common-mock: mock btg_key_validator so we can test failure states

Signed-off-by: Michał Iwanicki <michal.iwanicki@3mdeb.com>

Author: m-iwanicki

include/hal/common-mock-func.sh

@@ -793,3 +793,20 @@ amdtool_on_amd_mock() {
 cap_upd_tool_mock() {
   return 0
 }
+
+################################################################################
+# cap_upd_tool
+################################################################################
+# Leave empty to call original tool, set to "true" to return 1 otherwise
+# return 0
+TEST_KEY_VALIDATOR_FAIL="${TEST_KEY_VALIDATOR_RESULT:-}"
+
+btg_key_validator_mock() {
+  if [ -z "${TEST_KEY_VALIDATOR_FAIL}" ]; then
+    btg_key_validator "$@"
+  elif [ "${TEST_KEY_VALIDATOR_FAIL}" = "true" ]; then
+    return 1
+  else
+    return 0
+  fi
+}

include/hal/dts-hal.sh

@@ -60,6 +60,7 @@ RDMSR="tool_wrapper rdmsr"
 LSPCI="tool_wrapper lspci"
 LSUSB="tool_wrapper lsusb"
 DUMP_PCRS="tool_wrapper dump_pcrs"
+BTG_KEY_VALIDATOR="tool_wrapper btg_key_validator"
 
 ################################################################################
 # Tools wrapper.

scripts/dasharo-deploy.sh

@@ -1473,7 +1473,7 @@ fuse_workflow() {
   check_if_ac
   download_bios
   verify_artifacts bios
-  btg_key_validator --file "$BIOS_UPDATE_FILE" --key-hash "$INTEL_BTG_HASH"
+  $BTG_KEY_VALIDATOR --file "$BIOS_UPDATE_FILE" --key-hash "$INTEL_BTG_HASH"
   error_check "Firmware Intel BootGuard signature check failed. Aborting...
 Platform has not been fused and no changes were made."
   # Ask user for confirmation: