make_dev_ssd.sh: support updating legacy boot partitions

scripts/image_signing/make_dev_ssd.sh

Index: scripts/image_signing/make_dev_ssd.sh
diff --git a/scripts/image_signing/make_dev_ssd.sh b/scripts/image_signing/make_dev_ssd.sh
index a9f36a0fc26e0fdd6b00bd4043eb1614a5ccd5e1..17e84977b0adee919b9351156d31ad770091230f 100755
--- a/scripts/image_signing/make_dev_ssd.sh
+++ b/scripts/image_signing/make_dev_ssd.sh
@@ -61,6 +61,22 @@ is_rootfs_verification_enabled() {
   echo "$*" | grep -q 'root=/dev/dm-0'
 }
 
+remove_legacy_boot_rootfs_verification() {
+  # See src/scripts/create_legacy_bootloader_templates
+  local image="$1"
+  local mount_point="$(make_temp_dir)"
+  local config_file
+  debug_msg "Removing rootfs verification for legacy boot configuration."
+  mount_image_partition "$image" 12 "$mount_point" || return $FLAGS_FALSE
+  config_file="$mount_point/efi/boot/grub.cfg"
+  [ ! -f "$config_file" ] ||
+    sudo sed -i 's/^ *set default=2 *$/set default=0/g' "$config_file"
+  config_file="$mount_point/syslinux/default.cfg"
+  [ ! -f "$config_file" ] ||
+    sudo sed -i 's/-vusb/-usb/g; s/-vhd/-hd/g' "$config_file"
+  sudo umount "$mount_point"
+}
+
 # Wrapped version of dd
 mydd() {
   # oflag=sync is safer, but since we need bs=512, syncing every block would be
@@ -158,6 +174,7 @@ resign_ssd_kernel() {
       kernel_config="$(remove_rootfs_verification "$kernel_config")"
       debug_msg "New kernel config: $kernel_config"
       echo "$name: Disabled rootfs verification."
+      remove_legacy_boot_rootfs_verification "$ssd_device"
     fi
 
     local new_kernel_config_file="$(make_temp_file)"
@@ -287,4 +304,11 @@ main() {
   fi
 }
 
+# People using this to process images may forget to add "-i",
+# so adding parameter check is safer.
+if [ "$#" -gt 0 ]; then
+  flags_help
+  err_die "Unknown parameters: $@"
+fi
+
 main