#!/bin/sh -ue
# Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
#
# A script to mark the current kernel partition as successfully booted.

# If we're not running as root, restart as root.
if [ $(id -u) -ne 0 ]; then
  exec sudo "$0" "$@"
fi

# Load functions and constants for chromeos-install.
. /usr/share/misc/chromeos-common.sh || exit 1

FAFT_LOCKFILE="/var/tmp/faft/lock"
if [ -f "$FAFT_LOCKFILE" ]; then
  echo "FAFT lockfile exists, skipping chromeos-setgoodkernel actions"
  exit
fi

if grep -q 'cros_efi' /proc/cmdline ; then
  is_efi=1
else
  is_efi=0
fi

# Extract the kernel partition's UniqueGuid from the command line.
if [ $is_efi -eq 1 ]; then
  guid=$(sed 's/.*root=PARTUUID=\([0-9a-fA-F-]\+\).*/\1/' /proc/cmdline)
else
  guid=$(sed 's/.*kern_guid=\([0-9a-fA-F-]\+\).*/\1/' /proc/cmdline)
fi

# Look through all the known devices to find that one partition.
kern_dev=$(cgpt find -1 -u $guid)

# Split the kernel device in the base device and paritition number.
base_dev=$(get_block_dev_from_partition_dev $kern_dev)
kern_num=$(get_partition_number $kern_dev)

# EFI BIOS boots the ROOT-x partition which is KERN-x + 1
if [ $is_efi -eq 1 ]; then
  kern_num=$(($kern_num - 1))
fi

# Mark the kernel as successfully booted (success=1, tries=0).
cgpt add $base_dev -i $kern_num -S1 -T0
# Mark the kernel as highest priority
cgpt prioritize $base_dev -i $kern_num

# Collect any startup time firmware updater logs (see chromeos_startup)
FIRMWARE_UPDATE_LOG='/mnt/stateful_partition/update_firmware.log'
if [ -f "$FIRMWARE_UPDATE_LOG" ]; then
  echo "Found startup-time firmware updating logs:"
  stat -c "%y" "$FIRMWARE_UPDATE_LOG"
  echo "------------------------------------------"
  cat "$FIRMWARE_UPDATE_LOG" && rm -f "$FIRMWARE_UPDATE_LOG"
  echo "------------------------------------------"
fi

# Run the firmware updater
FIRMWARE_UPDATE_SCRIPT='/usr/sbin/chromeos-firmwareupdate'
if [ -x "$FIRMWARE_UPDATE_SCRIPT" ]; then
  "$FIRMWARE_UPDATE_SCRIPT" --mode=bootok
fi

# Run the verified boot debugging tool now, because we won't be able to run it
# manually if there's a problem (no root shell). It leaves a log file that we
# can look at.
dev_debug_vboot --cleanup > /dev/null 2>&1 &