Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 1 | #!/usr/bin/env python |
| 2 | # |
| 3 | # Copyright (C) 2011 The Android Open Source Project |
| 4 | # |
| 5 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | # you may not use this file except in compliance with the License. |
| 7 | # You may obtain a copy of the License at |
| 8 | # |
| 9 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 10 | # |
| 11 | # Unless required by applicable law or agreed to in writing, software |
| 12 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | # See the License for the specific language governing permissions and |
| 15 | # limitations under the License. |
| 16 | |
| 17 | """ |
Maria Bornski | 885dbb5 | 2015-09-04 11:13:16 -0700 | [diff] [blame] | 18 | Build image output_image_file from input_directory, properties_file, and target_out_dir |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 19 | |
Maria Bornski | 885dbb5 | 2015-09-04 11:13:16 -0700 | [diff] [blame] | 20 | Usage: build_image input_directory properties_file output_image_file target_out_dir |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 21 | |
| 22 | """ |
| 23 | import os |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 24 | import os.path |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 25 | import re |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 26 | import subprocess |
| 27 | import sys |
Baligh Uddin | 601ddea | 2015-06-09 15:48:14 -0700 | [diff] [blame] | 28 | import common |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 29 | import shlex |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 30 | import shutil |
Sami Tolvanen | 405e71d | 2016-02-09 12:28:58 -0800 | [diff] [blame] | 31 | import sparse_img |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 32 | import tempfile |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 33 | |
Baligh Uddin | 601ddea | 2015-06-09 15:48:14 -0700 | [diff] [blame] | 34 | OPTIONS = common.OPTIONS |
| 35 | |
Geremy Condra | e8e982a | 2014-05-16 19:14:30 -0700 | [diff] [blame] | 36 | FIXED_SALT = "aee087a5be3b982978c923f566a94613496b417f2af592639bc80d141e34dfe7" |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 37 | BLOCK_SIZE = 4096 |
Geremy Condra | e8e982a | 2014-05-16 19:14:30 -0700 | [diff] [blame] | 38 | |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 39 | def RunCommand(cmd, verbose=None): |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 40 | """Echo and run the given command. |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 41 | |
| 42 | Args: |
| 43 | cmd: the command represented as a list of strings. |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 44 | verbose: show commands being executed. |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 45 | Returns: |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 46 | A tuple of the output and the exit code. |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 47 | """ |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 48 | if verbose is None: |
| 49 | verbose = OPTIONS.verbose |
| 50 | if verbose: |
| 51 | print("Running: " + " ".join(cmd)) |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 52 | p = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.STDOUT) |
| 53 | output, _ = p.communicate() |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 54 | |
| 55 | if verbose: |
| 56 | print(output.rstrip()) |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 57 | return (output, p.returncode) |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 58 | |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 59 | def GetVerityFECSize(partition_size): |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 60 | cmd = ["fec", "-s", str(partition_size)] |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 61 | output, exit_code = RunCommand(cmd, False) |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 62 | if exit_code != 0: |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 63 | return False, 0 |
| 64 | return True, int(output) |
| 65 | |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 66 | def GetVerityTreeSize(partition_size): |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 67 | cmd = ["build_verity_tree", "-s", str(partition_size)] |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 68 | output, exit_code = RunCommand(cmd, False) |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 69 | if exit_code != 0: |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 70 | return False, 0 |
| 71 | return True, int(output) |
| 72 | |
| 73 | def GetVerityMetadataSize(partition_size): |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 74 | cmd = ["system/extras/verity/build_verity_metadata.py", "size", |
| 75 | str(partition_size)] |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 76 | output, exit_code = RunCommand(cmd, False) |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 77 | if exit_code != 0: |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 78 | return False, 0 |
| 79 | return True, int(output) |
| 80 | |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 81 | def GetVeritySize(partition_size, fec_supported): |
| 82 | success, verity_tree_size = GetVerityTreeSize(partition_size) |
| 83 | if not success: |
| 84 | return 0 |
| 85 | success, verity_metadata_size = GetVerityMetadataSize(partition_size) |
| 86 | if not success: |
| 87 | return 0 |
| 88 | verity_size = verity_tree_size + verity_metadata_size |
| 89 | if fec_supported: |
| 90 | success, fec_size = GetVerityFECSize(partition_size + verity_size) |
| 91 | if not success: |
| 92 | return 0 |
| 93 | return verity_size + fec_size |
| 94 | return verity_size |
| 95 | |
Sami Tolvanen | 405e71d | 2016-02-09 12:28:58 -0800 | [diff] [blame] | 96 | def GetSimgSize(image_file): |
| 97 | simg = sparse_img.SparseImage(image_file, build_map=False) |
| 98 | return simg.blocksize * simg.total_blocks |
| 99 | |
| 100 | def ZeroPadSimg(image_file, pad_size): |
| 101 | blocks = pad_size // BLOCK_SIZE |
| 102 | print("Padding %d blocks (%d bytes)" % (blocks, pad_size)) |
| 103 | simg = sparse_img.SparseImage(image_file, mode="r+b", build_map=False) |
| 104 | simg.AppendFillChunk(0, blocks) |
| 105 | |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 106 | def AVBCalcMaxImageSize(avbtool, footer_type, partition_size, additional_args): |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 107 | """Calculates max image size for a given partition size. |
| 108 | |
| 109 | Args: |
| 110 | avbtool: String with path to avbtool. |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 111 | footer_type: 'hash' or 'hashtree' for generating footer. |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 112 | partition_size: The size of the partition in question. |
| 113 | additional_args: Additional arguments to pass to 'avbtool |
| 114 | add_hashtree_image'. |
| 115 | Returns: |
| 116 | The maximum image size or 0 if an error occurred. |
| 117 | """ |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 118 | cmd =[avbtool, "add_%s_footer" % footer_type, |
| 119 | "--partition_size", partition_size, "--calc_max_image_size"] |
| 120 | cmd.extend(shlex.split(additional_args)) |
| 121 | |
| 122 | (output, exit_code) = RunCommand(cmd) |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 123 | if exit_code != 0: |
| 124 | return 0 |
| 125 | else: |
| 126 | return int(output) |
| 127 | |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 128 | def AVBAddFooter(image_path, avbtool, footer_type, partition_size, |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 129 | partition_name, key_path, algorithm, |
| 130 | additional_args): |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 131 | """Adds dm-verity hashtree and AVB metadata to an image. |
| 132 | |
| 133 | Args: |
| 134 | image_path: Path to image to modify. |
| 135 | avbtool: String with path to avbtool. |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 136 | footer_type: 'hash' or 'hashtree' for generating footer. |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 137 | partition_size: The size of the partition in question. |
| 138 | partition_name: The name of the partition - will be embedded in metadata. |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 139 | key_path: Path to key to use or None. |
| 140 | algorithm: Name of algorithm to use or None. |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 141 | additional_args: Additional arguments to pass to 'avbtool |
| 142 | add_hashtree_image'. |
| 143 | Returns: |
| 144 | True if the operation succeeded. |
| 145 | """ |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 146 | cmd =[avbtool, "add_%s_footer" % footer_type, |
| 147 | "--partition_size", partition_size, |
| 148 | "--partition_name", partition_name, |
| 149 | "--image", image_path] |
| 150 | |
| 151 | if key_path and algorithm: |
| 152 | cmd.extend(["--key", key_path, "--algorithm", algorithm]) |
| 153 | |
| 154 | cmd.extend(shlex.split(additional_args)) |
| 155 | |
| 156 | (_, exit_code) = RunCommand(cmd) |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 157 | return exit_code == 0 |
| 158 | |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 159 | def AdjustPartitionSizeForVerity(partition_size, fec_supported): |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 160 | """Modifies the provided partition size to account for the verity metadata. |
| 161 | |
| 162 | This information is used to size the created image appropriately. |
| 163 | Args: |
| 164 | partition_size: the size of the partition to be verified. |
| 165 | Returns: |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 166 | A tuple of the size of the partition adjusted for verity metadata, and |
| 167 | the size of verity metadata. |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 168 | """ |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 169 | key = "%d %d" % (partition_size, fec_supported) |
| 170 | if key in AdjustPartitionSizeForVerity.results: |
| 171 | return AdjustPartitionSizeForVerity.results[key] |
| 172 | |
| 173 | hi = partition_size |
| 174 | if hi % BLOCK_SIZE != 0: |
| 175 | hi = (hi // BLOCK_SIZE) * BLOCK_SIZE |
| 176 | |
| 177 | # verity tree and fec sizes depend on the partition size, which |
| 178 | # means this estimate is always going to be unnecessarily small |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 179 | verity_size = GetVeritySize(hi, fec_supported) |
| 180 | lo = partition_size - verity_size |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 181 | result = lo |
| 182 | |
| 183 | # do a binary search for the optimal size |
| 184 | while lo < hi: |
| 185 | i = ((lo + hi) // (2 * BLOCK_SIZE)) * BLOCK_SIZE |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 186 | v = GetVeritySize(i, fec_supported) |
| 187 | if i + v <= partition_size: |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 188 | if result < i: |
| 189 | result = i |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 190 | verity_size = v |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 191 | lo = i + BLOCK_SIZE |
| 192 | else: |
| 193 | hi = i |
| 194 | |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 195 | print("Adjusted partition size for verity, partition_size: {}," |
| 196 | " verity_size: {}".format(result, verity_size)) |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 197 | AdjustPartitionSizeForVerity.results[key] = (result, verity_size) |
| 198 | return (result, verity_size) |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 199 | |
| 200 | AdjustPartitionSizeForVerity.results = {} |
| 201 | |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 202 | def BuildVerityFEC(sparse_image_path, verity_path, verity_fec_path, |
| 203 | padding_size): |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 204 | cmd = ["fec", "-e", "-p", str(padding_size), sparse_image_path, |
| 205 | verity_path, verity_fec_path] |
| 206 | output, exit_code = RunCommand(cmd) |
| 207 | if exit_code != 0: |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 208 | print "Could not build FEC data! Error: %s" % output |
| 209 | return False |
| 210 | return True |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 211 | |
Colin Cross | 477cf2b | 2014-04-16 18:49:56 -0700 | [diff] [blame] | 212 | def BuildVerityTree(sparse_image_path, verity_image_path, prop_dict): |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 213 | cmd = ["build_verity_tree", "-A", FIXED_SALT, sparse_image_path, |
| 214 | verity_image_path] |
| 215 | output, exit_code = RunCommand(cmd) |
| 216 | if exit_code != 0: |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 217 | print "Could not build verity tree! Error: %s" % output |
| 218 | return False |
| 219 | root, salt = output.split() |
| 220 | prop_dict["verity_root_hash"] = root |
| 221 | prop_dict["verity_salt"] = salt |
| 222 | return True |
| 223 | |
| 224 | def BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt, |
Tao Bao | 4581042 | 2016-10-17 16:20:12 -0700 | [diff] [blame] | 225 | block_device, signer_path, key, signer_args): |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 226 | cmd = ["system/extras/verity/build_verity_metadata.py", "build", |
| 227 | str(image_size), verity_metadata_path, root_hash, salt, block_device, |
| 228 | signer_path, key] |
Tao Bao | 4581042 | 2016-10-17 16:20:12 -0700 | [diff] [blame] | 229 | if signer_args: |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 230 | cmd.append("--signer_args=\"%s\"" % (' '.join(signer_args),)) |
| 231 | output, exit_code = RunCommand(cmd) |
| 232 | if exit_code != 0: |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 233 | print "Could not build verity metadata! Error: %s" % output |
| 234 | return False |
| 235 | return True |
| 236 | |
| 237 | def Append2Simg(sparse_image_path, unsparse_image_path, error_message): |
| 238 | """Appends the unsparse image to the given sparse image. |
| 239 | |
| 240 | Args: |
| 241 | sparse_image_path: the path to the (sparse) image |
| 242 | unsparse_image_path: the path to the (unsparse) image |
| 243 | Returns: |
| 244 | True on success, False on failure. |
| 245 | """ |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 246 | cmd = ["append2simg", sparse_image_path, unsparse_image_path] |
| 247 | output, exit_code = RunCommand(cmd) |
| 248 | if exit_code != 0: |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 249 | print "%s: %s" % (error_message, output) |
| 250 | return False |
| 251 | return True |
| 252 | |
Sami Tolvanen | ff914f5 | 2015-12-18 13:24:56 +0000 | [diff] [blame] | 253 | def Append(target, file_to_append, error_message): |
Tianjie Xu | e3ad41b | 2017-03-08 11:05:56 -0800 | [diff] [blame] | 254 | print "appending %s to %s" % (file_to_append, target) |
| 255 | with open(target, "a") as out_file: |
| 256 | with open(file_to_append, "r") as input_file: |
| 257 | for line in input_file: |
| 258 | out_file.write(line) |
Sami Tolvanen | ff914f5 | 2015-12-18 13:24:56 +0000 | [diff] [blame] | 259 | return True |
| 260 | |
Dan Albert | 8b72aef | 2015-03-23 19:13:21 -0700 | [diff] [blame] | 261 | def BuildVerifiedImage(data_image_path, verity_image_path, |
Sami Tolvanen | 4a06004 | 2015-12-18 15:50:25 +0000 | [diff] [blame] | 262 | verity_metadata_path, verity_fec_path, |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 263 | padding_size, fec_supported): |
Sami Tolvanen | ff914f5 | 2015-12-18 13:24:56 +0000 | [diff] [blame] | 264 | if not Append(verity_image_path, verity_metadata_path, |
| 265 | "Could not append verity metadata!"): |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 266 | return False |
Sami Tolvanen | 4a06004 | 2015-12-18 15:50:25 +0000 | [diff] [blame] | 267 | |
| 268 | if fec_supported: |
| 269 | # build FEC for the entire partition, including metadata |
| 270 | if not BuildVerityFEC(data_image_path, verity_image_path, |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 271 | verity_fec_path, padding_size): |
Sami Tolvanen | 4a06004 | 2015-12-18 15:50:25 +0000 | [diff] [blame] | 272 | return False |
| 273 | |
| 274 | if not Append(verity_image_path, verity_fec_path, "Could not append FEC!"): |
| 275 | return False |
| 276 | |
Sami Tolvanen | ff914f5 | 2015-12-18 13:24:56 +0000 | [diff] [blame] | 277 | if not Append2Simg(data_image_path, verity_image_path, |
| 278 | "Could not append verity data!"): |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 279 | return False |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 280 | return True |
| 281 | |
Geremy Condra | 6e8f53c | 2013-12-05 17:09:18 -0800 | [diff] [blame] | 282 | def UnsparseImage(sparse_image_path, replace=True): |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 283 | img_dir = os.path.dirname(sparse_image_path) |
| 284 | unsparse_image_path = "unsparse_" + os.path.basename(sparse_image_path) |
| 285 | unsparse_image_path = os.path.join(img_dir, unsparse_image_path) |
| 286 | if os.path.exists(unsparse_image_path): |
Geremy Condra | 6e8f53c | 2013-12-05 17:09:18 -0800 | [diff] [blame] | 287 | if replace: |
| 288 | os.unlink(unsparse_image_path) |
| 289 | else: |
| 290 | return True, unsparse_image_path |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 291 | inflate_command = ["simg2img", sparse_image_path, unsparse_image_path] |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 292 | (_, exit_code) = RunCommand(inflate_command) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 293 | if exit_code != 0: |
| 294 | os.remove(unsparse_image_path) |
| 295 | return False, None |
| 296 | return True, unsparse_image_path |
| 297 | |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 298 | def MakeVerityEnabledImage(out_file, fec_supported, prop_dict): |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 299 | """Creates an image that is verifiable using dm-verity. |
| 300 | |
| 301 | Args: |
| 302 | out_file: the location to write the verifiable image at |
Dan Albert | 8b72aef | 2015-03-23 19:13:21 -0700 | [diff] [blame] | 303 | prop_dict: a dictionary of properties required for image creation and |
| 304 | verification |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 305 | Returns: |
| 306 | True on success, False otherwise. |
| 307 | """ |
| 308 | # get properties |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 309 | image_size = int(prop_dict["partition_size"]) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 310 | block_dev = prop_dict["verity_block_device"] |
Paul Lawrence | a37b2bb | 2014-11-13 17:54:30 -0800 | [diff] [blame] | 311 | signer_key = prop_dict["verity_key"] + ".pk8" |
Baligh Uddin | 601ddea | 2015-06-09 15:48:14 -0700 | [diff] [blame] | 312 | if OPTIONS.verity_signer_path is not None: |
Tao Bao | 4581042 | 2016-10-17 16:20:12 -0700 | [diff] [blame] | 313 | signer_path = OPTIONS.verity_signer_path |
Baligh Uddin | 601ddea | 2015-06-09 15:48:14 -0700 | [diff] [blame] | 314 | else: |
| 315 | signer_path = prop_dict["verity_signer_cmd"] |
Tao Bao | 4581042 | 2016-10-17 16:20:12 -0700 | [diff] [blame] | 316 | signer_args = OPTIONS.verity_signer_args |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 317 | |
| 318 | # make a tempdir |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 319 | tempdir_name = tempfile.mkdtemp(suffix="_verity_images") |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 320 | |
| 321 | # get partial image paths |
| 322 | verity_image_path = os.path.join(tempdir_name, "verity.img") |
| 323 | verity_metadata_path = os.path.join(tempdir_name, "verity_metadata.img") |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 324 | verity_fec_path = os.path.join(tempdir_name, "verity_fec.img") |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 325 | |
| 326 | # build the verity tree and get the root hash and salt |
Colin Cross | 477cf2b | 2014-04-16 18:49:56 -0700 | [diff] [blame] | 327 | if not BuildVerityTree(out_file, verity_image_path, prop_dict): |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 328 | shutil.rmtree(tempdir_name, ignore_errors=True) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 329 | return False |
| 330 | |
| 331 | # build the metadata blocks |
| 332 | root_hash = prop_dict["verity_root_hash"] |
| 333 | salt = prop_dict["verity_salt"] |
Dan Albert | 8b72aef | 2015-03-23 19:13:21 -0700 | [diff] [blame] | 334 | if not BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt, |
Tao Bao | 4581042 | 2016-10-17 16:20:12 -0700 | [diff] [blame] | 335 | block_dev, signer_path, signer_key, signer_args): |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 336 | shutil.rmtree(tempdir_name, ignore_errors=True) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 337 | return False |
| 338 | |
| 339 | # build the full verified image |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 340 | target_size = int(prop_dict["original_partition_size"]) |
| 341 | verity_size = int(prop_dict["verity_size"]) |
| 342 | |
| 343 | padding_size = target_size - image_size - verity_size |
| 344 | assert padding_size >= 0 |
| 345 | |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 346 | if not BuildVerifiedImage(out_file, |
| 347 | verity_image_path, |
Sami Tolvanen | 4a06004 | 2015-12-18 15:50:25 +0000 | [diff] [blame] | 348 | verity_metadata_path, |
| 349 | verity_fec_path, |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 350 | padding_size, |
Sami Tolvanen | 4a06004 | 2015-12-18 15:50:25 +0000 | [diff] [blame] | 351 | fec_supported): |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 352 | shutil.rmtree(tempdir_name, ignore_errors=True) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 353 | return False |
| 354 | |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 355 | shutil.rmtree(tempdir_name, ignore_errors=True) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 356 | return True |
| 357 | |
Mohamad Ayyash | f876555 | 2016-03-02 21:07:23 -0800 | [diff] [blame] | 358 | def ConvertBlockMapToBaseFs(block_map_file): |
| 359 | fd, base_fs_file = tempfile.mkstemp(prefix="script_gen_", |
| 360 | suffix=".base_fs") |
| 361 | os.close(fd) |
| 362 | |
| 363 | convert_command = ["blk_alloc_to_base_fs", block_map_file, base_fs_file] |
| 364 | (_, exit_code) = RunCommand(convert_command) |
| 365 | if exit_code != 0: |
| 366 | os.remove(base_fs_file) |
| 367 | return None |
| 368 | return base_fs_file |
| 369 | |
Thierry Strudel | 74a81e6 | 2015-07-09 09:54:55 -0700 | [diff] [blame] | 370 | def BuildImage(in_dir, prop_dict, out_file, target_out=None): |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 371 | """Build an image to out_file from in_dir with property prop_dict. |
| 372 | |
| 373 | Args: |
| 374 | in_dir: path of input directory. |
| 375 | prop_dict: property dictionary. |
| 376 | out_file: path of the output image file. |
Thierry Strudel | 74a81e6 | 2015-07-09 09:54:55 -0700 | [diff] [blame] | 377 | target_out: path of the product out directory to read device specific FS config files. |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 378 | |
| 379 | Returns: |
| 380 | True iff the image is built successfully. |
| 381 | """ |
Tao Bao | f3282b4 | 2015-04-01 11:21:55 -0700 | [diff] [blame] | 382 | # system_root_image=true: build a system.img that combines the contents of |
| 383 | # /system and the ramdisk, and can be mounted at the root of the file system. |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 384 | origin_in = in_dir |
| 385 | fs_config = prop_dict.get("fs_config") |
Mohamad Ayyash | f876555 | 2016-03-02 21:07:23 -0800 | [diff] [blame] | 386 | base_fs_file = None |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 387 | if (prop_dict.get("system_root_image") == "true" |
| 388 | and prop_dict["mount_point"] == "system"): |
| 389 | in_dir = tempfile.mkdtemp() |
| 390 | # Change the mount point to "/" |
| 391 | prop_dict["mount_point"] = "/" |
| 392 | if fs_config: |
| 393 | # We need to merge the fs_config files of system and ramdisk. |
| 394 | fd, merged_fs_config = tempfile.mkstemp(prefix="root_fs_config", |
| 395 | suffix=".txt") |
| 396 | os.close(fd) |
| 397 | with open(merged_fs_config, "w") as fw: |
| 398 | if "ramdisk_fs_config" in prop_dict: |
| 399 | with open(prop_dict["ramdisk_fs_config"]) as fr: |
| 400 | fw.writelines(fr.readlines()) |
| 401 | with open(fs_config) as fr: |
| 402 | fw.writelines(fr.readlines()) |
| 403 | fs_config = merged_fs_config |
| 404 | |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 405 | build_command = [] |
| 406 | fs_type = prop_dict.get("fs_type", "") |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 407 | run_fsck = False |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 408 | |
Mohamad Ayyash | dd06352 | 2015-03-24 12:42:03 -0700 | [diff] [blame] | 409 | fs_spans_partition = True |
| 410 | if fs_type.startswith("squash"): |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 411 | fs_spans_partition = False |
Mohamad Ayyash | dd06352 | 2015-03-24 12:42:03 -0700 | [diff] [blame] | 412 | |
Daniel Rosenberg | f4eabc3 | 2014-07-10 15:42:38 -0700 | [diff] [blame] | 413 | is_verity_partition = "verity_block_device" in prop_dict |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 414 | verity_supported = prop_dict.get("verity") == "true" |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 415 | verity_fec_supported = prop_dict.get("verity_fec") == "true" |
| 416 | |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 417 | # Adjust the partition size to make room for the hashes if this is to be |
| 418 | # verified. |
Sami Tolvanen | 405e71d | 2016-02-09 12:28:58 -0800 | [diff] [blame] | 419 | if verity_supported and is_verity_partition: |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 420 | partition_size = int(prop_dict.get("partition_size")) |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 421 | (adjusted_size, verity_size) = AdjustPartitionSizeForVerity(partition_size, |
| 422 | verity_fec_supported) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 423 | if not adjusted_size: |
| 424 | return False |
| 425 | prop_dict["partition_size"] = str(adjusted_size) |
| 426 | prop_dict["original_partition_size"] = str(partition_size) |
Sami Tolvanen | 433905f | 2016-09-01 15:58:35 -0700 | [diff] [blame] | 427 | prop_dict["verity_size"] = str(verity_size) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 428 | |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 429 | # Adjust partition size for AVB hash footer or AVB hashtree footer. |
| 430 | avb_footer_type = '' |
| 431 | if prop_dict.get("avb_hash_enable") == "true": |
| 432 | avb_footer_type = 'hash' |
| 433 | elif prop_dict.get("avb_hashtree_enable") == "true": |
| 434 | avb_footer_type = 'hashtree' |
| 435 | |
| 436 | if avb_footer_type: |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 437 | avbtool = prop_dict["avb_avbtool"] |
| 438 | partition_size = prop_dict["partition_size"] |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 439 | # avb_add_hash_footer_args or avb_add_hashtree_footer_args. |
| 440 | additional_args = prop_dict["avb_add_" + avb_footer_type + "_footer_args"] |
| 441 | max_image_size = AVBCalcMaxImageSize(avbtool, avb_footer_type, partition_size, |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 442 | additional_args) |
| 443 | if max_image_size == 0: |
| 444 | return False |
| 445 | prop_dict["partition_size"] = str(max_image_size) |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 446 | prop_dict["original_partition_size"] = partition_size |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 447 | |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 448 | if fs_type.startswith("ext"): |
Adrien Schildknecht | 9a072cc | 2016-11-18 17:06:29 -0800 | [diff] [blame] | 449 | build_command = [prop_dict["ext_mkuserimg"]] |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 450 | if "extfs_sparse_flag" in prop_dict: |
| 451 | build_command.append(prop_dict["extfs_sparse_flag"]) |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 452 | run_fsck = True |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 453 | build_command.extend([in_dir, out_file, fs_type, |
| 454 | prop_dict["mount_point"]]) |
Doug Zongker | 850b807 | 2013-12-05 15:54:55 -0800 | [diff] [blame] | 455 | build_command.append(prop_dict["partition_size"]) |
Ying Wang | f3b8635 | 2014-11-18 18:03:13 -0800 | [diff] [blame] | 456 | if "journal_size" in prop_dict: |
| 457 | build_command.extend(["-j", prop_dict["journal_size"]]) |
Doug Zongker | 850b807 | 2013-12-05 15:54:55 -0800 | [diff] [blame] | 458 | if "timestamp" in prop_dict: |
| 459 | build_command.extend(["-T", str(prop_dict["timestamp"])]) |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 460 | if fs_config: |
Doug Zongker | 8282282 | 2014-06-16 09:10:55 -0700 | [diff] [blame] | 461 | build_command.extend(["-C", fs_config]) |
Thierry Strudel | 74a81e6 | 2015-07-09 09:54:55 -0700 | [diff] [blame] | 462 | if target_out: |
| 463 | build_command.extend(["-D", target_out]) |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 464 | if "block_list" in prop_dict: |
| 465 | build_command.extend(["-B", prop_dict["block_list"]]) |
Mohamad Ayyash | f876555 | 2016-03-02 21:07:23 -0800 | [diff] [blame] | 466 | if "base_fs_file" in prop_dict: |
| 467 | base_fs_file = ConvertBlockMapToBaseFs(prop_dict["base_fs_file"]) |
| 468 | if base_fs_file is None: |
| 469 | return False |
| 470 | build_command.extend(["-d", base_fs_file]) |
Christoffer Dall | 8ed01f3 | 2014-12-17 21:34:12 +0100 | [diff] [blame] | 471 | build_command.extend(["-L", prop_dict["mount_point"]]) |
Patrick Tjin | a190084 | 2016-10-20 10:58:12 -0700 | [diff] [blame] | 472 | if "extfs_inode_count" in prop_dict: |
| 473 | build_command.extend(["-i", prop_dict["extfs_inode_count"]]) |
Connor O'Brien | 20f08c3 | 2017-01-05 16:48:14 -0800 | [diff] [blame] | 474 | if "flash_erase_block_size" in prop_dict: |
| 475 | build_command.extend(["-e", prop_dict["flash_erase_block_size"]]) |
| 476 | if "flash_logical_block_size" in prop_dict: |
| 477 | build_command.extend(["-o", prop_dict["flash_logical_block_size"]]) |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 478 | if "selinux_fc" in prop_dict: |
Kenny Root | f32dc71 | 2012-04-08 10:42:34 -0700 | [diff] [blame] | 479 | build_command.append(prop_dict["selinux_fc"]) |
Mohamad Ayyash | b97746e | 2015-03-03 12:30:37 -0800 | [diff] [blame] | 480 | elif fs_type.startswith("squash"): |
| 481 | build_command = ["mksquashfsimage.sh"] |
| 482 | build_command.extend([in_dir, out_file]) |
Todd Poynor | b2a555e | 2015-12-15 18:00:14 -0800 | [diff] [blame] | 483 | if "squashfs_sparse_flag" in prop_dict: |
| 484 | build_command.extend([prop_dict["squashfs_sparse_flag"]]) |
Mohamad Ayyash | b97746e | 2015-03-03 12:30:37 -0800 | [diff] [blame] | 485 | build_command.extend(["-m", prop_dict["mount_point"]]) |
Thierry Strudel | 74a81e6 | 2015-07-09 09:54:55 -0700 | [diff] [blame] | 486 | if target_out: |
| 487 | build_command.extend(["-d", target_out]) |
Mohamad Ayyash | 8837882 | 2016-04-07 22:10:51 -0700 | [diff] [blame] | 488 | if fs_config: |
| 489 | build_command.extend(["-C", fs_config]) |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 490 | if "selinux_fc" in prop_dict: |
Mohamad Ayyash | b97746e | 2015-03-03 12:30:37 -0800 | [diff] [blame] | 491 | build_command.extend(["-c", prop_dict["selinux_fc"]]) |
Mohamad Ayyash | c3484f7 | 2016-06-13 09:46:58 -0700 | [diff] [blame] | 492 | if "block_list" in prop_dict: |
| 493 | build_command.extend(["-B", prop_dict["block_list"]]) |
Simon Wilson | f86e7ee | 2015-06-17 12:35:15 -0700 | [diff] [blame] | 494 | if "squashfs_compressor" in prop_dict: |
| 495 | build_command.extend(["-z", prop_dict["squashfs_compressor"]]) |
| 496 | if "squashfs_compressor_opt" in prop_dict: |
| 497 | build_command.extend(["-zo", prop_dict["squashfs_compressor_opt"]]) |
Mohamad Ayyash | dfec815 | 2016-05-24 12:59:30 -0700 | [diff] [blame] | 498 | if "squashfs_block_size" in prop_dict: |
| 499 | build_command.extend(["-b", prop_dict["squashfs_block_size"]]) |
Mohamad Ayyash | 1b6d348 | 2016-06-15 15:53:07 -0700 | [diff] [blame] | 500 | if "squashfs_disable_4k_align" in prop_dict and prop_dict.get("squashfs_disable_4k_align") == "true": |
| 501 | build_command.extend(["-a"]) |
JP Abgrall | 5bfed5a | 2014-06-16 14:17:40 -0700 | [diff] [blame] | 502 | elif fs_type.startswith("f2fs"): |
| 503 | build_command = ["mkf2fsuserimg.sh"] |
| 504 | build_command.extend([out_file, prop_dict["partition_size"]]) |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 505 | else: |
Elliott Hughes | 305b088 | 2016-06-15 17:04:54 -0700 | [diff] [blame] | 506 | print("Error: unknown filesystem type '%s'" % (fs_type)) |
| 507 | return False |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 508 | |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 509 | if in_dir != origin_in: |
| 510 | # Construct a staging directory of the root file system. |
| 511 | ramdisk_dir = prop_dict.get("ramdisk_dir") |
| 512 | if ramdisk_dir: |
| 513 | shutil.rmtree(in_dir) |
| 514 | shutil.copytree(ramdisk_dir, in_dir, symlinks=True) |
| 515 | staging_system = os.path.join(in_dir, "system") |
| 516 | shutil.rmtree(staging_system, ignore_errors=True) |
| 517 | shutil.copytree(origin_in, staging_system, symlinks=True) |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 518 | |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 519 | has_reserved_blocks = prop_dict.get("has_ext4_reserved_blocks") == "true" |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 520 | ext4fs_output = None |
| 521 | |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 522 | try: |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 523 | if fs_type.startswith("ext4"): |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 524 | (ext4fs_output, exit_code) = RunCommand(build_command, True) |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 525 | else: |
Tianjie Xu | 149b7fb | 2017-09-01 15:36:08 -0700 | [diff] [blame] | 526 | (_, exit_code) = RunCommand(build_command, True) |
Ying Wang | a2292c9 | 2015-03-24 19:07:40 -0700 | [diff] [blame] | 527 | finally: |
| 528 | if in_dir != origin_in: |
| 529 | # Clean up temporary directories and files. |
| 530 | shutil.rmtree(in_dir, ignore_errors=True) |
| 531 | if fs_config: |
| 532 | os.remove(fs_config) |
Mohamad Ayyash | f876555 | 2016-03-02 21:07:23 -0800 | [diff] [blame] | 533 | if base_fs_file is not None: |
| 534 | os.remove(base_fs_file) |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 535 | if exit_code != 0: |
| 536 | return False |
| 537 | |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 538 | # Bug: 21522719, 22023465 |
| 539 | # There are some reserved blocks on ext4 FS (lesser of 4096 blocks and 2%). |
| 540 | # We need to deduct those blocks from the available space, since they are |
| 541 | # not writable even with root privilege. It only affects devices using |
| 542 | # file-based OTA and a kernel version of 3.10 or greater (currently just |
| 543 | # sprout). |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 544 | # Separately, check if there's enough headroom space available. This is useful for |
| 545 | # devices with low disk space that have system image variation between builds. |
| 546 | if (has_reserved_blocks or "partition_headroom" in prop_dict) and fs_type.startswith("ext4"): |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 547 | assert ext4fs_output is not None |
| 548 | ext4fs_stats = re.compile( |
| 549 | r'Created filesystem with .* (?P<used_blocks>[0-9]+)/' |
| 550 | r'(?P<total_blocks>[0-9]+) blocks') |
| 551 | m = ext4fs_stats.match(ext4fs_output.strip().split('\n')[-1]) |
| 552 | used_blocks = int(m.groupdict().get('used_blocks')) |
| 553 | total_blocks = int(m.groupdict().get('total_blocks')) |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 554 | reserved_blocks = 0 |
| 555 | headroom_blocks = 0 |
| 556 | adjusted_blocks = total_blocks |
| 557 | if has_reserved_blocks: |
| 558 | reserved_blocks = min(4096, int(total_blocks * 0.02)) |
| 559 | adjusted_blocks -= reserved_blocks |
| 560 | if "partition_headroom" in prop_dict: |
| 561 | headroom_blocks = int(prop_dict.get('partition_headroom')) / BLOCK_SIZE |
| 562 | adjusted_blocks -= headroom_blocks |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 563 | if used_blocks > adjusted_blocks: |
| 564 | mount_point = prop_dict.get("mount_point") |
| 565 | print("Error: Not enough room on %s (total: %d blocks, used: %d blocks, " |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 566 | "reserved: %d blocks, headroom: %d blocks, available: %d blocks)" % ( |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 567 | mount_point, total_blocks, used_blocks, reserved_blocks, |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 568 | headroom_blocks, adjusted_blocks)) |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 569 | return False |
| 570 | |
Mohamad Ayyash | dd06352 | 2015-03-24 12:42:03 -0700 | [diff] [blame] | 571 | if not fs_spans_partition: |
| 572 | mount_point = prop_dict.get("mount_point") |
| 573 | partition_size = int(prop_dict.get("partition_size")) |
Sami Tolvanen | 405e71d | 2016-02-09 12:28:58 -0800 | [diff] [blame] | 574 | image_size = GetSimgSize(out_file) |
Mohamad Ayyash | dd06352 | 2015-03-24 12:42:03 -0700 | [diff] [blame] | 575 | if image_size > partition_size: |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 576 | print("Error: %s image size of %d is larger than partition size of " |
| 577 | "%d" % (mount_point, image_size, partition_size)) |
| 578 | return False |
Mohamad Ayyash | dd06352 | 2015-03-24 12:42:03 -0700 | [diff] [blame] | 579 | if verity_supported and is_verity_partition: |
Sami Tolvanen | 405e71d | 2016-02-09 12:28:58 -0800 | [diff] [blame] | 580 | ZeroPadSimg(out_file, partition_size - image_size) |
Mohamad Ayyash | dd06352 | 2015-03-24 12:42:03 -0700 | [diff] [blame] | 581 | |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 582 | # create the verified image if this is to be verified |
Geremy Condra | 5b5f495 | 2014-05-05 22:19:37 -0700 | [diff] [blame] | 583 | if verity_supported and is_verity_partition: |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 584 | if not MakeVerityEnabledImage(out_file, verity_fec_supported, prop_dict): |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 585 | return False |
| 586 | |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 587 | # Add AVB HASH or HASHTREE footer (metadata). |
| 588 | if avb_footer_type: |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 589 | avbtool = prop_dict["avb_avbtool"] |
| 590 | original_partition_size = prop_dict["original_partition_size"] |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 591 | partition_name = prop_dict["partition_name"] |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 592 | # key_path and algorithm are only available when chain partition is used. |
| 593 | key_path = prop_dict.get("avb_key_path") |
| 594 | algorithm = prop_dict.get("avb_algorithm") |
Bowgo Tsai | 7ea994b | 2017-05-19 23:44:26 +0800 | [diff] [blame] | 595 | # avb_add_hash_footer_args or avb_add_hashtree_footer_args |
| 596 | additional_args = prop_dict["avb_add_" + avb_footer_type + "_footer_args"] |
| 597 | if not AVBAddFooter(out_file, avbtool, avb_footer_type, original_partition_size, |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 598 | partition_name, key_path, algorithm, additional_args): |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 599 | return False |
| 600 | |
Ying Wang | 6a42a25 | 2013-02-27 13:54:02 -0800 | [diff] [blame] | 601 | if run_fsck and prop_dict.get("skip_fsck") != "true": |
Geremy Condra | 6e8f53c | 2013-12-05 17:09:18 -0800 | [diff] [blame] | 602 | success, unsparse_image = UnsparseImage(out_file, replace=False) |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 603 | if not success: |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 604 | return False |
| 605 | |
| 606 | # Run e2fsck on the inflated image file |
| 607 | e2fsck_command = ["e2fsck", "-f", "-n", unsparse_image] |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 608 | (_, exit_code) = RunCommand(e2fsck_command) |
Ying Wang | 69e9b4d | 2012-11-26 18:10:23 -0800 | [diff] [blame] | 609 | |
| 610 | os.remove(unsparse_image) |
| 611 | |
| 612 | return exit_code == 0 |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 613 | |
| 614 | |
| 615 | def ImagePropFromGlobalDict(glob_dict, mount_point): |
| 616 | """Build an image property dictionary from the global dictionary. |
| 617 | |
| 618 | Args: |
| 619 | glob_dict: the global dictionary from the build system. |
| 620 | mount_point: such as "system", "data" etc. |
| 621 | """ |
Doug Zongker | 1ad7ade | 2013-12-06 11:53:27 -0800 | [diff] [blame] | 622 | d = {} |
Tao Bao | 052ae35 | 2015-09-28 13:44:13 -0700 | [diff] [blame] | 623 | |
Tao Bao | 822f584 | 2015-09-30 16:01:14 -0700 | [diff] [blame] | 624 | if "build.prop" in glob_dict: |
| 625 | bp = glob_dict["build.prop"] |
| 626 | if "ro.build.date.utc" in bp: |
| 627 | d["timestamp"] = bp["ro.build.date.utc"] |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 628 | |
| 629 | def copy_prop(src_p, dest_p): |
| 630 | if src_p in glob_dict: |
| 631 | d[dest_p] = str(glob_dict[src_p]) |
| 632 | |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 633 | common_props = ( |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 634 | "extfs_sparse_flag", |
Todd Poynor | b2a555e | 2015-12-15 18:00:14 -0800 | [diff] [blame] | 635 | "squashfs_sparse_flag", |
Kenny Root | f32dc71 | 2012-04-08 10:42:34 -0700 | [diff] [blame] | 636 | "selinux_fc", |
Ying Wang | 6a42a25 | 2013-02-27 13:54:02 -0800 | [diff] [blame] | 637 | "skip_fsck", |
Adrien Schildknecht | 9a072cc | 2016-11-18 17:06:29 -0800 | [diff] [blame] | 638 | "ext_mkuserimg", |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 639 | "verity", |
Geremy Condra | fd6f751 | 2013-06-16 17:26:08 -0700 | [diff] [blame] | 640 | "verity_key", |
Sami Tolvanen | f99b531 | 2015-05-20 07:30:57 +0100 | [diff] [blame] | 641 | "verity_signer_cmd", |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 642 | "verity_fec", |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 643 | "avb_enable", |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 644 | "avb_avbtool" |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 645 | ) |
| 646 | for p in common_props: |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 647 | copy_prop(p, p) |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 648 | |
| 649 | d["mount_point"] = mount_point |
| 650 | if mount_point == "system": |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 651 | copy_prop("avb_system_hashtree_enable", "avb_hashtree_enable") |
| 652 | copy_prop("avb_system_add_hashtree_footer_args", |
| 653 | "avb_add_hashtree_footer_args") |
| 654 | copy_prop("avb_system_key_path", "avb_key_path") |
| 655 | copy_prop("avb_system_algorithm", "avb_algorithm") |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 656 | copy_prop("fs_type", "fs_type") |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 657 | # Copy the generic system fs type first, override with specific one if |
Dan Albert | 8b72aef | 2015-03-23 19:13:21 -0700 | [diff] [blame] | 658 | # available. |
Mohamad Ayyash | b97746e | 2015-03-03 12:30:37 -0800 | [diff] [blame] | 659 | copy_prop("system_fs_type", "fs_type") |
Julius D'souza | 001c676 | 2017-05-03 13:43:27 -0700 | [diff] [blame] | 660 | copy_prop("system_headroom", "partition_headroom") |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 661 | copy_prop("system_size", "partition_size") |
Ying Wang | f3b8635 | 2014-11-18 18:03:13 -0800 | [diff] [blame] | 662 | copy_prop("system_journal_size", "journal_size") |
Daniel Rosenberg | f4eabc3 | 2014-07-10 15:42:38 -0700 | [diff] [blame] | 663 | copy_prop("system_verity_block_device", "verity_block_device") |
Tao Bao | f3282b4 | 2015-04-01 11:21:55 -0700 | [diff] [blame] | 664 | copy_prop("system_root_image", "system_root_image") |
| 665 | copy_prop("ramdisk_dir", "ramdisk_dir") |
Tao Bao | 84e7568 | 2015-07-19 02:38:53 -0700 | [diff] [blame] | 666 | copy_prop("ramdisk_fs_config", "ramdisk_fs_config") |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 667 | copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks") |
Simon Wilson | f86e7ee | 2015-06-17 12:35:15 -0700 | [diff] [blame] | 668 | copy_prop("system_squashfs_compressor", "squashfs_compressor") |
| 669 | copy_prop("system_squashfs_compressor_opt", "squashfs_compressor_opt") |
Mohamad Ayyash | dfec815 | 2016-05-24 12:59:30 -0700 | [diff] [blame] | 670 | copy_prop("system_squashfs_block_size", "squashfs_block_size") |
Mohamad Ayyash | 1b6d348 | 2016-06-15 15:53:07 -0700 | [diff] [blame] | 671 | copy_prop("system_squashfs_disable_4k_align", "squashfs_disable_4k_align") |
Mohamad Ayyash | f876555 | 2016-03-02 21:07:23 -0800 | [diff] [blame] | 672 | copy_prop("system_base_fs_file", "base_fs_file") |
Patrick Tjin | a190084 | 2016-10-20 10:58:12 -0700 | [diff] [blame] | 673 | copy_prop("system_extfs_inode_count", "extfs_inode_count") |
Alex Light | 4e358ab | 2016-06-16 14:47:10 -0700 | [diff] [blame] | 674 | elif mount_point == "system_other": |
| 675 | # We inherit the selinux policies of /system since we contain some of its files. |
| 676 | d["mount_point"] = "system" |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 677 | copy_prop("avb_system_hashtree_enable", "avb_hashtree_enable") |
| 678 | copy_prop("avb_system_add_hashtree_footer_args", |
| 679 | "avb_add_hashtree_footer_args") |
| 680 | copy_prop("avb_system_key_path", "avb_key_path") |
| 681 | copy_prop("avb_system_algorithm", "avb_algorithm") |
Alex Light | 4e358ab | 2016-06-16 14:47:10 -0700 | [diff] [blame] | 682 | copy_prop("fs_type", "fs_type") |
| 683 | copy_prop("system_fs_type", "fs_type") |
| 684 | copy_prop("system_size", "partition_size") |
| 685 | copy_prop("system_journal_size", "journal_size") |
| 686 | copy_prop("system_verity_block_device", "verity_block_device") |
| 687 | copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks") |
| 688 | copy_prop("system_squashfs_compressor", "squashfs_compressor") |
| 689 | copy_prop("system_squashfs_compressor_opt", "squashfs_compressor_opt") |
| 690 | copy_prop("system_squashfs_block_size", "squashfs_block_size") |
| 691 | copy_prop("system_base_fs_file", "base_fs_file") |
Patrick Tjin | a190084 | 2016-10-20 10:58:12 -0700 | [diff] [blame] | 692 | copy_prop("system_extfs_inode_count", "extfs_inode_count") |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 693 | elif mount_point == "data": |
JP Abgrall | 5bfed5a | 2014-06-16 14:17:40 -0700 | [diff] [blame] | 694 | # Copy the generic fs type first, override with specific one if available. |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 695 | copy_prop("fs_type", "fs_type") |
JP Abgrall | 5bfed5a | 2014-06-16 14:17:40 -0700 | [diff] [blame] | 696 | copy_prop("userdata_fs_type", "fs_type") |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 697 | copy_prop("userdata_size", "partition_size") |
Connor O'Brien | 20f08c3 | 2017-01-05 16:48:14 -0800 | [diff] [blame] | 698 | copy_prop("flash_logical_block_size","flash_logical_block_size") |
| 699 | copy_prop("flash_erase_block_size", "flash_erase_block_size") |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 700 | elif mount_point == "cache": |
| 701 | copy_prop("cache_fs_type", "fs_type") |
| 702 | copy_prop("cache_size", "partition_size") |
Ying Wang | a0febe5 | 2013-03-20 11:02:05 -0700 | [diff] [blame] | 703 | elif mount_point == "vendor": |
Bowgo Tsai | 3e599ea | 2017-05-26 18:30:04 +0800 | [diff] [blame] | 704 | copy_prop("avb_vendor_hashtree_enable", "avb_hashtree_enable") |
| 705 | copy_prop("avb_vendor_add_hashtree_footer_args", |
| 706 | "avb_add_hashtree_footer_args") |
| 707 | copy_prop("avb_vendor_key_path", "avb_key_path") |
| 708 | copy_prop("avb_vendor_algorithm", "avb_algorithm") |
Ying Wang | a0febe5 | 2013-03-20 11:02:05 -0700 | [diff] [blame] | 709 | copy_prop("vendor_fs_type", "fs_type") |
| 710 | copy_prop("vendor_size", "partition_size") |
Ying Wang | f3b8635 | 2014-11-18 18:03:13 -0800 | [diff] [blame] | 711 | copy_prop("vendor_journal_size", "journal_size") |
Daniel Rosenberg | f4eabc3 | 2014-07-10 15:42:38 -0700 | [diff] [blame] | 712 | copy_prop("vendor_verity_block_device", "verity_block_device") |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 713 | copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks") |
Patrick Tjin | e11aa50 | 2016-02-09 15:40:38 -0800 | [diff] [blame] | 714 | copy_prop("vendor_squashfs_compressor", "squashfs_compressor") |
| 715 | copy_prop("vendor_squashfs_compressor_opt", "squashfs_compressor_opt") |
Mohamad Ayyash | dfec815 | 2016-05-24 12:59:30 -0700 | [diff] [blame] | 716 | copy_prop("vendor_squashfs_block_size", "squashfs_block_size") |
Mohamad Ayyash | 1b6d348 | 2016-06-15 15:53:07 -0700 | [diff] [blame] | 717 | copy_prop("vendor_squashfs_disable_4k_align", "squashfs_disable_4k_align") |
Mohamad Ayyash | f876555 | 2016-03-02 21:07:23 -0800 | [diff] [blame] | 718 | copy_prop("vendor_base_fs_file", "base_fs_file") |
Patrick Tjin | a190084 | 2016-10-20 10:58:12 -0700 | [diff] [blame] | 719 | copy_prop("vendor_extfs_inode_count", "extfs_inode_count") |
Ying Wang | b888843 | 2014-03-11 17:13:27 -0700 | [diff] [blame] | 720 | elif mount_point == "oem": |
| 721 | copy_prop("fs_type", "fs_type") |
| 722 | copy_prop("oem_size", "partition_size") |
Ying Wang | f3b8635 | 2014-11-18 18:03:13 -0800 | [diff] [blame] | 723 | copy_prop("oem_journal_size", "journal_size") |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 724 | copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks") |
Patrick Tjin | a190084 | 2016-10-20 10:58:12 -0700 | [diff] [blame] | 725 | copy_prop("oem_extfs_inode_count", "extfs_inode_count") |
David Zeuthen | 4014a9d | 2016-09-30 17:29:22 -0400 | [diff] [blame] | 726 | d["partition_name"] = mount_point |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 727 | return d |
| 728 | |
| 729 | |
| 730 | def LoadGlobalDict(filename): |
| 731 | """Load "name=value" pairs from filename""" |
| 732 | d = {} |
| 733 | f = open(filename) |
| 734 | for line in f: |
| 735 | line = line.strip() |
| 736 | if not line or line.startswith("#"): |
| 737 | continue |
| 738 | k, v = line.split("=", 1) |
| 739 | d[k] = v |
| 740 | f.close() |
| 741 | return d |
| 742 | |
| 743 | |
| 744 | def main(argv): |
Thierry Strudel | 74a81e6 | 2015-07-09 09:54:55 -0700 | [diff] [blame] | 745 | if len(argv) != 4: |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 746 | print __doc__ |
| 747 | sys.exit(1) |
| 748 | |
| 749 | in_dir = argv[0] |
| 750 | glob_dict_file = argv[1] |
| 751 | out_file = argv[2] |
Thierry Strudel | 74a81e6 | 2015-07-09 09:54:55 -0700 | [diff] [blame] | 752 | target_out = argv[3] |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 753 | |
| 754 | glob_dict = LoadGlobalDict(glob_dict_file) |
Ying Wang | ae61f50 | 2015-03-12 18:30:39 -0700 | [diff] [blame] | 755 | if "mount_point" in glob_dict: |
Tao Bao | c7a6f1e | 2015-06-23 11:16:05 -0700 | [diff] [blame] | 756 | # The caller knows the mount point and provides a dictionay needed by |
| 757 | # BuildImage(). |
Ying Wang | ae61f50 | 2015-03-12 18:30:39 -0700 | [diff] [blame] | 758 | image_properties = glob_dict |
Ying Wang | 9f8e8db | 2011-11-04 11:37:01 -0700 | [diff] [blame] | 759 | else: |
Ying Wang | ae61f50 | 2015-03-12 18:30:39 -0700 | [diff] [blame] | 760 | image_filename = os.path.basename(out_file) |
| 761 | mount_point = "" |
| 762 | if image_filename == "system.img": |
| 763 | mount_point = "system" |
Alex Light | 4e358ab | 2016-06-16 14:47:10 -0700 | [diff] [blame] | 764 | elif image_filename == "system_other.img": |
| 765 | mount_point = "system_other" |
Ying Wang | ae61f50 | 2015-03-12 18:30:39 -0700 | [diff] [blame] | 766 | elif image_filename == "userdata.img": |
| 767 | mount_point = "data" |
| 768 | elif image_filename == "cache.img": |
| 769 | mount_point = "cache" |
| 770 | elif image_filename == "vendor.img": |
| 771 | mount_point = "vendor" |
| 772 | elif image_filename == "oem.img": |
| 773 | mount_point = "oem" |
| 774 | else: |
| 775 | print >> sys.stderr, "error: unknown image file name ", image_filename |
| 776 | exit(1) |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 777 | |
Ying Wang | ae61f50 | 2015-03-12 18:30:39 -0700 | [diff] [blame] | 778 | image_properties = ImagePropFromGlobalDict(glob_dict, mount_point) |
| 779 | |
Thierry Strudel | 74a81e6 | 2015-07-09 09:54:55 -0700 | [diff] [blame] | 780 | if not BuildImage(in_dir, image_properties, out_file, target_out): |
Dan Albert | 8b72aef | 2015-03-23 19:13:21 -0700 | [diff] [blame] | 781 | print >> sys.stderr, "error: failed to build %s from %s" % (out_file, |
| 782 | in_dir) |
Ying Wang | bd93d42 | 2011-10-28 17:02:30 -0700 | [diff] [blame] | 783 | exit(1) |
| 784 | |
| 785 | |
| 786 | if __name__ == '__main__': |
| 787 | main(sys.argv[1:]) |