[isar-cip-core] cip-core-image-security.bb: Add duplicity package to enable IEC requirement


sai.sathujoda@...
 

From: Sai <Sai.Sathujoda@...>

Duplicity package provides below features in order to implement IEC
requirement "Control System Backup"
1. Backup and restore
2. Encryption of backup
3. Checks integrity before restore

Python3-paramiko package is required to enable remote backups.

Signed-off-by: Sai <Sai.Sathujoda@...>
---
recipes-core/images/cip-core-image-security.bb | 1 +
1 file changed, 1 insertion(+)

diff --git a/recipes-core/images/cip-core-image-security.bb b/recipes-core/images/cip-core-image-security.bb
index 24b1f46..9e9e43a 100644
--- a/recipes-core/images/cip-core-image-security.bb
+++ b/recipes-core/images/cip-core-image-security.bb
@@ -34,6 +34,7 @@ IMAGE_PREINSTALL += " \
sudo \
aide-common \
libpam-google-authenticator \
+ duplicity python3-paramiko \
"

OVERRIDES_append = ":${BASE_DISTRO_CODENAME}"
--
2.20.1


Jan Kiszka
 

On 30.08.22 16:01, Sai.Sathujoda@... wrote:
From: Sai <Sai.Sathujoda@...>

Duplicity package provides below features in order to implement IEC
requirement "Control System Backup"
1. Backup and restore
2. Encryption of backup
3. Checks integrity before restore

Python3-paramiko package is required to enable remote backups.

Signed-off-by: Sai <Sai.Sathujoda@...>
---
recipes-core/images/cip-core-image-security.bb | 1 +
1 file changed, 1 insertion(+)

diff --git a/recipes-core/images/cip-core-image-security.bb b/recipes-core/images/cip-core-image-security.bb
index 24b1f46..9e9e43a 100644
--- a/recipes-core/images/cip-core-image-security.bb
+++ b/recipes-core/images/cip-core-image-security.bb
@@ -34,6 +34,7 @@ IMAGE_PREINSTALL += " \
sudo \
aide-common \
libpam-google-authenticator \
+ duplicity python3-paramiko \
"

OVERRIDES_append = ":${BASE_DISTRO_CODENAME}"
What was the status of the related discussion again? Didn't we decide
against such a tool? I mean, most embedded devices in the field are
stateless or only contain state that is not critical to back up. In that
case, this tool is completely useless.

Jan

--
Siemens AG, Technology
Competence Center Embedded Linux