Internal mirror. You need to go back to upstream. And do we actually need gitsm? It is not a mature feature of bitbake, thus generally discouraged. Jan -- Siemens AG, Corporate Technology, CT RDA

This line seems to have been mangled. It should be in line with the Signed-off-by. That file is added by this patch already. Shouldn't we target for a security image (recipe) instead? General

Ok I will send a v2 to add a top level kas-cip.yml to address that. Quirin

From: venkata pyla venkata.pyla@... Added sudo package for security feature Signed-off-by: venkata pyla <venkata.pyla@...> --- recipes-core/images/cip-core-image-security.bb | 2 +- 1 file

From: venkata pyla venkata.pyla@... Signed-off-by: venkata pyla <venkata.pyla@...> --- recipes-core/images/cip-core-image-security.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

From: Kazuhiro Hayashi kazuhiro3.hayashi@... Signed-off-by: Kazuhiro Hayashi <kazuhiro3.hayashi@...> --- SECURITY.md | 23 ++++-------- opt-security.yml

From: Kazuhiro Hayashi kazuhiro3.hayashi@... This reverts commit 7a8153fe4ba8127a7d86b6db90f1bbcb0dd73fd7. --- .gitlab-ci.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29

From: Kazuhiro Hayashi kazuhiro3.hayashi@... This experimental branch is assumed not to be associated with CIP GitLab Signed-off-by: Kazuhiro Hayashi

From: Kazuhiro Hayashi kazuhiro3.hayashi@... opt-security.yml: Sample settings to install security packages Signed-off-by: Kazuhiro Hayashi <kazuhiro3.hayashi@...> --- SECURITY.md | 52

Applied to next. Thanks, Jan -- Siemens AG, Corporate Technology, CT RDA IOT SES-DE Corporate Competence Center Embedded Linux

There is one catch with moving everything into a subdirectory: If a user pulls a tarball of the layer, thus tries to use it with git, kas will not be able to identify the top-level directory, and

From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- doc/README.secureboot.md | 188 +++++++++++++++++++++++++++++++++++++++

From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- recipes-core/swupdate/files/swupdate_handlers.lua | 8 ++++++-- 1 file

From: Quirin Gylstorff <quirin.gylstorff@...> A unified kernel image contains the os-release, kernel, kernel commandline, initramfs and efi-stub in one binary. This binary can be boot by

From: Quirin Gylstorff <quirin.gylstorff@...> Use the Debian snakeoil keys to have a demo case available without the OVMF setup. Copy the used keys from the build to the deploy directory to

From: Quirin Gylstorff <quirin.gylstorff@...> Adapt the initramfs generation to set for example the root device in the initramfs Signed-off-by: Quirin Gylstorff

From: Quirin Gylstorff <quirin.gylstorff@...> This patchset adds secureboot with efibootguard to cip-core. The image build signs the efibootguard bootloader (bootx64.efi) and generates a

From: Quirin Gylstorff <quirin.gylstorff@...> Add a fat configuration to access FAT Partitions on the qemu-amd64 target. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> ---

From: Quirin Gylstorff <quirin.gylstorff@...> As the usage of a unified kernel image freeze the kernel commmandline during build time the rootfs selection for swupdate can no longer be done

From: Quirin Gylstorff <quirin.gylstorff@...> To install a swupdate package into a system with a A/B partition scheme and EFI it is necessary to access a FAT partition. Signed-off-by: Quirin