Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

generate_payload: Create extension update payloads #147

Merged
merged 2 commits into from
Sep 18, 2023
Merged

Conversation

pothos
Copy link
Member

@pothos pothos commented Sep 18, 2023

  • download_payloads: Add helper script for update payload fetching

    The update payload fetching was a simple wget invocation until now but
    with OEM payloads and other future Flatcar extensions this gets more
    complicated.
    Add a script that finds out which extension payloads are available based
    on the Caddy JSON output.

  • generate_payload: Create extension update payloads

    When a release has extension update payloads for OEM software these
    should be signed as well.
    Extend the generate_payload script to detect additional extension files
    and generate signed payloads for them.

How to use

cd /run/media/usb/sdk/src/scripts/data/
~/flatcar/flatcar-build-scripts/download_payloads alpha:1786.0.0 beta:1781.2.0
# continue inside as usual with ./generate_payload data/$ARCH/$VERSION keys/

Testing done

The above and

PROTOPATH=src/update_engine/ ./decode_payload ~/flatcar/scripts/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/official-v2.pub.pem /run/media/usb/sdk/src/scripts/data/test/3717.0.0/oem-qemu.gz /var/tmp/out

which was able to verify the signature.

The update payload fetching was a simple wget invocation until now but
with OEM payloads and other future Flatcar extensions this gets more
complicated.
Add a script that finds out which extension payloads are available based
on the Caddy JSON output.
When a release has extension update payloads for OEM software these
should be signed as well.
Extend the generate_payload script to detect additional extension files
and generate signed payloads for them.
@pothos pothos merged commit a115465 into master Sep 18, 2023
@pothos pothos deleted the kai/oem-payloads branch September 18, 2023 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants