OS builder generated ZD, 4 button install on unlocked XO1

[George Hunt]

The context that got me started on this was Sora's desire for an easy way
to install the os builder image you were helping her with. She was needing
to process 400 units, and you suggested that the 4 button install would
work in that instance on unlocked xo1 devices.

If I self sign the fs0.zip, there's still the issue of introducing my key
into the keylist of the unlocked laptops.

I guess you were suggesting that she use a small olpc.fth stub to introduce
her own key into each of the laptops, so that the self signed fs0.zip would
be accepted by the firmware, and the install would proceed.

For Adam's Unleashedkids project, I'm wondering if there is an olpc.fth
file, that includes fs-update , and would work on an xo1, installing to an
SD card, similar to the one documented for  xo1.5, xo1.74, xo4, at
http://wiki.laptop.org/go/Firmware/Storage#How_to_automatically_install_an_unsigned_build

Or do you suggest that I take the self signing approach?

On Mon, Jan 18, 2016 at 12:16 AM, James Cameron <quozl at laptop.org> wrote:

> On Sun, Jan 17, 2016 at 11:04:30AM -0800, George Hunt wrote:
> >
> > I've been exploring an exchange with James Cameron:
> >
> >   <I wrote>
> >  So then as I understand it, on an unlocked machine, the installers
> would need
> > to type "fs-update 32018ht0.zd" at the OK> prompt to kick off the
> install.  Is
> > that correct?
> >
> > <James responded>
> > No, an unlocked machine will work like a locked machine when given the
> > four game keys held on boot.
> >
> > I've been trying to generate an unsigned ZD image that will load with
> the 4
> > button install.
> >
> > I've generated an unsigned fs0.zip and placed the xxx.ZD and fs0.zip in
> the
> > root directory of a USB key.
>
> Your fs0.zip must be signed.
>
> > The firmware finds the fs0.zip, but complains "no signature for our key
> list".
>
> Your key list must be changed.
>
> > There's probably some setting in os-builder that I have not found yet.
>
> http://wiki.laptop.org/go/OSBuilder#Signing_preparation shows steps for
> preparing a builder for signing.
>
>
> http://dev.laptop.org/git/projects/olpc-os-builder/tree/modules/signing/README?h=v7.0
> describes the signing module in the builder.
>
> http://wiki.laptop.org/go/Firmware_security#Multiple-Key_Support
> describes how to change the key list on a laptop.  Add an o1 tag using the
> add-tag-from-file command.  This is straightforward on unlocked laptops.
>
> --
> James Cameron
> http://quozl.netrek.org/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.laptop.org/pipermail/devel/attachments/20160118/b892d731/attachment.html>