diff options
| author | Dave Heller <hellerda@linux.vnet.ibm.com> | 2018-04-17 18:55:36 -0400 |
|---|---|---|
| committer | Daniel M. Crowell <dcrowell@us.ibm.com> | 2018-06-30 16:47:28 -0400 |
| commit | 60b941209240b4c6da120366fe6e4edc9e4a7687 (patch) | |
| tree | 0a9cc6bf371139c754efc500c5fa273ca0f4602e /src/build/buildpnor/genPnorImages.pl | |
| parent | 622bd28195c76976fa13afa9cdef878d883cdcb5 (diff) | |
| download | talos-hostboot-60b941209240b4c6da120366fe6e4edc9e4a7687.tar.gz talos-hostboot-60b941209240b4c6da120366fe6e4edc9e4a7687.zip | |
Secure Boot: Run signtool with keepcache=true
I have changed sb-signing-utls to remove the cache by default but it's
important to preserve the current behavior under op-build, as features
that rely on cache re-use depend on it.
Resolves #134
Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
Change-Id: Ic379a0766cd7da3351a572281063f02a2810a37b
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/61619
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com>
Reviewed-by: ILYA SMIRNOV <ismirno@us.ibm.com>
Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
Diffstat (limited to 'src/build/buildpnor/genPnorImages.pl')
| -rwxr-xr-x | src/build/buildpnor/genPnorImages.pl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/build/buildpnor/genPnorImages.pl b/src/build/buildpnor/genPnorImages.pl index b5633d66f..ba42d81ec 100755 --- a/src/build/buildpnor/genPnorImages.pl +++ b/src/build/buildpnor/genPnorImages.pl @@ -261,7 +261,7 @@ if ($secureboot) ### Open POWER signing my $OPEN_SIGN_REQUEST= - "$SIGNING_DIR/crtSignedContainer.sh --scratchDir $bin_dir "; + "SB_KEEP_CACHE=true $SIGNING_DIR/crtSignedContainer.sh --scratchDir $bin_dir "; # By default key transition container is unused my $OPEN_SIGN_KEY_TRANS_REQUEST = $OPEN_SIGN_REQUEST; |
