diff options
author | Alan Kuo <Alan_Kuo@quantatw.com> | 2020-12-23 04:51:14 +0300 |
---|---|---|
committer | Andrew Geissler <geissonator@yahoo.com> | 2021-01-08 22:13:56 +0300 |
commit | c239b6f869f0b56d7a24f48f4b8e1107dab724c7 (patch) | |
tree | 675747ed4a6ec12fa2a5379786448aa551225a30 /meta-google | |
parent | 16941fc1b0fb92826ad88b3d55c40c9896756bd0 (diff) | |
download | openbmc-c239b6f869f0b56d7a24f48f4b8e1107dab724c7.tar.xz |
meta-google: recipes-google: Add static dev CA and specific user
Add Feature:
1. default-users: Add static User "Megapede" without password
2. default-ca-dev: Add static dev CA
Note:
1. CA PATH:
meta-google\recipes-google\default-ca-dev\default-ca-dev\certs\authority
All CAs under the folder will be encapsulated into the firmware image
(From meta-google rev: 0f2aba07b911c194e8ae5323040a80e55f761fd2)
Signed-off-by: Alan Kuo <Alan_Kuo@quantatw.com>
Change-Id: I862e74445e67662e11c06bdfd20606656f5043f7
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Diffstat (limited to 'meta-google')
3 files changed, 59 insertions, 0 deletions
diff --git a/meta-google/recipes-google/default-ca-dev/default-ca-dev.bb b/meta-google/recipes-google/default-ca-dev/default-ca-dev.bb new file mode 100644 index 0000000000..ecbb712673 --- /dev/null +++ b/meta-google/recipes-google/default-ca-dev/default-ca-dev.bb @@ -0,0 +1,14 @@ +SUMMARY = "Add dev default CA" +DESCRIPTION = "Add dev default CA" +LICENSE = "Apache-2.0" +LIC_FILES_CHKSUM = "file://${COREBASE}/meta/files/common-licenses/Apache-2.0;md5=89aea4e17d99a7cacdbeed46a0096b10" + +SRC_URI += "file://certs/authority/" + +FILES_${PN} = "${sysconfdir}/ssl/certs/authority/*" + +do_install(){ + install -d ${D}${sysconfdir}/ssl/certs/authority + install -m 0644 -D ${WORKDIR}/certs/authority/* \ + ${D}${sysconfdir}/ssl/certs/authority +} diff --git a/meta-google/recipes-google/default-ca-dev/default-ca-dev/certs/authority/Quanta_CA.crt b/meta-google/recipes-google/default-ca-dev/default-ca-dev/certs/authority/Quanta_CA.crt new file mode 100644 index 0000000000..77e5b2c9b5 --- /dev/null +++ b/meta-google/recipes-google/default-ca-dev/default-ca-dev/certs/authority/Quanta_CA.crt @@ -0,0 +1,22 @@ +-----BEGIN CERTIFICATE----- +MIIDkDCCAnigAwIBAgIIRnUufKw0mL8wDQYJKoZIhvcNAQELBQAwPTELMAkGA1UE +BhMCVFcxDzANBgNVBAoTBlF1YW50YTELMAkGA1UECxMCQ0ExEDAOBgNVBAMTB09w +ZW5CTUMwHhcNMjAwMTAxMDAwMDAwWhcNMzYxMjMxMjM1OTU5WjA9MQswCQYDVQQG +EwJUVzEPMA0GA1UEChMGUXVhbnRhMQswCQYDVQQLEwJDQTEQMA4GA1UEAxMHT3Bl +bkJNQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyBHOcnaVt4K1lt +msTmFzIBf1sI/HV7XW6VMICOOESUv/vrMxCNOzhil4J+CWpFjwkk8zGK6tiLXmMe +3/oa6qqHN0GXd7XoyBn3XRrr/L2gKipUsWlYk43Wq0TX2ugEcCWqOr0Ol4TcuD4Z ++pswkgHxqJtbfiWd1sTKpbCvjbnlN9EKir52DRZie0m8ANIbTp/KPVmY+UAU7Vz/ +QpYemolsrwupzWJbz34jC2rnNw8HFBHIMyNLJVocUkCVYy5ka0dRk+APC3VWX4C6 +1GmUd4ZQZs4LayyfQcK3Tb+PkNCf9AxBE8eId0lHpufq2Uhml1Lwrfh/1TObCwkW +ufgv6HsCAwEAAaOBkzCBkDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTpEhTE +nCIZo7dCDFtqUjMRcOI9SDAfBgNVHSMEGDAWgBTpEhTEnCIZo7dCDFtqUjMRcOI9 +SDALBgNVHQ8EBAMCAb4wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEG +CWCGSAGG+EIBAQQEAwIAxzANBgkqhkiG9w0BAQsFAAOCAQEAaw2to4hiADeZO/WF +UMxrKjB4mbpHOb8cn3HIBIkrE6XxpH6T9MaZh7xi7kyyiuVNGh70lh+qxBUmVf5B +OF2NSF6ffDrW86dMNV+tKlByHElUqWFcWgU1XFipcN7u0aeFkfPsqG4BwcZlBUEN +rr9GDFNNadmjnoVA3deVTu4kHTVz6vg0vJExDfBHhNBWsLzLizRIebv9jumJlHPl +I99czz3NQKVjm8z/BlWaMxpWU/bLxL2Aq/6rQ0iCoeIPJqHubG1CmGwI7k9ZQTUh +VAMKR4W7JAul+CK8oEC7TAVU2L2fk6g+eSwU12HgO+IUOXmdp3bPtGkk73wG4iOj +hN2Bow== +-----END CERTIFICATE----- diff --git a/meta-google/recipes-google/default-users/default-users.bb b/meta-google/recipes-google/default-users/default-users.bb new file mode 100644 index 0000000000..76485ccd0b --- /dev/null +++ b/meta-google/recipes-google/default-users/default-users.bb @@ -0,0 +1,23 @@ +SUMMARY = "Add default Users" +DESCRIPTION = "Add Users" +LICENSE = "Apache-2.0" +LIC_FILES_CHKSUM = "file://${COREBASE}/meta/files/common-licenses/Apache-2.0;md5=89aea4e17d99a7cacdbeed46a0096b10" + +EXCLUDE_FROM_WORLD = "1" + +DEPENDS = "bmcweb" +DEPENDS += "phosphor-ipmi-host" +DEPENDS += "phosphor-user-manager" +RDEPENDS_${PN} = "bmcweb" +RDEPENDS_${PN} += "phosphor-ipmi-host" +RDEPENDS_${PN} += "phosphor-user-manager" + +inherit useradd +USERADD_PACKAGES = "${PN}" + +USERADD_PARAM_${PN} = "-m -N -u 1000 -g 100 -s /bin/nologin \ + -G 'web,redfish,priv-admin' Megapede; " +GROUPMEMS_PARAM_${PN} = "-g priv-admin -a root; " +GROUPMEMS_PARAM_${PN} += "-g ipmi -a root; " + +ALLOW_EMPTY_${PN} = "1" |