mirror of
https://git.yoctoproject.org/meta-security
synced 2026-07-16 03:47:21 +00:00
Mikko Rapeli
6eb3098e57
Enable "tpm2" support if "tpm2" is in DISTRO_FEATURES. Also enable cryptsetup, openssl and repart features which are needed to use TPM device to encrypt filesystems with systemd configuration. See: https://www.freedesktop.org/software/systemd/man/latest/systemd-repart.html#--tpm2-device= Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
18 lines
756 B
Plaintext
18 lines
756 B
Plaintext
PACKAGECONFIG:append = " ${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', 'tpm2', '', d)}"
|
|
|
|
# for encrypted filesystems
|
|
PACKAGECONFIG:append = " \
|
|
${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', 'cryptsetup cryptsetup-plugins efi openssl repart', '', d)} \
|
|
"
|
|
|
|
# ukify.py and systemd-measure don't work in cross compile environment without
|
|
# a tpm2 device, thus switch from measured-uki (new in v256) back to tpm2
|
|
# (default before v256).
|
|
# TODO: use swtpm-native to calculate TPM measurements
|
|
do_install:append() {
|
|
if "${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', 'true', 'false', d)}"; then
|
|
sed -i -e "s/^ConditionSecurity=measured-uki/ConditionSecurity=tpm2/g" \
|
|
$( grep -rl ^ConditionSecurity=measured-uki ${D} )
|
|
fi
|
|
}
|