Add a few more commands to help debug verified boot.

utility/dev_debug_vboot

 #!/bin/sh
 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 #
 # Usage:  dev_debug_vboot [ --cleanup | DIRECTORY ]
 #
 # This extracts some useful debugging information about verified boot. A short
 # summary is printed on stdout, more detailed information and working files are
 # left in a log directory.
@@ skipping 25 matching lines @@
 infon() {
   echo -n "$@"
   echo "#" "$@" >> "$LOGFILE"
 }
 
 log() {
   echo "+" "$@" >> "$LOGFILE"
   "$@" >> "$LOGFILE" 2>&1
 }
 
+loghead() {
+  echo "+" "$@" "| head" >> "$LOGFILE"
+  "$@" | head >> "$LOGFILE" 2>&1
+}
 logdie() {
   echo "+" "$@" >> "$LOGFILE"
   "$@" >> "$LOGFILE" 2>&1
   die "$@"
 }
 
 result() {
   if [ "$?" = "0" ]; then
     info "OK"
   else
     info "FAILED"
   fi
 }
 
 require_chromeos_bios() {
   log cgpt show "${HD}"
   log rootdev -s
   if [ ! -e "${ACPI}/HWID" ]; then
     info "Not running Chrome OS BIOS, no further information available"
     exit 0
   fi
   # including /dev/null just to get final "\n"
   log head "${ACPI}"/*ID "${ACPI}"/BINF* "${ACPI}"/CHSW /dev/null
+  log reboot_mode
+  log ls -a /mnt/stateful_partition
+  log ls -a /root
 }
 
 # Here we go...
 umask 022
 trap cleanup EXIT
 
 # Parse args
 if [ -n "$1" ]; then
   if [ "$1" = "--cleanup" ]; then
     CLEANUP=1
@@ skipping 11 matching lines @@
 echo "Saving verbose log as $(pwd)/$LOGFILE"
 
 BIOS=bios.rom
 
 # Find BIOS and kernel images
 if [ -n "$USE_EXISTING" ]; then
   info "Using images in $(pwd)/"
 else
   require_chromeos_bios
   info "Extracting BIOS image from flash..."
+  log flashrom --wp-status
   log flashrom -r ${BIOS}
 
   HD_KERN_A="${HD}2"
   HD_KERN_B="${HD}4"
   tmp=$(rootdev -s -d)2
   if [ "$tmp" != "$HD_KERN_A" ]; then
     USB_KERN_A="$tmp"
   fi
 
   info "Extracting kernel images from drives..."
@@ skipping 25 matching lines @@
   --fv Firmware_B_Data --kernelkey kernel_subkey_b.vbpubk ; result
 
 for key in kernel_subkey_a.vbpubk kernel_subkey_b.vbpubk; do
   infon "Test $key... "
   log vbutil_key --unpack $key ; result
 done
 
 for keyblock in *kern*.blob; do
   infon "Test $keyblock... "
   log vbutil_keyblock --unpack $keyblock ; result
+  loghead od -Ax -tx1 $keyblock
 done
 
 # Test each kernel with each key
 for key in kernel_subkey_a.vbpubk kernel_subkey_b.vbpubk recoverykey.vbpubk; do
   for kern in *kern*.blob; do
     infon "Verify $kern with $key... "
     log vbutil_kernel --verify $kern --signpubkey $key ; result
   done
 done