#!/bin/bash

set -eu

VERSION=2016-11-03a
cmdline="console=tty1"
kerneltemp="$(mktemp -d)"

[ -f /etc/kernel-signrc ] && . /etc/kernel-signrc

echo "$cmdline"       > "${kerneltemp}/cmdline"

echo "bootloader by kernel-sign $VERSION" > "${kerneltemp}/bootloader"
echo "kernel-sign-CONFIG-START-MARK" >> "${kerneltemp}/bootloader"
tar -cJ -C "${KBUILD_OUTPUT:-.}" --transform "s,^,build-data_`date +%Y-%m-%d`/," .config include/generated  >> "${kerneltemp}/bootloader"
echo "" >> "${kerneltemp}/bootloader"
echo "kernel-sign-CONFIG-END-MARK" >> "${kerneltemp}/bootloader"

mkimage -f kernel-rd.its "${kerneltemp}/kernel.itb"
vbutil_kernel --pack kernel.signed --keyblock /usr/share/vboot/devkeys/kernel.keyblock --version 1 --signprivate /usr/share/vboot/devkeys/kernel_data_key.vbprivk --bootloader "${kerneltemp}/bootloader" --config "${kerneltemp}/cmdline" --vmlinuz "${kerneltemp}/kernel.itb" --arch arm

rm -rf "$kerneltemp"