sign_official_build: retain /boot for EFI devices

[vboot.git] / scripts / image_signing / sign_official_build.sh

diff --git a/scripts/image_signing/sign_official_build.sh b/scripts/image_signing/sign_official_build.sh
index 83f31c6..4f3407e 100755 (executable)
--- a/scripts/image_signing/sign_official_build.sh
+++ b/scripts/image_signing/sign_official_build.sh
@@ -775,12 +775,14 @@ sign_image_file() {
   # We do NOT strip /boot for factory installer, since some devices need it to
   # boot EFI. crbug.com/260512 would obsolete this requirement.
   #
-  # We also do NOT strip /boot for legacy BIOS devices.  This is because
-  # "cros_installer postinst" on legacy BIOS relies on presence of /boot in
-  # rootfs.  We infer the BIOS type from the kernel config.
+  # We also do NOT strip /boot for legacy BIOS or EFI devices.  This is because
+  # "cros_installer postinst" on BIOS or EFI systems relies on presence of
+  # /boot in rootfs to update kernel.  We infer the BIOS type from the kernel
+  # config.
   local kerna_config="$(grab_kernel_config "${input}" 2)"
   if [[ "${image_type}" != "factory_install" &&
-        " ${kerna_config} " != *" cros_legacy "* ]]; then
+        " ${kerna_config} " != *" cros_legacy "* &&
+        " ${kerna_config} " != *" cros_efi "* ]]; then
     "${SCRIPT_DIR}/strip_boot_from_image.sh" --image "${output}"
   fi
   update_rootfs_hash "${output}" "${dm_partno}" \