IMAGE_INSTALL += " openssl-bin \
                   virtual-media \
                   system-watchdog phosphor-u-boot-mgr \
                   bmcweb-init-certs"

OBMC_IMAGE_EXTRA_INSTALL += " strace"

fix_shadow_perms() {
    chgrp shadow ${IMAGE_ROOTFS}${sysconfdir}/shadow
    chmod u=rw,g+r ${IMAGE_ROOTFS}${sysconfdir}/shadow
}

disable_ttyS3_serial_getty() {
    rm -f ${IMAGE_ROOTFS}${sysconfdir}/systemd/system/getty.target.wants/serial-getty@ttyS3.service
}

bmcweb_certs_directory() {
    mkdir -p ${IMAGE_ROOTFS}${sysconfdir}/ssl/certs/https
    chmod 700 ${IMAGE_ROOTFS}${sysconfdir}/ssl/certs/https
}


ROOTFS_POSTPROCESS_COMMAND += " \
    fix_shadow_perms ; \
    disable_ttyS3_serial_getty ; \
    bmcweb_certs_directory ; \
    "