Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: sd-measure dtbauto and hwdids arg parsing #35765

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

frezbo
Copy link

@frezbo frezbo commented Dec 27, 2024

Commit 630cf4e introduced .dtbauto, but since it's before .hwdids commit 4c0b7f4 made dtbauto the last argument whereas it should have been hwdids.

Otherwise the code was measuring the content of hwdids into dtbauto section and vice-versa.

Found this while adding the new dtbauto and .hwdids fields in the go implementation of sd-measure at
https://github.com/siderolabs/talos/blob/main/internal/pkg/secureboot/measure/measure.go.

@github-actions github-actions bot added the please-review PR is ready for (re-)review by a maintainer label Dec 27, 2024
Commit 630cf4e introduced `.dtbauto`,
but since it's before `.hwdids` commit 4c0b7f4
made `dtbauto` the last argument whereas it should have been `hwdids`.

Otherwise the code was measuring the content of hwdids into dtbauto
section and vice-versa.

Found this while adding the new `dtbauto` and `.hwdids` fields in the go
implementation of `sd-measure` at
https://github.com/siderolabs/talos/blob/main/internal/pkg/secureboot/measure/measure.go.

Signed-off-by: Noel Georgi <git@frezbo.dev>
@frezbo frezbo force-pushed the fix/sd-measure-arg-parsing branch from 19311a4 to 0c4abd7 Compare December 27, 2024 11:55
frezbo added a commit to frezbo/talos that referenced this pull request Dec 27, 2024
Bring in parity with systemd 257 by supporting more UKI sections.

The output of `sd-measure` and our measure code will be different until
systemd/systemd#35765 is fixed upstream.

Signed-off-by: Noel Georgi <git@frezbo.dev>
frezbo added a commit to frezbo/talos that referenced this pull request Dec 27, 2024
Bring in parity with systemd 257 by supporting more UKI sections.

The output of `sd-measure` and our measure code will be different until
systemd/systemd#35765 is fixed upstream.

Signed-off-by: Noel Georgi <git@frezbo.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
please-review PR is ready for (re-)review by a maintainer
Development

Successfully merging this pull request may close these issues.

1 participant