Simplify justfile

.github/workflows/build.yaml

@@ -95,6 +95,8 @@ jobs:
         run: |
           echo "${{ steps.parse.outputs.binary-path }}"
           ls -la "${{ steps.parse.outputs.binary-path }}"
+          echo "${{ steps.parse.outputs.subject-path }}"
+          ls -la "${{ steps.parse.outputs.subject-path }}"
 
       - name: Attest
         id: attest

buildconfigs/oak_containers_kernel.sh

@@ -16,4 +16,4 @@ export BUILD_COMMAND=(
 )
 
 export BINARY_PATH=oak_containers_kernel/target/bzImage
-export SUBJECT_PATH="oak_containers_kernel/bin/subjects/*"
+export SUBJECT_PATH="oak_containers_kernel/target/subjects/*"

buildconfigs/oak_restricted_kernel_simple_io_init_rd_wrapper_bin.sh

@@ -2,7 +2,6 @@
 #
 # Build configuration for oak_restricted_kernel_simple_io_init_rd_wrapper_bin.
 #
-# TODO: b/333745447 - Replace this file with its counterparts in ./buildconfigs_full_provenance.
 export PACKAGE_NAME=oak_restricted_kernel_simple_io_init_rd_wrapper_bin
 
 export BUILD_COMMAND=(
@@ -15,4 +14,4 @@ export BUILD_COMMAND=(
 )
 
 export BINARY_PATH=oak_restricted_kernel_wrapper/target/x86_64-unknown-none/release/oak_restricted_kernel_simple_io_init_rd_wrapper_bin
-export SUBJECT_PATH="${BINARY_PATH}"
+export SUBJECT_PATH="oak_restricted_kernel_wrapper/target/oak_restricted_kernel_simple_io_init_rd/subjects/*"

justfile

@@ -39,23 +39,19 @@ restricted_kernel_bzimage_and_provenance_subjects kernel_bin_prefix:
         oak_restricted_kernel_wrapper/target/x86_64-unknown-none/release/oak_restricted_kernel_wrapper \
         oak_restricted_kernel_wrapper/target/x86_64-unknown-none/release/{{kernel_bin_prefix}}_wrapper_bin
     just bzimage_provenance_subjects \
-        {{kernel_bin_prefix}} \
-        ./oak_restricted_kernel_wrapper/bin/{{kernel_bin_prefix}}/subjects \
-        oak_restricted_kernel_wrapper/target/x86_64-unknown-none/release/{{kernel_bin_prefix}}_wrapper_bin
+        oak_restricted_kernel_wrapper/target/x86_64-unknown-none/release/{{kernel_bin_prefix}}_wrapper_bin \
+        oak_restricted_kernel_wrapper/target/{{kernel_bin_prefix}}/subjects
 
 # Create provenance subjects for a kernel bzImage, by extracting the setup data
 # and image from it. Places them alongside the bzImage in the output directory.
-bzimage_provenance_subjects kernel_name output_dir_provenance_subjects bzimage_path:
-    rm --recursive --force {{output_dir_provenance_subjects}}
-    mkdir --parents {{output_dir_provenance_subjects}}
+bzimage_provenance_subjects bzimage_path output_dir:
+    rm --recursive --force {{output_dir}}
+    mkdir --parents {{output_dir}}
     cargo run --package=oak_kernel_measurement -- \
         --kernel={{bzimage_path}} \
-        --kernel-setup-data-output="{{output_dir_provenance_subjects}}/{{kernel_name}}_setup_data" \
-        --kernel-image-output="{{output_dir_provenance_subjects}}/{{kernel_name}}_image"
-    cp \
-        --preserve=timestamps \
-        {{bzimage_path}} \
-        {{output_dir_provenance_subjects}}/{{kernel_name}}_bzimage
+        --kernel-setup-data-output={{output_dir}}/kernel_setup_data \
+        --kernel-image-output={{output_dir}}/kernel_image
+    cp --preserve=timestamps {{bzimage_path}} {{output_dir}}/bzImage
 
 oak_restricted_kernel_wrapper: oak_restricted_kernel_bin
     just restricted_kernel_bzimage_and_provenance_subjects oak_restricted_kernel
@@ -84,9 +80,8 @@ stage1_cpio:
 oak_containers_kernel:
     env --chdir=oak_containers_kernel make
     just bzimage_provenance_subjects \
-        oak_containers_kernel \
-        oak_containers_kernel/bin/subjects \
-        oak_containers_kernel/target/bzImage
+        oak_containers_kernel/target/bzImage \
+        oak_containers_kernel/target/subjects
 
 oak_containers_launcher:
     env cargo build --release --package='oak_containers_launcher'