autotest/factory_PreFinalCheck: add verified boot key matching test (from ToT to factory branch)

client/site_tests/factory_PreFinalCheck/factory_PreFinalCheck.py

 # -*- coding: utf-8 -*-
 # Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import gtk
 from gtk import gdk
 import os
 import time
 
@@ skipping 28 matching lines @@
         return status
 
     def check_developer_switch(self):
         """ Checks if developer switch button is disabled """
         return self.read_gpio_uint("developer_switch") == 0
 
     def check_write_protect(self):
         """ Checks if hardware write protection pin is enabled """
         return self.read_gpio_uint("write_protect") == 1
 
+    def check_vboot_state(self):
+        data = utils.system_output("dev_debug_vboot | grep ' OK$'",
+                                   ignore_status=True)
+        # factory.log(data)
+        if (data.find('Verify firmware B') < 0 or
+            data.find('Test kernel_subkey_b') < 0 or
+            data.find('Test hd_kern_b.') < 0 or
+            data.find('Verify hd_kern_b.blob with kernel_subkey_b') < 0):
+            return False
+        return True
+
     def check_required_tests(self):
         """ Checks if all previous tests are passed """
         # NOTE the real 'required test' check in factory_Verify also checks
         # "Google Required Tests", which is not verified here.
         db = factory.TestDatabase(self.test_list)
         status_map = factory.StatusMap(self.test_list, self.status_file, db)
         if status_map.filter_by_status(ful.FAILED):
             return False
         return True
 
@@ skipping 15 matching lines @@
                  "系統已準備就緒。 請按空白鍵開始最終程序!")
 
     # list of tasks to be checked in format ('name': 'label')
     CHECK_TASKS = {
         'required_tests': ("Verify all required tests are passed\n"
                            "確認所有必要測試已通過"),
         'developer_switch': ("Turn off Developer Switch\n"
                              "停用開發者開關 (Developer Switch)"),
         'write_protect': ("Enable write protection pin\n"
                           "確認硬體寫入保護已開啟"),
+        'vboot_state': ("Keys for verified boot are matched\n"
+                        "驗證開機所需各金鑰符合磁碟映像內容"),
     }
 
     def run_verify(self, vector):
         return getattr(self.verifier, 'check_' + vector)()
 
     def all_passed(self):
         assert(self.check_results)
         return all(self.check_results)
 
     def set_task_as_disabled(self, label_widget):
@@ skipping 28 matching lines @@
             self.label_status.set_label(self.MSG_PENDING)
 
     def key_release_callback(self, widget, event):
         if event.keyval == ord('f'):
             factory.log("WARNING: Operator manually forced finalization.")
             gtk.main_quit()
         elif event.keyval == ord(' '):
             if self.all_passed():
                 gtk.main_quit()
             else:
+                if self.last_check and (time.time() < self.last_check + 1):
+                    # ignore flooding events in 1 second
+                    return True
                 widget.handler_block(self.key_released_handler_id)
                 self.update_status()
                 widget.handler_unblock(self.key_released_handler_id)
+                self.last_check = time.time()
         return True
 
     def register_callback(self, window):
         self.key_released_handler_id = window.connect(
                 'key-release-event', self.key_release_callback)
         window.add_events(gdk.KEY_RELEASE_MASK)
 
     def create_disabled_label(self, message):
         return ful.make_label(
                 message, fg=self.COLOR_DISABLED, alignment=(0, 0.5))
 
     def run_once(self, status_file_path=None, test_list=None):
         # configure verifier
         self.verifier = MiniVerifier()
         self.verifier.set_test_info(status_file_path, test_list)
+        self.last_check = None
 
         self.COLOR_DISABLED = gtk.gdk.Color(0x7000, 0x7000, 0x7000)
         self.COLOR_PASSED = ful.LIGHT_GREEN
         self.COLOR_ACTIVE = ful.RED
 
         # build check list from self.CHECK_TASKS
         self.check_results = []
         self.check_labels = []
         for message in self.CHECK_TASKS.values():
             self.check_labels.append(self.create_disabled_label(message))
             self.check_results.append(False)
 
         # build main window
         self.label_status = ful.make_label(self.MSG_START, fg=ful.WHITE)
         vbox = gtk.VBox()
         vbox.set_spacing(20)
         vbox.pack_start(self.label_status, False, False)
         for label in self.check_labels:
             vbox.pack_start(label, False, False)
         widget = gtk.EventBox()
         widget.modify_bg(gtk.STATE_NORMAL, ful.BLACK)
         widget.add(vbox)
 
         ful.run_test_widget(self.job, widget,
                             window_registration_callback=self.register_callback)