diff options
| -rw-r--r-- | .gitlab-ci.yml | 5 | ||||
| -rw-r--r-- | kas/kas-security-base.yml | 1 | ||||
| -rw-r--r-- | kas/qemux86-harden.yml | 10 |
3 files changed, 16 insertions, 0 deletions
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 50bfe4f..f1c844f 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml | |||
| @@ -136,6 +136,11 @@ qemuarm64-musl: | |||
| 136 | script: | 136 | script: |
| 137 | - kas build --target security-build-image kas/$CI_JOB_NAME.yml | 137 | - kas build --target security-build-image kas/$CI_JOB_NAME.yml |
| 138 | 138 | ||
| 139 | qemux86-harden: | ||
| 140 | extends: .build | ||
| 141 | script: | ||
| 142 | - kas build --target harden-image-minimal kas/$CI_JOB_NAME.yml | ||
| 143 | |||
| 139 | qemux86-test: | 144 | qemux86-test: |
| 140 | extends: .build | 145 | extends: .build |
| 141 | allow_failure: true | 146 | allow_failure: true |
diff --git a/kas/kas-security-base.yml b/kas/kas-security-base.yml index 6a77af5..ba0e0f8 100644 --- a/kas/kas-security-base.yml +++ b/kas/kas-security-base.yml | |||
| @@ -10,6 +10,7 @@ repos: | |||
| 10 | meta-tpm: | 10 | meta-tpm: |
| 11 | meta-integrity: | 11 | meta-integrity: |
| 12 | meta-security-compliance: | 12 | meta-security-compliance: |
| 13 | meta-hardening: | ||
| 13 | 14 | ||
| 14 | poky: | 15 | poky: |
| 15 | url: https://git.yoctoproject.org/git/poky | 16 | url: https://git.yoctoproject.org/git/poky |
diff --git a/kas/qemux86-harden.yml b/kas/qemux86-harden.yml new file mode 100644 index 0000000..fb59dda --- /dev/null +++ b/kas/qemux86-harden.yml | |||
| @@ -0,0 +1,10 @@ | |||
| 1 | header: | ||
| 2 | version: 8 | ||
| 3 | includes: | ||
| 4 | - kas-security-base.yml | ||
| 5 | |||
| 6 | local_conf_header: | ||
| 7 | meta-security: | | ||
| 8 | DISTRO = "harden" | ||
| 9 | |||
| 10 | machine: qemux86 | ||
