Test fwupd Capsule On Disk support

[jackpot51]

After https://github.com/fwupd/fwupd/releases/tag/1.6.2, fwupd now supports Capsule On Disk. We should test doing firmware updates using that.

fwupd/fwupd@3747e24

[crawfxrd]

Now that we have the new coreboot and edk2 releases, what would be the next steps for this?

[crawfxrd]

Adding EsrtFmpDxe and adding a skeleton device FMP to edk2 causes the ESRT to be published. This shows up in sysfs under /sys/firmware/efi/esrt and will also be listed by fwupd as "UEFI ESRT device".

[crawfxrd]

Capsules can be generated using edk2's Python script:

GenerateCapsule -e --guid <FMP_GUID> --fw-version 0x1 --lsv 0 -o firmware.cap firmware.bin

UEFI requires the firmware version be represented as a u32.

This can then be added to a cabinet for fwupd to use:

rm -f firmware.jcat
jcat-tool self-sign --kind sha256 firmware.jcat firmware.cap
jcat-tool self-sign --kind sha256 firmware.jcat firmware.metainfo.xml
gcab -c firmware.cab firmware.cap firmware.jcat firmware.metainfo.xml

fwupdmgr get-details firmware.cab
fwupdmgr local-install firmware.cab <FMP_GUID>

[crawfxrd]

Dasharo is working on Capsule Update support for coreboot-based firmware:

• UEFI Capsule Update for coreboot and EDK II

[crawfxrd]

This work seems mostly complete now upstream. Main blocker is updating our edk2 fork.
Probably can test right now using the coreboot in-tree edk2 payload option.

[crawfxrd]

More coreboot work. Looks like AMD is supported now as well.

• https://review.coreboot.org/q/topic:capsule_updates