efi` - program binary signed with some other certificate.
|
||||
- `hello-dasharo-signed-good.efi` - program binary signed with `cert_good.der`.
|
||||
|
||||
For more information on available Makefile targets, please run `make help`.
|
||||
+13
-4
@@ -1,9 +1,18 @@
|
||||
# Secure Boot
|
||||
|
||||
## sb_test_data.img
|
||||
## BAD_INFLUE - Secure Boot test image
|
||||
|
||||
### sb_test_data.img features:
|
||||
* Single FAT32 partition, labeled BAD_INFLUE, on MBR disk image
|
||||
* Contains files from `../hello-dasharo/dist` directory
|
||||
* Run `create_img.sh` to re-create
|
||||
* Can be safely transferred with dd command to USB stick
|
||||
|
||||
### How to generate image:
|
||||
1. Go to `../hello-dasharo/` directory.
|
||||
2. Refer to `README.md` file located there on how to prepare contents od `dist/` sub-directory.
|
||||
3. Go back here - `secure-boot/`
|
||||
4. Run `create_img.sh`, observe the output, especially list of files transferred to the image.
|
||||
5. Script execution should finish with `Image creation and setup completed successfully.`
|
||||
|
||||
### How to transfer image to USB stick:
|
||||
1. Use `lsblk` command to identify target USB stick device node and any active mount points.
|
||||
2. Use `sudo dd of=./sb_test_data.img if=/dev/X bs=1M status=progress` where X is identified target device node.
|
||||
3. Use `sync` command to finalize write operations before stick removal.
|
||||
|
||||
Reference in New Issue
Block a user