The modifications based on the following commits are made by the way:
- seloader: Fix building for rocko (bc6bbe2)
- meta-integrity: rpm: Add back in required patches for rocko (5fa9c85)
Because the sanity check for rocko now becomes unnecessary.
In addition, the meta-intel-sgx is removed because it is still
experimental.
- meta-intel-sgx: Initial support of linux-sgx-driver (7d4f711)
Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>
It is helpful when secure boot is enabled, because you can not
modify boot command line after boot-menu.inc is signed before deploying.
Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com>
- You must ensure that RPM is used in PACKAGE_CLASSES.
- We need to remove image-prelink from USER_CLASSES. Prelinking the
image at creation time (as happens on x86/x86_64) will result in the
IMA hash of files changing from the recorded signature and
verification will fail.
Signed-off-by: Tom Rini <trini@konsulko.com>
encrypted-storage layer will include more security features about encrypted
storage so the term "encrypted-storage" won't be used to specify a dedicated
technology term such as "LUKS".
Signed-off-by: Jia Zhang <lans.zhang2008@gmail.com>
Jia Zhang
Jinliang Li
Tom Rini
Jia Zhang
Jia Zhang
Lans Zhang