Compare commits

...

2 commits

Author SHA1 Message Date
Harald Hoyer b54c13c827
Update README.md 2020-03-13 10:50:56 +01:00
Harald Hoyer 74cbeed46c
Update README.md 2020-03-13 10:48:25 +01:00

View file

@ -95,9 +95,7 @@ This will create the following files and directories:
- `VerityBook` - keep this directory around for updates - `VerityBook` - keep this directory around for updates
(includes needed passwd/group history and rpmdb) (includes needed passwd/group history and rpmdb)
- `dist/VerityBook-<HASH>.img` - the root image - `dist/VerityBook-<HASH>.img` - the root image
- `dist/VerityBook-<HASH>-efi.tgz` - signed efi binaries
- `dist/VerityBook-31.<datetime>.json` - metadata of the image - `dist/VerityBook-31.<datetime>.json` - metadata of the image
- `dist/VerityBook-31.<datetime>.json.sig` - signature of the metadata
- `dist/VerityBook-latest.json` - a symlink to the latest version - `dist/VerityBook-latest.json` - a symlink to the latest version
## Sign the release ## Sign the release
@ -109,11 +107,14 @@ Rename ```DB.key``` ```DB.crt``` to ```VerityBook.key``` and ```VerityBook.crt``
Optionally copy ```Shell.efi``` (might be ```/usr/share/edk2/ovmf/Shell.efi```) to the veritybook directory. Optionally copy ```Shell.efi``` (might be ```/usr/share/edk2/ovmf/Shell.efi```) to the veritybook directory.
```console ```console
$ sudo ./mkrelease.sh VerityBook-latest.json $ sudo ./mkrelease.sh dist/VerityBook-latest.json
``` ```
This will create the following files and directories:
- `dist/VerityBook-<HASH>-efi.tgz` - signed efi binaries
- `dist/VerityBook-31.<datetime>.json.sig` - signature of the metadata
if you want to make deltas: if you want to make deltas:
```console ```console
$ sudo ./mkdelta.sh ${CHECKPOINT:+--checkpoint} dist/VerityBook-latest.json $ sudo ./mkdelta.sh ${CHECKPOINT:+--checkpoint} dist/VerityBook-latest.json
@ -122,11 +123,9 @@ If `CHECKPOINT` is set, it will remove old images.
then upload to your update server: then upload to your update server:
```console ```console
$ TARBALL="$(jq -r '.name' VerityBook-latest.json)-$(jq -r '.version' VerityBook-latest.json)".tgz $ rsync -Pavorz dist/ <DESTINATION>/
$ scp "$TARBALL" VerityBook-latest.json <DESTINATION>
``` ```
## QEMU disk image ## QEMU disk image
```console ```console
$ sudo ./mkimage.sh <IMGDIR> image.raw $ sudo ./mkimage.sh <IMGDIR> image.raw