summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
* added newlinerichard2021-11-191-1/+1
|
* changed init file from the secure-core-image-initramfs to not load an ↵richard2021-11-192-7/+15
| | | | unencrypted rootfs when using full disk encryption.
* secure-core-image: pass encrypted password rather than plaintext password to ↵Yi Zhao2021-08-091-1/+2
| | | | | | | | | | | | usermod In oe-core commit 759df7395908f18b3b68f28d043ac9ebd42dd0c8, the plaintext password setting function was dropped because of the security issue. So the plaintext password setting method "usermod -P 'password' user" is not available. Now we should pass the encrypted password to usermod via -p option. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* meta-secure-core: Convert to new override syntaxYi Zhao2021-08-095-12/+12
| | | | | | Converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* secure-core-image: Remove packagegroup-core-lsbJason Wessel2019-11-081-1/+1
| | | | | | | | oe-core commit fb064356af615d67d85b65942103bf943d84d290 removed the packagegroup-core-lsb, so it must be removed from any other image recipes which refernce the packagegroup-core-lsb. Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
* secure-core:allow other layer overwrite INITRAMFS_IMAGEJiang Lu2019-09-121-1/+1
| | | | | | | Allow other layer overwrite $INITRAMFS_IMAGE. Signed-off-by: Jiang Lu <lu.jiang@windriver.com> Signed-off-by: Liwei Song <liwei.song@windriver.com>
* kernel-initramfs: depends on do_image_complete rather than do_rootfsHongxu Jia2019-05-241-1/+1
| | | | | | | | | | | ... |install: cannot stat 'tmp-glibc/deploy/images/intel-x86-64/secure-core-image-init ramfs-intel-x86-64.cpio.gz': No such file or directory ... Depends do_image_complete after required image generated Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
* kernel-initramfs: fix inconsistent indentationYi Zhao2018-11-301-3/+3
| | | | | | Use spaces consistently to indent do_install() Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* initrdscripts-secure-core: remove /sys and /proc from packageYunguo Wei2018-10-251-4/+0
| | | | | | | | | | | | The following failure is shown during secure-core-image-initramfs:do_rootfs(): Error: Transaction check error: file /proc conflicts between attempted installs of initrdscripts-secure-core-1.0-r0.corei7_64 and base-files-3.0.14-r89.intel_x86_64 file /sys conflicts between attempted installs of initrdscripts-secure-core-1.0-r0.corei7_64 and base-files-3.0.14-r89.intel_x86_64 So remove /sys and /proc as base-files has already provided them. Signed-off-by: Yunguo Wei <yunguo.wei@windriver.com>
* Set the default password for secure-core-imageJia Zhang2018-09-261-0/+3
| | | | Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
* kernel-initramfs: rename INITRAMFS_BASE_NAME to INITRAMFS_NAMEYi Zhao2018-09-181-2/+2
| | | | | | | | The *_BASE_NAME was renamed to *_NAME in oe-core commit f952c8e08b4798aa0f8bf764cfd70bda0eae9b8b. So we also need to do the same thing here. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* kernel-initramfs: Rework to use update-alternatives directlyTom Rini2018-05-061-21/+20
| | | | | | | | | | | | | | - All valid initramfs types will be listed in INITRAMFS_FSTYPES so use that variable rather than open-coding a list of possibilities. - Since we're using the list of things that must exist now we don't need to test if the files exist anymore. And when signing, we can sign all of them now. - Add some python to do_package to update all of the ALTERNATIVES variables dynamically based on how we're configured. This introduces an alternative for the initramfs portion as well so there is a stable name. Signed-off-by: Tom Rini <trini@konsulko.com>
* initrdscripts-secure-core: Provide all directories init requiresTom Rini2018-04-271-0/+6
| | | | | | | | Our "init" script requires additional directories to exist and since we don't pull in something like base-files that gives us a full layout we must make these additional directories on our own. Signed-off-by: Tom Rini <trini@konsulko.com>
* kernel-initramfs: use oe.utils.read_fileJackie Huang2018-02-071-1/+1
| | | | | | | base_read_file has been removed from oe-core so use the replacement function oe.utils.read_file. Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
* Install packages if distro flag set (#21)Wenzong Fan2017-09-251-2/+2
| | | | | | | * install 'packagegroup-tpm2-initramfs' of distro flag 'tpm2' is set * install 'initrdscripts-ima' if distro flag 'ima' is set * install 'cryptfs-tpm2-initramfs' if distro flag 'luks' is set Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
* kernel-initramfs: fix the issue rm kernel source codes (#18)fli2017-09-251-1/+0
| | | | | | | The "${S}" is not used for kernel-initramfs and it will cleanup the kernel source codes if it is specified to ${STAGING_KERNEL_DIR}, thus remove this definition. Signed-off-by: Fupan Li <fupan.li@windriver.com>
* meta-secure-core: clean up ${COREBASE}/LICENSE and ${COREBASE}/meta/COPYING.MITJia Zhang2017-09-021-1/+1
| | | | | | | | ${COREBASE}/LICENSE is not a valid license file. So it is recommended to use '${COMMON_LICENSE_DIR}/MIT' for a MIT License file in LIC_FILES_CHKSUM. This will become an error in the future. Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
* meta-ids: install packagegroup-ids if the feature ids configuredJia Zhang2017-08-241-0/+2
| | | | Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
* secure-core-image: install dnf by defaultJia Zhang2017-08-231-0/+1
| | | | Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
* secure-core-image-initramfs: enlarge the max sizeJia Zhang2017-08-231-0/+2
| | | | Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
* encrypted-storage: use luks as the feature name for current implementationJia Zhang2017-08-202-4/+4
| | | | | | | | encrypted-storage layer will include more security features about encrypted storage so the term "encrypted-storage" won't be used to specify a dedicated technology term such as "LUKS". Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
* init: don't explicitly set the LUKS partition nameLans Zhang2017-08-091-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* kernel-initramfs: set the default priority to -1Lans Zhang2017-08-031-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: install udevd and udevadm provided by either ↵Lans Zhang2017-07-261-3/+2
| | | | | | eudev or udev Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: don't install sysvinitLans Zhang2017-07-261-2/+0
| | | | | | /sbin/init should be covered by rootfs not here. Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-secure-core: define new image type secure-core-minimal-imageLans Zhang2017-07-203-30/+35
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image: install lsb packagegroupLans Zhang2017-07-111-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: add RRECOMMENDSLans Zhang2017-07-111-0/+7
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: don't need to create /proc /sys and /runLans Zhang2017-07-051-1/+0
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: clean upLans Zhang2017-07-041-80/+40
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: clean up RDEPENDSLans Zhang2017-07-041-14/+29
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initrdscripts-secure-core: renamed from initramfs-secure-coreLans Zhang2017-07-042-1/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initramfs-secure-core: clean up /init scriptLans Zhang2017-07-042-15/+3
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* init: clean up code styleLans Zhang2017-07-031-34/+30
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initramfs-secure-core: fix missing the license fileLans Zhang2017-07-031-0/+1
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* initramfs-secure-core: define the /init script for the initramfs imageLans Zhang2017-07-032-0/+162
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* kernel-initramfs: define this package to include the initramfs image for ↵Lans Zhang2017-07-031-0/+74
| | | | | | kernel boot Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image-initramfs: define the initramfs image typeLans Zhang2017-07-031-0/+35
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image: clean up the code styleLans Zhang2017-07-031-3/+10
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* secure-core-image: install ima-related packages if ima feature configuredLans Zhang2017-06-261-0/+2
| | | | Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
* meta-secure-core: initial commitLans Zhang2017-06-221-0/+23
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-06-28 16:55:44 +0000