b38dea0597
Share Gaia assets and adapters, keep private profiles and development documents local, and update both public READMEs.
42 lines
2.3 KiB
Python
42 lines
2.3 KiB
Python
#!/usr/bin/env python3
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
"""Temporarily boot the private rescue image on the inventoried Sargo. Never flash."""
|
|
import argparse
|
|
import importlib.util
|
|
import json
|
|
from pathlib import Path
|
|
import subprocess
|
|
import time
|
|
from tundra import ROOT,digest,save,now
|
|
|
|
|
|
def verify_sources(folder, build):
|
|
base=folder/'sources' if build.get('sourceSnapshot') else ROOT.parent
|
|
for name,sha in {**{'tundra/'+n:h for n,h in build['sources'].items()},
|
|
**build.get('sharedUiHashes',{})}.items():
|
|
path=(base/name).resolve()
|
|
path.relative_to(base.resolve())
|
|
if digest(path)!=sha:raise ValueError('Build source changed: '+name)
|
|
|
|
|
|
def main():
|
|
p=argparse.ArgumentParser(description=__doc__);p.add_argument('--build',type=Path,required=True);p.add_argument('--boot',action='store_true');args=p.parse_args()
|
|
spec=importlib.util.spec_from_file_location('boot',ROOT/'tools/test-sargo-boot.py');boot=importlib.util.module_from_spec(spec);spec.loader.exec_module(boot)
|
|
plan,_=boot.checked_plan();folder=args.build.resolve();build=json.loads((folder/'build.json').read_text());image=folder/build['image']
|
|
if build['imageSha256']!=digest(image) or build['serialSha256']!=plan['serialSha256'] or not build['roundtripPassed']:
|
|
raise ValueError('Image or target provenance mismatch')
|
|
verify_sources(folder,build)
|
|
print('Private image, source and backup provenance checked.',flush=True)
|
|
if not args.boot:return
|
|
# The inventoried HAL can take about three minutes to shut down after SSH
|
|
# closes. Allow that transition; identity checks still precede any boot.
|
|
serial=boot.find_fastboot(plan['serialSha256'],300);values=boot.check_device(serial,plan['serialSha256'])
|
|
report={'recordedAt':now(),'imageSha256':digest(image),'bootloader':values,'operation':'fastboot boot','flashCommandsSent':False}
|
|
result=boot.fastboot(serial,'boot',str(image));report['output']=result.stdout+result.stderr
|
|
save(folder/'boot-report.json',report)
|
|
deadline=build['watchdogSeconds']
|
|
message=f'Automatic return after {deadline} seconds.' if deadline else 'Persistent development boot; no automatic reboot.'
|
|
print(f'RAM boot sent. USB SSH: 10.15.19.82:2222. {message}',flush=True)
|
|
|
|
|
|
if __name__=='__main__':main()
|