staging/pepe2k/scripts, branch v22.03.0

image: add support for Netgear encrypted image

2022-07-21T14:58:00Z

Netgear encrypted image is used in various devices including WAX202, WAX206, and EX6400v3. This image format also requires a dummy squashfs4 image which is added here as well. References in WAX202 GPL source: https://www.downloads.netgear.com/files/GPL/WAX202_V1.0.5.1_Source.rar * openwrt/bootloader/u-boot-mt7621-2018.09-gitb178829-20200526/board/ralink/common/dual_image.c Bootloader code that verifies the presence of a squashfs4 image, thus a dummy image is added here. * openwrt/tools/imgencoder/src/gj_enc.c Contains code that generates the encrypted image. There is support for adding an RSA signature, but it does not look like the signature is verified by the stock firmware or bootloader. * openwrt/tools/imgencoder/src/imagekey.h Contains the encryption key and IV. It appears the same key/IV is used for other Netgear devices including WAX206 and EX6400v3. Signed-off-by: Wenli Looi (cherry picked from commit efca76ffce5cf464e82d8269d79877f442209a0a)

scripts: fix CAMEO tag generator

2022-07-09T01:09:40Z

What should have been only cosmetic changes, ended up in breaking the script. Rename UIMAGE_CRC_SLICE back to (the original) UIMAGE_CRC_OFF. Fixes issue #10204 "cameo-tag.py broken" Reported-by: Markus Stockhausen Fixes: f9e840b65700 ("scripts: add CAMEO tag generator") Signed-off-by: Sander Vanheule (cherry picked from commit ebfe66e494e57f4b421f1190d6bff1d361db1b3d)

scripts: add CAMEO tag generator

2022-07-09T01:09:16Z

This script inserts CAMEO tags into an uImage to make U-Boot of DGS-1210 switches happy. Signed-off-by: Markus Stockhausen Suggested-by: Sander Vanheule # Mutual checksum algorithm [commit title prefix, trailing whitespace, OpenWrt capitalisation, move CRC calculation comment, use UIMAGE_NAME_*, remove parentheses for return, use f-string instead of str()] Signed-off-by: Sander Vanheule (cherry picked from commit f9e840b65700e1cdff6d066d39c163bac936d046)

scripts: add cameo image header generator

2022-07-09T01:08:43Z

The cameo header is a 0x40-byte header used by D-Link DGS 1210 switches and Apresia ApresiaLightGS series. cameo-imghdr.py is a clean-room reimplementation of imghdr present in the DGS-1210-28-GPL package. Signed-off-by: Luiz Angelo Daros de Luca [fix board_version argument's help text] Signed-off-by: Sander Vanheule (cherry picked from commit 2fd66e058b0804b9c561d8d6858363fdf5bd7aea)

scripts/gen_image_generic.sh: fix order of files in EFI bootfs

2022-04-15T13:12:13Z

mtools recursive copy (mcopy -s ...) is using READDIR(3) to iterate over the directory entries, hence they end up in the FAT filesystem in traversal order which breaks reproducibility (rather than being added to the FAT filesystem in a reproducible order). Implement recursive copy in gen_image_generic.sh in Shell code instead, as in that way we can force files to be copied in reproducible order. Fixes: aece8f5ae8 ("scripts/gen_image_generic.sh: generate reproducible EFI filesystem") Signed-off-by: Daniel Golle (cherry picked from commit 4d289ae7e63893f90957b77962c6b60574d35441)

scripts/gen_image_generic.sh: generate reproducible EFI filesystem

2022-04-15T13:11:54Z

Generate FAT filesystem for EFI boot in a reproducible way: * use '--invariant' option of mkfs.fat * set timestamps of all files to SOURCE_DATE_EPOCH * make sure files are ordered locale-independent Signed-off-by: Daniel Golle (cherry picked from commit aece8f5ae8d15e5e79b8e34a176895209709afb6)

scripts/gen_image_generic.sh: make ext4 bootfs reproducible

2022-04-15T13:11:49Z

Set fixed timestamp for kernel other files in /boot filesystem. This should help making x86 *combined* images reproducible. Signed-off-by: Daniel Golle (cherry picked from commit 068ea2cde04e2666fb05731cea941bccfaeddc25)

scripts: make sure sort-order is independent from locale

2022-04-06T16:35:49Z

Set LC_ALL=C environment variable when calling 'sort' as the sort order otherwise depends on the locale set. Fixes: 56ce110b73 ("scripts: make sure conffiles are sorted") Signed-off-by: Daniel Golle (cherry picked from commit 1d77dca3b32dd883bcc2213675cf21111ac1beca)

build: store sha256_unsigned in JSON

2022-04-06T13:03:58Z

Introduce `sha256_unsigned` which is a checksum of the image _before_ a signature is attached. This is helpful to compare image reproducibility. Since the `.sha256sum` file is located in the $(KDIR) folder, switch $(BIN_DIR) with $(KDIR) to simplify the code. The value of $(BIN_DIR) itself is not stored inside the resulting JSON file, so it can be replaced. Signed-off-by: Paul Spooren (cherry picked from commit 8822a8d850ba2df69b81289758959bb90643a696)

scripts: make sure conffiles are sorted

2022-04-06T12:59:44Z

It may happen that conffiles are in different order on different builds. Make sure they have the same order by sorting them. FIX: #9612 Signed-off-by: Paul Spooren (cherry picked from commit 56ce110b73970bcd65d309440baada84c8e1504b)