commit 48de1258ce28bdaba984ed1fd77375ee31d32869
author Treehugger Robot <treehugger-gerrit@google.com> Tue Dec 06 02:02:59 2022 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Dec 06 02:02:59 2022 +0000
tree 84166a644afa1d2623990de5a3481a3dfb706fb8
parent bf6eeaa0aea3cea6f23c6fe5ea50ed253a44a03c
parent e2bd27e09a1e8cb7da06ea5a16429182c2e069c4

Merge "Add hashes of initrd to the kernel footer"

microdroid/Android.bp

diff --git a/microdroid/Android.bp b/microdroid/Android.bp
index af6031a..79378fe 100644
--- a/microdroid/Android.bp
+++ b/microdroid/Android.bp
@@ -567,6 +567,12 @@
             enabled: true,
         },
     },
+    props: [
+        {
+            name: "trusted_ramdisk",
+            file: ":microdroid_initrd_hashes",
+        },
+    ],
 }
 
 prebuilt_etc {

microdroid/initrd/Android.bp

diff --git a/microdroid/initrd/Android.bp b/microdroid/initrd/Android.bp
index d8e7069..eb761bf 100644
--- a/microdroid/initrd/Android.bp
+++ b/microdroid/initrd/Android.bp
@@ -159,3 +159,36 @@
     },
     filename: "microdroid_initrd_normal.img",
 }
+
+genrule {
+    name: "microdroid_initrd_normal.sha256",
+    srcs: [":microdroid_initrd_normal"],
+    cmd: "cat $(in) | sha256sum | cut -d' ' -f1 > $(out)",
+    out: ["hash"],
+}
+
+genrule {
+    name: "microdroid_initrd_app_debuggable.sha256",
+    srcs: [":microdroid_initrd_app_debuggable"],
+    cmd: "cat $(in) | sha256sum | cut -d' ' -f1 > $(out)",
+    out: ["hash"],
+}
+
+genrule {
+    name: "microdroid_initrd_full_debuggable.sha256",
+    srcs: [":microdroid_initrd_full_debuggable"],
+    cmd: "cat $(in) | sha256sum | cut -d' ' -f1 > $(out)",
+    out: ["hash"],
+}
+
+genrule {
+    name: "microdroid_initrd_hashes",
+    srcs: [
+        ":microdroid_initrd_normal.sha256",
+        ":microdroid_initrd_app_debuggable.sha256",
+        ":microdroid_initrd_full_debuggable.sha256",
+    ],
+    // join the hashes with commas
+    cmd: "cat $(in) | tr '\n' ',' > $(out) && truncate -s -1 $(out)",
+    out: ["output"],
+}