|
1 | | -# Travis configuration. Build the simulator and run its tests. |
| 1 | +# Travis configuration. Run FI hardening tests. |
2 | 2 |
|
3 | | -addons: |
4 | | - apt: |
5 | | - packages: |
6 | | - - "python3-pip" |
| 3 | +language: minimal |
7 | 4 |
|
8 | | -language: rust |
9 | | - |
10 | | -cache: |
11 | | - directories: |
12 | | - - $HOME/TOOLCHAIN |
13 | | - - cargo |
| 5 | +services: |
| 6 | + - docker |
14 | 7 |
|
15 | 8 | matrix: |
16 | 9 | include: |
17 | | - # Runs each value defined in $SINGLE_FEATURES by itself in the order |
18 | | - # the were defined. |
19 | | - # - os: linux |
20 | | - # env: SINGLE_FEATURES="sig-ecdsa sig-ed25519 enc-kw bootstrap" TEST=sim |
21 | | - # - os: linux |
22 | | - # env: SINGLE_FEATURES="none sig-rsa sig-rsa3072 overwrite-only validate-primary-slot swap-move" TEST=sim |
23 | | - # - os: linux |
24 | | - # env: SINGLE_FEATURES="enc-rsa enc-ec256 enc-x25519" TEST=sim |
25 | | - |
26 | | - # Values defined in $MULTI_FEATURES consist of any number of features |
27 | | - # to be enabled at the same time. The list of multi-values should be |
28 | | - # separated by ',' and each list of values is run sequentially in the |
29 | | - # defined order. |
30 | | - # - os: linux |
31 | | - # env: MULTI_FEATURES="sig-rsa overwrite-only large-write,sig-ecdsa overwrite-only large-write,multiimage overwrite-only large-write" TEST=sim |
32 | | - # - os: linux |
33 | | - # env: MULTI_FEATURES="sig-rsa validate-primary-slot,sig-ecdsa validate-primary-slot,sig-rsa multiimage validate-primary-slot" TEST=sim |
34 | | - # - os: linux |
35 | | - # env: MULTI_FEATURES="enc-kw overwrite-only large-write,enc-rsa overwrite-only large-write" TEST=sim |
36 | | - # - os: linux |
37 | | - # env: MULTI_FEATURES="sig-rsa enc-rsa validate-primary-slot,swap-move enc-rsa sig-rsa validate-primary-slot" TEST=sim |
38 | | - # - os: linux |
39 | | - # env: MULTI_FEATURES="sig-rsa enc-kw validate-primary-slot bootstrap,sig-ed25519 enc-x25519 validate-primary-slot" TEST=sim |
40 | | - # - os: linux |
41 | | - # env: MULTI_FEATURES="sig-ecdsa enc-kw validate-primary-slot" TEST=sim |
42 | | - # - os: linux |
43 | | - # env: MULTI_FEATURES="sig-rsa validate-primary-slot overwrite-only large-write,sig-ecdsa enc-ec256 validate-primary-slot" TEST=sim |
44 | | - # - os: linux |
45 | | - # env: MULTI_FEATURES="sig-rsa validate-primary-slot overwrite-only downgrade-prevention" TEST=sim |
46 | | - |
47 | | - # - os: linux |
48 | | - # language: go |
49 | | - # env: TEST=mynewt |
50 | | - # go: |
51 | | - # - "1.12" |
| 10 | + - os: linux |
| 11 | + language: minimal |
| 12 | + env: BUILD_TYPE=RELEASE SKIP_SIZE=2,4,6,8,10 TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 13 | + |
| 14 | + - os: linux |
| 15 | + language: minimal |
| 16 | + env: BUILD_TYPE=RELEASE SKIP_SIZE=2,4,6,8,10 FIH_LEVEL=LOW TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 17 | + |
| 18 | + - os: linux |
| 19 | + language: minimal |
| 20 | + env: BUILD_TYPE=RELEASE SKIP_SIZE=2,4,6,8,10 FIH_LEVEL=MEDIUM TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 21 | + |
| 22 | + - os: linux |
| 23 | + language: minimal |
| 24 | + env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 25 | + |
| 26 | + - os: linux |
| 27 | + language: minimal |
| 28 | + env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 FIH_LEVEL=LOW TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 29 | + |
| 30 | + - os: linux |
| 31 | + language: minimal |
| 32 | + env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 FIH_LEVEL=MEDIUM TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 33 | + |
| 34 | + - os: linux |
| 35 | + language: minimal |
| 36 | + env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=8,10 TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
52 | 37 |
|
53 | 38 | - os: linux |
54 | | - language: python |
55 | | - env: TEST=imgtool |
| 39 | + language: minimal |
| 40 | + env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=8,10 FIH_LEVEL=LOW TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 41 | + |
| 42 | + - os: linux |
| 43 | + language: minimal |
| 44 | + env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=8,10 FIH_LEVEL=MEDIUM TEST=fih-tests DAMAGE_TYPE=SIGNATURE |
| 45 | + |
| 46 | + ## Corrupt image hash is not tested as it is in the unprotected TLV section |
| 47 | + ## and is easy to calculate a valid hash for a changed image |
| 48 | + #- os: linux |
| 49 | + # language: minimal |
| 50 | + # env: BUILD_TYPE=MINSIZEREL SKIP_SIZE=2,4,6 TEST=fih-tests DAMAGE_TYPE=IMAGE_HASH |
| 51 | + |
| 52 | + ## Max profile is not tested as it requires HW entropy source which is not |
| 53 | + ## present in the QEMU system being used for the tests. |
| 54 | + #- os: linux |
| 55 | + # language: minimal |
| 56 | + # env: FIH_LEVEL=MAX TEST=fih-tests |
56 | 57 |
|
57 | 58 | before_install: |
58 | 59 | - | |
|
0 commit comments