--- /dev/null
+#!/usr/bin/env python3
+#
+# Copyright 2019-2021 Canonical Ltd.
+# Authors:
+# - dann frazier <dann.frazier@canonical.com>
+#
+# This program is free software: you can redistribute it and/or modify it
+# under the terms of the GNU General Public License version 3, as published
+# by the Free Software Foundation.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT
+# ANY WARRANTY; without even the implied warranties of MERCHANTABILITY,
+# SATISFACTORY QUALITY, or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License along with
+# this program. If not, see <http://www.gnu.org/licenses/>.
+#
+
+import enum
+import pexpect
+import subprocess
+import sys
+import unittest
+
+from UEFI.Filesystems import GrubShellBootableIsoImage
+from UEFI.Qemu import QemuEfiMachine, QemuEfiVariant, QemuEfiFlashSize
+from UEFI import Qemu
+
+DPKG_ARCH = subprocess.check_output(
+ ['dpkg', '--print-architecture']
+).decode().rstrip()
+
+
+class BootToShellTest(unittest.TestCase):
+ debug = True
+
+ def run_cmd_check_shell(self, cmd):
+ child = pexpect.spawn(' '.join(cmd))
+
+ if self.debug:
+ child.logfile = sys.stdout.buffer
+ try:
+ while True:
+ i = child.expect(
+ [
+ 'Press .* or any other key to continue',
+ 'Shell> '
+ ],
+ timeout=60,
+ )
+ if i == 0:
+ child.sendline('\x1b')
+ continue
+ if i == 1:
+ child.sendline('reset -s\r')
+ continue
+ except pexpect.EOF:
+ return
+ except pexpect.TIMEOUT as err:
+ self.fail("%s\n" % (err))
+
+ def run_cmd_check_secure_boot(self, cmd, efiarch, should_verify):
+ class State(enum.Enum):
+ PRE_EXEC = 1
+ POST_EXEC = 2
+
+ child = pexpect.spawn(' '.join(cmd))
+
+ if self.debug:
+ child.logfile = sys.stdout.buffer
+ try:
+ state = State.PRE_EXEC
+ while True:
+ i = child.expect(
+ [
+ 'Press .* or any other key to continue',
+ 'Shell> ',
+ "FS0:\\\\> ",
+ 'grub> ',
+ 'Command Error Status: Access Denied',
+ ],
+ timeout=60,
+ )
+ if i == 0:
+ child.sendline('\x1b')
+ continue
+ if i == 1:
+ child.sendline('fs0:\r')
+ continue
+ if i == 2:
+ if state == State.PRE_EXEC:
+ child.sendline(f'\\efi\\boot\\boot{efiarch}.efi\r')
+ state = State.POST_EXEC
+ elif state == State.POST_EXEC:
+ child.sendline('reset -s\r')
+ continue
+ if i == 3:
+ child.sendline('halt\r')
+ verified = True
+ continue
+ if i == 4:
+ verified = False
+ continue
+ except pexpect.TIMEOUT as err:
+ self.fail("%s\n" % (err))
+ except pexpect.EOF:
+ pass
+ self.assertEqual(should_verify, verified)
+
+ def test_aavmf(self):
+ q = Qemu.QemuCommand(QemuEfiMachine.AAVMF)
+ self.run_cmd_check_shell(q.command)
+
+ @unittest.skipUnless(DPKG_ARCH == 'arm64', "Requires grub-efi-arm64")
+ def test_aavmf_ms_secure_boot_signed(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.AAVMF,
+ variant=QemuEfiVariant.MS,
+ )
+ iso = GrubShellBootableIsoImage('AA64', use_signed=True)
+ q.add_disk(iso.path)
+ self.run_cmd_check_secure_boot(q.command, 'aa64', True)
+
+ @unittest.skipUnless(DPKG_ARCH == 'arm64', "Requires grub-efi-arm64")
+ def test_aavmf_ms_secure_boot_unsigned(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.AAVMF,
+ variant=QemuEfiVariant.MS,
+ )
+ iso = GrubShellBootableIsoImage('AA64', use_signed=False)
+ q.add_disk(iso.path)
+ self.run_cmd_check_secure_boot(q.command, 'aa64', False)
+
+ def test_aavmf_snakeoil(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.AAVMF,
+ variant=QemuEfiVariant.SNAKEOIL,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ def test_aavmf32(self):
+ q = Qemu.QemuCommand(QemuEfiMachine.AAVMF32)
+ self.run_cmd_check_shell(q.command)
+
+ def test_ovmf_pc(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_PC, flash_size=QemuEfiFlashSize.SIZE_2MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ def test_ovmf_q35(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35, flash_size=QemuEfiFlashSize.SIZE_2MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ def test_ovmf_secboot(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.SECBOOT,
+ flash_size=QemuEfiFlashSize.SIZE_2MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ def test_ovmf_ms(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.MS,
+ flash_size=QemuEfiFlashSize.SIZE_2MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ @unittest.skipUnless(DPKG_ARCH == 'amd64', "amd64-only")
+ def test_ovmf_ms_secure_boot_signed(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.MS,
+ flash_size=QemuEfiFlashSize.SIZE_2MB,
+ )
+ iso = GrubShellBootableIsoImage('X64', use_signed=True)
+ q.add_disk(iso.path)
+ self.run_cmd_check_secure_boot(q.command, 'x64', True)
+
+ @unittest.skipUnless(DPKG_ARCH == 'amd64', "amd64-only")
+ def test_ovmf_ms_secure_boot_unsigned(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.MS,
+ flash_size=QemuEfiFlashSize.SIZE_2MB,
+ )
+ iso = GrubShellBootableIsoImage('X64', use_signed=False)
+ q.add_disk(iso.path)
+ self.run_cmd_check_secure_boot(q.command, 'x64', False)
+
+ def test_ovmf_4m(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ flash_size=QemuEfiFlashSize.SIZE_4MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ def test_ovmf_4m_secboot(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.SECBOOT,
+ flash_size=QemuEfiFlashSize.SIZE_4MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ def test_ovmf_4m_ms(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.MS,
+ flash_size=QemuEfiFlashSize.SIZE_4MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ def test_ovmf_snakeoil(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.SNAKEOIL,
+ )
+ self.run_cmd_check_shell(q.command)
+
+ @unittest.skipUnless(DPKG_ARCH == 'amd64', "amd64-only")
+ def test_ovmf_4m_ms_secure_boot_signed(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.MS,
+ flash_size=QemuEfiFlashSize.SIZE_4MB,
+ )
+ iso = GrubShellBootableIsoImage('X64', use_signed=True)
+ q.add_disk(iso.path)
+ self.run_cmd_check_secure_boot(q.command, 'x64', True)
+
+ @unittest.skipUnless(DPKG_ARCH == 'amd64', "amd64-only")
+ def test_ovmf_4m_ms_secure_boot_unsigned(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF_Q35,
+ variant=QemuEfiVariant.MS,
+ flash_size=QemuEfiFlashSize.SIZE_4MB,
+ )
+ iso = GrubShellBootableIsoImage('X64', use_signed=False)
+ q.add_disk(iso.path)
+ self.run_cmd_check_secure_boot(q.command, 'x64', False)
+
+ def test_ovmf32_4m_secboot(self):
+ q = Qemu.QemuCommand(
+ QemuEfiMachine.OVMF32,
+ variant=QemuEfiVariant.SECBOOT,
+ flash_size=QemuEfiFlashSize.SIZE_4MB,
+ )
+ self.run_cmd_check_shell(q.command)
+
+
+if __name__ == '__main__':
+ unittest.main(verbosity=2)
projects / pve-edk2-firmware.git / blobdiff