lanzaboote/nix/tests
Alois Wohlschlager ca070a9eec
tool: make stubs input-addressed
The stubs on the ESP are now input-addressed, where the inputs are the
system toplevel and the public key used for signature. This way, it is
guaranteed that any stub at a given path will boot the desired system,
even in the presence of one of the two edge-cases where it was not
previously guaranteed:
* The latest generation was deleted at one point, and its generation
  number was reused by a different system configuration. This is
  detected because the toplevel will change.
* The secure boot signing key was rotated, so old stubs would not boot
  at all any more. This is detected because the public key will change.

Avoiding these two cases will allow to skip reinstallation of stubs that
are already in place at the correct path.
2023-10-03 22:08:10 +02:00
..
fixtures/uefi-keys treewide: move uefi-keys into test fixtures 2023-01-26 01:18:41 +01:00
lanzaboote.nix tool: make stubs input-addressed 2023-10-03 22:08:10 +02:00
stub.nix stub: add fat variant 2023-05-24 22:09:28 +02:00