Deploy trust|me on Raspberry Pi platforms

Deploy trust|me on Raspberry Pi platforms
- Create bootable medium
  - Requirements
  - Copy trust|me image to disk
- Boot trust|me

This section describes how to deploy trust|me on Raspberry Pi platforms.

Current pre-built release image:
trustmeimage-v0.1.1_arm32_raspberrypi2.img.bz2
trustmeimage-v0.1.1_arm64_raspberrypi3-64.img.bz2

Create bootable medium

Requirements

A successfully built trust|me image file (trustmeimage.img), either downloaded from Github Release or built following the instructions here.
The script copy_image_to_disk_mbr.sh which can be found on GitHub or in your build folder at trustme/build/yocto/copy_image_to_disk.sh
A MicroSD card compatible with your board

First, ensure the needed packages are installed on your system.

apt-get install util-linux btrfs-progs sgdisk parted

Copy trust|me image to disk

Now the trust|me image can be copied to the MicroSD card. The provided script takes care of expanding the partitions to use all of the available disk space.

WARNING: This operation will wipe all data on the target device

sudo copy_image_to_disk_mbr.sh <trustme-image> </path/to/target/device>

If you have built from source in ws-yocto and your target device is /dev/mmcblk0 the command would be:

Raspberry Pi2

cd ws-yocto # your yocto workspace directory
sudo copy_image_to_disk_mbr.sh \
  out-yocto/tmp/deploy/images/raspberrypi2/trustme_image/trustmeimage.img \
  /dev/mmcblk0

Raspberry Pi3

cd ws-yocto # your yocto workspace directory
sudo copy_image_to_disk_mbr.sh \
  out-yocto/tmp/deploy/images/raspberrypi3-64/trustme_image/trustmeimage.img \
  /dev/mmcblk0

Boot trust|me

Connect a monitor to the HDMI port and a keyboard to the USB connector of your Raspberry Pi board.

After boot a shell in the management container (c0) will be available at tty1. Also a debug shell into the CML will be available at tty12. Further, the init log messages will appear on tty11.

Note: On first boot several keys are generated, thus it may take a long time untill login prompt may appear. You can accelerate the progress by generating randomness with the connected keyboard.

For instructions on how to operate trust|me please refer to section Operate.