From 27ffe6e29d41d7f8b39a0490709a4d912fc2f7ff Mon Sep 17 00:00:00 2001 From: John Ogness Date: Mon, 7 May 2018 11:23:05 +0200 Subject: secureboot: allow device or image specification Rather than assuming the image file lx-trainer.img in the current working directory, require an argument that specifies this. Also, allow this argument to be a block device to perform the secure boot preparation on devices already prepared with the image. Signed-off-by: John Ogness --- lx-trainer-vm/README | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) (limited to 'lx-trainer-vm/README') diff --git a/lx-trainer-vm/README b/lx-trainer-vm/README index 80dd422..54ac9ff 100644 --- a/lx-trainer-vm/README +++ b/lx-trainer-vm/README @@ -1,6 +1,6 @@ lx-trainer ========== -v2018-04-20 +v2018-05-07 John Ogness @@ -38,8 +38,8 @@ The script can be run like this: Layer tarballs are unpacked using --numeric-owner to avoid any accidental incorrect username/uid and group/gid mappings. For the trainer image, the -"devel" user has uid/gid 1000/1000. So for files intended for devel's home -it is recommend to create the layer tarball using: +"devel" user has a uid/gid of 1000/1000. So for files intended for devel's +home it is recommend to create the layer tarball using: tar cvf mylayer.tar --owner=1000 --group=1000 --numeric-owner mydir @@ -48,9 +48,15 @@ make_lxtrainer_secureboot.sh ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The "make_lxtrainer_secureboot.sh" script will convert the generated -image to use secure boot. This should be run on the generated image -*before* it is copied to the devices. The script assumes lx-trainer.img -is located in the current working directory and it will modify this -file in place. +image to use secure boot. To save you time, this should be run on the +generated image *before* it is copied to the devices. + + sudo ./make_lxtrainer_secureboot.sh lx-trainer.img + +However, you can also run it for a device that has already been +prepared with the image. +(Only an example! Verify destination devices *before* running!) + + sudo ./make_lxtrainer_secureboot.sh /dev/sde At some point this script will not be needed. But until then... -- cgit v1.2.3