kas: add ima, tpm and tpm2 build configs

for qemux86, qemux86-64 and qemuarm64

Signed-off-by: Armin Kuster <akuster808@gmail.com>

.gitlab-ci.yml

@@ -54,3 +54,35 @@ qemuriscv64:
   extends: .build
   script:
   - ./scripts/ci-build.sh  $CI_JOB_NAME security-build-image
+
+qemux86-64-tpm:
+  extends: .build
+  script:
+  - ./scripts/ci-build.sh  $CI_JOB_NAME security-tpm-image
+
+qemux86-64-tpm2:
+  extends: .build
+  script:
+  - ./scripts/ci-build.sh  $CI_JOB_NAME security-tpm2-image
+
+qemuarm64-tpm2:
+  extends: .build
+  script:
+  - ./scripts/ci-build.sh  $CI_JOB_NAME security-tpm2-image
+
+
+qemux86-ima:
+  extends: .build
+  script:
+  - ./scripts/ci-build.sh  $CI_JOB_NAME integrity-image-minimal
+
+qemux86-64-ima:
+  extends: .build
+  script:
+  - ./scripts/ci-build.sh  $CI_JOB_NAME integrity-image-minimal
+
+qemuarm64-iam:
+  extends: .build
+  script:
+  - ./scripts/ci-build.sh  $CI_JOB_NAME integrity-image-minimal
+

kas/kas-security-base.yml

@@ -5,6 +5,10 @@ distro: poky
 
 repos:
   meta-security:
+    layers:
+      meta-tpm:
+      meta-integrity:
+      meta-security-compliance:
 
   poky:
     url: https://git.yoctoproject.org/git/poky

kas/qemuarm64-ima.yml

@@ -0,0 +1,10 @@
+header:
+  version: 8
+  includes:
+    - kas-security-base.yml
+
+local_conf_header:
+  meta-security: |
+    DISTRO_FEATURES_append = " ima"
+
+machine: qemuarm64

kas/qemuarm64-tpm2.yml

@@ -0,0 +1,10 @@
+header:
+  version: 8
+  includes:
+    - kas-security-base.yml
+
+local_conf_header:
+  meta-security: |
+    DISTRO_FEATURES_append = " tpm2"
+
+machine: qemuarm64 

kas/qemuarm64.yml

@@ -3,4 +3,4 @@ header:
   includes:
     - kas-security-base.yml
 
-machine: qemuarmu64
+machine: qemuarm64

kas/qemux86-64-ima.yml

@@ -0,0 +1,10 @@
+header:
+  version: 8
+  includes:
+    - kas-security-base.yml
+
+local_conf_header:
+  meta-security: |
+    DISTRO_FEATURES_append = " ima"
+
+machine: qemux86-64

kas/qemux86-64-tpm.yml

@@ -0,0 +1,10 @@
+header:
+  version: 8
+  includes:
+    - kas-security-base.yml
+
+local_conf_header:
+  meta-security: |
+    DISTRO_FEATURES_append = " tpm"
+
+machine: qemux86-64

kas/qemux86-64-tpm2.yml

@@ -0,0 +1,10 @@
+header:
+  version: 8
+  includes:
+    - kas-security-base.yml
+
+local_conf_header:
+  meta-security: |
+    DISTRO_FEATURES_append = " tpm2"
+
+machine: qemux86-64

kas/qemux86-ima.yml

@@ -0,0 +1,10 @@
+header:
+  version: 8
+  includes:
+    - kas-security-base.yml
+
+local_conf_header:
+  meta-security: |
+    DISTRO_FEATURES_append = " ima"
+
+machine: qemux86