69 lines
1.9 KiB
Plaintext
69 lines
1.9 KiB
Plaintext
#@TYPE: Distribution
|
|
#@NAME: Cyber-secureboot
|
|
#@DESCRIPTION: Distribution configuration for SecureBoot Proof of Concept
|
|
|
|
DISTRO_VERSION = "1.0.0"
|
|
DISTRO_NAME = "SCLE Cyber SecureBoot Distro - Stock"
|
|
|
|
SDK_VENDOR = "-cyber"
|
|
SDK_VERSION = "${DISTRO_VERSION}"
|
|
MAINTENER = "vincent.benoit@scle.fr"
|
|
|
|
# Image Rootfs type and size
|
|
WKS_FILE = "pengwyn-yocto.wks.in"
|
|
|
|
# Define a multiplier that the build system applies
|
|
IMAGE_OVERHEAD_FACTOR = "3"
|
|
# 3 Go
|
|
#IMAGE_ROOTFS_EXTRA_SPACE = "3145728"
|
|
|
|
# mask systemd-serialgetty parsed attribute SERIAL_CONSOLES
|
|
#SERIAL_CONSOLES = ""
|
|
|
|
##########################################################
|
|
#
|
|
# Bootloader & SPL
|
|
#
|
|
##########################################################
|
|
|
|
## The file type for the Secondary Program Loader (SPL)
|
|
SPL_BINARY = "MLO"
|
|
|
|
##########################################################
|
|
#
|
|
# Linux
|
|
#
|
|
##########################################################
|
|
|
|
KERNEL_IMAGETYPE = "uImage"
|
|
|
|
##########################################################
|
|
#
|
|
# Misc
|
|
#
|
|
##########################################################
|
|
|
|
# Preferred providers for Packages
|
|
PREFERRED_RPROVIDER_libdevmapper-native = "libdevmapper-native"
|
|
|
|
# Use systemd
|
|
DISTRO_FEATURES = "acl argp systemd usbhost ipv4 largefile usbgadget pam vfat xattr ldconfig tpm tpm2 security"
|
|
|
|
VIRTUAL-RUNTIME_init_manager = "systemd"
|
|
VIRTUAL-RUNTIME_login_manager = "shadow-base"
|
|
VIRTUAL-RUNTIME_syslog = "rsyslog"
|
|
VIRTUAL-RUNTIME_initscripts = "systemd-compat-units"
|
|
DISTRO_FEATURES_BACKFILL_CONSIDERED = "sysvinit"
|
|
|
|
IMAGE_FEATURES += " package-management ssh-server-openssh read-only-rootfs"
|
|
|
|
# set /var/log persistent
|
|
VOLATILE_LOG_DIR = "no"
|
|
|
|
# Use extrausers
|
|
INHERIT += "extrausers"
|
|
# mkpasswd -m sha-512 root -s sclecyber
|
|
EXTRA_USERS_PARAMS += "usermod -p '\$6\$sclecyber\$n9LKVtEnhPIDEbFdRFVPWbuRoYabzprcF0W2XuR4Tg/au6xrII8/4qBDc8vPn0z7qthIL.UMp4TlZWi9uOsFQ.' root;"
|
|
|
|
RM_WORK_EXCLUDE += "dm-verity-image-initramfs cyber-secureboot-image"
|