summaryrefslogtreecommitdiffstats
path: root/meta-tpm/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
* systemd: fix empty file list with sedMikko Rapeli2025-06-231-2/+5
| | | | | | | | | If measured-uki support is not enabled or build is continuing from previous stages, then the matching file list can be empty. Fixes build failure where sed says no input files. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* recipes: fix whitespace warningsMax Krummenacher2025-06-231-1/+1
| | | | | | | | | | | | | | | Since OE bitbake commit 24772dd2ae6c ("parse/ConfHandler: Add warning for deprecated whitespace usage"), the current build generates the following warning (as example): | WARNING: ...meta-security/meta-tpm/recipes-core/systemd/systemd-boot_%.bbappend:7 | has a lack of whitespace around the assignment: | 'EXTRA_OEMESON:append= " ${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', '-Dtpm2=true', '', d)} "' Fix all the warnings. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libtpm: rename to libtpmsMikko Rapeli2024-12-271-1/+1
| | | | | | | | Upstream and other distros like Debian use package name libtpms so use this name for recipe too to match CVEs etc. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* systemd-boot: enable TPM support via "tpm2" in DISTRO_FEATURESMikko Rapeli2024-12-271-0/+7
| | | | | | | systemd-boot will then measure boot components to TPM device. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* systemd: enable TPM supportMikko Rapeli2024-12-271-0/+17
| | | | | | | | | | | | Enable "tpm2" support if "tpm2" is in DISTRO_FEATURES. Also enable cryptsetup, openssl and repart features which are needed to use TPM device to encrypt filesystems with systemd configuration. See: https://www.freedesktop.org/software/systemd/man/latest/systemd-repart.html#--tpm2-device= Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: add more pkgsArmin Kuster2023-07-311-0/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup: add python3-tpm2-pytssArmin Kuster2023-07-311-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: restore pkgs removed earlierArmin Kuster2023-05-061-0/+5
| | | | | | | | | commit: 0594aee packagegroup-security-tpm2.bb: remove dynamic pkgs is causing an issue with some users. Restore the packages and opted to fix via PACKAGE_ARCH = "${TUNE_PKGARCH}" Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm: add libhoth to pkg grpArmin Kuster2022-07-301-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* security-tpm2-image: add swtpmArmin Kuster2022-06-071-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm: Fix QA ErrorArmin Kuster2022-03-111-1/+0
| | | | | | | | ERROR: packagegroup-security-tpm-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtpm-dbg to libtpms-dbg) ERROR: packagegroup-security-tpm-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtpm to libtpms0) ERROR: packagegroup-security-tpm-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtpm-dev to libtpms-dev) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2.bb: remove dynamic pkgsArmin Kuster2022-01-301-3/+0
| | | | | | | fixes: packagegroup-security-tpm2-1.0-r0 do_package_write_rpm: An allarch packagegroup shouldn't depend on packages which are dynamically renamed (libtss2-tcti-device to libtss2-tcti-device0) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: drop ibmswtpm2Armin Kuster2021-12-271-1/+0
| | | | | | ibmswtpm2 has not been ported to openssl 3 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm: Convert to new override syntaxArmin Kuster2021-08-014-10/+10
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup-tpm-incubator: remove reference from other filesArmin Kuster2020-09-051-2/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm: add more packages for buildingArmin Kuster2020-07-251-0/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: Depend on preferred provider for cryptsetupJeremy Puhlman2020-07-141-1/+2
| | | | | Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: stop including tpm2-tcti-uefiDmitry Eremin-Solenikov2019-08-041-3/+0
| | | | | | | | tpm2-tcti-uefi is a EFI module, so it should not be included in the rootfs. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm image: split out tpm2Armin Kuster2019-06-261-4/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2 images: create tpm2 image and fix packagegroupArmin Kuster2019-06-262-1/+22
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: update to name changeArmin Kuster2019-03-231-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: add new packagesArmin Kuster2019-03-171-0/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm2: add and remove packagesArmin Kuster2018-10-311-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2 packagegroup: fix filenamesArmin Kuster2018-10-311-2/+2
| | | | | | tpm2.0-tss package names changed, update accordingly Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroups: fix invalid license fileJackie Huang2017-09-154-4/+4
| | | | | | | | | | | | Use '${COMMON_LICENSE_DIR}/MIT' for MIT License to fix the warning: | WARNING: packagegroup-core-security do_populate_lic: ${COREBASE}/LICENSE is not a valid license file, please use '${COMMON_LICENSE_DIR}/MIT' for a MIT License file in LIC_FILES_CHKSUM. This will become an error in the future Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm-i2c: fix syntaxPeter Lei2017-05-191-1/+1
| | | | | | | Fix "ERROR: ExpansionError during parsing" when building with multilib. Signed-off-by: Peter Lei <peter.lei@ieee.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2: package groups fixesArmin Kuster2017-05-143-1/+18
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm-image: used for testing for now.Armin Kuster2017-05-141-0/+19
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm-i2c: some systems us i2c TPMArmin Kuster2017-05-141-0/+17
| | | | | | add modules and i2c support Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm packagegroups: split into logical unitsArmin Kuster2017-05-143-9/+32
| | | | | | | this should help mitgate the need to pull in too many layers if swtpm in not wanted Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm: add base package group as was in meta-securityArmin Kuster2017-05-141-0/+23
Signed-off-by: Armin Kuster <akuster808@gmail.com>