From 678c37c3c2175adc1df509a6ada5029d79e4acd7 Mon Sep 17 00:00:00 2001 From: Michael Marineau Date: Mon, 2 May 2016 11:33:47 -0700 Subject: [PATCH] build_image: disable verity on arm64 Our current scheme injects the verity hash into a free spot in x86 kernel images. This is a bad thing to try on other types ;-) --- build_image | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/build_image b/build_image index 788f9f326e..d2ce15e238 100755 --- a/build_image +++ b/build_image @@ -88,6 +88,11 @@ switch_to_strict_mode check_gsutil_opts +# Inserting the verity hash into the kernel assumes x86_64 +if [[ "${FLAGS_board}" != amd64-usr ]]; then + FLAGS_enable_rootfs_verification=${FLAGS_FALSE} +fi + # If downloading packages is enabled ensure the board is configured properly. if [[ ${FLAGS_getbinpkg} -eq ${FLAGS_TRUE} ]]; then "${SRC_ROOT}/scripts/setup_board" --board="${FLAGS_board}" \