mirrors/meta-secure-core
1
0
Fork 0
mirror of https://github.com/jiazhang0/meta-secure-core.git synced 2026-07-17 05:06:59 +00:00
Code Issues Projects Releases Wiki Activity

README update

Browse Source 
Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
This commit is contained in:
Lans Zhang
2017-07-19 10:57:08 +08:00
parent 3eadb6ce1c
commit dbd94168ce
1 changed files with 44 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README
+44 -7
View File
@@ -30,13 +30,12 @@ Table of Contents
================= =================
I. Adding the meta-secure-core layer to your build I. Adding the meta-secure-core layer to your build
II. Misc II. Configure meta-secure-core
III. Build meta-secure-core
I. Adding the meta-secure-core layer to your build I. Adding the meta-secure-core layer to your build
================================================= ==================================================
--- replace with specific instructions for the meta-secure-core layer ---
In order to use this layer, you need to make the build system aware of In order to use this layer, you need to make the build system aware of
it. it.
@@ -51,10 +50,48 @@ other layers needed. e.g.:
/path/to/yocto/meta-poky \ /path/to/yocto/meta-poky \
/path/to/yocto/meta-yocto-bsp \ /path/to/yocto/meta-yocto-bsp \
/path/to/yocto/meta-meta-secure-core \ /path/to/yocto/meta-meta-secure-core \
/path/to/yocto/meta-meta-secure-core/meta \
/path/to/yocto/meta-meta-secure-core/meta-signing-key \
/path/to/yocto/meta-meta-secure-core/meta-tpm \
/path/to/yocto/meta-meta-secure-core/meta-tpm2 \
/path/to/yocto/meta-meta-secure-core/meta-efi-secure-boot \
/path/to/yocto/meta-meta-secure-core/meta-integrity \
/path/to/yocto/meta-meta-secure-core/meta-encrypted-storage \
" "
or run bitbake-layers to add the meta-secure-core and its sub-layers:
II. Misc $ bitbake-layers add-layer /path/to/yocto/meta-secure-core
======== $ bitbake-layers add-layer /path/to/yocto/meta-secure-core/meta
$ bitbake-layers add-layer /path/to/yocto/meta-secure-core/meta-signing-key
$ bitbake-layers add-layer /path/to/yocto/meta-secure-core/meta-tpm
$ bitbake-layers add-layer /path/to/yocto/meta-secure-core/meta-tpm2
$ bitbake-layers add-layer /path/to/yocto/meta-secure-core/meta-efi-secure-boot
$ bitbake-layers add-layer /path/to/yocto/meta-secure-core/meta-integrity
$ bitbake-layers add-layer /path/to/yocto/meta-secure-core/meta-encrypted-storage
--- replace with specific information about the meta-secure-core layer --- II. Configure meta-secure-core
==============================
The full features in meta-secure-core can be configured with these definitions
in local.conf:
INITRAMFS_IMAGE = "secure-core-image-initramfs"
DISTRO_FEATURES_NATIVE_append += " ima tpm tpm2 efi-secure-boot encrypted-storage"
DISTRO_FEATURES_append += " ima tpm tpm2 efi-secure-boot encrypted-storage"
SECURE_CORE_IMAGE_EXTRA_INSTALL ?= "\
packagegroup-efi-secure-boot \
packagegroup-tpm \
packagegroup-tpm2 \
packagegroup-ima \
packagegroup-encrypted-storage \
"
DEBUG_FLAGS_forcevariable = ""
III. Build meta-secure-core
===========================
The meta-secure-core provides an image called secure-core-image. Run the
following command to build it.
$ bitbake secure-core-image