mirror of
https://git.yoctoproject.org/meta-security
synced 2026-04-20 23:40:05 +00:00
b6ec838e8f
Without these one line descriptors and their associated marker prefix, the output from "wic list images" only shows they are available as a choice but w/o any description Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
18 lines
1.0 KiB
Plaintext
18 lines
1.0 KiB
Plaintext
# short-description: Create an EFI disk image with systemd-boot and dm-verity
|
|
# A dm-verity variant of the regular wks for IA machines. We need to fetch
|
|
# the partition images from the IMGDEPLOYDIR as the rootfs source plugin will
|
|
# not recreate the exact block device corresponding with the hash tree. We must
|
|
# not alter the label or any other setting on the image.
|
|
# Based on OE-core's systemd-bootdisk.wks and meta-security's beaglebone-yocto-verity.wks.in file
|
|
#
|
|
# This .wks only works with the dm-verity-img class.
|
|
# Also note that the use of microcode.cpio introduces a meta-intel layer dependency.
|
|
|
|
part /boot --source bootimg-efi --sourceparams="loader=systemd-boot,initrd=microcode.cpio" --ondisk sda --label msdos --active --align 1024 --use-uuid
|
|
|
|
part / --source rawcopy --ondisk sda --sourceparams="file=${IMGDEPLOYDIR}/${DM_VERITY_IMAGE}-${MACHINE}.${DM_VERITY_IMAGE_TYPE}.verity" --use-uuid
|
|
|
|
part swap --ondisk sda --size 44 --label swap1 --fstype=swap --use-uuid
|
|
|
|
bootloader --ptable gpt --timeout=5 --append=" "
|