From: Jan Kiszka <jan.kiszka@...> Pick up the DTBs specified via DTB_FILES and embed them into the unified kernel image that the wic plugin can generate. This does not work for normal

From: Jan Kiszka <jan.kiszka@...> Hook up the new U-Boot recipe, provide new wks files and disable the watchdog for EFI Boot Guard - that's all what's need to allow offering SWUpdate and

From: Jan Kiszka <jan.kiszka@...> Simplify the signing recipe to a single, generic one. Instead, provide secure-boot-secrets packages that contain the used image key and certificate at a

From: Jan Kiszka <jan.kiszka@...> This version bring the new unified kernel stub and script to generate unified kernel images from that. That script requires python3, so we need to expand

From: Jan Kiszka <jan.kiszka@...> Forgotten to remove in f1e559498116. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- .../files/debian-local-patch | 103

Changes in v2: - add plugin fix for empty command line case Various update and enhancement I try to summarize here: - qemu-arm64 enabling for SWUpdate/secure boot using the UEFI pattern - update to

From: Jan Kiszka <jan.kiszka@...> Needed for iTCO under -rt kernels, swupdate support on arm64 and xattr for squashfs in swupudate scenarios. Signed-off-by: Jan Kiszka

From: Jan Kiszka <jan.kiszka@...> Signed-off-by: Jan Kiszka <jan.kiszka@...> --- ...{linux-cip_4.19.235-cip70.bb => linux-cip_4.19.239-cip72.bb} | 2 +-

From: Jan Kiszka <jan.kiszka@...> Needed in case overlay support is built as kernel module. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- .../files/etc-overlay.hook

From: Jan Kiszka <jan.kiszka@...> Fail loudly in case the overlay cannot be mounted. Signed-off-by: Jan Kiszka <jan.kiszka@...> ---

Hi! In previous linux-4.4.y-cip-rebases, order of patches was: git log: [CIP patches] [Greg's stable tree] [Linus tree] With start of self-maintainance, we now have: git log: [-st patches] [CIP

Hi all, Kindly be reminded to attend the weekly meeting through IRC to discuss technical topics with CIP kernel today. Our channel is the following: irc:irc.libera.chat:6667/cip The IRC meeting

Hi ! It's this week's CVE report. This week reported 4 new CVEs and 2 updated CVEs. There were no critical vulnerabilities this week. * New CVEs CVE-2022-1508 : io_uring: reexpand under-reexpanded

From: Jan Kiszka <jan.kiszka@...> We just need to pick up the newly deployed firmware.bin as -bios, analogously to the x86's OVMF, and switch to a disk image. A separate key storage is not

From: Jan Kiszka <jan.kiszka@...> Hook up the new U-Boot recipe, provide new wks files and disable the watchdog for EFI Boot Guard - that's all what's need to allow offering SWUpdate and

From: Jan Kiszka <jan.kiszka@...> Switch to the unified kernel image and its generator script that EFI Boot Guard now provides. So far this only simplifies the generation process. But it will

From: Jan Kiszka <jan.kiszka@...> Signed-off-by: Jan Kiszka <jan.kiszka@...> --- ...{linux-cip_4.19.235-cip70.bb => linux-cip_4.19.239-cip72.bb} | 2 +-

From: Jan Kiszka <jan.kiszka@...> This version bring the new unified kernel stub and script to generate unified kernel images from that. That script requires python3, so we need to expand

From: Jan Kiszka <jan.kiszka@...> This will be used for booting via UEFI, both in open and locked-down secure mode. The secure mode variations can be selected by adding "secureboot" to

From: Jan Kiszka <jan.kiszka@...> Pick up the DTBs specified via DTB_FILES and embed them into the unified kernel image that the wic plugin can generate. This does not work for normal