Add Secure Boot support

Change-Id: I09c9b0bad8e85e75fb1510ff374540fad3c3b5d1
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>

2 files changed, 19 insertions, 0 deletions

diff --git a/images/enea-nfv-access-host-common.inc b/images/enea-nfv-access-host-common.inc
index 6e3df91..352f734 100644
--- a/images/enea-nfv-access-host-common.inc
+++ b/images/enea-nfv-access-host-common.inc
@@ -1,5 +1,6 @@
 require images/enea-nfv-access-common.inc
 require classes/override_grub-efi.inc
+require images/secure-boot.inc
 
 IMAGE_INSTALL += " \
     packagegroup-enea-virtualization-host \
diff --git a/images/secure-boot.inc b/images/secure-boot.inc
new file mode 100644
index 0000000..d482ae1
--- /dev/null
+++ b/images/secure-boot.inc
@@ -0,0 +1,18 @@
+SECURE_CORE_IMAGE_EXTRA_INSTALL_append += "\
+    ${@bb.utils.contains("DISTRO_FEATURES", "efi-secure-boot", \
+                         "packagegroup-efi-secure-boot", "", d)} \
+    ${@bb.utils.contains("DISTRO_FEATURES", "tpm", \
+                         "packagegroup-tpm", "", d)} \
+    ${@bb.utils.contains("DISTRO_FEATURES", "tpm2", \
+                         "packagegroup-tpm2", "", d)} \
+    ${@bb.utils.contains("DISTRO_FEATURES", "ima", \
+                         "packagegroup-ima", "", d)} \
+    ${@bb.utils.contains("DISTRO_FEATURES", "luks", \
+                         "packagegroup-luks", "", d)} \
+    ${@bb.utils.contains("DISTRO_FEATURES", "ids", \
+                         "packagegroup-ids", "", d)} \
+"
+
+IMAGE_INSTALL += "\
+    ${SECURE_CORE_IMAGE_EXTRA_INSTALL} \
+"