forked from microsoft/hcsshim
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
The existing Makefile grew pretty large and now has a few additional dependencies like python and crypto for SNP targets. The idea behind the split is that the new Makefile.bootfiles can be used to create Linux boot files and it depends only on `delta*.tar.gz`. This is useful in e.g. multi staged build process, where `delta*.tar.gz` artifacts can be produced separately from the final boot files. Since the delta can be applied to any base image, the build job that does it, wouldn't need go runtime or C compiler. Signed-off-by: Maksim An <maksiman@microsoft.com>
- Loading branch information
Showing
2 changed files
with
113 additions
and
101 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,110 @@ | ||
| BASE:=base.tar.gz | ||
| DEV_BUILD:=0 | ||
|
|
||
| DELTA_TARGET=out/delta.tar.gz | ||
|
|
||
| ifeq "$(DEV_BUILD)" "1" | ||
| DELTA_TARGET=out/delta-dev.tar.gz | ||
| endif | ||
|
|
||
| ifeq "$(SNP_BUILD)" "1" | ||
| DELTA_TARGET=out/delta-snp.tar.gz | ||
| endif | ||
|
|
||
| SRCROOT=$(dir $(abspath $(firstword $(MAKEFILE_LIST)))) | ||
|
|
||
| PATH_PREFIX:= | ||
| # These have PATH_PREFIX prepended to obtain the full path in recipies e.g. $(PATH_PREFIX)/$(VMGS_TOOL) | ||
| VMGS_TOOL:= | ||
| IGVM_TOOL:= | ||
| KERNEL_PATH:= | ||
| TAR2EXT4_TOOL:=bin/cmd/tar2ext4 | ||
|
|
||
| .PHONY: all always rootfs test snp simple | ||
|
|
||
| .DEFAULT_GOAL := all | ||
|
|
||
| all: out/initrd.img out/rootfs.tar.gz | ||
|
|
||
| clean: | ||
| find -name '*.o' -print0 | xargs -0 -r rm | ||
| rm -rf bin rootfs out | ||
|
|
||
| rootfs: out/rootfs.vhd | ||
|
|
||
| snp: out/kernelinitrd.vmgs out/rootfs.hash.vhd out/rootfs.vhd out/v2056.vmgs | ||
|
|
||
| simple: out/simple.vmgs snp | ||
|
|
||
| %.vmgs: %.bin | ||
| rm -f $@ | ||
| # du -BM returns the size of the bin file in M, eg 7M. The sed command replaces the M with *1024*1024 and then bc does the math to convert to bytes | ||
| $(PATH_PREFIX)/$(VMGS_TOOL) create --filepath $@ --filesize `du -BM $< | sed "s/M.*/*1024*1024/" | bc` | ||
| $(PATH_PREFIX)/$(VMGS_TOOL) write --filepath $@ --datapath $< -i=8 | ||
|
|
||
| # Simplest debug UVM used to test changes to the linux kernel. No dmverity protection. Boots an initramdisk rather than directly booting a vhd disk. | ||
| out/simple.bin: out/initrd.img $(PATH_PREFIX)/$(KERNEL_PATH) boot/startup_simple.sh | ||
| rm -f $@ | ||
| python3 $(PATH_PREFIX)/$(IGVM_TOOL) \ | ||
| -o $@ \ | ||
| -kernel $(PATH_PREFIX)/$(KERNEL_PATH) \ | ||
| -append "8250_core.nr_uarts=0 panic=-1 debug loglevel=7 rdinit=/startup_simple.sh" \ | ||
| -rdinit out/initrd.img \ | ||
| -vtl 0 | ||
|
|
||
| ROOTFS_DEVICE:=/dev/sda | ||
| VERITY_DEVICE:=/dev/sdb | ||
| # Debug build for use with uvmtester. UVM with dm-verity protected vhd disk mounted directly via the kernel command line. Ignores corruption in dm-verity protected disk. (Use dmesg to see if dm-verity is ignoring data corruption.) | ||
| out/v2056.bin: out/rootfs.vhd out/rootfs.hash.vhd $(PATH_PREFIX)/$(KERNEL_PATH) out/rootfs.hash.datasectors out/rootfs.hash.datablocksize out/rootfs.hash.hashblocksize out/rootfs.hash.datablocks out/rootfs.hash.rootdigest out/rootfs.hash.salt boot/startup_v2056.sh | ||
| rm -f $@ | ||
| python3 $(PATH_PREFIX)/$(IGVM_TOOL) \ | ||
| -o $@ -kernel $(PATH_PREFIX)/$(KERNEL_PATH) \ | ||
| -append "8250_core.nr_uarts=0 panic=-1 debug loglevel=7 root=/dev/dm-0 dm-mod.create=\"dmverity,,,ro,0 $(shell cat out/rootfs.hash.datasectors) verity 1 $(ROOTFS_DEVICE) $(VERITY_DEVICE) $(shell cat out/rootfs.hash.datablocksize) $(shell cat out/rootfs.hash.hashblocksize) $(shell cat out/rootfs.hash.datablocks) 0 sha256 $(shell cat out/rootfs.hash.rootdigest) $(shell cat out/rootfs.hash.salt) 1 ignore_corruption\" init=/startup_v2056.sh" \ | ||
| -vtl 0 | ||
|
|
||
| # Full UVM with dm-verity protected vhd disk mounted directly via the kernel command line. | ||
| out/kernelinitrd.bin: out/rootfs.vhd out/rootfs.hash.vhd out/rootfs.hash.datasectors out/rootfs.hash.datablocksize out/rootfs.hash.hashblocksize out/rootfs.hash.datablocks out/rootfs.hash.rootdigest out/rootfs.hash.salt $(PATH_PREFIX)/$(KERNEL_PATH) boot/startup.sh | ||
| rm -f $@ | ||
| python3 $(PATH_PREFIX)/$(IGVM_TOOL) \ | ||
| -o $@ \ | ||
| -kernel $(PATH_PREFIX)/$(KERNEL_PATH) \ | ||
| -append "8250_core.nr_uarts=0 panic=-1 debug loglevel=7 root=/dev/dm-0 dm-mod.create=\"dmverity,,,ro,0 $(shell cat out/rootfs.hash.datasectors) verity 1 $(ROOTFS_DEVICE) $(VERITY_DEVICE) $(shell cat out/rootfs.hash.datablocksize) $(shell cat out/rootfs.hash.hashblocksize) $(shell cat out/rootfs.hash.datablocks) 0 sha256 $(shell cat out/rootfs.hash.rootdigest) $(shell cat out/rootfs.hash.salt)\" init=/startup.sh" \ | ||
| -vtl 0 | ||
|
|
||
| # Rule to make a vhd from a file. This is used to create the rootfs.hash.vhd from rootfs.hash. | ||
| %.vhd: % $(TAR2EXT4_TOOL) | ||
| $(TAR2EXT4_TOOL) -only-vhd -i $< -o $@ | ||
|
|
||
| # Rule to make a vhd from an ext4 file. This is used to create the rootfs.vhd from rootfs.ext4. | ||
| %.vhd: %.ext4 $(TAR2EXT4_TOOL) | ||
| $(TAR2EXT4_TOOL) -only-vhd -i $< -o $@ | ||
|
|
||
| %.hash %.hash.info %.hash.datablocks %.hash.rootdigest %hash.datablocksize %.hash.datasectors %.hash.hashblocksize: %.ext4 %.hash.salt | ||
| veritysetup format --no-superblock --salt $(shell cat out/rootfs.hash.salt) $< $*.hash > $*.hash.info | ||
| # Retrieve info required by dm-verity at boot time | ||
| # Get the blocksize of rootfs | ||
| cat $*.hash.info | awk '/^Root hash:/{ print $$3 }' > $*.hash.rootdigest | ||
| cat $*.hash.info | awk '/^Salt:/{ print $$2 }' > $*.hash.salt | ||
| cat $*.hash.info | awk '/^Data block size:/{ print $$4 }' > $*.hash.datablocksize | ||
| cat $*.hash.info | awk '/^Hash block size:/{ print $$4 }' > $*.hash.hashblocksize | ||
| cat $*.hash.info | awk '/^Data blocks:/{ print $$3 }' > $*.hash.datablocks | ||
| echo $$(( $$(cat $*.hash.datablocks) * $$(cat $*.hash.datablocksize) / 512 )) > $*.hash.datasectors | ||
|
|
||
| out/rootfs.hash.salt: | ||
| hexdump -vn32 -e'8/4 "%08X" 1 "\n"' /dev/random > $@ | ||
|
|
||
| out/rootfs.ext4: out/rootfs.tar.gz $(TAR2EXT4_TOOL) | ||
| gzip -f -d ./out/rootfs.tar.gz | ||
| $(TAR2EXT4_TOOL) -i ./out/rootfs.tar -o $@ | ||
|
|
||
| out/rootfs.tar.gz: out/initrd.img | ||
| rm -rf rootfs-conv | ||
| mkdir rootfs-conv | ||
| gunzip -c out/initrd.img | (cd rootfs-conv && cpio -imd) | ||
| tar -zcf $@ -C rootfs-conv . | ||
| rm -rf rootfs-conv | ||
|
|
||
| out/initrd.img: $(BASE) $(DELTA_TARGET) $(SRCROOT)/hack/catcpio.sh | ||
| $(SRCROOT)/hack/catcpio.sh "$(BASE)" $(DELTA_TARGET) > out/initrd.img.uncompressed | ||
| gzip -c out/initrd.img.uncompressed > $@ | ||
| rm out/initrd.img.uncompressed |