From: Jan Kiszka <jan.kiszka@...> Signed-off-by: Jan Kiszka <jan.kiszka@...> --- ...t_5.10.104-cip3-rt3.bb => linux-cip-rt_5.10.109-cip5-rt4.bb} | 2 +- ...{linux-cip_4.19.239-cip72.bb

From: Jan Kiszka <jan.kiszka@...> Model ebg-signed-sysparts.inc analogously to ebg-sysparts.inc because both in-tree users share already the configuration and kernel partition entries, and tha

Hi all, Kindly be reminded to attend the weekly meeting through IRC to discuss technical topics with CIP kernel today. Our channel is the following: irc:irc.libera.chat:6667/cip The IRC meeting is sch

Recurring topic, unfortunately. Still waiting for binfmt namespaces to resolve this. Jan

Is your kas-container recent? Do you happen to have qemu-user-static installed also on the host? If so, please try to remove it then? Note that CI also passes. Jan

From: Jan Kiszka <jan.kiszka@...> There is no "qemu-armhf", we called it qemu-arm. Therefore, finding its images failed. Rename DISTRO_ARCH to QEMU_ARCH and set it to "arm" for the related tar

Thanks, applied. Jan

From: Jan Kiszka <jan.kiszka@...> We just need to pick up the newly deployed firmware.bin as -bios, analogously to the x86's OVMF, and switch to a disk image. A separate key storage is not yet

From: Jan Kiszka <jan.kiszka@...> We crash in case of an empty command line with non-unified kernel images right now. Just avoid cmdline==None, will also make upcoming changes simpler. Signed-

From: Jan Kiszka <jan.kiszka@...> This will be used for booting via UEFI, both in open and locked-down secure mode. The secure mode variations can be selected by adding "secureboot" to OVERRID

From: Jan Kiszka <jan.kiszka@...> Switch to the unified kernel image and its generator script that EFI Boot Guard now provides. So far this only simplifies the generation process. But it will

From: Jan Kiszka <jan.kiszka@...> Pick up the DTBs specified via DTB_FILES and embed them into the unified kernel image that the wic plugin can generate. This does not work for normal kernels,

From: Jan Kiszka <jan.kiszka@...> Hook up the new U-Boot recipe, provide new wks files and disable the watchdog for EFI Boot Guard - that's all what's need to allow offering SWUpdate and secur

From: Jan Kiszka <jan.kiszka@...> Simplify the signing recipe to a single, generic one. Instead, provide secure-boot-secrets packages that contain the used image key and certificate at a well-

From: Jan Kiszka <jan.kiszka@...> This version bring the new unified kernel stub and script to generate unified kernel images from that. That script requires python3, so we need to expand the

From: Jan Kiszka <jan.kiszka@...> Forgotten to remove in f1e559498116. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- .../files/debian-local-patch | 103 ------------------ 1 file chang

Changes in v2: - add plugin fix for empty command line case Various update and enhancement I try to summarize here: - qemu-arm64 enabling for SWUpdate/secure boot using the UEFI pattern - update to EF

From: Jan Kiszka <jan.kiszka@...> Needed for iTCO under -rt kernels, swupdate support on arm64 and xattr for squashfs in swupudate scenarios. Signed-off-by: Jan Kiszka <jan.kiszka@...>

From: Jan Kiszka <jan.kiszka@...> Signed-off-by: Jan Kiszka <jan.kiszka@...> --- ...{linux-cip_4.19.235-cip70.bb => linux-cip_4.19.239-cip72.bb} | 2 +- .../{linux-cip_5.10.106-cip4.bb

From: Jan Kiszka <jan.kiszka@...> Needed in case overlay support is built as kernel module. Signed-off-by: Jan Kiszka <jan.kiszka@...> --- .../files/etc-overlay.hook | 25 +++++++++++++