Re: appending partition results in zero bytes written

[Cameron Seader]

Hi Thomas,
Thanks for responding.
I did test it with -changes_pending yes and the -outdev now writes

Command that works:
xorriso -indev SLE-Micro.x86_64-5.4.0-Default-SelfInstall-GM.install.iso 
-outdev SLE-Micro-Selfinstall.iso -append_partition 3 Linux 
ignition-micro.img -boot_image any replay -changes_pending yes

When i use the resulting -outdev i get an error of:
Verifying shim SBAT data failed: Security Policy Violation
Something has gone seriously wrong: SBAT self-check failed: Security 
Policy Violation

What might be causing this? Any hints?

Thanks,
Cameron

On 8/4/23 00:42, Thomas Schmitt wrote:
> Hi,
> 
> Cameron Seader wrote:
>> I am trying the following command with media status blank
>> xorriso -indev
>> SLE-Micro.x86_64-5.4.0-Default-SelfInstall-GM.install.iso3 -outdev -
>> -append_partition 3 Linux ignition-micro.img -boot_image any replay
> 
> The problem seems to be due to the fact that -append_partition does not
> set the internal flag for pending changes. So xorriso silently decides
> not to write the new session.
> 
> It works for me if i add this command to the xorriso run
> 
>    -changes_pending yes
> 
> The sequence of -append_partition and -boot_image "any" "replay" in your
> xorriso run might become problematic in future, because the idea of
> "replay" is to override all previously made boot-related settings.
> Currently -append_partition is not among these settings, but in some way
> it would make sense to revoke all previously made -append_partition
> at the beginning of "replay".
> 
> So i would advise to do -append_partition after "replay". I.e.:
> 
>     -boot_image any replay -append_partition 3 Linux ignition-micro.img
> 
> -------------------------------------------------------------------------
> 
> I will have to examine why the flag is not set, why xorriso is so silent
> when refusing to write, and whether the refusal is appropriate in the
> -indev -outdev use case. (It makes much sense with -dev, which would cause
> a new directory tree to be appended with not changes towards the old one.)
> 
> Further i will have to ponder whether "replay" should revoke
> -append_partition. Your example shows that this might break working
> scripts which use xorriso. So it would have to be introduced with much
> caution, if ever.
> 
> 
> Have a nice day :)
> 
> Thomas
> 

-- 
Cameron Seader
Director, Technical Sales
SUSE
+1 208 420 2167
cs@suse.com

www.suse.com