blob: b59847c60818ac45190f1223ded2be142ea63c27 [file] [log] [blame]
You-Cheng Syuf0f4be12017-12-05 16:33:53 +08001#!/usr/bin/env python
Jon Salze60307f2014-08-05 16:20:00 +08002# -*- coding: utf-8 -*-
3# Copyright 2014 The Chromium OS Authors. All rights reserved.
Tammo Spalink9a96b8a2012-04-03 11:10:41 +08004# Use of this source code is governed by a BSD-style license that can be
5# found in the LICENSE file.
6
Jon Salze60307f2014-08-05 16:20:00 +08007
Tammo Spalink9a96b8a2012-04-03 11:10:41 +08008"""Google Factory Tool.
9
You-Cheng Syu461ec032017-03-06 15:56:58 +080010This tool is intended to be used on factory assembly lines. It
Tammo Spalink9a96b8a2012-04-03 11:10:41 +080011provides all of the Google required test functionality and must be run
12on each device as part of the assembly process.
13"""
14
Tammo Spalink9a96b8a2012-04-03 11:10:41 +080015import logging
16import os
Jon Salz65266432012-07-30 19:02:49 +080017import pipes
Tammo Spalink9a96b8a2012-04-03 11:10:41 +080018import re
19import sys
Peter Shihfdf17682017-05-26 11:38:39 +080020from tempfile import gettempdir
Cheng-Yi Chiang9fc121c2014-01-27 11:23:22 +080021import threading
Hung-Te Lin6bd16472012-06-20 16:26:47 +080022import time
Jon Salza88b83b2013-05-27 20:00:35 +080023import xmlrpclib
Peter Shihfdf17682017-05-26 11:38:39 +080024
Peter Shihfdf17682017-05-26 11:38:39 +080025import factory_common # pylint: disable=unused-import
Wei-Han Chen0a3320e2016-04-23 01:32:07 +080026from cros.factory.gooftool.common import ExecFactoryPar
Hung-Te Lin0e0f9362015-11-18 18:18:05 +080027from cros.factory.gooftool.common import Shell
Peter Shihfdf17682017-05-26 11:38:39 +080028from cros.factory.gooftool.core import Gooftool
29from cros.factory.gooftool import crosfw
Peter Shihfdf17682017-05-26 11:38:39 +080030from cros.factory.gooftool import report_upload
Hung-Te Lin604e0c22015-11-24 15:17:07 +080031from cros.factory.hwid.v3 import hwid_utils
Yong Hong863d3262017-10-30 16:23:34 +080032from cros.factory.probe.functions import chromeos_firmware
Wei-Han Chen2ebb92d2016-01-12 14:51:41 +080033from cros.factory.test.env import paths
Peter Shihfdf17682017-05-26 11:38:39 +080034from cros.factory.test import event_log
Wei-Han Chenaff56232016-04-16 09:17:59 +080035from cros.factory.test.rules import phase
Hung-Te Lin3f096842016-01-13 17:37:06 +080036from cros.factory.test.rules.privacy import FilterDict
Peter Shihfdf17682017-05-26 11:38:39 +080037from cros.factory.utils import argparse_utils
Hung-Te Lin03bf7ab2016-06-16 17:26:19 +080038from cros.factory.utils.argparse_utils import CmdArg
Hung-Te Lin03bf7ab2016-06-16 17:26:19 +080039from cros.factory.utils.argparse_utils import ParseCmdline
40from cros.factory.utils.argparse_utils import verbosity_cmd_arg
Peter Shihfdf17682017-05-26 11:38:39 +080041from cros.factory.utils.debug_utils import SetupLogging
Jon Salz40b9f822014-07-25 16:39:55 +080042from cros.factory.utils import file_utils
Yong Hongf008bd72017-12-22 04:46:27 +080043from cros.factory.utils import json_utils
Wei-Han Chena5c01a02016-04-23 19:27:19 +080044from cros.factory.utils import sys_utils
Chun-Ta Lin53cbbd52016-06-08 21:42:19 +080045from cros.factory.utils import time_utils
Jon Salzff88c022012-11-03 12:19:58 +080046from cros.factory.utils.process_utils import Spawn
Joel Kitchingd3bc2662014-12-16 16:03:32 -080047from cros.factory.utils.type_utils import Error
Tammo Spalink86a61c62012-05-25 15:10:35 +080048
Tammo Spalink5c699832012-07-03 17:50:39 +080049
Tammo Spalink5c699832012-07-03 17:50:39 +080050# TODO(tammo): Replace calls to sys.exit with raise Exit, and maybe
51# treat that specially (as a smoot exit, as opposed to the more
52# verbose output for generic Error).
53
Cheng-Yi Chiang9fc121c2014-01-27 11:23:22 +080054_global_gooftool = None
55_gooftool_lock = threading.Lock()
Tammo Spalink5c699832012-07-03 17:50:39 +080056
Hung-Te Lin56b18402015-01-16 14:52:30 +080057
Ricky Lianga70a1202013-03-15 15:03:17 +080058def GetGooftool(options):
Peter Shihfdf17682017-05-26 11:38:39 +080059 global _global_gooftool # pylint: disable=global-statement
Ricky Lianga70a1202013-03-15 15:03:17 +080060
Cheng-Yi Chiang9fc121c2014-01-27 11:23:22 +080061 if _global_gooftool is None:
62 with _gooftool_lock:
Shen-En Shihc5d15d62017-08-04 13:02:59 +080063 if _global_gooftool is None:
64 project = getattr(options, 'project', None)
65 hwdb_path = getattr(options, 'hwdb_path', None)
66 _global_gooftool = Gooftool(hwid_version=3, project=project,
67 hwdb_path=hwdb_path)
Cheng-Yi Chiang9fc121c2014-01-27 11:23:22 +080068
69 return _global_gooftool
Ricky Lianga70a1202013-03-15 15:03:17 +080070
Hung-Te Lin56b18402015-01-16 14:52:30 +080071
Ting Shen18a06382016-08-30 16:18:21 +080072def Command(cmd_name, *args, **kwargs):
You-Cheng Syu8fc2a602017-12-22 17:05:05 +080073 """Decorator for commands in gooftool.
Ting Shen18a06382016-08-30 16:18:21 +080074
75 This is similar to argparse_utils.Command, but all gooftool commands
76 can be waived during `gooftool finalize` or `gooftool verify` using
Wei-Han Chen60c5d332017-01-05 17:15:10 +080077 --waive_list or --skip_list option.
Ting Shen18a06382016-08-30 16:18:21 +080078 """
79 def Decorate(fun):
Wei-Han Chen60c5d332017-01-05 17:15:10 +080080 def CommandWithWaiveSkipCheck(options):
Ting Shen18a06382016-08-30 16:18:21 +080081 waive_list = vars(options).get('waive_list', [])
Wei-Han Chen60c5d332017-01-05 17:15:10 +080082 skip_list = vars(options).get('skip_list', [])
83 if phase.GetPhase() >= phase.PVT_DOGFOOD and (
84 waive_list != [] or skip_list != []):
Ting Shen18a06382016-08-30 16:18:21 +080085 raise Error(
Wei-Han Chen60c5d332017-01-05 17:15:10 +080086 'waive_list and skip_list should be empty for phase %s' %
87 phase.GetPhase())
Ting Shen18a06382016-08-30 16:18:21 +080088
Wei-Han Chen60c5d332017-01-05 17:15:10 +080089 if cmd_name not in skip_list:
90 try:
91 fun(options)
92 except Exception as e:
93 if cmd_name in waive_list:
94 logging.exception(e)
95 else:
96 raise
Ting Shen18a06382016-08-30 16:18:21 +080097
98 return argparse_utils.Command(cmd_name, *args, **kwargs)(
Wei-Han Chen60c5d332017-01-05 17:15:10 +080099 CommandWithWaiveSkipCheck)
Ting Shen18a06382016-08-30 16:18:21 +0800100 return Decorate
101
102
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800103@Command('write_hwid',
104 CmdArg('hwid', metavar='HWID', help='HWID string'))
Andy Chengc92e6f92012-11-20 16:55:53 +0800105def WriteHWID(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800106 """Write specified HWID value into the system BB."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800107
Tammo Spalink95c43732012-07-25 15:57:14 -0700108 logging.info('writing hwid string %r', options.hwid)
Ricky Lianga70a1202013-03-15 15:03:17 +0800109 GetGooftool(options).WriteHWID(options.hwid)
Andy Cheng0465d132013-03-20 12:12:06 +0800110 event_log.Log('write_hwid', hwid=options.hwid)
Tammo Spalink95c43732012-07-25 15:57:14 -0700111 print 'Wrote HWID: %r' % options.hwid
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800112
113
Yong Hongc3765412017-12-26 23:12:15 +0800114@Command('read_hwid')
115def ReadHWID(options):
116 """Read the HWID string from GBB."""
117
118 logging.info('reading the hwid string')
119 print GetGooftool(options).ReadHWID()
120
121
Yong Hong5408f652017-07-11 19:20:25 +0800122_project_cmd_arg = CmdArg(
123 '--project', metavar='PROJECT',
124 default=None, help='Project name to test.')
Ricky Liang53390232013-03-08 15:37:57 +0800125
Tammo Spalink8fab5312012-05-28 18:33:30 +0800126_hwdb_path_cmd_arg = CmdArg(
127 '--hwdb_path', metavar='PATH',
Yong Hong5c6dcd52017-12-27 11:05:01 +0800128 default=hwid_utils.GetDefaultDataPath(),
Tammo Spalink8fab5312012-05-28 18:33:30 +0800129 help='Path to the HWID database.')
130
Tammo Spalink95c43732012-07-25 15:57:14 -0700131_hwid_status_list_cmd_arg = CmdArg(
Hung-Te Lin56b18402015-01-16 14:52:30 +0800132 '--status', nargs='*', default=['supported'],
133 help='allow only HWIDs with these status values')
Tammo Spalink95c43732012-07-25 15:57:14 -0700134
Jon Salzce124fb2012-10-02 17:42:03 +0800135_probe_results_cmd_arg = CmdArg(
136 '--probe_results', metavar='RESULTS.yaml',
Yong Hong863d3262017-10-30 16:23:34 +0800137 help=('Output from "gooftool probe" (used instead of '
Jon Salzce124fb2012-10-02 17:42:03 +0800138 'probing this system).'))
139
Ricky Liang53390232013-03-08 15:37:57 +0800140_device_info_cmd_arg = CmdArg(
Ricky Liangf89f73a2013-03-19 05:00:24 +0800141 '--device_info', metavar='DEVICE_INFO.yaml', default=None,
You-Cheng Syu8fc2a602017-12-22 17:05:05 +0800142 help='A dict of device info to use instead of fetching from shopfloor '
Ricky Liang53390232013-03-08 15:37:57 +0800143 'server.')
144
Jon Salzce124fb2012-10-02 17:42:03 +0800145_hwid_cmd_arg = CmdArg(
146 '--hwid', metavar='HWID',
Ricky Lianga70a1202013-03-15 15:03:17 +0800147 help='HWID to verify (instead of the currently set HWID of this system).')
Jon Salzce124fb2012-10-02 17:42:03 +0800148
Yong Hong68a0e0d2017-12-20 19:06:54 +0800149_hwid_run_vpd_cmd_arg = CmdArg(
150 '--hwid-run-vpd', action='store_true',
151 help=('Specify the hwid utility to obtain the vpd data by running the '
152 '`vpd` commandline tool.'))
153
154_hwid_vpd_data_file_cmd_arg = CmdArg(
155 '--hwid-vpd-data-file', metavar='FILE.json', type=str, default=None,
156 help=('Specify the hwid utility to obtain the vpd data from the specified '
157 'file.'))
158
Bernie Thompson3c11c872013-07-22 18:22:45 -0700159_rma_mode_cmd_arg = CmdArg(
160 '--rma_mode', action='store_true',
161 help='Enable RMA mode, do not check for deprecated components.')
Tammo Spalink95c43732012-07-25 15:57:14 -0700162
Chih-Yu Huang714dbc42015-07-21 16:42:16 +0800163_cros_core_cmd_arg = CmdArg(
164 '--cros_core', action='store_true',
165 help='Finalize for ChromeOS Core devices (may add or remove few test '
Hung-Te Lin53c49402017-07-26 13:10:58 +0800166 'items. For example, registration codes or firmware bitmap '
Chih-Yu Huang714dbc42015-07-21 16:42:16 +0800167 'locale settings).')
168
Yilun Lin599833f2017-12-22 14:07:46 +0800169_chromebox_cmd_arg = CmdArg(
170 '--chromebox', action='store_true', default=None,
171 help='Finalize for ChromeBox devices (may add or remove few test '
172 'items. For example, VerifyECKey).')
173
bowgotsai13820f42015-09-10 23:18:04 +0800174_enforced_release_channels_cmd_arg = CmdArg(
175 '--enforced_release_channels', nargs='*', default=None,
176 help='Enforced release image channels.')
177
Yilun Lin34f54802017-11-16 11:58:25 +0800178_ec_pubkey_path_cmd_arg = CmdArg(
179 '--ec_pubkey_path',
180 default=None,
181 help='Path to public key in vb2 format. Verify EC key with pubkey file.')
182
183_ec_pubkey_hash_cmd_arg = CmdArg(
184 '--ec_pubkey_hash',
185 default=None,
186 help='A string for public key hash. Verify EC key with the given hash.')
187
Hung-Te Lincdb96522016-04-15 16:51:10 +0800188_release_rootfs_cmd_arg = CmdArg(
189 '--release_rootfs', help='Location of release image rootfs partition.')
190
191_firmware_path_cmd_arg = CmdArg(
192 '--firmware_path', help='Location of firmware image partition.')
Ricky Liang43b879b2014-02-24 11:36:55 +0800193
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800194_shopfloor_url_args_cmd_arg = CmdArg(
195 '--shopfloor_url',
Earl Ou51182222016-09-09 12:16:48 +0800196 help='Shopfloor server url to be informed when wiping is done. '
197 'After wiping, a XML-RPC request will be sent to the '
198 'given url to indicate the completion of wiping.')
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800199
200_station_ip_cmd_arg = CmdArg(
201 '--station_ip',
202 help='IP of remote station')
203
204_station_port_cmd_arg = CmdArg(
205 '--station_port',
206 help='Port on remote station')
207
208_wipe_finish_token_cmd_arg = CmdArg(
209 '--wipe_finish_token',
210 help='Required token when notifying station after wipe finished')
211
Ting Shen18a06382016-08-30 16:18:21 +0800212_waive_list_cmd_arg = CmdArg(
213 '--waive_list', nargs='*', default=[], metavar='SUBCMD',
You-Cheng Syu8fc2a602017-12-22 17:05:05 +0800214 help='A list of waived checks, separated by whitespace. '
215 'Each item should be a sub-command of gooftool. '
Ting Shen18a06382016-08-30 16:18:21 +0800216 'e.g. "gooftool verify --waive_list verify_tpm clear_gbb_flags".')
217
Wei-Han Chen60c5d332017-01-05 17:15:10 +0800218_skip_list_cmd_arg = CmdArg(
219 '--skip_list', nargs='*', default=[], metavar='SUBCMD',
You-Cheng Syu8fc2a602017-12-22 17:05:05 +0800220 help='A list of skipped checks, separated by whitespace. '
221 'Each item should be a sub-command of gooftool. '
Wei-Han Chen60c5d332017-01-05 17:15:10 +0800222 'e.g. "gooftool verify --skip_list verify_tpm clear_gbb_flags".')
223
Tammo Spalink8fab5312012-05-28 18:33:30 +0800224
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800225@Command('probe',
226 CmdArg('--comps', nargs='*',
227 help='List of keys from the component_db registry.'),
228 CmdArg('--no_vol', action='store_true',
Yong Hong863d3262017-10-30 16:23:34 +0800229 help='Do not probe volatile data.'))
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800230def RunProbe(options):
Yong Hongf008bd72017-12-22 04:46:27 +0800231 """Print json-formatted breakdown of probed device properties."""
232 logging.warning('This sub-command is going to be deprecated by `probe` '
233 'command-line tool, please see `probe --help` for detail.')
Yong Hong863d3262017-10-30 16:23:34 +0800234 probed_result = GetGooftool(options).Probe(options.comps, not options.no_vol)
Yong Hongf008bd72017-12-22 04:46:27 +0800235 print json_utils.DumpStr(probed_result, pretty=True)
Ricky Liang53390232013-03-08 15:37:57 +0800236
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800237
Yilun Lin34f54802017-11-16 11:58:25 +0800238@Command(
239 'verify_ec_key',
240 _ec_pubkey_path_cmd_arg,
241 _ec_pubkey_hash_cmd_arg)
242def VerifyECKey(options):
243 """Verify EC key."""
244 return GetGooftool(options).VerifyECKey(
245 options.ec_pubkey_path, options.ec_pubkey_hash)
246
247
Hung-Te Line1d80f62016-03-31 14:58:13 +0800248@Command('verify_keys',
Hung-Te Lincdb96522016-04-15 16:51:10 +0800249 _release_rootfs_cmd_arg,
250 _firmware_path_cmd_arg)
Peter Shihfdf17682017-05-26 11:38:39 +0800251def VerifyKeys(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800252 """Verify keys in firmware and SSD match."""
Hung-Te Line1d80f62016-03-31 14:58:13 +0800253 return GetGooftool(options).VerifyKeys(
Hung-Te Lincdb96522016-04-15 16:51:10 +0800254 options.release_rootfs, options.firmware_path)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800255
256
257@Command('set_fw_bitmap_locale')
Peter Shihfdf17682017-05-26 11:38:39 +0800258def SetFirmwareBitmapLocale(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800259 """Use VPD locale value to set firmware bitmap default language."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800260
Ricky Lianga70a1202013-03-15 15:03:17 +0800261 (index, locale) = GetGooftool(options).SetFirmwareBitmapLocale()
Andy Cheng2582d292012-12-04 17:38:28 +0800262 logging.info('Firmware bitmap initial locale set to %d (%s).',
263 index, locale)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800264
265
Hung-Te Line1d80f62016-03-31 14:58:13 +0800266@Command('verify_system_time',
Hung-Te Lincdb96522016-04-15 16:51:10 +0800267 _release_rootfs_cmd_arg)
Peter Shihfdf17682017-05-26 11:38:39 +0800268def VerifySystemTime(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800269 """Verify system time is later than release filesystem creation time."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800270
Hung-Te Lincdb96522016-04-15 16:51:10 +0800271 return GetGooftool(options).VerifySystemTime(options.release_rootfs)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800272
273
Hung-Te Line1d80f62016-03-31 14:58:13 +0800274@Command('verify_rootfs',
Hung-Te Lincdb96522016-04-15 16:51:10 +0800275 _release_rootfs_cmd_arg)
Peter Shihfdf17682017-05-26 11:38:39 +0800276def VerifyRootFs(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800277 """Verify rootfs on SSD is valid by checking hash."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800278
Hung-Te Line1d80f62016-03-31 14:58:13 +0800279 return GetGooftool(options).VerifyRootFs(options.release_rootfs)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800280
Hung-Te Lin56b18402015-01-16 14:52:30 +0800281
Cheng-Yi Chiang676b5292013-06-18 12:05:33 +0800282@Command('verify_tpm')
Peter Shihfdf17682017-05-26 11:38:39 +0800283def VerifyTPM(options):
Cheng-Yi Chiang676b5292013-06-18 12:05:33 +0800284 """Verify TPM is cleared."""
285
286 return GetGooftool(options).VerifyTPM()
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800287
Hung-Te Lin56b18402015-01-16 14:52:30 +0800288
Hung-Te Lindd708d42014-07-11 17:05:01 +0800289@Command('verify_me_locked')
Peter Shihfdf17682017-05-26 11:38:39 +0800290def VerifyManagementEngineLocked(options):
You-Cheng Syu461ec032017-03-06 15:56:58 +0800291 """Verify Management Engine is locked."""
Hung-Te Lindd708d42014-07-11 17:05:01 +0800292
293 return GetGooftool(options).VerifyManagementEngineLocked()
294
Hung-Te Lin56b18402015-01-16 14:52:30 +0800295
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800296@Command('verify_switch_wp')
Peter Shihfdf17682017-05-26 11:38:39 +0800297def VerifyWPSwitch(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800298 """Verify hardware write protection switch is enabled."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800299
Ricky Lianga70a1202013-03-15 15:03:17 +0800300 GetGooftool(options).VerifyWPSwitch()
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800301
302
303@Command('verify_switch_dev')
Peter Shihfdf17682017-05-26 11:38:39 +0800304def VerifyDevSwitch(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800305 """Verify developer switch is disabled."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800306
Ricky Lianga70a1202013-03-15 15:03:17 +0800307 if GetGooftool(options).CheckDevSwitchForDisabling():
Hung-Te Lind7d34722012-07-26 16:48:35 +0800308 logging.warn('VerifyDevSwitch: No physical switch.')
Andy Cheng0465d132013-03-20 12:12:06 +0800309 event_log.Log('switch_dev', type='virtual switch')
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800310
311
Hung-Te Lin53c49402017-07-26 13:10:58 +0800312@Command('verify_vpd')
313def VerifyVPD(options):
314 """Verify that VPD values are properly set.
Jon Salzadd90d32014-04-29 16:16:27 +0800315
Hung-Te Lin53c49402017-07-26 13:10:58 +0800316 Check if mandatory fields are set, and deprecated fields don't exist.
Jon Salzadd90d32014-04-29 16:16:27 +0800317 """
Hung-Te Lin53c49402017-07-26 13:10:58 +0800318 return GetGooftool(options).VerifyVPD()
Jon Salzadd90d32014-04-29 16:16:27 +0800319
320
bowgotsai13820f42015-09-10 23:18:04 +0800321@Command('verify_release_channel',
322 _enforced_release_channels_cmd_arg)
Peter Shihfdf17682017-05-26 11:38:39 +0800323def VerifyReleaseChannel(options):
bowgotsai529139c2015-05-30 01:39:49 +0800324 """Verify that release image channel is correct.
325
326 ChromeOS has four channels: canary, dev, beta and stable.
327 The last three channels support image auto-updates, checks
328 that release image channel is one of them.
329 """
bowgotsai13820f42015-09-10 23:18:04 +0800330 return GetGooftool(options).VerifyReleaseChannel(
331 options.enforced_release_channels)
bowgotsai529139c2015-05-30 01:39:49 +0800332
333
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800334@Command('write_protect')
Peter Shihfdf17682017-05-26 11:38:39 +0800335def EnableFwWp(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800336 """Enable then verify firmware write protection."""
Peter Shihfdf17682017-05-26 11:38:39 +0800337 del options # Unused.
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800338
Yong Hongdad230a2017-08-30 22:25:19 +0800339 def WriteProtect(fw):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800340 """Calculate protection size, then invoke flashrom.
341
Yong Hongdad230a2017-08-30 22:25:19 +0800342 The region (offset and size) to write protect may be different per chipset
343 and firmware layout, so we have to read the WP_RO section from FMAP to
344 decide that.
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800345 """
Hung-Te Lin7ea39e82012-07-31 18:39:33 +0800346 wp_section = 'WP_RO'
Hung-Te Lin7ea39e82012-07-31 18:39:33 +0800347
Yong Hongdad230a2017-08-30 22:25:19 +0800348 fmap_image = fw.GetFirmwareImage(
349 sections=(['FMAP'] if fw.target == crosfw.TARGET_MAIN else None))
350 if not fmap_image.has_section(wp_section):
351 raise Error('Could not find %s firmware section: %s' %
352 (fw.target.upper(), wp_section))
353
354 section_data = fw.GetFirmwareImage(
355 sections=[wp_section]).get_section_area(wp_section)
356 ro_offset, ro_size = section_data[0 : 2]
357
358 logging.debug('write protecting %s [off=%x size=%x]', fw.target.upper(),
Hung-Te Lin7ea39e82012-07-31 18:39:33 +0800359 ro_offset, ro_size)
Yong Hongdad230a2017-08-30 22:25:19 +0800360 crosfw.Flashrom(fw.target).EnableWriteProtection(ro_offset, ro_size)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800361
Yong Hongdad230a2017-08-30 22:25:19 +0800362 WriteProtect(crosfw.LoadMainFirmware())
Andy Cheng0465d132013-03-20 12:12:06 +0800363 event_log.Log('wp', fw='main')
Hung-Te Lind3b124c2016-10-20 22:22:31 +0800364
365 # Some EC (mostly PD) does not support "RO NOW". Instead they will only set
366 # "RO_AT_BOOT" when you request to enable RO (These platforms consider
367 # --wp-range with right range identical to --wp-enable), and requires a
368 # 'ectool reboot_ec RO at-shutdown; reboot' to let the RO take effect.
Hung-Te Lin0d10b562016-12-28 10:58:07 +0800369 # After reboot, "flashrom -p host --wp-status" will return protected range.
Hung-Te Lind3b124c2016-10-20 22:22:31 +0800370 # If you don't reboot, returned range will be (0, 0), and running command
371 # "ectool flashprotect" will not have RO_NOW.
372
Yong Hongdad230a2017-08-30 22:25:19 +0800373 for fw in [crosfw.LoadEcFirmware(), crosfw.LoadPDFirmware()]:
374 if fw.GetChipId() is None:
Hung-Te Lind3b124c2016-10-20 22:22:31 +0800375 logging.warning('%s not write protected (seems there is no %s flash).',
Yong Hongdad230a2017-08-30 22:25:19 +0800376 fw.target.upper(), fw.target.upper())
Hung-Te Lind3b124c2016-10-20 22:22:31 +0800377 continue
Yong Hongdad230a2017-08-30 22:25:19 +0800378 WriteProtect(fw)
379 event_log.Log('wp', fw=fw.target)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800380
381
382@Command('clear_gbb_flags')
Peter Shihfdf17682017-05-26 11:38:39 +0800383def ClearGBBFlags(options):
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800384 """Zero out the GBB flags, in preparation for transition to release state.
385
386 No GBB flags are set in release/shipping state, but they are useful
Hung-Te Lin879cff42017-06-19 12:46:37 +0800387 for factory/development. See "futility gbb --flags" for details.
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800388 """
Andy Cheng7a76cb82012-11-19 18:08:19 +0800389
Ricky Lianga70a1202013-03-15 15:03:17 +0800390 GetGooftool(options).ClearGBBFlags()
Andy Cheng0465d132013-03-20 12:12:06 +0800391 event_log.Log('clear_gbb_flags')
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800392
393
Jon Salzaa3a30e2013-05-15 15:56:28 +0800394@Command('clear_factory_vpd_entries')
Peter Shihfdf17682017-05-26 11:38:39 +0800395def ClearFactoryVPDEntries(options):
Jon Salzaa3a30e2013-05-15 15:56:28 +0800396 """Clears factory.* items in the RW VPD."""
397 entries = GetGooftool(options).ClearFactoryVPDEntries()
398 event_log.Log('clear_factory_vpd_entries', entries=FilterDict(entries))
399
400
Mattias Nisslercca761b2015-04-15 21:53:04 +0200401@Command('generate_stable_device_secret')
Peter Shihfdf17682017-05-26 11:38:39 +0800402def GenerateStableDeviceSecret(options):
You-Cheng Syu461ec032017-03-06 15:56:58 +0800403 """Generates a fresh stable device secret and stores it in the RO VPD."""
Mattias Nisslercca761b2015-04-15 21:53:04 +0200404 GetGooftool(options).GenerateStableDeviceSecret()
405 event_log.Log('generate_stable_device_secret')
406
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800407
Shen-En Shihd078a7c2017-08-04 13:33:49 +0800408@Command('cr50_set_board_id')
409def Cr50SetBoardId(options):
410 """Set the board id and flag in the Cr50 chip."""
411 GetGooftool(options).Cr50SetBoardId()
412 event_log.Log('cr50_set_board_id')
413
414
Cheng-Han Yang08333af2017-12-18 17:22:38 +0800415@Command('cr50_reset_state')
416def Cr50ResetState(options):
417 """Reset Cr50 state back to default state after RMA."""
418 return GetGooftool(options).Cr50ResetState()
419
420
Earl Ou564a7872016-10-05 10:22:00 +0800421@Command('enable_release_partition',
422 CmdArg('--release_rootfs',
423 help=('path to the release rootfs device. If not specified, '
424 'the default (5th) partition will be used.')))
425def EnableReleasePartition(options):
426 """Enables a release image partition on the disk."""
427 GetGooftool(options).EnableReleasePartition(options.release_rootfs)
428
429
Shun-Hsing Oucdc64e12015-01-14 22:07:33 +0800430@Command('wipe_in_place',
431 CmdArg('--fast', action='store_true',
Shun-Hsing Ou8d3c40a2015-10-08 18:16:08 +0800432 help='use non-secure but faster wipe method.'),
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800433 _shopfloor_url_args_cmd_arg,
434 _station_ip_cmd_arg,
435 _station_port_cmd_arg,
436 _wipe_finish_token_cmd_arg)
Shun-Hsing Oucdc64e12015-01-14 22:07:33 +0800437def WipeInPlace(options):
438 """Start factory wipe directly without reboot."""
439
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800440 GetGooftool(options).WipeInPlace(options.fast,
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800441 options.shopfloor_url,
442 options.station_ip,
443 options.station_port,
444 options.wipe_finish_token)
Mattias Nisslercca761b2015-04-15 21:53:04 +0200445
Wei-Han Chen7dc6d132016-04-06 11:11:53 +0800446@Command('wipe_init',
Wei-Han Chen0a3320e2016-04-23 01:32:07 +0800447 CmdArg('--wipe_args', help='arguments for clobber-state'),
448 CmdArg('--state_dev', help='path to stateful partition device'),
449 CmdArg('--root_disk', help='path to primary device'),
450 CmdArg('--old_root', help='path to old root'),
Wei-Han Chen0a3320e2016-04-23 01:32:07 +0800451 _shopfloor_url_args_cmd_arg,
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800452 _release_rootfs_cmd_arg,
453 _station_ip_cmd_arg,
454 _station_port_cmd_arg,
455 _wipe_finish_token_cmd_arg)
Wei-Han Chen7dc6d132016-04-06 11:11:53 +0800456def WipeInit(options):
Wei-Han Chen0a3320e2016-04-23 01:32:07 +0800457 GetGooftool(options).WipeInit(options.wipe_args,
Wei-Han Chen0a3320e2016-04-23 01:32:07 +0800458 options.shopfloor_url,
459 options.state_dev,
460 options.release_rootfs,
461 options.root_disk,
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800462 options.old_root,
463 options.station_ip,
464 options.station_port,
465 options.wipe_finish_token)
Wei-Han Chen7dc6d132016-04-06 11:11:53 +0800466
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800467@Command('verify',
Hung-Te Lin6d827542012-07-19 11:50:41 +0800468 CmdArg('--no_write_protect', action='store_true',
469 help='Do not check write protection switch state.'),
Tammo Spalink95c43732012-07-25 15:57:14 -0700470 _hwid_status_list_cmd_arg,
Jon Salzce124fb2012-10-02 17:42:03 +0800471 _hwdb_path_cmd_arg,
Yong Hong5408f652017-07-11 19:20:25 +0800472 _project_cmd_arg,
Jon Salzce124fb2012-10-02 17:42:03 +0800473 _probe_results_cmd_arg,
Cheng-Yi Chiang406ad912013-11-14 16:51:33 +0800474 _hwid_cmd_arg,
Yong Hong68a0e0d2017-12-20 19:06:54 +0800475 _hwid_run_vpd_cmd_arg,
476 _hwid_vpd_data_file_cmd_arg,
Chih-Yu Huang714dbc42015-07-21 16:42:16 +0800477 _rma_mode_cmd_arg,
bowgotsai13820f42015-09-10 23:18:04 +0800478 _cros_core_cmd_arg,
Yilun Lin599833f2017-12-22 14:07:46 +0800479 _chromebox_cmd_arg,
Yilun Lin34f54802017-11-16 11:58:25 +0800480 _ec_pubkey_path_cmd_arg,
481 _ec_pubkey_hash_cmd_arg,
Hung-Te Lincdb96522016-04-15 16:51:10 +0800482 _release_rootfs_cmd_arg,
483 _firmware_path_cmd_arg,
Ting Shen18a06382016-08-30 16:18:21 +0800484 _enforced_release_channels_cmd_arg,
Wei-Han Chen60c5d332017-01-05 17:15:10 +0800485 _waive_list_cmd_arg,
486 _skip_list_cmd_arg)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800487def Verify(options):
488 """Verifies if whole factory process is ready for finalization.
489
490 This routine performs all the necessary checks to make sure the
491 device is ready to be finalized, but does not modify state. These
492 checks include dev switch, firmware write protection switch, hwid,
493 system time, keys, and root file system.
494 """
Andy Cheng7a76cb82012-11-19 18:08:19 +0800495
Hung-Te Lin6d827542012-07-19 11:50:41 +0800496 if not options.no_write_protect:
Ricky Lianga70a1202013-03-15 15:03:17 +0800497 VerifyWPSwitch(options)
Hung-Te Lindd708d42014-07-11 17:05:01 +0800498 VerifyManagementEngineLocked(options)
Ricky Lianga70a1202013-03-15 15:03:17 +0800499 VerifyDevSwitch(options)
Ting Shen129fa6f2016-09-02 12:22:24 +0800500 VerifyHWID(options)
Ricky Lianga70a1202013-03-15 15:03:17 +0800501 VerifySystemTime(options)
Yilun Lin599833f2017-12-22 14:07:46 +0800502 if options.chromebox:
503 VerifyECKey(options)
Ricky Lianga70a1202013-03-15 15:03:17 +0800504 VerifyKeys(options)
505 VerifyRootFs(options)
Cheng-Yi Chiang676b5292013-06-18 12:05:33 +0800506 VerifyTPM(options)
Hung-Te Lin53c49402017-07-26 13:10:58 +0800507 VerifyVPD(options)
bowgotsai529139c2015-05-30 01:39:49 +0800508 VerifyReleaseChannel(options)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800509
Hung-Te Lin56b18402015-01-16 14:52:30 +0800510
Jon Salzfe9036f2014-01-16 14:11:23 +0800511@Command('untar_stateful_files')
Hung-Te Lin388bce22014-06-03 19:56:40 +0800512def UntarStatefulFiles(unused_options):
Jon Salzfe9036f2014-01-16 14:11:23 +0800513 """Untars stateful files from stateful_files.tar.xz on stateful partition.
514
515 If that file does not exist (which should only be R30 and earlier),
516 this is a no-op.
517 """
Hung-Te Lin2333f3f2016-08-24 17:56:48 +0800518 # Path to stateful partition on device.
519 device_stateful_path = '/mnt/stateful_partition'
520 tar_file = os.path.join(device_stateful_path, 'stateful_files.tar.xz')
Jon Salzfe9036f2014-01-16 14:11:23 +0800521 if os.path.exists(tar_file):
Hung-Te Lin2333f3f2016-08-24 17:56:48 +0800522 Spawn(['tar', 'xf', tar_file], cwd=device_stateful_path,
Jon Salzfe9036f2014-01-16 14:11:23 +0800523 log=True, check_call=True)
524 else:
525 logging.warning('No stateful files at %s', tar_file)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800526
Jon Salz40b9f822014-07-25 16:39:55 +0800527
528@Command('log_source_hashes')
Peter Shihfdf17682017-05-26 11:38:39 +0800529def LogSourceHashes(options):
Jon Salz40b9f822014-07-25 16:39:55 +0800530 """Logs hashes of source files in the factory toolkit."""
Peter Shihfdf17682017-05-26 11:38:39 +0800531 del options # Unused.
Jon Salze60307f2014-08-05 16:20:00 +0800532 # WARNING: The following line is necessary to validate the integrity
533 # of the factory software. Do not remove or modify it.
534 #
535 # 警告:此行会验证工厂软件的完整性,禁止删除或修改。
Wei-Han Chena5c01a02016-04-23 19:27:19 +0800536 factory_par = sys_utils.GetRunningFactoryPythonArchivePath()
537 if factory_par:
538 event_log.Log(
539 'source_hashes',
540 **file_utils.HashPythonArchive(factory_par))
541 else:
542 event_log.Log(
543 'source_hashes',
Peter Shihad166772017-05-31 11:36:17 +0800544 **file_utils.HashSourceTree(os.path.join(paths.FACTORY_DIR, 'py')))
Jon Salz40b9f822014-07-25 16:39:55 +0800545
546
Tammo Spalink86a61c62012-05-25 15:10:35 +0800547@Command('log_system_details')
Peter Shihfdf17682017-05-26 11:38:39 +0800548def LogSystemDetails(options):
Tammo Spalink86a61c62012-05-25 15:10:35 +0800549 """Write miscellaneous system details to the event log."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800550
Ricky Liang43b879b2014-02-24 11:36:55 +0800551 event_log.Log('system_details', **GetGooftool(options).GetSystemDetails())
Tammo Spalink86a61c62012-05-25 15:10:35 +0800552
553
Jon Salza88b83b2013-05-27 20:00:35 +0800554def CreateReportArchiveBlob(*args, **kwargs):
555 """Creates a report archive and returns it as a blob.
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800556
Jon Salza88b83b2013-05-27 20:00:35 +0800557 Args:
558 See CreateReportArchive.
Andy Cheng7a76cb82012-11-19 18:08:19 +0800559
Jon Salza88b83b2013-05-27 20:00:35 +0800560 Returns:
561 An xmlrpclib.Binary object containing a .tar.xz file.
562 """
Wei-Han Chen47416612016-09-14 17:41:52 +0800563 report_archive = CreateReportArchive(*args, **kwargs)
564 try:
You-Cheng Syuf0f4be12017-12-05 16:33:53 +0800565 return xmlrpclib.Binary(file_utils.ReadFile(report_archive))
Wei-Han Chen47416612016-09-14 17:41:52 +0800566 finally:
567 os.unlink(report_archive)
Jon Salza88b83b2013-05-27 20:00:35 +0800568
569
570def CreateReportArchive(device_sn=None, add_file=None):
571 """Creates a report archive in a temporary directory.
572
573 Args:
574 device_sn: The device serial number (optional).
575 add_file: A list of files to add (optional).
576
577 Returns:
578 Path to the archive.
579 """
Hung-Te Lin6bd16472012-06-20 16:26:47 +0800580 def NormalizeAsFileName(token):
581 return re.sub(r'\W+', '', token).strip()
Jon Salza88b83b2013-05-27 20:00:35 +0800582
583 target_name = '%s%s.tar.xz' % (
584 time.strftime('%Y%m%dT%H%M%SZ',
585 time.gmtime()),
Hung-Te Lin56b18402015-01-16 14:52:30 +0800586 ('' if device_sn is None else
587 '_' + NormalizeAsFileName(device_sn)))
Tammo Spalink86a61c62012-05-25 15:10:35 +0800588 target_path = os.path.join(gettempdir(), target_name)
Jon Salza88b83b2013-05-27 20:00:35 +0800589
Tammo Spalink86a61c62012-05-25 15:10:35 +0800590 # Intentionally ignoring dotfiles in EVENT_LOG_DIR.
Andy Cheng0465d132013-03-20 12:12:06 +0800591 tar_cmd = 'cd %s ; tar cJf %s *' % (event_log.EVENT_LOG_DIR, target_path)
Peter Shihb4e49352017-05-25 17:35:11 +0800592 tar_cmd += ' %s' % paths.FACTORY_LOG_PATH
Jon Salza88b83b2013-05-27 20:00:35 +0800593 if add_file:
594 for f in add_file:
Jon Salz65266432012-07-30 19:02:49 +0800595 # Require absolute paths since the tar command may change the
596 # directory.
597 if not f.startswith('/'):
598 raise Error('Not an absolute path: %s' % f)
599 if not os.path.exists(f):
600 raise Error('File does not exist: %s' % f)
Wei-Han Chen4b755022017-01-04 10:51:52 +0800601 tar_cmd += ' %s' % pipes.quote(f)
Tammo Spalink86a61c62012-05-25 15:10:35 +0800602 cmd_result = Shell(tar_cmd)
Jon Salzff88c022012-11-03 12:19:58 +0800603
604 if ((cmd_result.status == 1) and
605 all((x == '' or
606 'file changed as we read it' in x or
607 "Removing leading `/' from member names" in x)
608 for x in cmd_result.stderr.split('\n'))):
609 # That's OK. Make sure it's valid though.
Vic Yang85199e72013-01-28 14:33:11 +0800610 Spawn(['tar', 'tfJ', target_path], check_call=True, log=True,
Jon Salzff88c022012-11-03 12:19:58 +0800611 ignore_stdout=True)
612 elif not cmd_result.success:
Tammo Spalink86a61c62012-05-25 15:10:35 +0800613 raise Error('unable to tar event logs, cmd %r failed, stderr: %r' %
614 (tar_cmd, cmd_result.stderr))
Jon Salzff88c022012-11-03 12:19:58 +0800615
Jon Salza88b83b2013-05-27 20:00:35 +0800616 return target_path
617
618_upload_method_cmd_arg = CmdArg(
619 '--upload_method', metavar='METHOD:PARAM',
620 help=('How to perform the upload. METHOD should be one of '
621 '{ftp, shopfloor, ftps, cpfe}.'))
622_add_file_cmd_arg = CmdArg(
623 '--add_file', metavar='FILE', action='append',
624 help='Extra file to include in report (must be an absolute path)')
625
Hung-Te Lin56b18402015-01-16 14:52:30 +0800626
Jon Salza88b83b2013-05-27 20:00:35 +0800627@Command('upload_report',
628 _upload_method_cmd_arg,
629 _add_file_cmd_arg)
630def UploadReport(options):
631 """Create a report containing key device details."""
Yong Hong863d3262017-10-30 16:23:34 +0800632 ro_vpd = sys_utils.VPDTool().GetAllData(
633 partition=sys_utils.VPDTool.RO_PARTITION)
Jon Salza88b83b2013-05-27 20:00:35 +0800634 device_sn = ro_vpd.get('serial_number', None)
635 if device_sn is None:
636 logging.warning('RO_VPD missing device serial number')
Chun-Ta Lin53cbbd52016-06-08 21:42:19 +0800637 device_sn = 'MISSING_SN_' + time_utils.TimedUUID()
Jon Salza88b83b2013-05-27 20:00:35 +0800638 target_path = CreateReportArchive(device_sn)
639
Tammo Spalink86a61c62012-05-25 15:10:35 +0800640 if options.upload_method is None or options.upload_method == 'none':
641 logging.warning('REPORT UPLOAD SKIPPED (report left at %s)', target_path)
642 return
643 method, param = options.upload_method.split(':', 1)
644 if method == 'shopfloor':
You-Cheng Syuf0f4be12017-12-05 16:33:53 +0800645 report_upload.ShopFloorUpload(
646 target_path, param,
647 'GRT' if options.command_name == 'finalize' else None)
Tammo Spalink86a61c62012-05-25 15:10:35 +0800648 elif method == 'ftp':
Jay Kim360c1dd2012-06-25 10:58:11 -0700649 report_upload.FtpUpload(target_path, 'ftp:' + param)
Tammo Spalink86a61c62012-05-25 15:10:35 +0800650 elif method == 'ftps':
651 report_upload.CurlUrlUpload(target_path, '--ftp-ssl-reqd ftp:%s' % param)
652 elif method == 'cpfe':
Shawn Nematbakhsh3404a092013-01-28 16:49:09 -0800653 report_upload.CpfeUpload(target_path, pipes.quote(param))
Tammo Spalink86a61c62012-05-25 15:10:35 +0800654 else:
655 raise Error('unknown report upload method %r', method)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800656
657
658@Command('finalize',
Hung-Te Lin6d827542012-07-19 11:50:41 +0800659 CmdArg('--no_write_protect', action='store_true',
660 help='Do not enable firmware write protection.'),
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800661 CmdArg('--fast', action='store_true',
662 help='use non-secure but faster wipe method.'),
Shun-Hsing Oudb407d62015-11-11 11:03:59 +0800663 _shopfloor_url_args_cmd_arg,
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800664 _hwdb_path_cmd_arg,
Tammo Spalink95c43732012-07-25 15:57:14 -0700665 _hwid_status_list_cmd_arg,
Jon Salz65266432012-07-30 19:02:49 +0800666 _upload_method_cmd_arg,
Jon Salzce124fb2012-10-02 17:42:03 +0800667 _add_file_cmd_arg,
668 _probe_results_cmd_arg,
Cheng-Yi Chiang406ad912013-11-14 16:51:33 +0800669 _hwid_cmd_arg,
Yong Hong68a0e0d2017-12-20 19:06:54 +0800670 _hwid_run_vpd_cmd_arg,
671 _hwid_vpd_data_file_cmd_arg,
Chih-Yu Huang714dbc42015-07-21 16:42:16 +0800672 _rma_mode_cmd_arg,
bowgotsai13820f42015-09-10 23:18:04 +0800673 _cros_core_cmd_arg,
Yilun Lin599833f2017-12-22 14:07:46 +0800674 _chromebox_cmd_arg,
Yilun Lin34f54802017-11-16 11:58:25 +0800675 _ec_pubkey_path_cmd_arg,
676 _ec_pubkey_hash_cmd_arg,
Hung-Te Lincdb96522016-04-15 16:51:10 +0800677 _release_rootfs_cmd_arg,
678 _firmware_path_cmd_arg,
Wei-Han Chenbe1355a2016-04-24 19:31:03 +0800679 _enforced_release_channels_cmd_arg,
680 _station_ip_cmd_arg,
681 _station_port_cmd_arg,
Ting Shen18a06382016-08-30 16:18:21 +0800682 _wipe_finish_token_cmd_arg,
Wei-Han Chen60c5d332017-01-05 17:15:10 +0800683 _waive_list_cmd_arg,
684 _skip_list_cmd_arg)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800685def Finalize(options):
686 """Verify system readiness and trigger transition into release state.
687
Jon Salzaa3a30e2013-05-15 15:56:28 +0800688 This routine does the following:
689 - Verifies system state (see verify command)
Jon Salzfe9036f2014-01-16 14:11:23 +0800690 - Untars stateful_files.tar.xz, if it exists, in the stateful partition, to
691 initialize files such as the CRX cache
Jon Salzaa3a30e2013-05-15 15:56:28 +0800692 - Modifies firmware bitmaps to match locale
693 - Clears all factory-friendly flags from the GBB
694 - Removes factory-specific entries from RW_VPD (factory.*)
695 - Enables firmware write protection (cannot rollback after this)
696 - Uploads system logs & reports
Earl Ou51182222016-09-09 12:16:48 +0800697 - Wipes the testing kernel, rootfs, and stateful partition
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800698 """
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800699 Verify(options)
Shen-En Shih3e079b22017-09-11 05:43:09 -0700700 Cr50SetBoardId(options)
Cheng-Han Yang08333af2017-12-18 17:22:38 +0800701 Cr50ResetState(options)
Jon Salz40b9f822014-07-25 16:39:55 +0800702 LogSourceHashes(options)
Jon Salzfe9036f2014-01-16 14:11:23 +0800703 UntarStatefulFiles(options)
Chih-Yu Huang714dbc42015-07-21 16:42:16 +0800704 if options.cros_core:
705 logging.info('SetFirmwareBitmapLocale is skipped for ChromeOS Core device.')
706 else:
707 SetFirmwareBitmapLocale(options)
Jon Salzaa3a30e2013-05-15 15:56:28 +0800708 ClearFactoryVPDEntries(options)
Mattias Nisslercca761b2015-04-15 21:53:04 +0200709 GenerateStableDeviceSecret(options)
Shen-En Shih3e079b22017-09-11 05:43:09 -0700710 ClearGBBFlags(options)
Hung-Te Lin6d827542012-07-19 11:50:41 +0800711 if options.no_write_protect:
712 logging.warn('WARNING: Firmware Write Protection is SKIPPED.')
Andy Cheng0465d132013-03-20 12:12:06 +0800713 event_log.Log('wp', fw='both', status='skipped')
Hung-Te Lin6d827542012-07-19 11:50:41 +0800714 else:
Wei-Han Chenba21f512016-10-14 18:52:33 +0800715 EnableFwWp(options)
Jon Salza0f58e02012-05-29 19:33:39 +0800716 LogSystemDetails(options)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800717 UploadReport(options)
Earl Ou51182222016-09-09 12:16:48 +0800718
719 event_log.Log('wipe_in_place')
720 wipe_args = []
Earl Ou51182222016-09-09 12:16:48 +0800721 if options.shopfloor_url:
722 wipe_args += ['--shopfloor_url', options.shopfloor_url]
723 if options.fast:
724 wipe_args += ['--fast']
725 if options.station_ip:
726 wipe_args += ['--station_ip', options.station_ip]
727 if options.station_port:
728 wipe_args += ['--station_port', options.station_port]
729 if options.wipe_finish_token:
730 wipe_args += ['--wipe_finish_token', options.wipe_finish_token]
731 ExecFactoryPar('gooftool', 'wipe_in_place', *wipe_args)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800732
733
Ting Shen129fa6f2016-09-02 12:22:24 +0800734@Command('verify_hwid',
735 _probe_results_cmd_arg,
736 _hwdb_path_cmd_arg,
737 _hwid_cmd_arg,
Yong Hong68a0e0d2017-12-20 19:06:54 +0800738 _hwid_run_vpd_cmd_arg,
739 _hwid_vpd_data_file_cmd_arg,
Ting Shen129fa6f2016-09-02 12:22:24 +0800740 _rma_mode_cmd_arg)
741def VerifyHWID(options):
Ricky Liangc662be32013-12-24 11:50:23 +0800742 """A simple wrapper that calls out to HWID utils to verify version 3 HWID.
Ricky Liang53390232013-03-08 15:37:57 +0800743
Ricky Liangc662be32013-12-24 11:50:23 +0800744 This is mainly for Gooftool to verify v3 HWID during finalize. For testing
745 and development purposes, please use `hwid` command.
Ricky Liang53390232013-03-08 15:37:57 +0800746 """
Yong Hongada8e0e2018-01-04 16:36:21 +0800747 database = GetGooftool(options).db
Yong Hong68a0e0d2017-12-20 19:06:54 +0800748
Yong Hongada8e0e2018-01-04 16:36:21 +0800749 encoded_string = options.hwid or GetGooftool(options).ReadHWID()
750
751 probed_results = hwid_utils.GetProbedResults(infile=options.probe_results)
Yong Hong2c39bf22018-01-24 22:24:11 +0800752 device_info = hwid_utils.GetDeviceInfo()
Yong Hongada8e0e2018-01-04 16:36:21 +0800753 vpd = hwid_utils.GetVPDData(run_vpd=options.hwid_run_vpd,
754 infile=options.hwid_vpd_data_file)
Ricky Liang53390232013-03-08 15:37:57 +0800755
Hung-Te Lin11052952015-03-18 13:48:59 +0800756 event_log.Log('probed_results', probed_results=FilterDict(probed_results))
Yong Hong68a0e0d2017-12-20 19:06:54 +0800757 event_log.Log('vpd', vpd=FilterDict(vpd) if vpd is None else None)
Ricky Liang53390232013-03-08 15:37:57 +0800758
Yong Hong2c39bf22018-01-24 22:24:11 +0800759 hwid_utils.VerifyHWID(database, encoded_string, probed_results,
760 device_info, vpd, options.rma_mode)
Ricky Liang53390232013-03-08 15:37:57 +0800761
Ricky Liangc662be32013-12-24 11:50:23 +0800762 event_log.Log('verified_hwid', hwid=encoded_string)
Ricky Liang53390232013-03-08 15:37:57 +0800763
764
henryhsu44d793a2013-07-20 00:07:38 +0800765@Command('get_firmware_hash',
766 CmdArg('--file', metavar='FILE', help='Firmware File.'))
767def GetFirmwareHash(options):
henryhsuf6f835c2013-07-20 20:49:25 +0800768 """Get firmware hash from a file"""
henryhsu44d793a2013-07-20 00:07:38 +0800769 if os.path.exists(options.file):
Yong Hong863d3262017-10-30 16:23:34 +0800770 hashes = chromeos_firmware.CalculateFirmwareHashes(options.file)
henryhsu44d793a2013-07-20 00:07:38 +0800771 for section, value_dict in hashes.iteritems():
Hung-Te Lin56b18402015-01-16 14:52:30 +0800772 print '%s:' % section
henryhsu44d793a2013-07-20 00:07:38 +0800773 for key, value in value_dict.iteritems():
Hung-Te Lin56b18402015-01-16 14:52:30 +0800774 print ' %s: %s' % (key, value)
henryhsu44d793a2013-07-20 00:07:38 +0800775 else:
776 raise Error('File does not exist: %s' % options.file)
777
henryhsuf6f835c2013-07-20 20:49:25 +0800778
Peter Shihfdf17682017-05-26 11:38:39 +0800779def main():
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800780 """Run sub-command specified by the command line args."""
Andy Cheng7a76cb82012-11-19 18:08:19 +0800781
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800782 options = ParseCmdline(
Ting Shen129fa6f2016-09-02 12:22:24 +0800783 'Perform Google required factory tests.',
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800784 CmdArg('-l', '--log', metavar='PATH',
785 help='Write logs to this file.'),
Jon Salza4bea382012-10-29 13:00:34 +0800786 CmdArg('--suppress-event-logs', action='store_true',
787 help='Suppress event logging.'),
Wei-Han Chenaff56232016-04-16 09:17:59 +0800788 CmdArg('--phase', default=None,
789 help=('override phase for phase checking (defaults to the current '
790 'as returned by the "factory phase" command)')),
Tammo Spalink8fab5312012-05-28 18:33:30 +0800791 verbosity_cmd_arg)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800792 SetupLogging(options.verbosity, options.log)
Andy Cheng0465d132013-03-20 12:12:06 +0800793 event_log.SetGlobalLoggerDefaultPrefix('gooftool')
794 event_log.GetGlobalLogger().suppress = options.suppress_event_logs
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800795 logging.debug('gooftool options: %s', repr(options))
Wei-Han Chenaff56232016-04-16 09:17:59 +0800796
797 phase.OverridePhase(options.phase)
Tammo Spalink9a96b8a2012-04-03 11:10:41 +0800798 try:
799 logging.debug('GOOFTOOL command %r', options.command_name)
800 options.command(options)
801 logging.info('GOOFTOOL command %r SUCCESS', options.command_name)
802 except Error, e:
803 logging.exception(e)
804 sys.exit('GOOFTOOL command %r ERROR: %s' % (options.command_name, e))
805 except Exception, e:
806 logging.exception(e)
807 sys.exit('UNCAUGHT RUNTIME EXCEPTION %s' % e)
808
809
810if __name__ == '__main__':
Peter Shihfdf17682017-05-26 11:38:39 +0800811 main()