[RFC cip-dev][isar-cip-core][PATCH 10/14] Integrate cis-hardening into cip-core-image
Quirin Gylstorff <[email protected]> Mon, 27 Jul 2026 15:13:04 +0200
| Newsgroups | org.cip-project.lists.cip-dev |
|---|---|
| Message-ID | <[email protected]> |
Co-Authored-by: Clara Kowalsky <[email protected]> Co-Authored-by: Felix Moessbauer <[email protected]> Co-Authored-by: Christoph Steiger <[email protected]> Signed-off-by: Quirin Gylstorff <[email protected]> --- recipes-core/images/cip-core-image.inc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/recipes-core/images/cip-core-image.inc b/recipes-core/images/c= ip-core-image.inc index f6162cd..859aee6 100644 --- a/recipes-core/images/cip-core-image.inc +++ b/recipes-core/images/cip-core-image.inc @@ -10,7 +10,11 @@ # =20 inherit image +inherit_defer ${@'cis-hardening' if bb.utils.to_boolean(d.getVar('CIP_CIS_= HARDENING')) else ''} +inherit_defer ${@'cis-kernel-hardening-validation' if bb.utils.to_boolean(= d.getVar('CIP_CIS_HARDENING_VALIDATION')) else ''} =20 IMAGE_INSTALL:append:factory-reset =3D "factory-reset-helper" +IMAGE_INSTALL:append =3D "${@' cip-cis-rules' if bb.utils.to_boolean(d.get= Var('CIP_CIS_HARDENING')) else ''}" +IMAGE_INSTALL:append =3D "${@' cip-cis-validation' if bb.utils.to_boolean(= d.getVar('CIP_CIS_HARDENING_VALIDATION')) else ''}" =20 ISAR_RELEASE_CMD =3D "git -C ${LAYERDIR_cip-core} describe --tags --dirty = --always --match 'v[0-9].[0-9]*'" --=20 2.53.0