summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArmin Kuster <akuster808@gmail.com>2020-10-15 09:20:11 -0700
committerArmin Kuster <akuster808@gmail.com>2020-10-15 09:20:11 -0700
commit6d6f7151f24470aabd83d2a08151f883c52a64ed (patch)
tree07c6fee46b856b74a42b0c05d40ea03d38fa08f7
parentd4ec0d86b4d906bfeb9355e45926e0e0f84105da (diff)
downloadmeta-security-6d6f7151f24470aabd83d2a08151f883c52a64ed.tar.gz
gitlab-ci: add support for dunfell
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat
-rw-r--r--.gitlab-ci.yml144
-rw-r--r--kas/kas-security-alt.yml8
-rw-r--r--kas/kas-security-base.yml64
-rw-r--r--kas/kas-security-dm.yml13
-rw-r--r--kas/qemuarm.yml6
-rw-r--r--kas/qemuarm64-alt.yml6
-rw-r--r--kas/qemuarm64-ima.yml10
-rw-r--r--kas/qemuarm64-multi.yml12
-rw-r--r--kas/qemuarm64-musl.yml10
-rw-r--r--kas/qemuarm64-tpm2.yml10
-rw-r--r--kas/qemuarm64.yml6
-rw-r--r--kas/qemumips64-alt.yml10
-rw-r--r--kas/qemumips64-multi.yml14
-rw-r--r--kas/qemumips64.yml6
-rw-r--r--kas/qemuppc.yml6
-rw-r--r--kas/qemuriscv64.yml6
-rw-r--r--kas/qemux86-64-alt.yml6
-rw-r--r--kas/qemux86-64-dm-verify.yml6
-rw-r--r--kas/qemux86-64-ima.yml10
-rw-r--r--kas/qemux86-64-multi.yml12
-rw-r--r--kas/qemux86-64-tpm.yml10
-rw-r--r--kas/qemux86-64-tpm2.yml10
-rw-r--r--kas/qemux86-64.yml6
-rw-r--r--kas/qemux86-ima.yml10
-rw-r--r--kas/qemux86-musl.yml10
-rw-r--r--kas/qemux86-test.yml11
-rw-r--r--kas/qemux86.yml6
27 files changed, 428 insertions, 0 deletions
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
new file mode 100644
index 0000000..50bfe4f
--- /dev/null
+++ b/.gitlab-ci.yml
@@ -0,0 +1,144 @@
1stages:
2 - build
3
4.build:
5 stage: build
6 image: crops/poky
7 before_script:
8 - echo "$ERR_REPORT_USERNAME" > ~/.oe-send-error
9 - echo "$ERR_REPORT_EMAIL" >> ~/.oe-send-error
10 - export PATH=~/.local/bin:$PATH
11 - wget https://bootstrap.pypa.io/get-pip.py
12 - python3 get-pip.py
13 - python3 -m pip install kas
14 after_script:
15 - cd $CI_PROJECT_DIR/poky
16 - . ./oe-init-build-env $CI_PROJECT_DIR/build
17 - for x in `ls $CI_PROJECT_DIR/build/tmp/log/error-report/ | grep error_report_`; do
18 - send-error-report -y tmp/log/error-report/$x
19 - done
20 - cd $CI_PROJECT_DIR
21 - rm -rf build
22 - $CI_PROJECT_DIR/scripts/ci-cleanup.sh
23 cache:
24 paths:
25 - layers
26
27qemux86:
28 extends: .build
29 script:
30 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
31
32qemux86-64:
33 extends: .build
34 script:
35 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
36
37qemuarm:
38 extends: .build
39 script:
40 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
41
42qemuarm64:
43 extends: .build
44 script:
45 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
46
47qemuppc:
48 extends: .build
49 script:
50 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
51
52qemumips64:
53 extends: .build
54 script:
55 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
56
57qemuriscv64:
58 extends: .build
59 script:
60 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
61
62qemux86-64-tpm:
63 extends: .build
64 script:
65 - kas build --target security-tpm-image kas/$CI_JOB_NAME.yml
66
67qemux86-64-tpm2:
68 extends: .build
69 script:
70 - kas build --target security-tpm2-image kas/$CI_JOB_NAME.yml
71
72qemuarm64-tpm2:
73 extends: .build
74 script:
75 - kas build --target security-tpm2-image kas/$CI_JOB_NAME.yml
76
77qemux86-ima:
78 extends: .build
79 script:
80 - kas build --target integrity-image-minimal kas/$CI_JOB_NAME.yml
81
82qemux86-64-ima:
83 extends: .build
84 script:
85 - kas build --target integrity-image-minimal kas/$CI_JOB_NAME.yml
86
87qemuarm64-ima:
88 extends: .build
89 script:
90 - kas build --target integrity-image-minimal kas/$CI_JOB_NAME.yml
91
92qemux86-64-dm-verify:
93 extends: .build
94 script:
95 - kas build --target core-image-minimal kas/qemux86-64.yml
96 - kas build --target dm-verity-image-initramfs kas/$CI_JOB_NAME.yml
97
98
99qemuarm64-alt:
100 extends: .build
101 script:
102 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
103
104qemuarm64-multi:
105 extends: .build
106 script:
107 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
108
109qemumips64-alt:
110 extends: .build
111 script:
112 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
113
114qemumips64-multi:
115 extends: .build
116 script:
117 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
118
119qemux86-64-alt:
120 extends: .build
121 script:
122 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
123
124qemux86-64-multi:
125 extends: .build
126 script:
127 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
128
129qemux86-musl:
130 extends: .build
131 script:
132 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
133
134qemuarm64-musl:
135 extends: .build
136 script:
137 - kas build --target security-build-image kas/$CI_JOB_NAME.yml
138
139qemux86-test:
140 extends: .build
141 allow_failure: true
142 script:
143 - kas build --target security-test-image kas/$CI_JOB_NAME.yml
144 - kas build -c testimage --target security-test-image kas/$CI_JOB_NAME.yml
diff --git a/kas/kas-security-alt.yml b/kas/kas-security-alt.yml
new file mode 100644
index 0000000..309acaa
--- /dev/null
+++ b/kas/kas-security-alt.yml
@@ -0,0 +1,8 @@
1header:
2 version: 9
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 alt: |
8 DISTRO_FEATURES_append = " apparmor pam smack systemd"
diff --git a/kas/kas-security-base.yml b/kas/kas-security-base.yml
new file mode 100644
index 0000000..c9ca76f
--- /dev/null
+++ b/kas/kas-security-base.yml
@@ -0,0 +1,64 @@
1header:
2 version: 8
3
4distro: poky
5
6repos:
7 meta-security:
8 layers:
9 ../meta-security:
10 meta-tpm:
11 meta-integrity:
12 meta-security-compliance:
13
14 poky:
15 url: https://git.yoctoproject.org/git/poky
16 refspec: dunfell
17 layers:
18 meta:
19 meta-poky:
20 meta-yocto-bsp:
21
22 meta-openembedded:
23 url: http://git.openembedded.org/meta-openembedded
24 refspec: dunfell
25 layers:
26 meta-oe:
27 meta-perl:
28 meta-python:
29 meta-networking:
30
31local_conf_header:
32 base: |
33 CONF_VERSION = "1"
34 SOURCE_MIRROR_URL = "http://downloads.yoctoproject.org/mirror/sources/"
35 SSTATE_MIRRORS = "file://.* http://sstate.yoctoproject.org/dev/PATH;downloadfilename=PATH \n"
36 SSTATE_DIR = "/home/srv/sstate/dunfell"
37 DL_DIR = "/home/srv/downloads/dunfell"
38 BB_HASHSERVE = "auto"
39 BB_SIGNATURE_HANDLER = "OEEquivHash"
40 INHERIT += "buildstats buildstats-summary buildhistory"
41 INHERIT += "report-error"
42 INHERIT += "testimage"
43 TEST_QEMUBOOT_TIMEOUT = "1500"
44 EXTRA_IMAGE_FEATURES ?= "debug-tweaks"
45 PACKAGE_CLASSES = "package_ipk"
46
47
48 diskmon: |
49 BB_DISKMON_DIRS = "\
50 STOPTASKS,${TMPDIR},1G,100K \
51 STOPTASKS,${DL_DIR},1G,100K \
52 STOPTASKS,${SSTATE_DIR},1G,100K \
53 STOPTASKS,/tmp,100M,100K \
54 ABORT,${TMPDIR},100M,1K \
55 ABORT,${DL_DIR},100M,1K \
56 ABORT,${SSTATE_DIR},100M,1K \
57 ABORT,/tmp,10M,1K"
58
59bblayers_conf_header:
60 base: |
61 POKY_BBLAYERS_CONF_VERSION = "2"
62 BBPATH = "${TOPDIR}"
63 BBFILES ?= ""
64
diff --git a/kas/kas-security-dm.yml b/kas/kas-security-dm.yml
new file mode 100644
index 0000000..7ce0e9d
--- /dev/null
+++ b/kas/kas-security-dm.yml
@@ -0,0 +1,13 @@
1header:
2 version: 9
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 dm-verify: |
8 DM_VERITY_IMAGE = "core-image-minimal"
9 DM_VERITY_IMAGE_TYPE = "ext4"
10 IMAGE_CLASSES += "dm-verity-img"
11 INITRAMFS_IMAGE_BUNDLE = "1"
12 INITRAMFS_IMAGE = "dm-verity-image-initramfs"
13
diff --git a/kas/qemuarm.yml b/kas/qemuarm.yml
new file mode 100644
index 0000000..f51abac
--- /dev/null
+++ b/kas/qemuarm.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6machine: qemuarm
diff --git a/kas/qemuarm64-alt.yml b/kas/qemuarm64-alt.yml
new file mode 100644
index 0000000..48e688c
--- /dev/null
+++ b/kas/qemuarm64-alt.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-alt.yml
5
6machine: qemuarm64
diff --git a/kas/qemuarm64-ima.yml b/kas/qemuarm64-ima.yml
new file mode 100644
index 0000000..b478472
--- /dev/null
+++ b/kas/qemuarm64-ima.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 meta-security: |
8 DISTRO_FEATURES_append = " ima"
9
10machine: qemuarm64
diff --git a/kas/qemuarm64-multi.yml b/kas/qemuarm64-multi.yml
new file mode 100644
index 0000000..d79142c
--- /dev/null
+++ b/kas/qemuarm64-multi.yml
@@ -0,0 +1,12 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 multi: |
8 require conf/multilib.conf
9 MULTILIBS = "multilib:lib32"
10 DEFAULTTUNE_virtclass-multilib-lib32 = "armv7athf-neon"
11
12machine: qemuarm64
diff --git a/kas/qemuarm64-musl.yml b/kas/qemuarm64-musl.yml
new file mode 100644
index 0000000..b353eb4
--- /dev/null
+++ b/kas/qemuarm64-musl.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 musl: |
8 TCLIBC = "musl"
9
10machine: qemuarm64
diff --git a/kas/qemuarm64-tpm2.yml b/kas/qemuarm64-tpm2.yml
new file mode 100644
index 0000000..3a8d8fc
--- /dev/null
+++ b/kas/qemuarm64-tpm2.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 meta-security: |
8 DISTRO_FEATURES_append = " tpm2"
9
10machine: qemuarm64
diff --git a/kas/qemuarm64.yml b/kas/qemuarm64.yml
new file mode 100644
index 0000000..a0c2d1a
--- /dev/null
+++ b/kas/qemuarm64.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6machine: qemuarm64
diff --git a/kas/qemumips64-alt.yml b/kas/qemumips64-alt.yml
new file mode 100644
index 0000000..923c213
--- /dev/null
+++ b/kas/qemumips64-alt.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 alt: |
8 DISTRO_FEATURES_append = " pam systmed"
9
10machine: qemumips64
diff --git a/kas/qemumips64-multi.yml b/kas/qemumips64-multi.yml
new file mode 100644
index 0000000..c8cf94b
--- /dev/null
+++ b/kas/qemumips64-multi.yml
@@ -0,0 +1,14 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 multi: |
8 require conf/multilib.conf
9 MULTILIBS = "multilib:lib64 multilib:lib32"
10 DEFAULTTUNE = "mips64-n32"
11 DEFAULTTUNE_virtclass-multilib-lib64 = "mips64"
12 DEFAULTTUNE_virtclass-multilib-lib32 = "mips32r2"
13
14machine: qemumips64
diff --git a/kas/qemumips64.yml b/kas/qemumips64.yml
new file mode 100644
index 0000000..64e52f7
--- /dev/null
+++ b/kas/qemumips64.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6machine: qemumips64
diff --git a/kas/qemuppc.yml b/kas/qemuppc.yml
new file mode 100644
index 0000000..3dad81c
--- /dev/null
+++ b/kas/qemuppc.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6machine: qemuppc
diff --git a/kas/qemuriscv64.yml b/kas/qemuriscv64.yml
new file mode 100644
index 0000000..e1b1e49
--- /dev/null
+++ b/kas/qemuriscv64.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6machine: qemuriscv64
diff --git a/kas/qemux86-64-alt.yml b/kas/qemux86-64-alt.yml
new file mode 100644
index 0000000..f0d6b27
--- /dev/null
+++ b/kas/qemux86-64-alt.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-alt.yml
5
6machine: qemux86-64
diff --git a/kas/qemux86-64-dm-verify.yml b/kas/qemux86-64-dm-verify.yml
new file mode 100644
index 0000000..1f26008
--- /dev/null
+++ b/kas/qemux86-64-dm-verify.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-dm.yml
5
6machine: qemux86-64
diff --git a/kas/qemux86-64-ima.yml b/kas/qemux86-64-ima.yml
new file mode 100644
index 0000000..e64931c
--- /dev/null
+++ b/kas/qemux86-64-ima.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 meta-security: |
8 DISTRO_FEATURES_append = " ima"
9
10machine: qemux86-64
diff --git a/kas/qemux86-64-multi.yml b/kas/qemux86-64-multi.yml
new file mode 100644
index 0000000..711ce28
--- /dev/null
+++ b/kas/qemux86-64-multi.yml
@@ -0,0 +1,12 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 multi: |
8 require conf/multilib.conf
9 MULTILIBS = "multilib:lib32"
10 DEFAULTTUNE_virtclass-multilib-lib32 = "x86"
11
12machine: qemux86-64
diff --git a/kas/qemux86-64-tpm.yml b/kas/qemux86-64-tpm.yml
new file mode 100644
index 0000000..565b423
--- /dev/null
+++ b/kas/qemux86-64-tpm.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 meta-security: |
8 DISTRO_FEATURES_append = " tpm"
9
10machine: qemux86-64
diff --git a/kas/qemux86-64-tpm2.yml b/kas/qemux86-64-tpm2.yml
new file mode 100644
index 0000000..a43693e
--- /dev/null
+++ b/kas/qemux86-64-tpm2.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 meta-security: |
8 DISTRO_FEATURES_append = " tpm2"
9
10machine: qemux86-64
diff --git a/kas/qemux86-64.yml b/kas/qemux86-64.yml
new file mode 100644
index 0000000..4ba2b66
--- /dev/null
+++ b/kas/qemux86-64.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6machine: qemux86-64
diff --git a/kas/qemux86-ima.yml b/kas/qemux86-ima.yml
new file mode 100644
index 0000000..6528ba6
--- /dev/null
+++ b/kas/qemux86-ima.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 meta-security: |
8 DISTRO_FEATURES_append = " ima"
9
10machine: qemux86
diff --git a/kas/qemux86-musl.yml b/kas/qemux86-musl.yml
new file mode 100644
index 0000000..61d9572
--- /dev/null
+++ b/kas/qemux86-musl.yml
@@ -0,0 +1,10 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6local_conf_header:
7 musl: |
8 TCLIBC = "musl"
9
10machine: qemux86
diff --git a/kas/qemux86-test.yml b/kas/qemux86-test.yml
new file mode 100644
index 0000000..7b5f451
--- /dev/null
+++ b/kas/qemux86-test.yml
@@ -0,0 +1,11 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6
7local_conf_header:
8 meta-security: |
9 DISTRO_FEATURES_append = " apparmor smack pam"
10
11machine: qemux86
diff --git a/kas/qemux86.yml b/kas/qemux86.yml
new file mode 100644
index 0000000..83a5353
--- /dev/null
+++ b/kas/qemux86.yml
@@ -0,0 +1,6 @@
1header:
2 version: 8
3 includes:
4 - kas-security-base.yml
5
6machine: qemux86
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-25 23:08:24 +0000