diff options
author | Jia Zhang <zhang.jia@linux.alibaba.com> | 2018-09-20 10:08:23 -0400 |
---|---|---|
committer | Jia Zhang <zhang.jia@linux.alibaba.com> | 2018-09-21 03:20:23 -0400 |
commit | 1423a3c5c594fb5b4f6131a42c8d3e243d4958b8 (patch) | |
tree | a99b00bba063d86eadd9506d1ebda17e501f94e2 | |
parent | ab99b6a8920a8c40c681e7b6d5d7bed86514cba3 (diff) | |
download | meta-secure-core-1423a3c5c594fb5b4f6131a42c8d3e243d4958b8.tar.gz |
Maintain the stable branch rocko
The modifications based on the following commits are made by the way:
- seloader: Fix building for rocko (bc6bbe2)
- meta-integrity: rpm: Add back in required patches for rocko (5fa9c85)
Because the sanity check for rocko now becomes unnecessary.
In addition, the meta-intel-sgx is removed because it is still
experimental.
- meta-intel-sgx: Initial support of linux-sgx-driver (7d4f711)
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
-rw-r--r-- | MAINTAINERS | 2 | ||||
-rw-r--r-- | README | 6 | ||||
-rw-r--r-- | meta-efi-secure-boot/conf/layer.conf | 2 | ||||
-rw-r--r-- | meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb | 3 | ||||
-rw-r--r-- | meta-encrypted-storage/conf/layer.conf | 2 | ||||
-rw-r--r-- | meta-ids/conf/layer.conf | 2 | ||||
-rw-r--r-- | meta-integrity/conf/layer.conf | 2 | ||||
-rw-r--r-- | meta-integrity/recipes-devtools/rpm/rpm-integrity.inc | 3 | ||||
-rw-r--r-- | meta-intel-sgx/README.md | 23 | ||||
-rw-r--r-- | meta-intel-sgx/conf/layer.conf | 18 | ||||
-rw-r--r-- | meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb | 34 | ||||
-rw-r--r-- | meta-signing-key/conf/layer.conf | 2 | ||||
-rw-r--r-- | meta-tpm/conf/layer.conf | 2 | ||||
-rw-r--r-- | meta-tpm2/conf/layer.conf | 2 | ||||
-rw-r--r-- | meta/conf/layer.conf | 2 |
15 files changed, 14 insertions, 91 deletions
diff --git a/MAINTAINERS b/MAINTAINERS index 60f11fa..34d0fc4 100644 --- a/MAINTAINERS +++ b/MAINTAINERS | |||
@@ -1 +1 @@ | |||
Jia Zhang <zhang.jia@linux.alibaba.com> | Tom Rini <trini@konsulko.com> | ||
@@ -10,11 +10,11 @@ Dependencies | |||
10 | This layer depends on: | 10 | This layer depends on: |
11 | 11 | ||
12 | URI: git://git.openembedded.org/bitbake | 12 | URI: git://git.openembedded.org/bitbake |
13 | branch: master | 13 | branch: rocko |
14 | 14 | ||
15 | URI: git://git.openembedded.org/openembedded-core | 15 | URI: git://git.openembedded.org/openembedded-core |
16 | layers: meta | 16 | layers: meta |
17 | branch: master | 17 | branch: rocko |
18 | 18 | ||
19 | 19 | ||
20 | Patches | 20 | Patches |
@@ -23,7 +23,7 @@ Patches | |||
23 | Please submit any patches against the meta-secure-core layer to the | 23 | Please submit any patches against the meta-secure-core layer to the |
24 | maintainer: | 24 | maintainer: |
25 | 25 | ||
26 | Maintainer: Jia Zhang <lans.zhang2008@gmail.com> | 26 | Maintainer: Tom Rini <trini@konsulko.com> |
27 | 27 | ||
28 | 28 | ||
29 | Table of Contents | 29 | Table of Contents |
diff --git a/meta-efi-secure-boot/conf/layer.conf b/meta-efi-secure-boot/conf/layer.conf index 7d69fea..458eb52 100644 --- a/meta-efi-secure-boot/conf/layer.conf +++ b/meta-efi-secure-boot/conf/layer.conf | |||
@@ -19,4 +19,4 @@ LAYERDEPENDS_efi-secure-boot = "\ | |||
19 | perl-layer \ | 19 | perl-layer \ |
20 | " | 20 | " |
21 | 21 | ||
22 | LAYERSERIES_COMPAT_efi-secure-boot = "rocko sumo" | 22 | LAYERSERIES_COMPAT_efi-secure-boot = "rocko" |
diff --git a/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb b/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb index 5d5fe2d..3275cc5 100644 --- a/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb +++ b/meta-efi-secure-boot/recipes-bsp/seloader/seloader_git.bb | |||
@@ -43,10 +43,9 @@ EXTRA_OEMAKE = "\ | |||
43 | SBSIGN=${STAGING_BINDIR_NATIVE}/sbsign \ | 43 | SBSIGN=${STAGING_BINDIR_NATIVE}/sbsign \ |
44 | gnuefi_libdir=${STAGING_LIBDIR} \ | 44 | gnuefi_libdir=${STAGING_LIBDIR} \ |
45 | LIB_GCC="`${CC} -print-libgcc-file-name`" \ | 45 | LIB_GCC="`${CC} -print-libgcc-file-name`" \ |
46 | GNU_EFI_VERSION=306 \ | ||
46 | " | 47 | " |
47 | 48 | ||
48 | EXTRA_OEMAKE += "${@bb.utils.contains('LAYERSERIES_CORENAMES', 'rocko', 'GNU_EFI_VERSION=306', '', d)}" | ||
49 | |||
50 | EFI_ARCH_x86 = "ia32" | 49 | EFI_ARCH_x86 = "ia32" |
51 | EFI_ARCH_x86-64 = "x64" | 50 | EFI_ARCH_x86-64 = "x64" |
52 | 51 | ||
diff --git a/meta-encrypted-storage/conf/layer.conf b/meta-encrypted-storage/conf/layer.conf index 18fa131..dd85e7a 100644 --- a/meta-encrypted-storage/conf/layer.conf +++ b/meta-encrypted-storage/conf/layer.conf | |||
@@ -17,4 +17,4 @@ LAYERDEPENDS_encrypted-storage = "\ | |||
17 | openembedded-layer \ | 17 | openembedded-layer \ |
18 | " | 18 | " |
19 | 19 | ||
20 | LAYERSERIES_COMPAT_encrypted-storage = "rocko sumo" | 20 | LAYERSERIES_COMPAT_encrypted-storage = "rocko" |
diff --git a/meta-ids/conf/layer.conf b/meta-ids/conf/layer.conf index 50cc3cc..677772e 100644 --- a/meta-ids/conf/layer.conf +++ b/meta-ids/conf/layer.conf | |||
@@ -16,4 +16,4 @@ LAYERDEPENDS_ids = "\ | |||
16 | networking-layer \ | 16 | networking-layer \ |
17 | " | 17 | " |
18 | 18 | ||
19 | LAYERSERIES_COMPAT_ids = "rocko sumo" | 19 | LAYERSERIES_COMPAT_ids = "rocko" |
diff --git a/meta-integrity/conf/layer.conf b/meta-integrity/conf/layer.conf index 74961cc..7734e5c 100644 --- a/meta-integrity/conf/layer.conf +++ b/meta-integrity/conf/layer.conf | |||
@@ -27,4 +27,4 @@ BB_HASHBASE_WHITELIST_append += "\ | |||
27 | RPM_FSK_PATH \ | 27 | RPM_FSK_PATH \ |
28 | " | 28 | " |
29 | 29 | ||
30 | LAYERSERIES_COMPAT_integrity = "rocko sumo" | 30 | LAYERSERIES_COMPAT_integrity = "rocko" |
diff --git a/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc index 172d5a2..aeb7c07 100644 --- a/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc +++ b/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc | |||
@@ -1,6 +1,6 @@ | |||
1 | FILESEXTRAPATHS_prepend := "${THISDIR}/rpm:" | 1 | FILESEXTRAPATHS_prepend := "${THISDIR}/rpm:" |
2 | 2 | ||
3 | ROCKO_SRC_URI = "\ | 3 | SRC_URI += "\ |
4 | file://0001-Pass-sign-arguments-to-signature-deletion-too.patch \ | 4 | file://0001-Pass-sign-arguments-to-signature-deletion-too.patch \ |
5 | file://0002-Beat-some-sense-into-rpmsign-cli-parsing.patch \ | 5 | file://0002-Beat-some-sense-into-rpmsign-cli-parsing.patch \ |
6 | file://0003-Fix-thinko-typo-in-file-signing-error-message.patch \ | 6 | file://0003-Fix-thinko-typo-in-file-signing-error-message.patch \ |
@@ -13,7 +13,6 @@ ROCKO_SRC_URI = "\ | |||
13 | file://0010-Fix-a-number-of-problems-in-get_fskpass.patch \ | 13 | file://0010-Fix-a-number-of-problems-in-get_fskpass.patch \ |
14 | file://0011-Bump-file-digests-to-SHA256-by-default-finally.patch \ | 14 | file://0011-Bump-file-digests-to-SHA256-by-default-finally.patch \ |
15 | " | 15 | " |
16 | SRC_URI += "${@bb.utils.contains('LAYERSERIES_CORENAMES', 'rocko', '${ROCKO_SRC_URI}', '', d)}" | ||
17 | 16 | ||
18 | PACKAGECONFIG = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'imaevm', '', d)}" | 17 | PACKAGECONFIG = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'imaevm', '', d)}" |
19 | 18 | ||
diff --git a/meta-intel-sgx/README.md b/meta-intel-sgx/README.md deleted file mode 100644 index d1b8444..0000000 --- a/meta-intel-sgx/README.md +++ /dev/null | |||
@@ -1,23 +0,0 @@ | |||
1 | ### Overview | ||
2 | This layer provides the support of Intel Software Guard Extensions | ||
3 | (Intel SGX), which is an Intel technology for application developers | ||
4 | seeking to protect select code and data from disclosure or modification. | ||
5 | |||
6 | The Linux SGX software stack is comprised of the Intel SGX driver, the | ||
7 | Intel SGX SDK, and the Intel SGX Platform Software. | ||
8 | |||
9 | ### Intel SGX Driver | ||
10 | The recipe sgx-driver provides a out-of-tree driver for the Linux Intel | ||
11 | SGX software stack, which will be used until the driver upstreaming process | ||
12 | is complete. | ||
13 | |||
14 | ### Intel SGX SDK and PSW | ||
15 | The recipes are still in development. | ||
16 | |||
17 | ### Hardware Support | ||
18 | Please check [this site](https://github.com/ayeks/SGX-hardware) for the | ||
19 | latest information. | ||
20 | |||
21 | ### Reference | ||
22 | - [SGX driver](https://github.com/intel/linux-sgx-driver) | ||
23 | - [SGX SDK and PSW](https://github.com/intel/linux-sgx) | ||
diff --git a/meta-intel-sgx/conf/layer.conf b/meta-intel-sgx/conf/layer.conf deleted file mode 100644 index 8dca356..0000000 --- a/meta-intel-sgx/conf/layer.conf +++ /dev/null | |||
@@ -1,18 +0,0 @@ | |||
1 | # We have a conf and classes directory, add to BBPATH | ||
2 | BBPATH .= ":${LAYERDIR}" | ||
3 | |||
4 | # We have recipes-* directories, add to BBFILES | ||
5 | BBFILES += "${LAYERDIR}/recipes-*/*/*.bb \ | ||
6 | ${LAYERDIR}/recipes-*/*/*.bbappend" | ||
7 | |||
8 | BBFILE_COLLECTIONS += "intel-sgx" | ||
9 | BBFILE_PATTERN_intel-sgx = "^${LAYERDIR}/" | ||
10 | BBFILE_PRIORITY_intel-sgx = "10" | ||
11 | |||
12 | BBLAYERS_LAYERINDEX_NAME_intel-sgx = "meta-intel-sgx" | ||
13 | |||
14 | LAYERDEPENDS_intel-sgx = "\ | ||
15 | core \ | ||
16 | " | ||
17 | |||
18 | LAYERSERIES_COMPAT_intel-sgx = "rocko sumo" | ||
diff --git a/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb b/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb deleted file mode 100644 index b1abcd5..0000000 --- a/meta-intel-sgx/recipes-kernel/intel-sgx-driver/intel-sgx-driver_2.1.bb +++ /dev/null | |||
@@ -1,34 +0,0 @@ | |||
1 | SUMMARY = "Intel SGX Linux DDDriver" | ||
2 | DESCRIPTION = "Intel(R) Software Guard Extensions (Intel(R) SGX) \ | ||
3 | is an Intel technology for application developers seeking to \ | ||
4 | protect select code and data from disclosure or modification." | ||
5 | HOMEPAGE = "https://github.com/intel/linux-sgx-driver" | ||
6 | |||
7 | LICENSE = "GPLv2" | ||
8 | LIC_FILES_CHKSUM = "file://License.txt;md5=b54f8941f6087efb6be3deb0f1e617f7" | ||
9 | |||
10 | DEPENDS = "virtual/kernel" | ||
11 | |||
12 | PV = "2.1+git${SRCPV}" | ||
13 | |||
14 | SRC_URI = "\ | ||
15 | git://github.com/intel/linux-sgx-driver.git \ | ||
16 | " | ||
17 | SRCREV = "2a509c203533f9950fa3459fe91864051bc021a2" | ||
18 | |||
19 | S = "${WORKDIR}/git" | ||
20 | |||
21 | inherit module | ||
22 | |||
23 | EXTRA_OEMAKE += "KDIR='${STAGING_KERNEL_DIR}'" | ||
24 | |||
25 | MODULE_NAME = "isgx" | ||
26 | |||
27 | do_install () { | ||
28 | dir="${D}/lib/modules/${KERNEL_VERSION}/kernel/${MODULE_NAME}" | ||
29 | |||
30 | install -d "$dir" | ||
31 | install -m 0644 "${MODULE_NAME}.ko" "$dir" | ||
32 | } | ||
33 | |||
34 | RPROVIDES_${PN} += "kernel-module-${MODULE_NAME}" | ||
diff --git a/meta-signing-key/conf/layer.conf b/meta-signing-key/conf/layer.conf index 67fc8d3..97694d5 100644 --- a/meta-signing-key/conf/layer.conf +++ b/meta-signing-key/conf/layer.conf | |||
@@ -13,7 +13,7 @@ BBLAYERS_LAYERINDEX_NAME_signing-key = "meta-signing-key" | |||
13 | 13 | ||
14 | LAYERDEPENDS_signing-key = "core" | 14 | LAYERDEPENDS_signing-key = "core" |
15 | 15 | ||
16 | LAYERSERIES_COMPAT_signing-key = "rocko sumo" | 16 | LAYERSERIES_COMPAT_signing-key = "rocko" |
17 | 17 | ||
18 | SIGNING_MODEL ??= "sample" | 18 | SIGNING_MODEL ??= "sample" |
19 | SAMPLE_MOK_SB_KEYS_DIR = "${LAYERDIR}/files/mok_sb_keys" | 19 | SAMPLE_MOK_SB_KEYS_DIR = "${LAYERDIR}/files/mok_sb_keys" |
diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf index 2b2dd3e..6f150b8 100644 --- a/meta-tpm/conf/layer.conf +++ b/meta-tpm/conf/layer.conf | |||
@@ -13,4 +13,4 @@ BBLAYERS_LAYERINDEX_NAME_tpm = "meta-tpm" | |||
13 | 13 | ||
14 | LAYERDEPENDS_tpm = "core" | 14 | LAYERDEPENDS_tpm = "core" |
15 | 15 | ||
16 | LAYERSERIES_COMPAT_tpm = "rocko sumo" | 16 | LAYERSERIES_COMPAT_tpm = "rocko" |
diff --git a/meta-tpm2/conf/layer.conf b/meta-tpm2/conf/layer.conf index 9957c6e..71063d4 100644 --- a/meta-tpm2/conf/layer.conf +++ b/meta-tpm2/conf/layer.conf | |||
@@ -13,4 +13,4 @@ BBLAYERS_LAYERINDEX_NAME_tpm2 = "meta-tpm2" | |||
13 | 13 | ||
14 | LAYERDEPENDS_tpm2 = "core" | 14 | LAYERDEPENDS_tpm2 = "core" |
15 | 15 | ||
16 | LAYERSERIES_COMPAT_tpm2 = "rocko sumo" | 16 | LAYERSERIES_COMPAT_tpm2 = "rocko" |
diff --git a/meta/conf/layer.conf b/meta/conf/layer.conf index 301b017..b343571 100644 --- a/meta/conf/layer.conf +++ b/meta/conf/layer.conf | |||
@@ -15,4 +15,4 @@ LAYERDEPENDS_secure-core = "\ | |||
15 | core \ | 15 | core \ |
16 | " | 16 | " |
17 | 17 | ||
18 | LAYERSERIES_COMPAT_secure-core = "rocko sumo" | 18 | LAYERSERIES_COMPAT_secure-core = "rocko" |