Aller au contenu

QA:Testcase Media Consistency Verification

Description

This is to ensure that SecureBoot and firmware updates function with the lastest packages.

  • ❗ - Important. It is best to have this tested, but if it isn't or if it fails then it won't block the release.
  • ❌ - Release blocker. This must be tested and until it is, or if it fails, then the issue must be properly addressed.

Releases and Architectures

Distro aarch64 ppc64le riscv64 s390x x86_64
Rocky Linux 9 ❗ N/A N/A N/A ❌
Rocky Linux 10 ❗ N/A N/A N/A ❌

Setup

  1. Install Rocky into a VM or hardware with SecureBoot enabled
  2. Install FWUPD:=
  3. On EL9:- dnf install fwupd
  4. On EL10:- dnf install fwupd-efi

How to test

  1. Reboot into dwupd

  2. Follow these commands:=

ESP_DEV=$(findmnt -no SOURCE /boot/efi) # i.e. /dev/vda1
ESP_DISK=/dev/$(lsblk -no PKNAME "$ESP_DEV") # i.e. /dev/vda
ESP_PART=$(echo "$ESP_DEV" | grep -oE '[0-9]+$') # i.e. 1
cp /usr/libexec/fwupd/efi/fwupdx64.efi.signed /boot/efi/EFI/centos/fwupdx64.efi
# load option for fwupd: basename, leading backslash, UCS-2 LE, NUL-terminated
printf '\\fwupdx64.efi\0' | iconv -f ASCII -t UTF-16LE > /tmp/opt.bin
efibootmgr -C -d "$ESP_DISK" -p "$ESP_PART" -L "Linux Firmware Updater" \
           -l '\EFI\centos\shimx64.efi' -@ /tmp/opt.bin
efibootmgr -n $(efibootmgr | sed -n 's/^Boot\([0-9A-F]*\)\* Linux Firmware Updater$/\1/p')
systemctl reboot

Expected Results

  1. The VM should boot into fwupd, wait 10 seconds, then do a normal boot.

Additional Information

If you have questions with respect to this content or to report concerns regarding the use or misuse content please do not hesitate to contact us at testing@rockylinux.org.

Rocky Linux and the Rocky Enterprise Software Foundation (RESF) does not make any express or implied warranties, including but not limited to the warranties of non-infringement of any third party intellectual property rights. RESF does not warrant that any pending trademark applications for trademarks of RESF will result in any granted trademark protection. RESF shall not be liable for any claims relating to user's activities falling within the scope of the permission and user hereby agrees to indemnify, defend and hold RESF and its contributors harmless against any such claim.

This work is heavily inspired by the Fedora Quality Assurance documents which were made available under Attribution-Share Alike 4.0 International license unless otherwise noted.

This content is licensed under under Attribution-Share Alike 4.0 International license unless otherwise noted.

Author: Chris Stackpole