From: Quirin Gylstorff <quirin.gylstorff@...> Add the necessary kernel options for a read-only rootfs with dm-verity, secure-boot and swupdate + overlay of /etc. Quirin Gylstorff (2):

From: Quirin Gylstorff <quirin.gylstorff@...> Add the necessary kernel option to support a read only rootfs with dm-verity and overlay. Signed-off-by: Quirin Gylstorff

From: Jan Kiszka <jan.kiszka@...> This was changed in Isar a while ago, making arm64 images "vmlinux". Signed-off-by: Jan Kiszka <jan.kiszka@...> --- start-qemu.sh | 2 +- 1 file

Is that still a "wic-verity-img" class then? Or rather a secure-swupdate-img class, now with persistency? Rather than adding yet another wks file, maybe better extend the existing

Blank line. Blank line, to be more readable. Jan -- Siemens AG, T RDA IOT Corporate Competence Center Embedded Linux

This should be quickly addressed by expanding the configs of all boards we want to enable this way. Start with QEMU and the IPCs. Otherwise, we risk to ignore this subsystem /wrt CVEs. This should be

Blank line after this. I don't think the anonymous function does that... How about d.appendVar? And Python style for python functions, please. This should also qualify as generic Isar class. It

This should not be have sent. Drop. -- With best regards, Quirin Gylstorff Siemens AG Technology Research in Digitalization and Automation Smart Embedded Systems T RDA IOT

From: Quirin Gylstorff <quirin.gylstorff@...> Backport the following patches to detect the correct partition to update. 388f1777 util: Add get_root source /proc/self/mountinfo 3914d2b7 util:

From: Quirin Gylstorff <quirin.gylstorff@...> This patch series adds support for a read-only squashfs based root filesystem wit SWUpdate support and secureboot. The build is somewhat complex

From: Quirin Gylstorff <quirin.gylstorff@...> As /etc is read-only and needs to be accessed by the initrd move the user defined settings to a overlay in /var/local/etc. Signed-off-by: Quirin

From: Quirin Gylstorff <quirin.gylstorff@...> This root file system supports SWUpdate and secure boot. We need a writable /tmp and /var for a boot without error messages. Signed-off-by:

From: Quirin Gylstorff <quirin.gylstorff@...> Add an example how to add an writable home partition Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> ---

From: Quirin Gylstorff <quirin.gylstorff@...> Add a bbclass to add dm-verity to a existing root file system partition. As we need the output of `veritysetup` to generate the initrd. Therefore

From: Quirin Gylstorff <quirin.gylstorff@...> CIP Kernel Config does not contain support for dm-verity squashfs. Overlay_FS support is added for etc-overlay. Signed-off-by: Quirin Gylstorff

From: Quirin Gylstorff <quirin.gylstorff@...> Adapt the initrd to open a dm-verity partition with a fixed root hash. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> ---

From: Quirin Gylstorff <quirin.gylstorff@...> This file system is read only and use a reduced image size. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> ---

From: Srinuvasan A <srinuvasan_a@...> When we build the swupdate debian package for buster some build dependency packages are not available in stable buster repo, hence we created a patch in

Thanks, applied. Jan -- Siemens AG, T RDA IOT Corporate Competence Center Embedded Linux

From: Quirin Gylstorff <quirin.gylstorff@...> Also 'TRUE' is not a valid value. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- recipes-core/swupdate/swupdate.inc | 8