mirror of
https://git.yoctoproject.org/meta-security
synced 2026-07-15 15:37:18 +00:00
kas: update configuration
Update based on latest master configuration. Changes: - switch to kirkstone - add required usrmerge feature to kas-security-alt configuration - add whitespaces around assignement - add common dldir/sstate - don't build apparmor in musl configs - only enable ptest for the test image - Update the kas configuration file versions to 19 to match kas 4.8.x. - Change refspec to branch to remove deprecation warnings. - Add quoting around URLs to match upstream examples. Signed-off-by: Scott Murray <scott.murray@konsulko.com>
This commit is contained in:
committed by
Scott Murray
parent
cbbb804f5d
commit
85c681c0d4
@@ -1,8 +1,8 @@
|
||||
header:
|
||||
version: 9
|
||||
version: 19
|
||||
includes:
|
||||
- kas-security-base.yml
|
||||
|
||||
local_conf_header:
|
||||
alt: |
|
||||
DISTRO_FEATURES:append = " systemd"
|
||||
INIT_MANAGER = "systemd"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
header:
|
||||
version: 9
|
||||
version: 19
|
||||
|
||||
distro: poky
|
||||
|
||||
@@ -13,16 +13,16 @@ repos:
|
||||
meta-hardening:
|
||||
|
||||
poky:
|
||||
url: https://git.yoctoproject.org/git/poky
|
||||
refspec: master
|
||||
url: "https://git.yoctoproject.org/git/poky"
|
||||
branch: kirkstone
|
||||
layers:
|
||||
meta:
|
||||
meta-poky:
|
||||
meta-yocto-bsp:
|
||||
|
||||
|
||||
meta-openembedded:
|
||||
url: http://git.openembedded.org/meta-openembedded
|
||||
refspec: master
|
||||
url: "http://git.openembedded.org/meta-openembedded"
|
||||
branch: kirkstone
|
||||
layers:
|
||||
meta-oe:
|
||||
meta-perl:
|
||||
@@ -41,8 +41,8 @@ local_conf_header:
|
||||
INHERIT += "report-error"
|
||||
INHERIT += "testimage"
|
||||
INHERIT += "rm_work"
|
||||
BB_NUMBER_THREADS="24"
|
||||
BB_NUMBER_PARSE_THREADS="12"
|
||||
BB_NUMBER_THREADS = "24"
|
||||
BB_NUMBER_PARSE_THREADS = "12"
|
||||
BB_TASK_NICE_LEVEL = '5'
|
||||
BB_TASK_NICE_LEVEL_task-testimage = '0'
|
||||
BB_TASK_IONICE_LEVEL = '2.7'
|
||||
@@ -52,6 +52,7 @@ local_conf_header:
|
||||
PACKAGE_CLASSES = "package_ipk"
|
||||
|
||||
DISTRO_FEATURES:append = " security pam apparmor smack ima tpm tpm2"
|
||||
DISTRO_FEATURES:remove = "ptest"
|
||||
MACHINE_FEATURES:append = " tpm tpm2"
|
||||
|
||||
diskmon: |
|
||||
@@ -65,6 +66,10 @@ local_conf_header:
|
||||
ABORT,${SSTATE_DIR},100M,1K \
|
||||
ABORT,/tmp,10M,1K"
|
||||
|
||||
dlsstate: |
|
||||
DL_DIR = "/home/gitlab-runner/build/downloads"
|
||||
SSTATE_DIR = "/home/gitlab-runner/build/sstate-cache"
|
||||
|
||||
bblayers_conf_header:
|
||||
base: |
|
||||
BBPATH = "${TOPDIR}"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
header:
|
||||
version: 9
|
||||
version: 19
|
||||
includes:
|
||||
- kas-security-base.yml
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
header:
|
||||
version: 9
|
||||
version: 19
|
||||
includes:
|
||||
- kas-security-base.yml
|
||||
|
||||
@@ -10,7 +10,7 @@ repos:
|
||||
|
||||
meta-clang:
|
||||
url: https://github.com/kraj/meta-clang.git
|
||||
refspec: master
|
||||
branch: kirkstone
|
||||
|
||||
local_conf_header:
|
||||
meta-parsec: |
|
||||
|
||||
@@ -6,5 +6,6 @@ header:
|
||||
local_conf_header:
|
||||
musl: |
|
||||
TCLIBC = "musl"
|
||||
DISTRO_FEATURES:remove = "apparmor"
|
||||
|
||||
machine: qemuarm64
|
||||
|
||||
@@ -6,5 +6,6 @@ header:
|
||||
local_conf_header:
|
||||
musl: |
|
||||
TCLIBC = "musl"
|
||||
DISTRO_FEATURES:remove = "apparmor"
|
||||
|
||||
machine: qemux86
|
||||
|
||||
@@ -3,4 +3,8 @@ header:
|
||||
includes:
|
||||
- kas-security-base.yml
|
||||
|
||||
local_conf_header:
|
||||
ptest: |
|
||||
DISTRO_FEATURES:append = " ptest"
|
||||
|
||||
machine: qemux86
|
||||
|
||||
Reference in New Issue
Block a user