-
Notifications
You must be signed in to change notification settings - Fork 63
Update hubtools for fixed verify function
#9437
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It looks like this is downgrading a bunch of packages, which doesn't seem right. I've had trouble of this form in the past trying to use cargo update; maybe it would be better to just pin the rev of hubtools we intend to use in Cargo.toml?
bleh good catch. I tried just updating the branch for testing and it didn't work until I did |
Some refactoring in a dependent lpc55 crate accidentally dropped a check against the root key table hash on the RoT. This resulted in `archive.verify` incorrectly passing in places like wicketd and selecting incorrect RoT images for installation.
|
I think the issue is that the actual fix was in the |
5684955 to
bac62c2
Compare
plotnick
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks great, thanks! We are now pulling in two versions of hubtools because gateway-sp-comms (from m-g-s) hasn't been updated yet, but I don't think that should affect the issue we're trying to solve here, nor do I think it's a problem.
Omcrion #9437 fixed a bug that could cause an incorrect image to be selected for update. Due to some luck with ordering, this bug should not affect gimlet sleds so long as we have gimlet images show up before cosmo images. Add some checks at build time to make sure this is the case until we have upgraded pass this bug.
Just like oxidecomputer/omicron#9437, pin to a specific revision to avoid issues with git deps and `cargo update`.
Just like oxidecomputer/omicron#9437, pin to a specific revision to avoid issues with git deps and `cargo update`.
Omcrion #9437 fixed a bug that could cause an incorrect image to be selected for update. Due to some luck with ordering, this bug should not affect gimlet sleds so long as we have gimlet images show up before cosmo images. Add some checks at build time to make sure this is the case until we have upgraded pass this bug.
Omcrion #9437 fixed a bug that could cause an incorrect image to be selected for update. Due to some luck with ordering, this bug should not affect gimlet sleds so long as we have gimlet images show up before cosmo images. Add some checks at build time to make sure this is the case until we have upgraded pass this bug.
Some refactoring in a dependent lpc55 crate accidentally dropped a check against the root key table hash on the RoT. This resulted in
archive.verifyincorrectly passing in places like wicketd and selecting incorrect RoT images for installation.