Script to check for blacklisted files as described in chrome-os-partner:1991

scripts/image_signing/ensure_no_nonrelease_files.sh

Index: scripts/image_signing/ensure_no_nonrelease_files.sh
diff --git a/scripts/image_signing/ensure_no_nonrelease_files.sh b/scripts/image_signing/ensure_no_nonrelease_files.sh
new file mode 100755
index 0000000000000000000000000000000000000000..e2e437f663e618446d90fc83fc09492e3bf254fc
--- /dev/null
+++ b/scripts/image_signing/ensure_no_nonrelease_files.sh
@@ -0,0 +1,53 @@
+#!/bin/bash
+
+# Copyright (c) 2011 The Chromium OS Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# Abort on error.
+set -e
+
+# Load common constants and variables.
+. "$(dirname "$0")/common.sh"
+
+usage() {
+    echo "Usage $PROG image [config]"
+}
+
+main() {
+    # We want to catch all the discrepancies, not just the first one.
+    # So, any time we find one, we set testfail=1 and continue.
+    # When finished we will use testfail to determine our exit value.
+    local testfail=0
+
+    if [ $# -ne 1 ] && [ $# -ne 2 ]; then
+        usage
+        exit 1
+    fi
+
+    local image="$1"
+
+    # Default config location: same name/directory as this script,
+    # with a .config file extension, ie ensure_no_nonrelease_files.config.
+    local configfile="$(dirname "$0")/${0/%.sh/.config}"
+    # Or, maybe a config was provided on the command line.
+    if [ $# -eq 2 ]; then
+        configfile="$2"
+    fi
+    # Either way, load test-expectations data from config.
+    . "$configfile"
+
+    local rootfs=$(make_temp_dir)
+    mount_image_partition_ro "$image" 3 "$rootfs"
+
+    for file in ${RELEASE_FILE_BLACKLIST[@]}; do
+        if [ -e "$rootfs/$file" ]; then
+            echo "FAIL: $file exists in this image!"
+            ls -al "$rootfs/$file"
+            testfail=1
+        fi
+    done
+
+    exit $testfail
+}
+main $@