summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGunnar Mills <gmills@us.ibm.com>2017-12-06 16:43:05 -0600
committerGunnar Mills <gmills@us.ibm.com>2017-12-12 18:57:03 -0600
commitf4d12d672ad6ac1e01e592acc31e973dfe35808d (patch)
tree4cd98b3d29a32e5136c00380f4c6c096f40d74b2
parent554fb09fa4e01b7cf3c60e853600bd1cfe97d5f7 (diff)
downloadopenbmc-docs-f4d12d672ad6ac1e01e592acc31e973dfe35808d.tar.gz
openbmc-docs-f4d12d672ad6ac1e01e592acc31e973dfe35808d.zip
Add information about field mode
Change-Id: I0534256769c74dc65c79f570e85f1f28c7ea3cd4 Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
-rw-r--r--code-update/ubi-code-update.md31
1 files changed, 31 insertions, 0 deletions
diff --git a/code-update/ubi-code-update.md b/code-update/ubi-code-update.md
index 15eef7b..925746d 100644
--- a/code-update/ubi-code-update.md
+++ b/code-update/ubi-code-update.md
@@ -262,6 +262,37 @@ curl -c cjar -b cjar -k -H "Content-Type: application/json" \
-d "{\"data\": [] }"
```
+### Software Field Mode
+
+Field mode is meant for systems shipped from manufacturing to a customer.
+Field mode offers a way to provide security and ensure incorrect patches don't
+get loaded on the system by accident. The software implementation of the field
+mode interface disables patching of the BMC by not mounting `/usr/local`, which
+in turn disables host patching at `/usr/local/share/pnor/`.
+Enabling field mode is intended to be a one-way operation which means that once
+enabled, there is no REST API provided to disable it.
+
+Field mode can be enabled by running the following command:
+
+```
+curl -b cjar -k -H 'Content-Type: application/json' -X PUT -d '{"data":1}' \
+ https://${bmc}/xyz/openbmc_project/software/attr/FieldModeEnabled
+
+```
+
+Although field mode is meant to be a one-way operation, it can be disabled
+by a user with admin privileges by running the following commands on the BMC:
+
+```
+fw_setenv fieldmode
+
+systemctl unmask usr-local.mount
+
+reboot
+```
+
+More information on field mode can be found here:
+https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/xyz/openbmc_project/Control/FieldMode.interface.yaml
### Implementation
OpenPOWER on IntegriCloud