feat(ci): Measured boot hash verification scripts
Move away from dependency on external fTPM and OP-TEE binaries through
using our own scripts to validate the hashes in the TF-A event log
during measured boot tests.
Change-Id: Ifd1fa8ce7d2091510b4c8242e25438e4d9aa61bb
Signed-off-by: Slava Andrianov <slava.andrianov@arm.com>
diff --git a/script/expect-post-runner.sh b/script/expect-post-runner.sh
index 92fff75..e429b27 100755
--- a/script/expect-post-runner.sh
+++ b/script/expect-post-runner.sh
@@ -18,6 +18,14 @@
archive="${WORKSPACE}/artefacts-lava"
+if [ $(get_run_env $archive "verify_hashes" 0) -eq 1 ]; then
+ echo "Enabling hash verification for measured boot"
+ export verify_hashes=1
+ export ci_root
+ export artefacts_dir=$archive
+ export tfa_log="${archive}/tfa_event_log"
+fi
+
# Extract UART numbering from the FVP common log using the ports script
declare -a ports=()