| Message ID | 20240822014335.3394568-3-javier.tia@linaro.org |
|---|---|
| State | New |
| Headers | show |
| Series | qemuarm64-secureboot: Add UEFI Secure Boot | expand |
Hi, On Wed, Aug 21, 2024 at 07:43:24PM -0600, Javier Tia wrote: > - Use efi-disk-no-swap.wks.in disk definition to add expected UEFI disk > partitions configuration. > > Signed-off-by: Javier Tia <javier.tia@linaro.org> > --- > .../recipes-bsp/images/core-image-base-uefi-secureboot.inc | 1 + > meta-arm-bsp/recipes-bsp/images/core-image-base.bbappend | 1 + > 2 files changed, 2 insertions(+) > create mode 100644 meta-arm-bsp/recipes-bsp/images/core-image-base-uefi-secureboot.inc > create mode 100644 meta-arm-bsp/recipes-bsp/images/core-image-base.bbappend Could these be moved to meta-arm/recipes-core/images? Could the image be changed to core-image-minimal? Is there some specific need for core-image-base only? I'm adding systemd Unified Kernel Image on top of these changes so that UEFI secure boot signatures cover systemd-boot, kernel, initramfs and kernel command line. core-image-minimal-initramfs seems to be more usable with core-image-minimal when using systemd. I can of course keep these changes in my followup series too. Will also add /usr dm-verity and TPM encrypted read-write rootfs but likely to meta-security then. Cheers, -Mikko
diff --git a/meta-arm-bsp/recipes-bsp/images/core-image-base-uefi-secureboot.inc b/meta-arm-bsp/recipes-bsp/images/core-image-base-uefi-secureboot.inc new file mode 100644 index 00000000..351e9030 --- /dev/null +++ b/meta-arm-bsp/recipes-bsp/images/core-image-base-uefi-secureboot.inc @@ -0,0 +1 @@ +WKS_FILE = "efi-disk-no-swap.wks.in" diff --git a/meta-arm-bsp/recipes-bsp/images/core-image-base.bbappend b/meta-arm-bsp/recipes-bsp/images/core-image-base.bbappend new file mode 100644 index 00000000..1f6dbd24 --- /dev/null +++ b/meta-arm-bsp/recipes-bsp/images/core-image-base.bbappend @@ -0,0 +1 @@ +require ${@bb.utils.contains('MACHINE_FEATURES', 'uefi-secureboot', 'core-image-base-uefi-secureboot.inc', '', d)} \ No newline at end of file
- Use efi-disk-no-swap.wks.in disk definition to add expected UEFI disk partitions configuration. Signed-off-by: Javier Tia <javier.tia@linaro.org> --- .../recipes-bsp/images/core-image-base-uefi-secureboot.inc | 1 + meta-arm-bsp/recipes-bsp/images/core-image-base.bbappend | 1 + 2 files changed, 2 insertions(+) create mode 100644 meta-arm-bsp/recipes-bsp/images/core-image-base-uefi-secureboot.inc create mode 100644 meta-arm-bsp/recipes-bsp/images/core-image-base.bbappend