diff options
| author | Paul Gortmaker <paul.gortmaker@windriver.com> | 2023-05-10 11:04:40 -0400 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2023-05-13 06:06:29 -0400 |
| commit | 1cb3f6988a8fa07968da6566ec45d74f6414acfe (patch) | |
| tree | 09496509ca2c34dd5dc3f716b8878432867116f7 /lib/oeqa/runtime | |
| parent | 2c8c86f97e9b188807c3bbc2605e578cf28ce82f (diff) | |
| download | meta-security-1cb3f6988a8fa07968da6566ec45d74f6414acfe.tar.gz | |
dm-verity: don't make read-only-rootfs sound like a requirement
Adding to your local.conf right out of the gate:
EXTRA_IMAGE_FEATURES = "read-only-rootfs"
while you are trying to sort out other things can be just another
complication to an already steep learning curve.
For example, I found simply enabling this with systemd caused:
systemd[1]: Failed to fork off sandboxing environment for executing generators: Protocol error
[!!!!!!] Failed to start up manager.
systemd[1]: Freezing execution.
While I'd like to get to the root cause of that, it doesn't change that
things boot fine w/o adding to EXTRA_IMAGE_FEATURES, even though the
rootfs is still read-only courtesy of dm-verity.
Reword things so as to make it clear it isn't strictly a hard requirement
and hence can be delayed as people work through their implementation.
Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'lib/oeqa/runtime')
0 files changed, 0 insertions, 0 deletions
