From: Quirin Gylstorff <quirin.gylstorff@...> Add wks for: - simatic-ipc227e - qemu-amd64 Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- kas/opt/ebg-swu.yml

From: Quirin Gylstorff <quirin.gylstorff@...> Add the bootloader efibootguard for A/B partition update on x86 with EFI. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> ---

From: Quirin Gylstorff <quirin.gylstorff@...> This patchset adds efibootguard, swupdate to allow A/B updates in cip-core. The update mechanism is currently only implemented for

From: Quirin Gylstorff <quirin.gylstorff@...> swupdate 2020.04 requires libubootenv as build dependency. libubootenv is a library that provides a hardware independent way to access to U-Boot

I will fix that in v2

Sure

it uses the partuuid from root. If someone finds a better way to get the current root without parsing the kernel commandline I would use that. I move the patch to the a/b update patch. -- Quirin

Seems not really specific to secure-boot, rather related to the initramfs-based rootfs selection. But is that one actually using PARTUUID in the end? Or rather device paths? Anyway, I'm not against

Hi,

Hi, CIP kernel team has released Linux kernel v4.19.130-cip29. The linux-4.19.y-cip tree has been updated base version from v4.19.128 to v4.19.130. You can get this release via the git tree at:

Applied to next, also fixing up the remaining README spots. Thanks, Jan -- Siemens AG, Corporate Technology, CT RDA IOT SES-DE Corporate Competence Center Embedded Linux

From: Quirin Gylstorff <quirin.gylstorff@...> Move kas related files into folder kas for a cleaner repository root. Update isar to remove patches folder for now Changes V2: - move kas-cip

From: Quirin Gylstorff <quirin.gylstorff@...> Create folder structure kas -> general configuration kas/board -> all supported boards kas/opt -> all kas option files Signed-off-by: Quirin

I just released 0.7. Maybe you could update when preparing v2. Jan -- Siemens AG, Corporate Technology, CT RDA IOT SES-DE Corporate Competence Center Embedded Linux

Internal mirror. You need to go back to upstream. And do we actually need gitsm? It is not a mature feature of bitbake, thus generally discouraged. Jan -- Siemens AG, Corporate Technology, CT RDA

This line seems to have been mangled. It should be in line with the Signed-off-by. That file is added by this patch already. Shouldn't we target for a security image (recipe) instead? General

Ok I will send a v2 to add a top level kas-cip.yml to address that. Quirin

From: venkata pyla venkata.pyla@... Added sudo package for security feature Signed-off-by: venkata pyla <venkata.pyla@...> --- recipes-core/images/cip-core-image-security.bb | 2 +- 1 file

From: venkata pyla venkata.pyla@... Signed-off-by: venkata pyla <venkata.pyla@...> --- recipes-core/images/cip-core-image-security.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

From: Kazuhiro Hayashi kazuhiro3.hayashi@... Signed-off-by: Kazuhiro Hayashi <kazuhiro3.hayashi@...> --- SECURITY.md | 23 ++++-------- opt-security.yml