[Skiboot] [PATCH] stb: Put correct label (for skiboot) into container

Stewart Smith stewart at linux.vnet.ibm.com
Tue Feb 13 19:25:01 AEDT 2018


Stewart Smith <stewart at linux.vnet.ibm.com> writes:
> Hostboot will expect the label field of the stb header to contain
> "PAYLOAD" for skiboot or it will fail to load and run skiboot.
>
> The failure looks something like this:
>  53.40896|ISTEP 20. 1 - host_load_payload
>  53.65840|secure|Secureboot Failure plid = 0x90000755, rc = 0x1E07
>
>  53.65881|System shutting down with error status 0x1E07
>  53.67547|================================================
>  53.67954|Error reported by secure (0x1E00) PLID 0x90000755
>  53.67560|  Container's component ID does not match expected component ID
>  53.67561|  ModuleId   0x09 SECUREBOOT::MOD_SECURE_VERIFY_COMPONENT
>  53.67845|  ReasonCode 0x1e07 SECUREBOOT::RC_ROM_VERIFY
>  53.67998|  UserData1   : 0x0000000000000000
>  53.67999|  UserData2   : 0x0000000000000000
>  53.67999|------------------------------------------------
>  53.68000|  Callout type             : Procedure Callout
>  53.68000|  Procedure                : EPUB_PRC_HB_CODE
>  53.68001|  Priority                 : SRCI_PRIORITY_HIGH
>  53.68001|------------------------------------------------
>  53.68002|  Callout type             : Procedure Callout
>  53.68003|  Procedure                : EPUB_PRC_FW_VERIFICATION_ERR
>  53.68003|  Priority                 : SRCI_PRIORITY_HIGH
>  53.68004|------------------------------------------------
>
> Reported-by: Pridhiviraj Paidipeddi <ppaidipe at linux.vnet.ibm.com>
> Tested-by: Pridhiviraj Paidipeddi <ppaidipe at linux.vnet.ibm.com>
> Signed-off-by: Stewart Smith <stewart at linux.vnet.ibm.com>
> ---
>  Makefile.main                  |  4 ++--
>  libstb/sign-with-local-keys.sh | 10 ++++++++--
>  2 files changed, 10 insertions(+), 4 deletions(-)

Merged to master as of b94fbeaf137c3981976699ef5dcc8cf95088413a

NOTE: if you're using modern hostboot, you may need this in order for
Secure Boot not to bite you in the arse :(

(IMNSHO this is a hostboot bug and they should be more tolerant,
especially when secure mode isn't enabled)

-- 
Stewart Smith
OPAL Architect, IBM.



More information about the Skiboot mailing list