refactor(kernel): Zuse's drive check without a VM

Browse Source

capsule_zuse_boot_check() makes the check capsule_zuse_boot_try_attach()
made -- the genesis marker, the drive's identity record (magic, version,
CRC-64, public key) -- and says HERS, GENESIS or NOT_HERS, with no VM;
capsule_zuse_boot_root_pubkey() reads the marker's key. try_attach and
load_root_pubkey call them; their behaviour and messages are unchanged.
The v4 boot will make the same check (identity gate plan, D1).

Shown on v3 (system=v3, amd64): the minted pair, "Zuse: identity
confirmed" and [zuse@Hera] ok> (logs/20261026-083603); a blank pair,
"Zuse: genesis minted onto attached thumbdrive" (logs/20261026-084729).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

...

This commit is contained in:

rajames

2026-10-26 08:48:17 -04:00

co-authored by Claude Opus 5.5

parent 5b181458df

commit 75785fb025

6 changed files with 18138 additions and 28 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

logs/20261026-083603/amd64/qemu-amd64-20261026-083603.log

+9026

File diff suppressed because it is too large Load Diff

logs/20261026-084729/amd64/qemu-amd64-20261026-084729.log

+9030

File diff suppressed because it is too large Load Diff