Add UefiDump recipe and integrate EBBR profile dumping/validation

SystemReady-devicetree-band/README.md

@@ -129,7 +129,8 @@ This image comprises of 2 FAT file system partition recognized by UEFI: <br />
 │   │   ├── CapsuleApp.efi
 │   │   ├── https_boot.nsh
 │   │   ├── ledge.efi
-│   │   └── UpdateVars.efi
+│   │   ├── UpdateVars.efi
+│   │   └── UefiDump.efi
 │   ├── bbr
 │   │   ├── SCT
 │   │   ├── ScrtStartup.nsh
@@ -174,7 +175,7 @@ This image comprises of 2 FAT file system partition recognized by UEFI: <br />
   - grub.cfg - grub config file
   - startup.nsh - uefi automation run startup file
 - acs_tests contains executable files and configs related for test suites
-  - app directory contains CapsuleApp.efi
+  - app directory contains CapsuleApp.efi and UefiDump.efi
   - app/capsule_update.nsh is uefi script for capsule update
   - bbr directory contains SCT related binaries and sequence files
   - bbsr-keys contains cryptographic keys for secure boot and testing secure firmware updates

SystemReady-devicetree-band/Yocto/meta-woden/recipes-acs/uefi-dump/uefi-dump.bb

@@ -0,0 +1,28 @@
+SUMMARY = "UEFI Dump Application"
+DESCRIPTION = "Fetch bbr-acs from GitHub and build UefiDump.efi from the fetched source"
+
+require recipes-acs/edk2-firmware/edk2-firmware-rev.bb
+
+PROVIDES:remove = "virtual/uefi-firmware"
+PROVIDES:remove = "virtual/bootloader"
+
+LICENSE = "CLOSED"
+COMPATIBLE_MACHINE:genericarm64 = "genericarm64"
+COMPATIBLE_HOST = "aarch64.*-linux"
+
+EDK2_ARCH = "AARCH64"
+EDK2_PLATFORM = "MdeModule"
+EDK2_PLATFORM_DSC = "${WORKDIR}/bbr-acs/ebbr/uefi_app/UefiDump.dsc"
+
+SRC_URI += "git://github.com/ARM-software/bbr-acs;destsuffix=bbr-acs;protocol=https;branch=main;name=bbr-acs"
+SRCREV_bbr-acs = "${AUTOREV}"
+
+BBR_ACS_DIR = "${WORKDIR}/bbr-acs"
+PACKAGES_PATH .= ":${BBR_ACS_DIR}"
+
+EDK2_EXTRA_BUILD = ""
+
+do_install() {
+    install -d ${D}/firmware
+    install ${B}/Build/${EDK2_PLATFORM}/${EDK2_BUILD_MODE}_${EDK_COMPILER}/${EDK2_ARCH}/UefiDump.efi ${D}/firmware/
+}

SystemReady-devicetree-band/Yocto/meta-woden/recipes-images/images/woden-image.bb

@@ -24,6 +24,7 @@ EXTRA_IMAGEDEPENDS += "bsa-acs \
                        uefi-apps \
                        ledge-efi \
                        update-vars \
+                       uefi-dump \
                        ebbr-sct \
                        bootfs-files \
                        pfdi-acs \
@@ -46,6 +47,7 @@ IMAGE_EFI_BOOT_FILES += "Bsa.efi;acs_tests/bsa/Bsa.efi \
                          bbsr_SctStartup.nsh;acs_tests/bbr/bbsr_SctStartup.nsh \
                          CapsuleApp.efi;acs_tests/app/CapsuleApp.efi \
                          UpdateVars.efi;acs_tests/app/UpdateVars.efi \
+                         UefiDump.efi;acs_tests/app/UefiDump.efi \
                          Shell.efi;EFI/BOOT/Shell.efi \
 "
 SYSTEMREADY_COMMIT_LOG ?= "${TOPDIR}/../recipes-acs/bootfs-files/files/systemready-commit.log"
@@ -78,6 +80,10 @@ do_sign_images() {
         echo "WARNING: ledge.efi not found for signing (skipping)"
     fi
 
+    if [ -f DO_SIGN/acs_tests/app/UefiDump.efi ]; then
+        sbsign --key $TEST_DB1_KEY --cert $TEST_DB1_CRT DO_SIGN/acs_tests/app/UefiDump.efi --output DO_SIGN/acs_tests/app/UefiDump.efi
+    fi
+
     echo "Signing images complete."
     wic cp DO_SIGN/EFI ${DEPLOY_DIR_IMAGE}/${IMAGE_LINK_NAME}.wic:1/
     wic cp DO_SIGN/Image ${DEPLOY_DIR_IMAGE}/${IMAGE_LINK_NAME}.wic:1/