6d0099d1a1
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Build and Push prebuilt tools container / Build and Push all prebuilt containers (push) Has been cancelled
Build Toolchains / Build Toolchains for each target (push) Has been cancelled
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
28 lines
937 B
Bash
Executable File
28 lines
937 B
Bash
Executable File
#!/bin/sh
|
|
|
|
# directory where search for images
|
|
TOP_DIR="${TOP_DIR:-./bin/targets}"
|
|
# key to sign images
|
|
BUILD_KEY="${BUILD_KEY:-key-build}" # TODO unify naming?
|
|
# remove other signatures (added e.g. by buildbot)
|
|
REMOVE_OTER_SIGNATURES="${REMOVE_OTER_SIGNATURES:-1}"
|
|
|
|
# find all sysupgrade images in TOP_DIR
|
|
# factory images don't need signatures as non OpenWrt system doesn't check them anyway
|
|
for image in $(find $TOP_DIR -type f -name "*-sysupgrade.bin"); do
|
|
# check if image actually support metadata
|
|
if fwtool -i /dev/null "$image"; then
|
|
# remove all previous signatures
|
|
if [ -n "$REMOVE_OTER_SIGNATURES" ]; then
|
|
while [ "$?" = 0 ]; do
|
|
fwtool -t -s /dev/null "$image"
|
|
done
|
|
fi
|
|
# run same operation as build root does for signing
|
|
cp "$BUILD_KEY.ucert" "$image.ucert"
|
|
usign -S -m "$image" -s "$BUILD_KEY" -x "$image.sig"
|
|
ucert -A -c "$image.ucert" -x "$image.sig"
|
|
fwtool -S "$image.ucert" "$image"
|
|
fi
|
|
done
|