50 Commits

Author SHA1 Message Date
Scott Murray 925357d25a Update kas configuration for wrynose branch
Update base kas configuration for CI to wrynose branches.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
2026-04-30 00:14:30 +03:00
Scott Murray 0936595355 A couple of small CI fixes
Change the "poky" layer configuration name to "meta-yocto" in the
KAS configuration so the cloned repo name is less confusing in logs,
and fix a spot where "poky" -> "openembedded-core" had been missed
in the gitlab configuration.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
2026-03-07 12:02:54 +02:00
Scott Murray b5192f58f4 Update kas configuration
Changes to catch up with current kas and future-proof a bit:
* Update the kas configuration file versions to 19 to match kas 4.8.x.
* Change refspec to branch to remove deprecation warnings.
* Add quoting around URLs to match upstream examples.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
2026-01-07 16:50:08 +02:00
Scott Murray 7d0ae0d688 meta-parsec: Remove meta-clang dependency
Since clang is in openembedded-core now, meta-parsec no longer needs
meta-clang.  Also updated maintainers in meta-parsec README.md since
it had previously been missed.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
2026-01-07 16:49:29 +02:00
Scott Murray 3045ef984a Update kas configuration for poky obsolescence
Replace poky repository configuration with separate bitbake,
openembedded-core, and meta-poky repository configurations.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
2025-11-12 14:17:55 -05:00
Marta Rybczynska 00e1ae0483 test: allow root login for test images
Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
2025-10-08 17:34:14 +02:00
Marta Rybczynska 1b1028e35b kas: add whitespaces around assignement
Add whitespaces when assigning variables in kas cofiguration.

We were getting:
WARNING: ... has a lack of whitespace around the assignment: 'BB_NUMBER_THREADS="24"'
WARNING: ... has a lack of whitespace around the assignment: 'BB_NUMBER_PARSE_THREADS="12"'

Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
2025-07-23 18:45:56 +02:00
Marta Rybczynska 489e2d9aa2 kas: add common dldir/sstate
Signed-off-by: Marta Rybczynska <marta.rybczynska@ygreky.com>
2025-07-23 18:45:56 +02:00
Armin Kuster dc09819b86 kas: musl don't build apparmor
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-01-06 20:01:40 -05:00
Armin Kuster b825133225 kas: tweak to improve CI work flow
drop ptest from base builds.
Enable ptest in test image only

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-01-06 20:01:40 -05:00
Mikko Rapeli 93cc0c48fe kas-security-alt.yml: fix systemd config
Adding "systemd" to DISTRO_FEATURES does not work anymore
and build failes due to udev selection etc issues.

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-12-27 11:28:23 -05:00
Armin Kuster 20ae617e32 drop: debug-tweaks from ci
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-12-16 12:50:23 -05:00
Armin Kuster 97ab23ef64 kas: ci changes do to meta-security-compliance being removed
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-06-20 11:07:20 -04:00
Armin Kuster d7d3056ed7 kas-security-base.yml: make work again
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-10-24 10:27:58 -04:00
Armin Kuster 10fdc2b13a kas: update testimage inherit
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-25 08:24:12 -04:00
Armin Kuster da93339112 kas-security-alt: drop rust layer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-13 08:11:29 -07:00
Armin Kuster 2c7b75c95e kas: remove rust layers
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-27 07:27:49 -07:00
Armin Kuster b6d5cac306 kas: fix DISTRO appends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-26 21:37:34 -07:00
Armin Kuster 57470052b0 kas-security-bas: bump conf value
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-26 21:37:18 -07:00
Armin Kuster b206ba59db kas: Convert to new override syntax
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-01 08:47:08 -07:00
Armin Kuster 32dacb1f8d gitlab-ci.yml: streamline builds matrix
drop ppc32 builds
drop multi builds

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-28 18:21:25 -07:00
Armin Kuster 9cceed4cdb add meta-rust
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-28 18:21:25 -07:00
Armin Kuster 5fbf2b8b7f kas/kas-security-alt.yml: add meta-rust
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-06 22:21:47 -07:00
Armin Kuster acbf11eec8 build cleanup: add iam to base depend
Drop *.ima.yml
Try next

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16 13:23:43 -07:00
Armin Kuster 30da585d2a kas-security-base: fix feature namespace for tpm*
They are MACHINE not DISTRO FEATURES

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-20 07:41:29 -07:00
Armin Kuster 32bcdd0fc5 kas: cleanup some kas files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-19 06:56:18 -07:00
Armin Kuster 450421fee8 *-tpm.yml: drop tpms jobs
way too many jobs. TPM have there own images, use that

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-19 06:56:18 -07:00
Armin Kuster 92bc24566d kas-security-base: Move some DISTRO_FEATURES around
Move FEATURES that affect kernel configuation to minimize rebuilds

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-19 06:56:18 -07:00
Armin Kuster 9286904960 kas-security-base.yml: tweek build vars
add meta-filesystems

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-12 07:10:09 -07:00
Anton Antonov 269cd6a9a2 Define secure images with parsec-service and parsec-tool included and add the images into gitlab CI
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-12 07:06:46 -07:00
Armin Kuster f97a8bef14 kas-security-base.yml: drop DL_DIR
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-02 11:56:27 -08:00
Armin Kuster a107721960 kas-security-base.yml: build setting updates
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-23 20:34:51 -08:00
Armin Kuster d2ceb5e438 kas-security-base: Don't create local SSTATE mirror
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-11-15 11:03:52 -08:00
Armin Kuster e8c9e69c80 gitlab-ci: add building meta-security-compliance pkgs
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-19 18:14:23 -07:00
Armin Kuster 9a4de56ad5 gitlab-ci: add meta-hardening build image
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-19 18:14:23 -07:00
Armin Kuster bf494f2114 gitlab-ci: add qemux86 and qemuarm64 musl builds
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:15:03 -07:00
Armin Kuster 16ab6ce706 kas: fixup alt configs
add smack

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-15 21:14:53 -07:00
Armin Kuster c5b5737ef3 qemux86-test: add apparmor back
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-10 16:21:31 -07:00
Armin Kuster 46a7fa856c kas: build with ptest. remove apparmor
apparmor does not build with ptest enabled. skipping it for now

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-29 07:17:55 -07:00
Armin Kuster d6baccc068 qemu test: set ptest
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-18 04:06:31 -07:00
Armin Kuster 8abff56c89 kas-security-base: set RPM and disable ptest
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-18 04:06:31 -07:00
Armin Kuster 3c3992a184 kas: add alt and mutli build images
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-18 04:06:31 -07:00
Armin Kuster 0d5662acd1 kas-security-base: define sections as base
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-18 04:06:13 -07:00
Armin Kuster 2cf817a9a4 kas: add one dm-verify image build
gitlab-ci: add qemux86-64-dm-verify build image

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12 08:55:28 -07:00
Armin Kuster 0dac8fac90 kas: add test config
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12 08:55:28 -07:00
Armin Kuster 415bdc7f0d kas-security-base: add testimage
allow root to login

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12 08:55:28 -07:00
Armin Kuster a770033f34 kas/kas-security-base.yml: lets enable error reporting
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-29 07:25:35 -07:00
Armin Kuster 066a04425c drop ci-build: it is hiding errors
call kas from .gitlab-ci
fix typos
add missing mips64 file
add main layer workaround

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-24 09:59:33 -07:00
Armin Kuster 4dc69a7550 kas: add ima, tpm and tpm2 build configs
for qemux86, qemux86-64 and qemuarm64

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-19 19:19:59 -07:00
Armin Kuster 171c3da430 add gitlab framework and qemu machine
Machines:
qemux86
qemux86-64
qemuarm
qemuarm64
qemuppc
qemumips84
qemuriscv64

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18 18:33:23 -07:00