56 lines
3 KiB
Text
56 lines
3 KiB
Text
|
MSM_ARCH_FRAGMENT_CONFIG=kalama_le_gki.fragment
|
||
|
|
|
||
|
|
if [ "${VARIANT}" = gki ]; then
|
||
|
|
DEFCONFIG=le_gki_defconfig
|
||
|
|
|
||
|
|
PRE_DEFCONFIG_CMDS="KCONFIG_CONFIG=${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/${DEFCONFIG} ${ROOT_DIR}/${KERNEL_DIR}/scripts/kconfig/merge_config.sh -m -r ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/gki_defconfig ${ROOT_DIR}/msm-kernel/arch/arm64/configs/${MSM_ARCH_FRAGMENT_CONFIG}"
|
||
|
|
POST_DEFCONFIG_CMDS="rm ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/${DEFCONFIG}"
|
||
|
|
|
||
|
|
elif [ "${VARIANT}" = consolidate ]; then
|
||
|
|
DEFCONFIG=le_consolidate_defconfig
|
||
|
|
FRAGMENT_CONFIG=msm-kernel/arch/arm64/configs/consolidate.fragment
|
||
|
|
|
||
|
|
PRE_DEFCONFIG_CMDS="KCONFIG_CONFIG=${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/le_gki_defconfig ${ROOT_DIR}/${KERNEL_DIR}/scripts/kconfig/merge_config.sh -m -r ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/gki_defconfig ${ROOT_DIR}/msm-kernel/arch/arm64/configs/${MSM_ARCH_FRAGMENT_CONFIG} && KCONFIG_CONFIG=${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/${DEFCONFIG} ${ROOT_DIR}/${KERNEL_DIR}/scripts/kconfig/merge_config.sh -m -r ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/le_gki_defconfig ${ROOT_DIR}/${FRAGMENT_CONFIG}"
|
||
|
|
POST_DEFCONFIG_CMDS="rm ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/${DEFCONFIG} && rm ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/le_gki_defconfig"
|
||
|
|
|
||
|
|
fi
|
||
|
|
|
||
|
|
|
||
|
|
################################################################################
|
||
|
|
OPENSSL_DIR=${KERNEL_DIR}/../build/build-tools/path/linux-x86
|
||
|
|
OPENSSL_BIN=${KERNEL_DIR}/../build/build-tools/path/linux-x86/openssl
|
||
|
|
# Configuration options to build images for MSM targets
|
||
|
|
# Must be included AFTER build.config.msm.<target>
|
||
|
|
|
||
|
|
append_cmd POST_DEFCONFIG_CMDS 'update_signing_keys_config'
|
||
|
|
|
||
|
|
function update_signing_keys_config() {
|
||
|
|
if [ -f "${OPENSSL_BIN}" ]; then
|
||
|
|
"${OPENSSL_BIN}" req -new -nodes -utf8 -newkey rsa:4096 -days 36500 \
|
||
|
|
-batch -x509 -config "${KERNEL_DIR}/../msm-kernel/certs/qcom_x509.genkey" \
|
||
|
|
-outform PEM -out "${OUT_DIR}/verity_cert.pem" -keyout "${OUT_DIR}/verity_key.pem"
|
||
|
|
|
||
|
|
"${OPENSSL_BIN}" req -new -nodes -utf8 -sha256 -days 36500 \
|
||
|
|
-batch -x509 -config "${KERNEL_DIR}/../msm-kernel/certs/qcom_x509.genkey" \
|
||
|
|
-outform PEM -out "${OUT_DIR}/signing_key.pem" -keyout "${OUT_DIR}/signing_key.pem"
|
||
|
|
|
||
|
|
"${KERNEL_DIR}/scripts/config" --file "${OUT_DIR}/.config" \
|
||
|
|
--set-str CONFIG_MODULE_SIG_KEY "${OUT_DIR}/signing_key.pem" \
|
||
|
|
--set-str CONFIG_SYSTEM_TRUSTED_KEYS "${OUT_DIR}/verity_cert.pem"
|
||
|
|
|
||
|
|
make_command="make O=${OUT_DIR} olddefconfig"
|
||
|
|
[ -n "${CC_LD_ARG}" ] && make_command="${CC_LD_ARG} ${make_command}"
|
||
|
|
[ -n "${MAKE_ARGS}" ] && make_command="${make_command} ${MAKE_ARGS}"
|
||
|
|
|
||
|
|
(cd "${OUT_DIR}" && eval "${make_command}")
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
append_cmd POST_KERNEL_BUILD_CMDS 'move_signing_keys'
|
||
|
|
|
||
|
|
function move_signing_keys() {
|
||
|
|
cp "${OUT_DIR}/signing_key.pem" "${OUT_DIR}/certs"
|
||
|
|
cp "${OUT_DIR}/verity_key.pem" "${OUT_DIR}/certs"
|
||
|
|
cp "${OUT_DIR}/verity_cert.pem" "${OUT_DIR}/certs"
|
||
|
|
}
|