tree 8222db04d2b75f10d390fd97fec33787a54e3db9
parent 8bd4bd66c529eb000e85296f61959fc9d3a1258c
author Vadim Bendebury <vbendeb@chromium.org> 1664645915 -0700
committer Chromeos LUCI <chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com> 1669943999 +0000

sign_official_build: add AP RO signing

When signing AP RO images, in cases when signer_config.csv manifest
includes the brand code column add a futility invocation to sign the
RO_GSCVD section of the image. If the <path to unpacked>/keyset
directory is found, save the gscvd.<model> blob in that directory.

BRANCH=none
BUG=b:247652363
TEST=built ChromeOS test image for Nissa, then invoked
  $ scripts/image_signing/sign_official_build.sh \
   base \
   ~/trunk/src/build/images/nissa/latest/chromiumos_test_image.bin \
   tests/devkeys \
   /tmp/signed.bin

  and observed 'futility gscvd' invocation in the log.

Cq-Depend: 3954963
Cq-Depend: 4063101
Change-Id: I55cec75794560662ed2cfb2dac7f44d972a8571f
Signed-off-by: Vadim Bendebury <vbendeb@google.com>
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/3935034
Commit-Queue: Vadim Bendebury <vbendeb@chromium.org>
Tested-by: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-by: Hung-Te Lin <hungte@chromium.org>
Auto-Submit: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-by: Yu-Ping Wu <yupingso@chromium.org>
(cherry picked from commit befd35f018be4ff6465b15f7bc1bc64c8e65426d)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/4063103
Reviewed-by: Vadim Bendebury <vbendeb@chromium.org>
Tested-by: Knox Chiou <knoxchiou@chromium.org>
Commit-Queue: Knox Chiou <knoxchiou@chromium.org>