mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
f4cf4ae6eb
Add a new tool called 'pvimg' that can be used to create and inspect
Secure Execution images. It has several subcommands:
+ create: create an IBM Secure Execution image (genprotimg compatible
sytnax) and C-'genprotimg' is going to be replaced by a
symlink to this subcommand.
+ test: test various aspects of an existing Secure Execution image
+ info: print information about an existing Secure Execution
image (experimental API!)
+ version: print version and exit
As mentioned above, the 'genprotimg' tool is now a symbolic link to the
'pvimg create' subcommand and the CLI is backward compatible with the
original genprotimg CLI, with the following exceptions:
- '-v' increases the verbosity instead of showing the version
- '-V' is now deprecated in favor of '-v'
- an existing output file is no longer silently overwritten, but there
is a new flag '--overwrite' to get the original behavior
- experimental options are no longer described in the help
- the commands '--cert ...' and '--root-ca' are now mutually exclusive
- to '--no-verify'
- there is now a component check, e.g. it checks if the specified
Linux kernel looks like a raw binary s390x kernel. These checks can be
disabled by using the new command line flag '--no-component-check'
Acked-by: Steffen Eiden <seiden@linux.ibm.com>
Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
53 lines
1.1 KiB
Rust
53 lines
1.1 KiB
Rust
// SPDX-License-Identifier: MIT
|
|
//
|
|
// Copyright IBM Corp. 2024
|
|
|
|
use std::io::{Read, Seek};
|
|
|
|
use pvimg::error::Result;
|
|
use pvimg::secured_comp::ComponentTrait;
|
|
|
|
use super::ComponentKind;
|
|
use super::{CompReader, ComponentCheckCtx, ComponentCheckTrait, ReadSeekDebug};
|
|
|
|
#[derive(Debug)]
|
|
pub struct SeHdrComp(pub CompReader);
|
|
|
|
impl SeHdrComp {
|
|
pub fn new(reader: Box<dyn ReadSeekDebug>) -> Self {
|
|
Self(CompReader { reader })
|
|
}
|
|
}
|
|
|
|
impl Seek for SeHdrComp {
|
|
fn seek(&mut self, pos: std::io::SeekFrom) -> std::io::Result<u64> {
|
|
self.0.seek(pos)
|
|
}
|
|
}
|
|
|
|
impl Read for SeHdrComp {
|
|
fn read(&mut self, buf: &mut [u8]) -> std::io::Result<usize> {
|
|
self.0.read(buf)
|
|
}
|
|
}
|
|
|
|
impl ComponentCheckTrait for SeHdrComp {
|
|
fn check(&mut self, _ctx: &ComponentCheckCtx) -> Result<()> {
|
|
Ok(())
|
|
}
|
|
|
|
fn init_ctx(&mut self, _ctx: &mut ComponentCheckCtx) -> Result<()> {
|
|
Ok(())
|
|
}
|
|
}
|
|
|
|
impl ComponentTrait<ComponentKind> for SeHdrComp {
|
|
fn kind(&self) -> ComponentKind {
|
|
ComponentKind::SeHdr
|
|
}
|
|
|
|
fn secure_mode(&self) -> bool {
|
|
false
|
|
}
|
|
}
|