linux/meta-security.git/recipes-core/images, branch styhead

dm-verity-image-initramfs: Set IMAGE_NAME_SUFFIX to empty

2024-03-27T16:36:58+00:00

According to the Yocto reference manual [1], the IMAGE_NAME_SUFFIX should be set to empty for the initramfs image. Otherwise, we may incur a build error like following due to the initrd check in live-vm-common.bbclass: ERROR: core-image-minimal-1.0-r0 do_bootimg: build-test/tmp/deploy/images/genericx86-64/dm-verity-image-initramfs-genericx86-64.cpio.gz is invalid. initrd image creation failed. ERROR: core-image-minimal-1.0-r0 do_bootimg: ExecutionError('build-test/tmp/work/genericx86_64-poky-linux/core-image-minimal/1.0/temp/run.build_hddimg.1961965', 1, None, None) ERROR: Logfile of failure stored in: build-test/tmp/work/genericx86_64-poky-linux/core-image-minimal/1.0/temp/log.do_bootimg.1961965 ERROR: Task (poky/meta/recipes-core/images/core-image-minimal.bb:do_bootimg) failed with exit code '1' [1] https://docs.yoctoproject.org/ref-manual/variables.html#term-IMAGE_NAME_SUFFIX Signed-off-by: Kevin Hao Signed-off-by: Armin Kuster

dm-verity-image-initramfs: Allow compressed image types

2023-08-06T15:31:18+00:00

Using in the depends variable does not work for compressed image types like squashfs-zst, as the resulting task dependency still contains the incompatible dash. Replacing the dash by an underscore resolves this issue. Signed-off-by: Stephan Wurm Signed-off-by: Armin Kuster

qemu: move qemu setting to image and out of layer.conf

2023-07-31T10:18:52+00:00

I suspect its better form to have these in the image definition. Signed-off-by: Armin Kuster

security-build-image: add lkrg-module to build image

2022-06-24T01:47:59+00:00

Signed-off-by: Armin Kuster

security-test-image: add firejail and aide test suites

2022-06-24T01:47:59+00:00

Signed-off-by: Armin Kuster

security-test-image: auto include layers if present.

2022-06-18T13:48:22+00:00

This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster

security-test-image: tweak to get more tests to runn

2020-10-09T14:02:01+00:00

Signed-off-by: Armin Kuster

security-test-image: simplify

2020-10-01T13:22:07+00:00

Signed-off-by: Armin Kuster

dm-verity-image-initramfs: Drop locales from image

2020-09-12T15:55:28+00:00

Since IMAGE_LINGUAS defaults to 'en-us en-gb' and since localization is not needed on this type of purpose-specific initramfs image, reset the variable which helps by shaving off almost 700kB from resulting bundled zImage-initramfs artifact. Signed-off-by: Niko Mauno Signed-off-by: Armin Kuster

dm-verity-image-initramfs: Add base-passwd package

2020-09-12T15:55:28+00:00

This removes following boot-time complaints from udevd regarding missing group declarations: [ 6.624454] udevd[163]: specified group 'tty' unknown [ 6.625340] udevd[163]: specified group 'dialout' unknown [ 6.625692] udevd[163]: specified group 'kmem' unknown [ 6.626022] udevd[163]: specified group 'input' unknown [ 6.626541] udevd[163]: specified group 'video' unknown [ 6.626977] udevd[163]: specified group 'audio' unknown [ 6.627532] udevd[163]: specified group 'lp' unknown [ 6.628187] udevd[163]: specified group 'disk' unknown [ 6.628558] udevd[163]: specified group 'cdrom' unknown Size impact of this change on resulting bundled zImage-initramfs artifact is less than +1kB which is neglible. Signed-off-by: Niko Mauno Signed-off-by: Armin Kuster