mirror of
https://git.yoctoproject.org/meta-security
synced 2026-01-11 15:00:34 +00:00
7b951e3900
After the oe-core commit 26d97acc7137 ("image-artifact-names: include
${IMAGE_NAME_SUFFIX} directly in both ${IMAGE_NAME} and
${IMAGE_LINK_NAME}"), the image names have changed from
core-image-minimal-qemux86-64-20230307181808.rootfs.ext4
core-image-minimal-qemux86-64.ext4
to
core-image-minimal-qemux86-64.rootfs-20230307181456.ext4
core-image-minimal-qemux86-64.rootfs.ext4
Adjust the images name used by dm-verity according to this change.
Signed-off-by: Kevin Hao <kexin.hao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
18 lines
1.0 KiB
Plaintext
18 lines
1.0 KiB
Plaintext
# short-description: Create an EFI disk image with systemd-boot and dm-verity
|
|
# A dm-verity variant of the regular wks for IA machines. We need to fetch
|
|
# the partition images from the IMGDEPLOYDIR as the rootfs source plugin will
|
|
# not recreate the exact block device corresponding with the hash tree. We must
|
|
# not alter the label or any other setting on the image.
|
|
# Based on OE-core's systemd-bootdisk.wks and meta-security's beaglebone-yocto-verity.wks.in file
|
|
#
|
|
# This .wks only works with the dm-verity-img class.
|
|
# Also note that the use of microcode.cpio introduces a meta-intel layer dependency.
|
|
|
|
part /boot --source bootimg-efi --sourceparams="loader=systemd-boot,initrd=microcode.cpio" --ondisk sda --label msdos --active --align 1024 --use-uuid
|
|
|
|
part / --source rawcopy --ondisk sda --sourceparams="file=${IMGDEPLOYDIR}/${DM_VERITY_IMAGE}-${MACHINE}${IMAGE_NAME_SUFFIX}.${DM_VERITY_IMAGE_TYPE}.verity" --use-uuid
|
|
|
|
part swap --ondisk sda --size 44 --label swap1 --fstype=swap --use-uuid
|
|
|
|
bootloader --ptable gpt --timeout=5 --append=" "
|