From f1e440673465aa768f31e78c0c201002f9f767b7 Mon Sep 17 00:00:00 2001 From: Andrew Geissler Date: Thu, 15 Apr 2021 15:52:46 -0500 Subject: meta-security: subtree update:775870980b..ca9264b1e1 Anton Antonov (4): Use libest "main" branch instead of "master". Add meta-parsec layer into meta-security. Define secure images with parsec-service and parsec-tool included and add the images into gitlab CI Clearly define clang toolchain in Parsec recipes Armin Kuster (16): packagegroup-core-security: drop clamav-cvd clamav: upgrade 104.0 python3-privacyidea: upgrade 3.5.1 -> 3.5.2 clamav: fix systemd service install swtpm: now need python-cryptography, pull in layer swtpm: file pip3 issue swtpm: fix check for tscd deamon on host python3-suricata-update: update to 1.2.1 suricata: update to 6.0.2 layer.conf: add dynamic-layer for rust pkg README: cleanup .gitlab-ci.yml: reorder to speed up builds kas-security-base.yml: tweek build vars gitlab-ci: fine tune order clamav: remove rest of mirror.dat ref lkrg-module: Add Linux Kernel Runtime Guard Ming Liu (2): meta: drop IMA_POLICY from policy recipes initramfs-framework-ima: introduce IMA_FORCE Signed-off-by: Andrew Geissler Change-Id: Ifac35a0d7b7e724f1e30dce5f6634d5d4fc9b5b9 --- meta-security/kas/kas-security-base.yml | 2 +- meta-security/kas/kas-security-parsec.yml | 21 +++++++++++++++++++++ meta-security/kas/qemuarm-parsec.yml | 6 ++++++ meta-security/kas/qemuarm64-parsec.yml | 6 ++++++ meta-security/kas/qemuppc-parsec.yml | 6 ++++++ meta-security/kas/qemux86-64-parsec.yml | 6 ++++++ meta-security/kas/qemux86-parsec.yml | 6 ++++++ 7 files changed, 52 insertions(+), 1 deletion(-) create mode 100644 meta-security/kas/kas-security-parsec.yml create mode 100644 meta-security/kas/qemuarm-parsec.yml create mode 100644 meta-security/kas/qemuarm64-parsec.yml create mode 100644 meta-security/kas/qemuppc-parsec.yml create mode 100644 meta-security/kas/qemux86-64-parsec.yml create mode 100644 meta-security/kas/qemux86-parsec.yml (limited to 'meta-security/kas') diff --git a/meta-security/kas/kas-security-base.yml b/meta-security/kas/kas-security-base.yml index fca0ebe09..aa68336e1 100644 --- a/meta-security/kas/kas-security-base.yml +++ b/meta-security/kas/kas-security-base.yml @@ -28,6 +28,7 @@ repos: meta-perl: meta-python: meta-networking: + meta-filesystems: local_conf_header: base: | @@ -42,7 +43,6 @@ local_conf_header: INHERIT += "rm_work" BB_NUMBER_THREADS="24" BB_NUMBER_PARSE_THREADS="12" - PARALLEL_MAKE="-j 8" BB_TASK_NICE_LEVEL = '5' BB_TASK_NICE_LEVEL_task-testimage = '0' BB_TASK_IONICE_LEVEL = '2.7' diff --git a/meta-security/kas/kas-security-parsec.yml b/meta-security/kas/kas-security-parsec.yml new file mode 100644 index 000000000..6152f0c1d --- /dev/null +++ b/meta-security/kas/kas-security-parsec.yml @@ -0,0 +1,21 @@ +header: + version: 9 + includes: + - kas-security-base.yml + +repos: + meta-security: + layers: + meta-parsec: + + meta-rust: + url: https://github.com/meta-rust/meta-rust.git + refspec: master + + meta-clang: + url: https://github.com/kraj/meta-clang.git + refspec: master + +local_conf_header: + meta-parsec: | + IMAGE_INSTALL_append = " parsec-service parsec-tool" diff --git a/meta-security/kas/qemuarm-parsec.yml b/meta-security/kas/qemuarm-parsec.yml new file mode 100644 index 000000000..cef281851 --- /dev/null +++ b/meta-security/kas/qemuarm-parsec.yml @@ -0,0 +1,6 @@ +header: + version: 8 + includes: + - kas-security-parsec.yml + +machine: qemuarm diff --git a/meta-security/kas/qemuarm64-parsec.yml b/meta-security/kas/qemuarm64-parsec.yml new file mode 100644 index 000000000..9b593bc67 --- /dev/null +++ b/meta-security/kas/qemuarm64-parsec.yml @@ -0,0 +1,6 @@ +header: + version: 8 + includes: + - kas-security-parsec.yml + +machine: qemuarm64 diff --git a/meta-security/kas/qemuppc-parsec.yml b/meta-security/kas/qemuppc-parsec.yml new file mode 100644 index 000000000..1176d1369 --- /dev/null +++ b/meta-security/kas/qemuppc-parsec.yml @@ -0,0 +1,6 @@ +header: + version: 8 + includes: + - kas-security-parsec.yml + +machine: qemuppc diff --git a/meta-security/kas/qemux86-64-parsec.yml b/meta-security/kas/qemux86-64-parsec.yml new file mode 100644 index 000000000..ec39c14eb --- /dev/null +++ b/meta-security/kas/qemux86-64-parsec.yml @@ -0,0 +1,6 @@ +header: + version: 8 + includes: + - kas-security-parsec.yml + +machine: qemux86-64 diff --git a/meta-security/kas/qemux86-parsec.yml b/meta-security/kas/qemux86-parsec.yml new file mode 100644 index 000000000..370947d5f --- /dev/null +++ b/meta-security/kas/qemux86-parsec.yml @@ -0,0 +1,6 @@ +header: + version: 8 + includes: + - kas-security-parsec.yml + +machine: qemux86 -- cgit v1.2.3