README: update README

Signed-off-by: Jia Zhang <qianyue.zj@alibaba-inc.com>
This commit is contained in:
Jia Zhang
2017-12-04 12:25:12 +08:00
parent a22324542d
commit 00324b6b3e
2 changed files with 12 additions and 3 deletions
+9 -2
View File
@@ -75,8 +75,10 @@ The full features in meta-secure-core can be configured with these definitions
in local.conf:
INITRAMFS_IMAGE = "secure-core-image-initramfs"
DISTRO_FEATURES_NATIVE_append += " ima tpm tpm2 efi-secure-boot luks"
DISTRO_FEATURES_append += " ima tpm tpm2 efi-secure-boot luks"
DISTRO_FEATURES_NATIVE_append += "systemd ima tpm tpm2 efi-secure-boot luks"
DISTRO_FEATURES_append += "systemd ima tpm tpm2 efi-secure-boot luks modsign"
MACHINE_FEATURES_NATIVE_append += "efi"
MACHINE_FEATURES_append += "efi"
INHERIT += "sign_rpm_ext"
SECURE_CORE_IMAGE_EXTRA_INSTALL ?= "\
packagegroup-efi-secure-boot \
@@ -94,3 +96,8 @@ The meta-secure-core provides an image called secure-core-image. Run the
following command to build it.
$ bitbake secure-core-image
Reference
=========
[SecureCore - a reference implementation based on meta-secure-core](https://github.com/jiazhang0/SecureCore)
+3 -1
View File
@@ -79,4 +79,6 @@ This feature provides the integrity verification for the RPM package.
### Building the meta-secure-core layer
This layer should be added to the bblayers.conf file. To enable certain
feature provided by this layer, add the feature to the local.conf file.
feature provided by this layer, add the feature to the local.conf file.
A reference implementation based on this layer is [available](https://github.com/jiazhang0/SecureCore).