From bf8ce573cd67ffb0e3c1dba4267e65e9fbece2a9 Mon Sep 17 00:00:00 2001 From: Brandon Philips Date: Fri, 5 Jul 2013 11:52:38 -0700 Subject: [PATCH] feat(coreos-au-key): add an ebuild to put dev keys on image This places a dev signing key on disk for testing purposes. As noted in the ebuild a production key will replace this key when building official images. --- .../coreos-au-key-0.0.1-r1.ebuild | 1 + .../coreos-au-key/coreos-au-key-0.0.1.ebuild | 20 ++++++++++++++ .../files/update-payload-key.key.pem | 27 +++++++++++++++++++ .../files/update-payload-key.pub.pem | 9 +++++++ ...ebuild => update_engine-0.0.1-r370.ebuild} | 0 .../update_engine/update_engine-0.0.1.ebuild | 1 + .../update_engine/update_engine-9999.ebuild | 1 + 7 files changed, 59 insertions(+) create mode 120000 sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1-r1.ebuild create mode 100644 sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1.ebuild create mode 100644 sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.key.pem create mode 100644 sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.pub.pem rename sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/{update_engine-0.0.1-r369.ebuild => update_engine-0.0.1-r370.ebuild} (100%) diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1-r1.ebuild new file mode 120000 index 0000000000..d34d927072 --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1-r1.ebuild @@ -0,0 +1 @@ +coreos-au-key-0.0.1.ebuild \ No newline at end of file diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1.ebuild new file mode 100644 index 0000000000..f365aefd3e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/coreos-au-key-0.0.1.ebuild @@ -0,0 +1,20 @@ +# Copyright (c) 2013 CoreOS Inc. All rights reserved. +# Distributed under the terms of the GNU General Public License v2 + +EAPI=2 + +# This key pair is only used in development. An official production image will +# have the production keys inserted at build time. (see core_update_upload) + +DESCRIPTION="CoreOS development auto update keys." +HOMEPAGE="http://github.com/coreos/" +SRC_URI="" +LICENSE="BSD" +SLOT="0" +KEYWORDS="amd64 arm x86" + +src_install() { + KEY_DIR=/usr/share/update_engine/ + insinto "${KEY_DIR}" + doins "${FILESDIR}"/*.pub +} diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.key.pem b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.key.pem new file mode 100644 index 0000000000..ac660a755e --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.key.pem @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEAzFS5uVJ+pgibcFLD3kbYk02Edj0HXq31ZT/Bva1sLp3Ysv+Q +Tv/ezjf0gGFfASdgpz6G+zTipS9AIrQr0yFR+tdp1ZsHLGxVwvUoXFftdapqlyj8 +uQcWjjbN7qJsZu0Ett/qo93hQ5nHW7Sv5dRm/ZsDFqk2Uvyaoef4bF9r03wYpZq7 +K3oALZ2smETv+A5600mj1Xg5M52QFU67UHlsEFkZphrGjiqiCdp9AAbAvE7a5rFc +Jf86YR73QX08K8BX7OMzkn3DsqdnWvLB3l3W6kvIuP+75SrMNeYAcU8PI1+bzLcA +G3VN3jA78zeKALgynUNH50mxuiiU3DO4DZ+p5QIDAQABAoIBAH7ENbE+9+nkPyMx +hekaBPVmSz7b3/2iaTNWmckmlY5aSX3LxejtH3rLBjq7rihWGMXJqg6hodcfeGfP +Zb0H2AeKq1Nlac7qq05XsKGRv3WXs6dyO1BDkH/Minh5dk1o0NrwEm91kXLSLfe8 +IsCwxPCjwgfGFTjpFLpL4zjA/nFmWRyk2eyvs5VYRGKbbC83alUy7LutyRdZfw1b +nwXldw2m8k/HPbGhaAqPpXTOjckIXZS5Dcp3smrOzwObZ6c3gQzg8upaRmxJVOmk +cgCFTe0yUB2GMTEE3SUmuWJyZqECoyQtuiu0yT3igH8MZQpjg9NXm0eho/bXjN36 +frH+ikUCgYEA7VdCRcisnYWct29j+Bnaio9yXwwxhfoee53a4LQgjw5RLGUe1mXe +j56oZ1Mak3Hh55sVQLNXZBuXHQqPsr7KkWXJXedDNFfq1u6by4LeJV0YYiDjjaCM +T5G4Tcs7xhBWszLMCjhpJCrwHdGk3aa65UQ+angZlxhyziULCjpb5rMCgYEA3GUb +VkqlVuNkHoogOMwg+h1jUSkwtWvP/z/FOXrKjivuwSgQ+i6PsildI3FL/WQtJxgd +arB+l0L8TZJ6spFdNXwGmdCLqEcgEBYl11EojOXYLa7oLONI41iRQ3/nBBIqC38P +Cs6CZQG/ZpKSoOzXE34BwcrOL99MA2oaVpGHuQcCgYA1IIk3Mbph8FyqOwb3rGHd +Dksdt48GXHyiUy2BixCWtS+6blA+0cLGB0/PAS07wAw/WdmiCAMR55Ml7w1Hh6m0 +bkJrAK9schmhTvwUzBCJ8JLatF37f+qojQfichHJPjMKHd7KkuIGNI5XPmxXKVFA +rMwD7SpdRh28w1H7UiDsPQKBgGebnFtXohyTr2hv9K/evo32LM9ltsFC2rga6YOZ +BwoI+yeQx1JleyX9LgzQYTHQ2y0quAGE0S4YznVFLCswDQpssMm0cUL9lMQbNVTg +kViTYKoxNHKNsqE17Kw3v4l5ZIydAZxJ8qC7TphQxV+jl4RRU1AgIAf/SEO+qH0T +0yMXAoGBAN+y9QpGnGX6cgwLQQ7IC6MC+3NRed21s+KxHzpyF+Zh/q6NTLUSgp8H +dBmeF4wAZTY+g/fdB9drYeaSdRs3SZsM7gMEvjspjYgE2rV/5gkncFyGKRAiNOR4 +bsy1Gm/UYLTc8+S3fq/xjg9RCjW9JMwavAwL6oVNNt7nyAXPfvSu +-----END RSA PRIVATE KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.pub.pem b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.pub.pem new file mode 100644 index 0000000000..ccee9ee90b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-au-key/files/update-payload-key.pub.pem @@ -0,0 +1,9 @@ +-----BEGIN PUBLIC KEY----- +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFS5uVJ+pgibcFLD3kbY +k02Edj0HXq31ZT/Bva1sLp3Ysv+QTv/ezjf0gGFfASdgpz6G+zTipS9AIrQr0yFR ++tdp1ZsHLGxVwvUoXFftdapqlyj8uQcWjjbN7qJsZu0Ett/qo93hQ5nHW7Sv5dRm +/ZsDFqk2Uvyaoef4bF9r03wYpZq7K3oALZ2smETv+A5600mj1Xg5M52QFU67UHls +EFkZphrGjiqiCdp9AAbAvE7a5rFcJf86YR73QX08K8BX7OMzkn3DsqdnWvLB3l3W +6kvIuP+75SrMNeYAcU8PI1+bzLcAG3VN3jA78zeKALgynUNH50mxuiiU3DO4DZ+p +5QIDAQAB +-----END PUBLIC KEY----- diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1-r369.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1-r370.ebuild similarity index 100% rename from sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1-r369.ebuild rename to sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1-r370.ebuild diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1.ebuild index f336970a6d..b6cb2d1737 100644 --- a/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1.ebuild +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-0.0.1.ebuild @@ -21,6 +21,7 @@ LIBCHROME_VERS="180609" RDEPEND="app-arch/bzip2 coreos-base/coreos-ca-certificates + coreos-base/coreos-au-key coreos-base/libchrome:${LIBCHROME_VERS}[cros-debug=] coreos-base/libchromeos coreos-base/metrics diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-9999.ebuild index 383a238ad6..cffb2085d9 100644 --- a/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-9999.ebuild +++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/update_engine/update_engine-9999.ebuild @@ -20,6 +20,7 @@ LIBCHROME_VERS="180609" RDEPEND="app-arch/bzip2 coreos-base/coreos-ca-certificates + coreos-base/coreos-au-key coreos-base/libchrome:${LIBCHROME_VERS}[cros-debug=] coreos-base/libchromeos coreos-base/metrics