[RFC cip-dev][isar-cip-core][PATCH 10/14] Integrate cis-hardening into cip-core-image

Quirin Gylstorff <[email protected]> Mon, 27 Jul 2026 15:13:04 +0200
Newsgroups org.cip-project.lists.cip-dev
Message-ID <[email protected]>
Co-Authored-by: Clara Kowalsky <[email protected]>
Co-Authored-by: Felix Moessbauer <[email protected]>
Co-Authored-by: Christoph Steiger <[email protected]>
Signed-off-by: Quirin Gylstorff <[email protected]>
---
 recipes-core/images/cip-core-image.inc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/recipes-core/images/cip-core-image.inc b/recipes-core/images/c=
ip-core-image.inc
index f6162cd..859aee6 100644
--- a/recipes-core/images/cip-core-image.inc
+++ b/recipes-core/images/cip-core-image.inc
@@ -10,7 +10,11 @@
 #
=20
 inherit image
+inherit_defer ${@'cis-hardening' if bb.utils.to_boolean(d.getVar('CIP_CIS_=
HARDENING')) else ''}
+inherit_defer ${@'cis-kernel-hardening-validation' if bb.utils.to_boolean(=
d.getVar('CIP_CIS_HARDENING_VALIDATION')) else ''}
=20
 IMAGE_INSTALL:append:factory-reset =3D "factory-reset-helper"
+IMAGE_INSTALL:append =3D "${@' cip-cis-rules' if bb.utils.to_boolean(d.get=
Var('CIP_CIS_HARDENING')) else ''}"
+IMAGE_INSTALL:append =3D "${@' cip-cis-validation' if bb.utils.to_boolean(=
d.getVar('CIP_CIS_HARDENING_VALIDATION')) else ''}"
=20
 ISAR_RELEASE_CMD =3D "git -C ${LAYERDIR_cip-core} describe --tags --dirty =
--always --match 'v[0-9].[0-9]*'"
--=20
2.53.0