make_dev_ssd.sh: support updating legacy boot partitions

scripts/image_signing/make_dev_ssd.sh

 #!/bin/sh
 #
 # Copyright (c) 2011 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 #
 # This script can change key (usually developer keys) and kernel config
 # of a kernels on SSD.
 
 SCRIPT_BASE="$(dirname "$0")"
@@ skipping 43 matching lines @@
     s| dm_verity[^=]*=[-0-9]*||g
     s| dm="[^"]*"||
     s| ro | rw |'
 }
 
 # Checks if rootfs verification is enabled from kernel boot parameter
 is_rootfs_verification_enabled() {
   echo "$*" | grep -q 'root=/dev/dm-0'
 }
 
+remove_legacy_boot_rootfs_verification() {
+  # See src/scripts/create_legacy_bootloader_templates
+  local image="$1"
+  local mount_point="$(make_temp_dir)"
+  local config_file
+  debug_msg "Removing rootfs verification for legacy boot configuration."
+  mount_image_partition "$image" 12 "$mount_point" || return $FLAGS_FALSE
+  config_file="$mount_point/efi/boot/grub.cfg"
+  [ ! -f "$config_file" ] ||
+    sudo sed -i 's/^ *set default=2 *$/set default=0/g' "$config_file"
+  config_file="$mount_point/syslinux/default.cfg"
+  [ ! -f "$config_file" ] ||
+    sudo sed -i 's/-vusb/-usb/g; s/-vhd/-hd/g' "$config_file"
+  sudo umount "$mount_point"
+}
+
 # Wrapped version of dd
 mydd() {
   # oflag=sync is safer, but since we need bs=512, syncing every block would be
   # very slow.
   dd "$@" >"$EXEC_LOG" 2>&1 ||
     err_die "Failed in [dd $@], Message: $(cat "$EXEC_LOG")"
 }
 
 # Prints a more friendly name from kernel index number
 cros_kernel_name() {
@@ skipping 77 matching lines @@
 
     if [ ${FLAGS_remove_rootfs_verification} = $FLAGS_FALSE ]; then
       debug_msg "Bypassing rootfs verification check"
     elif ! is_rootfs_verification_enabled "$kernel_config"; then
       echo "INFO: $name: rootfs verification was not enabled."
     else
       debug_msg "Changing boot parameter to remove rootfs verification"
       kernel_config="$(remove_rootfs_verification "$kernel_config")"
       debug_msg "New kernel config: $kernel_config"
       echo "$name: Disabled rootfs verification."
+      remove_legacy_boot_rootfs_verification "$ssd_device"
     fi
 
     local new_kernel_config_file="$(make_temp_file)"
     echo -n "$kernel_config"  >"$new_kernel_config_file"
 
     debug_msg "Re-signing $name from $old_blob to $new_blob"
     debug_msg "Using key: $KERNEL_DATAKEY"
     vbutil_kernel \
       --repack "$new_blob" \
       --keyblock "$KERNEL_KEYBLOCK" \
@@ skipping 109 matching lines @@
   debug_msg "Complete."
   if [ $num_signed -gt 0 -a $num_signed -le $num_given ]; then
     # signed something at least
     echo "Successfully re-signed $num_signed of $num_given kernel(s)" \
       " on device $FLAGS_image".
   else
     err_die "Failed re-signing kernels."
   fi
 }
 
+# People using this to process images may forget to add "-i",
+# so adding parameter check is safer.
+if [ "$#" -gt 0 ]; then
+  flags_help
+  err_die "Unknown parameters: $@"
+fi
+
 main