blob: 1708d86718d26dfdd910f12e253c6aaef525a40b [file] [log] [blame]
Ying Wangbd93d422011-10-28 17:02:30 -07001#!/usr/bin/env python
2#
3# Copyright (C) 2011 The Android Open Source Project
4#
5# Licensed under the Apache License, Version 2.0 (the "License");
6# you may not use this file except in compliance with the License.
7# You may obtain a copy of the License at
8#
9# http://www.apache.org/licenses/LICENSE-2.0
10#
11# Unless required by applicable law or agreed to in writing, software
12# distributed under the License is distributed on an "AS IS" BASIS,
13# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14# See the License for the specific language governing permissions and
15# limitations under the License.
16
17"""
Maria Bornski885dbb52015-09-04 11:13:16 -070018Build image output_image_file from input_directory, properties_file, and target_out_dir
Ying Wangbd93d422011-10-28 17:02:30 -070019
Maria Bornski885dbb52015-09-04 11:13:16 -070020Usage: build_image input_directory properties_file output_image_file target_out_dir
Ying Wangbd93d422011-10-28 17:02:30 -070021
22"""
23import os
Ying Wang69e9b4d2012-11-26 18:10:23 -080024import os.path
Tao Baoc7a6f1e2015-06-23 11:16:05 -070025import re
Ying Wangbd93d422011-10-28 17:02:30 -070026import subprocess
27import sys
Geremy Condrafd6f7512013-06-16 17:26:08 -070028import commands
Baligh Uddin601ddea2015-06-09 15:48:14 -070029import common
David Zeuthen4014a9d2016-09-30 17:29:22 -040030import shlex
Geremy Condrafd6f7512013-06-16 17:26:08 -070031import shutil
Sami Tolvanen405e71d2016-02-09 12:28:58 -080032import sparse_img
Geremy Condra5b5f4952014-05-05 22:19:37 -070033import tempfile
Ying Wangbd93d422011-10-28 17:02:30 -070034
Baligh Uddin601ddea2015-06-09 15:48:14 -070035OPTIONS = common.OPTIONS
36
Geremy Condrae8e982a2014-05-16 19:14:30 -070037FIXED_SALT = "aee087a5be3b982978c923f566a94613496b417f2af592639bc80d141e34dfe7"
Sami Tolvanenf99b5312015-05-20 07:30:57 +010038BLOCK_SIZE = 4096
Geremy Condrae8e982a2014-05-16 19:14:30 -070039
Ying Wang69e9b4d2012-11-26 18:10:23 -080040def RunCommand(cmd):
Tao Baoc7a6f1e2015-06-23 11:16:05 -070041 """Echo and run the given command.
Ying Wang69e9b4d2012-11-26 18:10:23 -080042
43 Args:
44 cmd: the command represented as a list of strings.
45 Returns:
Tao Baoc7a6f1e2015-06-23 11:16:05 -070046 A tuple of the output and the exit code.
Ying Wang69e9b4d2012-11-26 18:10:23 -080047 """
48 print "Running: ", " ".join(cmd)
Tao Baoc7a6f1e2015-06-23 11:16:05 -070049 p = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
50 output, _ = p.communicate()
51 print "%s" % (output.rstrip(),)
52 return (output, p.returncode)
Ying Wangbd93d422011-10-28 17:02:30 -070053
Sami Tolvanenf99b5312015-05-20 07:30:57 +010054def GetVerityFECSize(partition_size):
55 cmd = "fec -s %d" % partition_size
56 status, output = commands.getstatusoutput(cmd)
57 if status:
58 print output
59 return False, 0
60 return True, int(output)
61
Geremy Condrafd6f7512013-06-16 17:26:08 -070062def GetVerityTreeSize(partition_size):
Colin Cross477cf2b2014-04-16 18:49:56 -070063 cmd = "build_verity_tree -s %d"
Geremy Condrafd6f7512013-06-16 17:26:08 -070064 cmd %= partition_size
65 status, output = commands.getstatusoutput(cmd)
66 if status:
67 print output
68 return False, 0
69 return True, int(output)
70
71def GetVerityMetadataSize(partition_size):
Tao Bao45810422016-10-17 16:20:12 -070072 cmd = "system/extras/verity/build_verity_metadata.py size %d"
Geremy Condrafd6f7512013-06-16 17:26:08 -070073 cmd %= partition_size
Baligh Uddin601ddea2015-06-09 15:48:14 -070074
Geremy Condrafd6f7512013-06-16 17:26:08 -070075 status, output = commands.getstatusoutput(cmd)
76 if status:
77 print output
78 return False, 0
79 return True, int(output)
80
Sami Tolvanenf99b5312015-05-20 07:30:57 +010081def GetVeritySize(partition_size, fec_supported):
82 success, verity_tree_size = GetVerityTreeSize(partition_size)
83 if not success:
84 return 0
85 success, verity_metadata_size = GetVerityMetadataSize(partition_size)
86 if not success:
87 return 0
88 verity_size = verity_tree_size + verity_metadata_size
89 if fec_supported:
90 success, fec_size = GetVerityFECSize(partition_size + verity_size)
91 if not success:
92 return 0
93 return verity_size + fec_size
94 return verity_size
95
Sami Tolvanen405e71d2016-02-09 12:28:58 -080096def GetSimgSize(image_file):
97 simg = sparse_img.SparseImage(image_file, build_map=False)
98 return simg.blocksize * simg.total_blocks
99
100def ZeroPadSimg(image_file, pad_size):
101 blocks = pad_size // BLOCK_SIZE
102 print("Padding %d blocks (%d bytes)" % (blocks, pad_size))
103 simg = sparse_img.SparseImage(image_file, mode="r+b", build_map=False)
104 simg.AppendFillChunk(0, blocks)
105
David Zeuthen4014a9d2016-09-30 17:29:22 -0400106def AVBCalcMaxImageSize(avbtool, partition_size, additional_args):
107 """Calculates max image size for a given partition size.
108
109 Args:
110 avbtool: String with path to avbtool.
111 partition_size: The size of the partition in question.
112 additional_args: Additional arguments to pass to 'avbtool
113 add_hashtree_image'.
114 Returns:
115 The maximum image size or 0 if an error occurred.
116 """
117 cmdline = "%s add_hashtree_footer " % avbtool
118 cmdline += "--partition_size %d " % partition_size
119 cmdline += "--calc_max_image_size "
120 cmdline += additional_args
121 (output, exit_code) = RunCommand(shlex.split(cmdline))
122 if exit_code != 0:
123 return 0
124 else:
125 return int(output)
126
127def AVBAddHashtree(image_path, avbtool, partition_size, partition_name,
128 signing_args, additional_args):
129 """Adds dm-verity hashtree and AVB metadata to an image.
130
131 Args:
132 image_path: Path to image to modify.
133 avbtool: String with path to avbtool.
134 partition_size: The size of the partition in question.
135 partition_name: The name of the partition - will be embedded in metadata.
136 signing_args: Arguments for signing the image.
137 additional_args: Additional arguments to pass to 'avbtool
138 add_hashtree_image'.
139 Returns:
140 True if the operation succeeded.
141 """
142 cmdline = "%s add_hashtree_footer " % avbtool
143 cmdline += "--partition_size %d " % partition_size
144 cmdline += "--partition_name %s " % partition_name
145 cmdline += "--image %s " % image_path
146 cmdline += signing_args + " "
147 cmdline += additional_args
148 (_, exit_code) = RunCommand(shlex.split(cmdline))
149 return exit_code == 0
150
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100151def AdjustPartitionSizeForVerity(partition_size, fec_supported):
Geremy Condrafd6f7512013-06-16 17:26:08 -0700152 """Modifies the provided partition size to account for the verity metadata.
153
154 This information is used to size the created image appropriately.
155 Args:
156 partition_size: the size of the partition to be verified.
157 Returns:
Sami Tolvanen433905f2016-09-01 15:58:35 -0700158 A tuple of the size of the partition adjusted for verity metadata, and
159 the size of verity metadata.
Geremy Condrafd6f7512013-06-16 17:26:08 -0700160 """
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100161 key = "%d %d" % (partition_size, fec_supported)
162 if key in AdjustPartitionSizeForVerity.results:
163 return AdjustPartitionSizeForVerity.results[key]
164
165 hi = partition_size
166 if hi % BLOCK_SIZE != 0:
167 hi = (hi // BLOCK_SIZE) * BLOCK_SIZE
168
169 # verity tree and fec sizes depend on the partition size, which
170 # means this estimate is always going to be unnecessarily small
Sami Tolvanen433905f2016-09-01 15:58:35 -0700171 verity_size = GetVeritySize(hi, fec_supported)
172 lo = partition_size - verity_size
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100173 result = lo
174
175 # do a binary search for the optimal size
176 while lo < hi:
177 i = ((lo + hi) // (2 * BLOCK_SIZE)) * BLOCK_SIZE
Sami Tolvanen433905f2016-09-01 15:58:35 -0700178 v = GetVeritySize(i, fec_supported)
179 if i + v <= partition_size:
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100180 if result < i:
181 result = i
Sami Tolvanen433905f2016-09-01 15:58:35 -0700182 verity_size = v
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100183 lo = i + BLOCK_SIZE
184 else:
185 hi = i
186
Sami Tolvanen433905f2016-09-01 15:58:35 -0700187 AdjustPartitionSizeForVerity.results[key] = (result, verity_size)
188 return (result, verity_size)
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100189
190AdjustPartitionSizeForVerity.results = {}
191
Sami Tolvanen433905f2016-09-01 15:58:35 -0700192def BuildVerityFEC(sparse_image_path, verity_path, verity_fec_path,
193 padding_size):
194 cmd = "fec -e -p %d %s %s %s" % (padding_size, sparse_image_path,
195 verity_path, verity_fec_path)
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100196 print cmd
197 status, output = commands.getstatusoutput(cmd)
198 if status:
199 print "Could not build FEC data! Error: %s" % output
200 return False
201 return True
Geremy Condrafd6f7512013-06-16 17:26:08 -0700202
Colin Cross477cf2b2014-04-16 18:49:56 -0700203def BuildVerityTree(sparse_image_path, verity_image_path, prop_dict):
Dan Albert8b72aef2015-03-23 19:13:21 -0700204 cmd = "build_verity_tree -A %s %s %s" % (
205 FIXED_SALT, sparse_image_path, verity_image_path)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700206 print cmd
207 status, output = commands.getstatusoutput(cmd)
208 if status:
209 print "Could not build verity tree! Error: %s" % output
210 return False
211 root, salt = output.split()
212 prop_dict["verity_root_hash"] = root
213 prop_dict["verity_salt"] = salt
214 return True
215
216def BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt,
Tao Bao45810422016-10-17 16:20:12 -0700217 block_device, signer_path, key, signer_args):
Dan Albert8b72aef2015-03-23 19:13:21 -0700218 cmd_template = (
Tao Bao45810422016-10-17 16:20:12 -0700219 "system/extras/verity/build_verity_metadata.py build " +
220 "%s %s %s %s %s %s %s")
Dan Albert8b72aef2015-03-23 19:13:21 -0700221 cmd = cmd_template % (image_size, verity_metadata_path, root_hash, salt,
222 block_device, signer_path, key)
Tao Bao45810422016-10-17 16:20:12 -0700223 if signer_args:
224 cmd += " --signer_args=\"%s\"" % (' '.join(signer_args),)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700225 print cmd
226 status, output = commands.getstatusoutput(cmd)
227 if status:
228 print "Could not build verity metadata! Error: %s" % output
229 return False
230 return True
231
232def Append2Simg(sparse_image_path, unsparse_image_path, error_message):
233 """Appends the unsparse image to the given sparse image.
234
235 Args:
236 sparse_image_path: the path to the (sparse) image
237 unsparse_image_path: the path to the (unsparse) image
238 Returns:
239 True on success, False on failure.
240 """
241 cmd = "append2simg %s %s"
242 cmd %= (sparse_image_path, unsparse_image_path)
243 print cmd
244 status, output = commands.getstatusoutput(cmd)
245 if status:
246 print "%s: %s" % (error_message, output)
247 return False
248 return True
249
Sami Tolvanenff914f52015-12-18 13:24:56 +0000250def Append(target, file_to_append, error_message):
251 cmd = 'cat %s >> %s' % (file_to_append, target)
252 print cmd
253 status, output = commands.getstatusoutput(cmd)
254 if status:
255 print "%s: %s" % (error_message, output)
256 return False
257 return True
258
Dan Albert8b72aef2015-03-23 19:13:21 -0700259def BuildVerifiedImage(data_image_path, verity_image_path,
Sami Tolvanen4a060042015-12-18 15:50:25 +0000260 verity_metadata_path, verity_fec_path,
Sami Tolvanen433905f2016-09-01 15:58:35 -0700261 padding_size, fec_supported):
Sami Tolvanenff914f52015-12-18 13:24:56 +0000262 if not Append(verity_image_path, verity_metadata_path,
263 "Could not append verity metadata!"):
Geremy Condrafd6f7512013-06-16 17:26:08 -0700264 return False
Sami Tolvanen4a060042015-12-18 15:50:25 +0000265
266 if fec_supported:
267 # build FEC for the entire partition, including metadata
268 if not BuildVerityFEC(data_image_path, verity_image_path,
Sami Tolvanen433905f2016-09-01 15:58:35 -0700269 verity_fec_path, padding_size):
Sami Tolvanen4a060042015-12-18 15:50:25 +0000270 return False
271
272 if not Append(verity_image_path, verity_fec_path, "Could not append FEC!"):
273 return False
274
Sami Tolvanenff914f52015-12-18 13:24:56 +0000275 if not Append2Simg(data_image_path, verity_image_path,
276 "Could not append verity data!"):
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100277 return False
Geremy Condrafd6f7512013-06-16 17:26:08 -0700278 return True
279
Geremy Condra6e8f53c2013-12-05 17:09:18 -0800280def UnsparseImage(sparse_image_path, replace=True):
Geremy Condrafd6f7512013-06-16 17:26:08 -0700281 img_dir = os.path.dirname(sparse_image_path)
282 unsparse_image_path = "unsparse_" + os.path.basename(sparse_image_path)
283 unsparse_image_path = os.path.join(img_dir, unsparse_image_path)
284 if os.path.exists(unsparse_image_path):
Geremy Condra6e8f53c2013-12-05 17:09:18 -0800285 if replace:
286 os.unlink(unsparse_image_path)
287 else:
288 return True, unsparse_image_path
Geremy Condrafd6f7512013-06-16 17:26:08 -0700289 inflate_command = ["simg2img", sparse_image_path, unsparse_image_path]
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700290 (_, exit_code) = RunCommand(inflate_command)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700291 if exit_code != 0:
292 os.remove(unsparse_image_path)
293 return False, None
294 return True, unsparse_image_path
295
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100296def MakeVerityEnabledImage(out_file, fec_supported, prop_dict):
Geremy Condrafd6f7512013-06-16 17:26:08 -0700297 """Creates an image that is verifiable using dm-verity.
298
299 Args:
300 out_file: the location to write the verifiable image at
Dan Albert8b72aef2015-03-23 19:13:21 -0700301 prop_dict: a dictionary of properties required for image creation and
302 verification
Geremy Condrafd6f7512013-06-16 17:26:08 -0700303 Returns:
304 True on success, False otherwise.
305 """
306 # get properties
Sami Tolvanen433905f2016-09-01 15:58:35 -0700307 image_size = int(prop_dict["partition_size"])
Geremy Condrafd6f7512013-06-16 17:26:08 -0700308 block_dev = prop_dict["verity_block_device"]
Paul Lawrencea37b2bb2014-11-13 17:54:30 -0800309 signer_key = prop_dict["verity_key"] + ".pk8"
Baligh Uddin601ddea2015-06-09 15:48:14 -0700310 if OPTIONS.verity_signer_path is not None:
Tao Bao45810422016-10-17 16:20:12 -0700311 signer_path = OPTIONS.verity_signer_path
Baligh Uddin601ddea2015-06-09 15:48:14 -0700312 else:
313 signer_path = prop_dict["verity_signer_cmd"]
Tao Bao45810422016-10-17 16:20:12 -0700314 signer_args = OPTIONS.verity_signer_args
Geremy Condrafd6f7512013-06-16 17:26:08 -0700315
316 # make a tempdir
Geremy Condra5b5f4952014-05-05 22:19:37 -0700317 tempdir_name = tempfile.mkdtemp(suffix="_verity_images")
Geremy Condrafd6f7512013-06-16 17:26:08 -0700318
319 # get partial image paths
320 verity_image_path = os.path.join(tempdir_name, "verity.img")
321 verity_metadata_path = os.path.join(tempdir_name, "verity_metadata.img")
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100322 verity_fec_path = os.path.join(tempdir_name, "verity_fec.img")
Geremy Condrafd6f7512013-06-16 17:26:08 -0700323
324 # build the verity tree and get the root hash and salt
Colin Cross477cf2b2014-04-16 18:49:56 -0700325 if not BuildVerityTree(out_file, verity_image_path, prop_dict):
Geremy Condra5b5f4952014-05-05 22:19:37 -0700326 shutil.rmtree(tempdir_name, ignore_errors=True)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700327 return False
328
329 # build the metadata blocks
330 root_hash = prop_dict["verity_root_hash"]
331 salt = prop_dict["verity_salt"]
Dan Albert8b72aef2015-03-23 19:13:21 -0700332 if not BuildVerityMetadata(image_size, verity_metadata_path, root_hash, salt,
Tao Bao45810422016-10-17 16:20:12 -0700333 block_dev, signer_path, signer_key, signer_args):
Geremy Condra5b5f4952014-05-05 22:19:37 -0700334 shutil.rmtree(tempdir_name, ignore_errors=True)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700335 return False
336
337 # build the full verified image
Sami Tolvanen433905f2016-09-01 15:58:35 -0700338 target_size = int(prop_dict["original_partition_size"])
339 verity_size = int(prop_dict["verity_size"])
340
341 padding_size = target_size - image_size - verity_size
342 assert padding_size >= 0
343
Geremy Condrafd6f7512013-06-16 17:26:08 -0700344 if not BuildVerifiedImage(out_file,
345 verity_image_path,
Sami Tolvanen4a060042015-12-18 15:50:25 +0000346 verity_metadata_path,
347 verity_fec_path,
Sami Tolvanen433905f2016-09-01 15:58:35 -0700348 padding_size,
Sami Tolvanen4a060042015-12-18 15:50:25 +0000349 fec_supported):
Geremy Condra5b5f4952014-05-05 22:19:37 -0700350 shutil.rmtree(tempdir_name, ignore_errors=True)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700351 return False
352
Geremy Condra5b5f4952014-05-05 22:19:37 -0700353 shutil.rmtree(tempdir_name, ignore_errors=True)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700354 return True
355
Mohamad Ayyashf8765552016-03-02 21:07:23 -0800356def ConvertBlockMapToBaseFs(block_map_file):
357 fd, base_fs_file = tempfile.mkstemp(prefix="script_gen_",
358 suffix=".base_fs")
359 os.close(fd)
360
361 convert_command = ["blk_alloc_to_base_fs", block_map_file, base_fs_file]
362 (_, exit_code) = RunCommand(convert_command)
363 if exit_code != 0:
364 os.remove(base_fs_file)
365 return None
366 return base_fs_file
367
Thierry Strudel74a81e62015-07-09 09:54:55 -0700368def BuildImage(in_dir, prop_dict, out_file, target_out=None):
Ying Wangbd93d422011-10-28 17:02:30 -0700369 """Build an image to out_file from in_dir with property prop_dict.
370
371 Args:
372 in_dir: path of input directory.
373 prop_dict: property dictionary.
374 out_file: path of the output image file.
Thierry Strudel74a81e62015-07-09 09:54:55 -0700375 target_out: path of the product out directory to read device specific FS config files.
Ying Wangbd93d422011-10-28 17:02:30 -0700376
377 Returns:
378 True iff the image is built successfully.
379 """
Tao Baof3282b42015-04-01 11:21:55 -0700380 # system_root_image=true: build a system.img that combines the contents of
381 # /system and the ramdisk, and can be mounted at the root of the file system.
Ying Wanga2292c92015-03-24 19:07:40 -0700382 origin_in = in_dir
383 fs_config = prop_dict.get("fs_config")
Mohamad Ayyashf8765552016-03-02 21:07:23 -0800384 base_fs_file = None
Ying Wanga2292c92015-03-24 19:07:40 -0700385 if (prop_dict.get("system_root_image") == "true"
386 and prop_dict["mount_point"] == "system"):
387 in_dir = tempfile.mkdtemp()
388 # Change the mount point to "/"
389 prop_dict["mount_point"] = "/"
390 if fs_config:
391 # We need to merge the fs_config files of system and ramdisk.
392 fd, merged_fs_config = tempfile.mkstemp(prefix="root_fs_config",
393 suffix=".txt")
394 os.close(fd)
395 with open(merged_fs_config, "w") as fw:
396 if "ramdisk_fs_config" in prop_dict:
397 with open(prop_dict["ramdisk_fs_config"]) as fr:
398 fw.writelines(fr.readlines())
399 with open(fs_config) as fr:
400 fw.writelines(fr.readlines())
401 fs_config = merged_fs_config
402
Ying Wangbd93d422011-10-28 17:02:30 -0700403 build_command = []
404 fs_type = prop_dict.get("fs_type", "")
Ying Wang69e9b4d2012-11-26 18:10:23 -0800405 run_fsck = False
Geremy Condrafd6f7512013-06-16 17:26:08 -0700406
Mohamad Ayyashdd063522015-03-24 12:42:03 -0700407 fs_spans_partition = True
408 if fs_type.startswith("squash"):
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700409 fs_spans_partition = False
Mohamad Ayyashdd063522015-03-24 12:42:03 -0700410
Daniel Rosenbergf4eabc32014-07-10 15:42:38 -0700411 is_verity_partition = "verity_block_device" in prop_dict
Geremy Condra5b5f4952014-05-05 22:19:37 -0700412 verity_supported = prop_dict.get("verity") == "true"
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100413 verity_fec_supported = prop_dict.get("verity_fec") == "true"
414
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700415 # Adjust the partition size to make room for the hashes if this is to be
416 # verified.
Sami Tolvanen405e71d2016-02-09 12:28:58 -0800417 if verity_supported and is_verity_partition:
Geremy Condrafd6f7512013-06-16 17:26:08 -0700418 partition_size = int(prop_dict.get("partition_size"))
Sami Tolvanen433905f2016-09-01 15:58:35 -0700419 (adjusted_size, verity_size) = AdjustPartitionSizeForVerity(partition_size,
420 verity_fec_supported)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700421 if not adjusted_size:
422 return False
423 prop_dict["partition_size"] = str(adjusted_size)
424 prop_dict["original_partition_size"] = str(partition_size)
Sami Tolvanen433905f2016-09-01 15:58:35 -0700425 prop_dict["verity_size"] = str(verity_size)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700426
David Zeuthen4014a9d2016-09-30 17:29:22 -0400427 # Adjust partition size for AVB.
428 if prop_dict.get("avb_enable") == "true":
429 avbtool = prop_dict.get("avb_avbtool")
430 partition_size = int(prop_dict.get("partition_size"))
431 additional_args = prop_dict["avb_add_hashtree_footer_args"]
432 max_image_size = AVBCalcMaxImageSize(avbtool, partition_size,
433 additional_args)
434 if max_image_size == 0:
435 return False
436 prop_dict["partition_size"] = str(max_image_size)
437 prop_dict["original_partition_size"] = str(partition_size)
438
Ying Wangbd93d422011-10-28 17:02:30 -0700439 if fs_type.startswith("ext"):
Adrien Schildknecht9a072cc2016-11-18 17:06:29 -0800440 build_command = [prop_dict["ext_mkuserimg"]]
Ying Wangbd93d422011-10-28 17:02:30 -0700441 if "extfs_sparse_flag" in prop_dict:
442 build_command.append(prop_dict["extfs_sparse_flag"])
Ying Wang69e9b4d2012-11-26 18:10:23 -0800443 run_fsck = True
Ying Wangbd93d422011-10-28 17:02:30 -0700444 build_command.extend([in_dir, out_file, fs_type,
445 prop_dict["mount_point"]])
Doug Zongker850b8072013-12-05 15:54:55 -0800446 build_command.append(prop_dict["partition_size"])
Ying Wangf3b86352014-11-18 18:03:13 -0800447 if "journal_size" in prop_dict:
448 build_command.extend(["-j", prop_dict["journal_size"]])
Doug Zongker850b8072013-12-05 15:54:55 -0800449 if "timestamp" in prop_dict:
450 build_command.extend(["-T", str(prop_dict["timestamp"])])
Ying Wanga2292c92015-03-24 19:07:40 -0700451 if fs_config:
Doug Zongker82822822014-06-16 09:10:55 -0700452 build_command.extend(["-C", fs_config])
Thierry Strudel74a81e62015-07-09 09:54:55 -0700453 if target_out:
454 build_command.extend(["-D", target_out])
Ying Wanga2292c92015-03-24 19:07:40 -0700455 if "block_list" in prop_dict:
456 build_command.extend(["-B", prop_dict["block_list"]])
Mohamad Ayyashf8765552016-03-02 21:07:23 -0800457 if "base_fs_file" in prop_dict:
458 base_fs_file = ConvertBlockMapToBaseFs(prop_dict["base_fs_file"])
459 if base_fs_file is None:
460 return False
461 build_command.extend(["-d", base_fs_file])
Christoffer Dall8ed01f32014-12-17 21:34:12 +0100462 build_command.extend(["-L", prop_dict["mount_point"]])
Patrick Tjina1900842016-10-20 10:58:12 -0700463 if "extfs_inode_count" in prop_dict:
464 build_command.extend(["-i", prop_dict["extfs_inode_count"]])
Ying Wanga2292c92015-03-24 19:07:40 -0700465 if "selinux_fc" in prop_dict:
Kenny Rootf32dc712012-04-08 10:42:34 -0700466 build_command.append(prop_dict["selinux_fc"])
Mohamad Ayyashb97746e2015-03-03 12:30:37 -0800467 elif fs_type.startswith("squash"):
468 build_command = ["mksquashfsimage.sh"]
469 build_command.extend([in_dir, out_file])
Todd Poynorb2a555e2015-12-15 18:00:14 -0800470 if "squashfs_sparse_flag" in prop_dict:
471 build_command.extend([prop_dict["squashfs_sparse_flag"]])
Mohamad Ayyashb97746e2015-03-03 12:30:37 -0800472 build_command.extend(["-m", prop_dict["mount_point"]])
Thierry Strudel74a81e62015-07-09 09:54:55 -0700473 if target_out:
474 build_command.extend(["-d", target_out])
Mohamad Ayyash88378822016-04-07 22:10:51 -0700475 if fs_config:
476 build_command.extend(["-C", fs_config])
Ying Wanga2292c92015-03-24 19:07:40 -0700477 if "selinux_fc" in prop_dict:
Mohamad Ayyashb97746e2015-03-03 12:30:37 -0800478 build_command.extend(["-c", prop_dict["selinux_fc"]])
Mohamad Ayyashc3484f72016-06-13 09:46:58 -0700479 if "block_list" in prop_dict:
480 build_command.extend(["-B", prop_dict["block_list"]])
Simon Wilsonf86e7ee2015-06-17 12:35:15 -0700481 if "squashfs_compressor" in prop_dict:
482 build_command.extend(["-z", prop_dict["squashfs_compressor"]])
483 if "squashfs_compressor_opt" in prop_dict:
484 build_command.extend(["-zo", prop_dict["squashfs_compressor_opt"]])
Mohamad Ayyashdfec8152016-05-24 12:59:30 -0700485 if "squashfs_block_size" in prop_dict:
486 build_command.extend(["-b", prop_dict["squashfs_block_size"]])
Mohamad Ayyash1b6d3482016-06-15 15:53:07 -0700487 if "squashfs_disable_4k_align" in prop_dict and prop_dict.get("squashfs_disable_4k_align") == "true":
488 build_command.extend(["-a"])
JP Abgrall5bfed5a2014-06-16 14:17:40 -0700489 elif fs_type.startswith("f2fs"):
490 build_command = ["mkf2fsuserimg.sh"]
491 build_command.extend([out_file, prop_dict["partition_size"]])
Ying Wangbd93d422011-10-28 17:02:30 -0700492 else:
Elliott Hughes305b0882016-06-15 17:04:54 -0700493 print("Error: unknown filesystem type '%s'" % (fs_type))
494 return False
Ying Wangbd93d422011-10-28 17:02:30 -0700495
Ying Wanga2292c92015-03-24 19:07:40 -0700496 if in_dir != origin_in:
497 # Construct a staging directory of the root file system.
498 ramdisk_dir = prop_dict.get("ramdisk_dir")
499 if ramdisk_dir:
500 shutil.rmtree(in_dir)
501 shutil.copytree(ramdisk_dir, in_dir, symlinks=True)
502 staging_system = os.path.join(in_dir, "system")
503 shutil.rmtree(staging_system, ignore_errors=True)
504 shutil.copytree(origin_in, staging_system, symlinks=True)
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700505
506 reserved_blocks = prop_dict.get("has_ext4_reserved_blocks") == "true"
507 ext4fs_output = None
508
Ying Wanga2292c92015-03-24 19:07:40 -0700509 try:
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700510 if reserved_blocks and fs_type.startswith("ext4"):
511 (ext4fs_output, exit_code) = RunCommand(build_command)
512 else:
513 (_, exit_code) = RunCommand(build_command)
Ying Wanga2292c92015-03-24 19:07:40 -0700514 finally:
515 if in_dir != origin_in:
516 # Clean up temporary directories and files.
517 shutil.rmtree(in_dir, ignore_errors=True)
518 if fs_config:
519 os.remove(fs_config)
Mohamad Ayyashf8765552016-03-02 21:07:23 -0800520 if base_fs_file is not None:
521 os.remove(base_fs_file)
Ying Wang69e9b4d2012-11-26 18:10:23 -0800522 if exit_code != 0:
523 return False
524
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700525 # Bug: 21522719, 22023465
526 # There are some reserved blocks on ext4 FS (lesser of 4096 blocks and 2%).
527 # We need to deduct those blocks from the available space, since they are
528 # not writable even with root privilege. It only affects devices using
529 # file-based OTA and a kernel version of 3.10 or greater (currently just
530 # sprout).
531 if reserved_blocks and fs_type.startswith("ext4"):
532 assert ext4fs_output is not None
533 ext4fs_stats = re.compile(
534 r'Created filesystem with .* (?P<used_blocks>[0-9]+)/'
535 r'(?P<total_blocks>[0-9]+) blocks')
536 m = ext4fs_stats.match(ext4fs_output.strip().split('\n')[-1])
537 used_blocks = int(m.groupdict().get('used_blocks'))
538 total_blocks = int(m.groupdict().get('total_blocks'))
539 reserved_blocks = min(4096, int(total_blocks * 0.02))
540 adjusted_blocks = total_blocks - reserved_blocks
541 if used_blocks > adjusted_blocks:
542 mount_point = prop_dict.get("mount_point")
543 print("Error: Not enough room on %s (total: %d blocks, used: %d blocks, "
544 "reserved: %d blocks, available: %d blocks)" % (
545 mount_point, total_blocks, used_blocks, reserved_blocks,
546 adjusted_blocks))
547 return False
548
Mohamad Ayyashdd063522015-03-24 12:42:03 -0700549 if not fs_spans_partition:
550 mount_point = prop_dict.get("mount_point")
551 partition_size = int(prop_dict.get("partition_size"))
Sami Tolvanen405e71d2016-02-09 12:28:58 -0800552 image_size = GetSimgSize(out_file)
Mohamad Ayyashdd063522015-03-24 12:42:03 -0700553 if image_size > partition_size:
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700554 print("Error: %s image size of %d is larger than partition size of "
555 "%d" % (mount_point, image_size, partition_size))
556 return False
Mohamad Ayyashdd063522015-03-24 12:42:03 -0700557 if verity_supported and is_verity_partition:
Sami Tolvanen405e71d2016-02-09 12:28:58 -0800558 ZeroPadSimg(out_file, partition_size - image_size)
Mohamad Ayyashdd063522015-03-24 12:42:03 -0700559
Geremy Condrafd6f7512013-06-16 17:26:08 -0700560 # create the verified image if this is to be verified
Geremy Condra5b5f4952014-05-05 22:19:37 -0700561 if verity_supported and is_verity_partition:
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100562 if not MakeVerityEnabledImage(out_file, verity_fec_supported, prop_dict):
Geremy Condrafd6f7512013-06-16 17:26:08 -0700563 return False
564
David Zeuthen4014a9d2016-09-30 17:29:22 -0400565 # Add AVB hashtree and metadata.
566 if "avb_enable" in prop_dict:
567 avbtool = prop_dict.get("avb_avbtool")
568 original_partition_size = int(prop_dict.get("original_partition_size"))
569 partition_name = prop_dict["partition_name"]
570 signing_args = prop_dict["avb_signing_args"]
571 additional_args = prop_dict["avb_add_hashtree_footer_args"]
572 if not AVBAddHashtree(out_file, avbtool, original_partition_size,
573 partition_name, signing_args, additional_args):
574 return False
575
Ying Wang6a42a252013-02-27 13:54:02 -0800576 if run_fsck and prop_dict.get("skip_fsck") != "true":
Geremy Condra6e8f53c2013-12-05 17:09:18 -0800577 success, unsparse_image = UnsparseImage(out_file, replace=False)
Geremy Condrafd6f7512013-06-16 17:26:08 -0700578 if not success:
Ying Wang69e9b4d2012-11-26 18:10:23 -0800579 return False
580
581 # Run e2fsck on the inflated image file
582 e2fsck_command = ["e2fsck", "-f", "-n", unsparse_image]
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700583 (_, exit_code) = RunCommand(e2fsck_command)
Ying Wang69e9b4d2012-11-26 18:10:23 -0800584
585 os.remove(unsparse_image)
586
587 return exit_code == 0
Ying Wangbd93d422011-10-28 17:02:30 -0700588
589
590def ImagePropFromGlobalDict(glob_dict, mount_point):
591 """Build an image property dictionary from the global dictionary.
592
593 Args:
594 glob_dict: the global dictionary from the build system.
595 mount_point: such as "system", "data" etc.
596 """
Doug Zongker1ad7ade2013-12-06 11:53:27 -0800597 d = {}
Tao Bao052ae352015-09-28 13:44:13 -0700598
Tao Bao822f5842015-09-30 16:01:14 -0700599 if "build.prop" in glob_dict:
600 bp = glob_dict["build.prop"]
601 if "ro.build.date.utc" in bp:
602 d["timestamp"] = bp["ro.build.date.utc"]
Ying Wang9f8e8db2011-11-04 11:37:01 -0700603
604 def copy_prop(src_p, dest_p):
605 if src_p in glob_dict:
606 d[dest_p] = str(glob_dict[src_p])
607
Ying Wangbd93d422011-10-28 17:02:30 -0700608 common_props = (
Ying Wangbd93d422011-10-28 17:02:30 -0700609 "extfs_sparse_flag",
Todd Poynorb2a555e2015-12-15 18:00:14 -0800610 "squashfs_sparse_flag",
Kenny Rootf32dc712012-04-08 10:42:34 -0700611 "selinux_fc",
Ying Wang6a42a252013-02-27 13:54:02 -0800612 "skip_fsck",
Adrien Schildknecht9a072cc2016-11-18 17:06:29 -0800613 "ext_mkuserimg",
Geremy Condrafd6f7512013-06-16 17:26:08 -0700614 "verity",
Geremy Condrafd6f7512013-06-16 17:26:08 -0700615 "verity_key",
Sami Tolvanenf99b5312015-05-20 07:30:57 +0100616 "verity_signer_cmd",
David Zeuthen4014a9d2016-09-30 17:29:22 -0400617 "verity_fec",
618 "avb_signing_args",
619 "avb_avbtool"
Ying Wangbd93d422011-10-28 17:02:30 -0700620 )
621 for p in common_props:
Ying Wang9f8e8db2011-11-04 11:37:01 -0700622 copy_prop(p, p)
Ying Wangbd93d422011-10-28 17:02:30 -0700623
624 d["mount_point"] = mount_point
625 if mount_point == "system":
Ying Wang9f8e8db2011-11-04 11:37:01 -0700626 copy_prop("fs_type", "fs_type")
Dan Albert8b72aef2015-03-23 19:13:21 -0700627 # Copy the generic sysetem fs type first, override with specific one if
628 # available.
Mohamad Ayyashb97746e2015-03-03 12:30:37 -0800629 copy_prop("system_fs_type", "fs_type")
Ying Wang9f8e8db2011-11-04 11:37:01 -0700630 copy_prop("system_size", "partition_size")
Ying Wangf3b86352014-11-18 18:03:13 -0800631 copy_prop("system_journal_size", "journal_size")
Daniel Rosenbergf4eabc32014-07-10 15:42:38 -0700632 copy_prop("system_verity_block_device", "verity_block_device")
Tao Baof3282b42015-04-01 11:21:55 -0700633 copy_prop("system_root_image", "system_root_image")
634 copy_prop("ramdisk_dir", "ramdisk_dir")
Tao Bao84e75682015-07-19 02:38:53 -0700635 copy_prop("ramdisk_fs_config", "ramdisk_fs_config")
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700636 copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks")
Simon Wilsonf86e7ee2015-06-17 12:35:15 -0700637 copy_prop("system_squashfs_compressor", "squashfs_compressor")
638 copy_prop("system_squashfs_compressor_opt", "squashfs_compressor_opt")
Mohamad Ayyashdfec8152016-05-24 12:59:30 -0700639 copy_prop("system_squashfs_block_size", "squashfs_block_size")
Mohamad Ayyash1b6d3482016-06-15 15:53:07 -0700640 copy_prop("system_squashfs_disable_4k_align", "squashfs_disable_4k_align")
Mohamad Ayyashf8765552016-03-02 21:07:23 -0800641 copy_prop("system_base_fs_file", "base_fs_file")
David Zeuthen4014a9d2016-09-30 17:29:22 -0400642 copy_prop("system_avb_enable", "avb_enable")
643 copy_prop("system_avb_add_hashtree_footer_args",
644 "avb_add_hashtree_footer_args")
Patrick Tjina1900842016-10-20 10:58:12 -0700645 copy_prop("system_extfs_inode_count", "extfs_inode_count")
Alex Light4e358ab2016-06-16 14:47:10 -0700646 elif mount_point == "system_other":
647 # We inherit the selinux policies of /system since we contain some of its files.
648 d["mount_point"] = "system"
649 copy_prop("fs_type", "fs_type")
650 copy_prop("system_fs_type", "fs_type")
651 copy_prop("system_size", "partition_size")
652 copy_prop("system_journal_size", "journal_size")
653 copy_prop("system_verity_block_device", "verity_block_device")
654 copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks")
655 copy_prop("system_squashfs_compressor", "squashfs_compressor")
656 copy_prop("system_squashfs_compressor_opt", "squashfs_compressor_opt")
657 copy_prop("system_squashfs_block_size", "squashfs_block_size")
658 copy_prop("system_base_fs_file", "base_fs_file")
David Zeuthen4e9c89a2016-10-04 18:53:34 -0400659 copy_prop("system_avb_enable", "avb_enable")
660 copy_prop("system_avb_add_hashtree_footer_args",
661 "avb_add_hashtree_footer_args")
Patrick Tjina1900842016-10-20 10:58:12 -0700662 copy_prop("system_extfs_inode_count", "extfs_inode_count")
Ying Wangbd93d422011-10-28 17:02:30 -0700663 elif mount_point == "data":
JP Abgrall5bfed5a2014-06-16 14:17:40 -0700664 # Copy the generic fs type first, override with specific one if available.
Ying Wang9f8e8db2011-11-04 11:37:01 -0700665 copy_prop("fs_type", "fs_type")
JP Abgrall5bfed5a2014-06-16 14:17:40 -0700666 copy_prop("userdata_fs_type", "fs_type")
Ying Wang9f8e8db2011-11-04 11:37:01 -0700667 copy_prop("userdata_size", "partition_size")
668 elif mount_point == "cache":
669 copy_prop("cache_fs_type", "fs_type")
670 copy_prop("cache_size", "partition_size")
Ying Wanga0febe52013-03-20 11:02:05 -0700671 elif mount_point == "vendor":
672 copy_prop("vendor_fs_type", "fs_type")
673 copy_prop("vendor_size", "partition_size")
Ying Wangf3b86352014-11-18 18:03:13 -0800674 copy_prop("vendor_journal_size", "journal_size")
Daniel Rosenbergf4eabc32014-07-10 15:42:38 -0700675 copy_prop("vendor_verity_block_device", "verity_block_device")
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700676 copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks")
Patrick Tjine11aa502016-02-09 15:40:38 -0800677 copy_prop("vendor_squashfs_compressor", "squashfs_compressor")
678 copy_prop("vendor_squashfs_compressor_opt", "squashfs_compressor_opt")
Mohamad Ayyashdfec8152016-05-24 12:59:30 -0700679 copy_prop("vendor_squashfs_block_size", "squashfs_block_size")
Mohamad Ayyash1b6d3482016-06-15 15:53:07 -0700680 copy_prop("vendor_squashfs_disable_4k_align", "squashfs_disable_4k_align")
Mohamad Ayyashf8765552016-03-02 21:07:23 -0800681 copy_prop("vendor_base_fs_file", "base_fs_file")
David Zeuthen4014a9d2016-09-30 17:29:22 -0400682 copy_prop("vendor_avb_enable", "avb_enable")
683 copy_prop("vendor_avb_add_hashtree_footer_args",
684 "avb_add_hashtree_footer_args")
Patrick Tjina1900842016-10-20 10:58:12 -0700685 copy_prop("vendor_extfs_inode_count", "extfs_inode_count")
Ying Wangb8888432014-03-11 17:13:27 -0700686 elif mount_point == "oem":
687 copy_prop("fs_type", "fs_type")
688 copy_prop("oem_size", "partition_size")
Ying Wangf3b86352014-11-18 18:03:13 -0800689 copy_prop("oem_journal_size", "journal_size")
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700690 copy_prop("has_ext4_reserved_blocks", "has_ext4_reserved_blocks")
Patrick Tjina1900842016-10-20 10:58:12 -0700691 copy_prop("oem_extfs_inode_count", "extfs_inode_count")
David Zeuthen4014a9d2016-09-30 17:29:22 -0400692 d["partition_name"] = mount_point
Ying Wangbd93d422011-10-28 17:02:30 -0700693 return d
694
695
696def LoadGlobalDict(filename):
697 """Load "name=value" pairs from filename"""
698 d = {}
699 f = open(filename)
700 for line in f:
701 line = line.strip()
702 if not line or line.startswith("#"):
703 continue
704 k, v = line.split("=", 1)
705 d[k] = v
706 f.close()
707 return d
708
709
710def main(argv):
Thierry Strudel74a81e62015-07-09 09:54:55 -0700711 if len(argv) != 4:
Ying Wangbd93d422011-10-28 17:02:30 -0700712 print __doc__
713 sys.exit(1)
714
715 in_dir = argv[0]
716 glob_dict_file = argv[1]
717 out_file = argv[2]
Thierry Strudel74a81e62015-07-09 09:54:55 -0700718 target_out = argv[3]
Ying Wangbd93d422011-10-28 17:02:30 -0700719
720 glob_dict = LoadGlobalDict(glob_dict_file)
Ying Wangae61f502015-03-12 18:30:39 -0700721 if "mount_point" in glob_dict:
Tao Baoc7a6f1e2015-06-23 11:16:05 -0700722 # The caller knows the mount point and provides a dictionay needed by
723 # BuildImage().
Ying Wangae61f502015-03-12 18:30:39 -0700724 image_properties = glob_dict
Ying Wang9f8e8db2011-11-04 11:37:01 -0700725 else:
Ying Wangae61f502015-03-12 18:30:39 -0700726 image_filename = os.path.basename(out_file)
727 mount_point = ""
728 if image_filename == "system.img":
729 mount_point = "system"
Alex Light4e358ab2016-06-16 14:47:10 -0700730 elif image_filename == "system_other.img":
731 mount_point = "system_other"
Ying Wangae61f502015-03-12 18:30:39 -0700732 elif image_filename == "userdata.img":
733 mount_point = "data"
734 elif image_filename == "cache.img":
735 mount_point = "cache"
736 elif image_filename == "vendor.img":
737 mount_point = "vendor"
738 elif image_filename == "oem.img":
739 mount_point = "oem"
740 else:
741 print >> sys.stderr, "error: unknown image file name ", image_filename
742 exit(1)
Ying Wangbd93d422011-10-28 17:02:30 -0700743
Ying Wangae61f502015-03-12 18:30:39 -0700744 image_properties = ImagePropFromGlobalDict(glob_dict, mount_point)
745
Thierry Strudel74a81e62015-07-09 09:54:55 -0700746 if not BuildImage(in_dir, image_properties, out_file, target_out):
Dan Albert8b72aef2015-03-23 19:13:21 -0700747 print >> sys.stderr, "error: failed to build %s from %s" % (out_file,
748 in_dir)
Ying Wangbd93d422011-10-28 17:02:30 -0700749 exit(1)
750
751
752if __name__ == '__main__':
753 main(sys.argv[1:])