-
Notifications
You must be signed in to change notification settings - Fork 162
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Test TPM in verification image #3971
Conversation
6da803c
to
d55cd9f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some hadolint and shellcheck issues to look at.
d55cd9f
to
78216f8
Compare
I'll run some test to make sure verification image works fine, then fix the complains. |
#3867 didn't publish a riscv64 version to dockerhub, despite successful riscv64 build on the PR build! If we merge this riscv64 builds on master will break. Need to figure that out first. |
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Run again
968ed44
to
8857c8a
Compare
df2d20d
to
d695f18
Compare
Utilize the tpm-recovery tool to run tests on TPM hardware and make sure operations that are used by EVE are all functional and available. Signed-off-by: Shahriyar Jalayeri <shahriyar@zededa.com>
d695f18
to
713f925
Compare
|
This PR adds recover-tpm tool in debug container for general use and references it in verification image to run some tests on the TPM hardware. Tests are done in a new script
verifytpm.sh
, it tests all the TPM operations that are critical for EVE and make sure all function well, in addition it runs a small stress test on TPM to make sure key generation and key derivation operations work fine even after a few dozen repeated operations .Needs to be merged after #3867