cip-dev@lists.cip-project.org

Home Messages Hashtags Subgroups

Messages

Between

and

[isar-cip-core][PATCH 13/19] swupdate: Add patch to fix EBG bootloader_env_get

From: Jan Kiszka <jan.kiszka@...> Will be required for using bootenv_rrmap with the roundrobin handler. Signed-off-by: Jan Kiszka <jan.kiszka@...> ---

By Jan Kiszka · #8068 ·

[isar-cip-core][PATCH 14/19] swupdate: Switch to bootenv_rrmap+kernelfile for device selection

From: Jan Kiszka <jan.kiszka@...> This allows for a medium-independent sw-description. Not required so far for QEMU, but it may become useful in the future or for downstream layers, at least

By Jan Kiszka · #8067 ·

[isar-cip-core][PATCH 19/19] doc: README.secureboot polishing

From: Jan Kiszka <jan.kiszka@...> There has never been a uefikernel parameter for efibootguard-boot, so drop this. Furthermore, spell-out "EFI Boot Guard" and adjust some section levels and

By Jan Kiszka · #8066 ·

[isar-cip-core][PATCH 18/19] doc: Update README.swupdate

From: Jan Kiszka <jan.kiszka@...> Reflect the changes on the non-secure SWUpdate procedure in the documentation and streamline it a bit. Also switch to host-originated scp to transfer the swu

By Jan Kiszka · #8065 ·

[isar-cip-core][PATCH 17/19] start-qemu.sh: Ensure that iTCO watchdog timeout triggers reset

From: Jan Kiszka <jan.kiszka@...> Allows full testing of the SWUpdate feature. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- start-qemu.sh | 1 + 1 file changed, 1

By Jan Kiszka · #8064 ·

[isar-cip-core][PATCH 15/19] customizations: Enable systemd watchdog

From: Jan Kiszka <jan.kiszka@...> This is needed for proper SWUpdate processing and does not harm in other cases, even if the platform has no watchdog. Signed-off-by: Jan Kiszka

By Jan Kiszka · #8063 ·

[isar-cip-core][PATCH 03/19] swupdate: Drop no longer used SOURCE_IMAGE_FILE

From: Jan Kiszka <jan.kiszka@...> Obsoleted by aed961de08e1. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- classes/wic-swu-img.bbclass | 2 -- 1 file changed, 2 deletions(-) diff

By Jan Kiszka · #8062 ·

[isar-cip-core][PATCH 10/19] Unify configuration of secure vs. non-secure SWUpdate

From: Jan Kiszka <jan.kiszka@...> The sw-descriptions are practically identical, the roundrobin-handler ini files are absolutely the same. So drop them and use unified configs. That allows to

By Jan Kiszka · #8061 ·

[isar-cip-core][PATCH 12/19] cip-core-image: Make image-uuid an image option

From: Jan Kiszka <jan.kiszka@...> This allows to avoid running this needless task for the secure image where we use the dm-verity hash as image identification. Signed-off-by: Jan Kiszka

By Jan Kiszka · #8060 ·

[isar-cip-core][PATCH 11/19] cip-core-image: Do not include swupdate.inc unless it is used

From: Jan Kiszka <jan.kiszka@...> Was harmless to do so for non-swupdate images, but also unneeded. Signed-off-by: Jan Kiszka <jan.kiszka@...> ---

By Jan Kiszka · #8059 ·

[isar-cip-core][PATCH 09/19] efibootguard: Avoid rename linux.efi when signing it

From: Jan Kiszka <jan.kiszka@...> This will simplify handling of secure vs. non-secure configurations. Signed-off-by: Jan Kiszka <jan.kiszka@...> ---

By Jan Kiszka · #8058 ·

[isar-cip-core][PATCH 01/19] start-qemu.sh: Add ssh access to guest from localhost

From: Jan Kiszka <jan.kiszka@...> Permit ssh logins to the guest from the host using port 22222 forwarding, but only from the local machine. This is useful, e.g., to send an swu file into the

By Jan Kiszka · #8057 ·

[isar-cip-core][PATCH 04/19] swupdate: Rename secure-swupdate-img class

From: Jan Kiszka <jan.kiszka@...> Align the name to the non-secure counter part wic-swu-img. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- ...{secure-swupdate-img.bbclass =>

By Jan Kiszka · #8056 ·

[isar-cip-core][PATCH 07/19] swupdate: Switch to unified kernel image by default

From: Jan Kiszka <jan.kiszka@...> This will help to move non-secure and secure boot closer. It will also be required when booting non-x86 kernels with device trees that shall be replaceable

By Jan Kiszka · #8055 ·

[isar-cip-core][PATCH 08/19] swupdate: Drop PN from TEMPLATE_VARS

From: Jan Kiszka <jan.kiszka@...> Was never used in any of the template files. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- recipes-core/images/secureboot.inc | 2 +-

By Jan Kiszka · #8054 ·

[isar-cip-core][PATCH 06/19] Rename initramfs-abrootfs-secureboot to initramfs-abrootfs-hook

From: Jan Kiszka <jan.kiszka@...> It had nothing to do with secure boot at all, only with selecting the rootfs from the initramfs via a uuid match. Relocate to recipes-initramfs as well at

By Jan Kiszka · #8053 ·

[isar-cip-core][PATCH 05/19] Drop initramfs-abrootfs-secureboot references

From: Jan Kiszka <jan.kiszka@...> As secure boot implies for isar-cip-core dm-verity with read-only rootfs, we only added initramfs-abrootfs-secureboot to remove it again. So don't reference

By Jan Kiszka · #8052 ·

[isar-cip-core][PATCH 02/19] swupdate: Simplify secure-swupdate-img class

From: Jan Kiszka <jan.kiszka@...> Directly include wic-swu-img, avoiding code duplication this way. Signed-off-by: Jan Kiszka <jan.kiszka@...> ---

By Jan Kiszka · #8051 ·

[isar-cip-core][PATCH 00/19] SWUpdate & EFI Boot Guard refactorings

Several refactorings, simplifications and fixes of the SWUpdate and EFI Boot Guard integration. This primarily aims at the unification of both variants. For that, this switches to unified kernel

By Jan Kiszka · #8050 ·

[ANNOUNCE] Release v4.19.237-cip71 and v5.10.109-cip5

Hi all, CIP kernel team has released Linux kernel v4.19.237-cip71 v5.10.109-cip5. The linux-4.19.y-cip tree has been updated base version from v4.19.235 to v4.19.237. And the linux-5.10.y-cip tree

By Nobuhiro Iwamatsu · #8049 ·

3641 - 3660 of 11706

Home Hashtags Subgroups Terms