commit | a8726a95644bc0e8074ee68f8046a33ee4d54d24 | [log] [tgz] |
---|---|---|
author | Cheng-Han Yang <chenghan@google.com> | Tue Aug 31 08:11:05 2021 |
committer | Commit Bot <commit-bot@chromium.org> | Thu Sep 02 08:25:05 2021 |
tree | f8f92ed136c5372e74d392244b54706f138b15f2 | |
parent | 5f2820d3989c0c66002dac5fb1241ca1a57bd3e3 [diff] |
factory_install: Don't print stderr from tpmc read error tpmc read error happens when FWMP is not set. Remove stderr logs so it's not viewed as a bug. BUG=None TEST=manual test on DUT Change-Id: Ic6c50d1f37ebbb80b8d4f92424bbf52bd08cf0e5 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/factory_installer/+/3131253 Tested-by: Cheng-Han Yang <chenghan@chromium.org> Reviewed-by: Yun-Kai Lin <kevinptt@chromium.org> Commit-Queue: Cheng-Han Yang <chenghan@chromium.org> (cherry picked from commit a269f943c31f07c0ec2fadc75a1c1f0fbc39222c) Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/factory_installer/+/3132860
This folder contains the major scripts for the “Chrome OS factory shim”. The shim is used for installing a Chrome OS image (kernel, rootfs and firmware) to a device. It's also known as “(factory) install shim”, “RMA shim”, or “Reset shim”.
The factory shim is designed to allow operators removing USB stick once it's booted, so the boot process is slightly different. The shim relies on initramfs
technology to bootstrap and load all contents into memory, then start an upstart service to display the menu.
Inside chroot, do:
build_packages --board $BOARD build_image --board $BOARD factory_install
The output disk image is in ~/trunk/src/build/images/$BOARD/latest/factory_install_shim.bin
.
If you have local changes in src/platform/factory_installer
, please remember to do
cros_workon --board $BOARD start factory_installer emerge-$BOARD factory_installer
If you have local changes in src/platform/initramfs
, please remember to do
cros_workon --board $BOARD start chromeos-initramfs
There‘s no need to emerge chromeos-initramfs
because it’s always re-built in build_image
stage.
The factory shims were signed in a special way for security reasons. It needs to boot with “developer switch turned on” and “boot in recovery mode”.
If you have a signed factory shim, follow the steps to boot:
Esc-F3-Power
)Ctrl-D
to request turn on developer switch, and ENTER
to confirm.If you boot factory shim in developer mode (Ctrl-U
), few functions won't work, for example recovering TPM.
Factory shims do not provide shells by default for security reason. If you can still see virtual terminal consoles, try VT0, VT1, VT2, VT3 - there are lots of debug messages there.
If you do need a shell to debug, add cros_debug
to kernel command line. You can do this in build_image
:
build_image --board $BOARD --boot_args cros_debug factory_install
For an existing image, you can use make_dev_ssd.sh
to change kernel command line easily:
# inside chroot cd ~/trunk/src/platform/vboot_reference/scripts/image_signing ./make_dev_ssd.sh -i $PATH_TO_IMAGE_OR_USB_DEVICE \ --partitions 2 --recovery --edit_config
This will bring an editor to allow editing command line.
Note make_dev_ssd.sh
is also available on all Chrome OS image (even factory shim) - try /usr/share/vboot/bin/make_dev_ssd.sh
.
If you boot a factory shim with cros_debug
, then you should have one shell in VT2 or VT3. Moreover, if you can enter the menu, ‘S’ will give you the full shell.
The frecon
(or frecon-lite
) provides text-based console. If you can't see anything on screen, redirect the console to another device, for example Servo consoles so you can check why frecon
failed. To do this, add console=ttyS0,115200n8
to kernel command line (use the make_dev_ssd.sh
or add --boot_args
as explained in previous section). Some devices may need different TTY name for example ttyS1
. Please check the care-and-feed doc of your device.
If the menu or frecon will die and adding cros_debug
does not help, you probably want to attach serial console (for example SuzyQ) and get everything except factory shim UI (menu) there. To do that:
Open the /usr/sbin/factory_tty.sh
and find the TTY_CONSOLE=
line. If it already has valid serial console (for example ttyS0
), move to step 3.
TTY_CONSOLE
and build image.Edit the make.conf
in board overlay, to find or add one setting (assume serial console is ttyS0
):
TTY_CONSOLE="ttyS0"
Then,then re-build the factory_installer
package and factory shim:
emerge-$BOARD factory_installer build_image --board $BOARD factory_install
Mount the rootfs and rename /etc/init/console-ttyS0.conf
to something that does not start as console
:
# First enable RW for rootfs. Assume the USB is in /dev/sdX. cd ~/trunk/src/platform/vboot_reference/scripts/image_signing sudo ./make_dev_ssd.sh -i /dev/sdX --recovery \ --remove_rootfs_verification --partitions 2 # Mount (assume your shim is in /dev/sdX) sudo mount /dev/sdX /media cd /media/etc/init sudo mv console-ttyS0.confg debug-ttyS0.conf cd - # To leave /media folder so we can unmount. sudo umount /media