diff options
author | Gunnar Mills <gmills@us.ibm.com> | 2017-12-06 16:43:05 -0600 |
---|---|---|
committer | Gunnar Mills <gmills@us.ibm.com> | 2017-12-12 18:57:03 -0600 |
commit | f4d12d672ad6ac1e01e592acc31e973dfe35808d (patch) | |
tree | 4cd98b3d29a32e5136c00380f4c6c096f40d74b2 | |
parent | 554fb09fa4e01b7cf3c60e853600bd1cfe97d5f7 (diff) | |
download | openbmc-docs-f4d12d672ad6ac1e01e592acc31e973dfe35808d.tar.gz openbmc-docs-f4d12d672ad6ac1e01e592acc31e973dfe35808d.zip |
Add information about field mode
Change-Id: I0534256769c74dc65c79f570e85f1f28c7ea3cd4
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
-rw-r--r-- | code-update/ubi-code-update.md | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/code-update/ubi-code-update.md b/code-update/ubi-code-update.md index 15eef7b..925746d 100644 --- a/code-update/ubi-code-update.md +++ b/code-update/ubi-code-update.md @@ -262,6 +262,37 @@ curl -c cjar -b cjar -k -H "Content-Type: application/json" \ -d "{\"data\": [] }" ``` +### Software Field Mode + +Field mode is meant for systems shipped from manufacturing to a customer. +Field mode offers a way to provide security and ensure incorrect patches don't +get loaded on the system by accident. The software implementation of the field +mode interface disables patching of the BMC by not mounting `/usr/local`, which +in turn disables host patching at `/usr/local/share/pnor/`. +Enabling field mode is intended to be a one-way operation which means that once +enabled, there is no REST API provided to disable it. + +Field mode can be enabled by running the following command: + +``` +curl -b cjar -k -H 'Content-Type: application/json' -X PUT -d '{"data":1}' \ + https://${bmc}/xyz/openbmc_project/software/attr/FieldModeEnabled + +``` + +Although field mode is meant to be a one-way operation, it can be disabled +by a user with admin privileges by running the following commands on the BMC: + +``` +fw_setenv fieldmode + +systemctl unmask usr-local.mount + +reboot +``` + +More information on field mode can be found here: +https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/xyz/openbmc_project/Control/FieldMode.interface.yaml ### Implementation |