scripts/vboot_signer/vboot_signer.sh

#!/bin/sh

usage()
{
	echo usage: $0 futility input.img key.vbpubk key.vbprivk subkey.vbprivk output.keyblock output.img
}

cleanup()
{
	rm -f ${EMPTY}
}

if [ "$#" -ne 7 ]; then
	echo ERROR: invalid number of arguments
	usage
	exit 1
fi

futility=$1
input=$2
pubkey=$3
privkey=$4
subkey=$5
keyblock=$6
output=$7

EMPTY=$(mktemp /tmp/tmp.XXXXXXXX)
trap cleanup EXIT
echo " " > ${EMPTY}

echo signing ${input} with ${privkey} to generate ${output}
${futility} vbutil_keyblock --pack ${keyblock} --datapubkey ${pubkey} --signprivate ${subkey} --flags 0x7
if [ $? -ne 0 ]; then
	echo ERROR: unable to generate keyblock
	exit $?
fi

${futility} vbutil_kernel --pack ${output} --keyblock ${keyblock} --signprivate ${privkey} --version 1 --vmlinuz ${input} --config ${EMPTY} --arch arm --bootloader ${EMPTY} --flags 0x1
if [ $? -ne 0 ]; then
	echo ERROR: unable to sign image
	exit $?
fi