Re: [meta-ti][master][PATCH v6 3/3] conf: Enable dynamic security layer for LUKS
Shiva Tripathi <[email protected]>
| Newsgroups | org.yoctoproject.lists.meta-ti |
|---|---|
| Message-ID | <[email protected]> |
On 3/18/26 21:36, Ryan Eatmon wrote: > > > On 3/18/2026 9:57 AM, Shiva Tripathi wrote: >> Register dynamic-layers/security in layer.conf to conditionally >> build LUKS encryption support when meta-security layer is present. >> >> Update ti-core-initramfs.inc to auto-enable initramfs generation >> when DISTRO_FEATURES contains 'luks'. >> >> Signed-off-by: Shiva Tripathi <[email protected]> >> --- >> meta-ti-bsp/conf/layer.conf | 2 ++ >> meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc | 2 +- >> 2 files changed, 3 insertions(+), 1 deletion(-) >> >> diff --git a/meta-ti-bsp/conf/layer.conf b/meta-ti-bsp/conf/layer.conf >> index f78da573..ce2883ac 100644 >> --- a/meta-ti-bsp/conf/layer.conf >> +++ b/meta-ti-bsp/conf/layer.conf >> @@ -24,6 +24,8 @@ LAYERRECOMMENDS_meta-ti-bsp = " \ >> BBFILES_DYNAMIC += " \ >> openembedded-layer:${LAYERDIR}/dynamic-layers/openembedded- >> layer/recipes*/*/*.bbappend \ >> + security:${LAYERDIR}/dynamic-layers/security/recipes*/*/*.bb \ >> + security:${LAYERDIR}/dynamic-layers/security/recipes*/*/*.bbappend \ >> " >> > > You should also update the LAYERRECOMMENDS to include meta-security. Okay, will address this in v7. > > And you should also submit an oe-layersetup change to include meta- > security in the arago-master builds, commented out of course and add a > new arago-master-security-config.xml that adds in the new layer. > Sure, will send this patch separately. Thanks, Shiva > >> SIGGEN_EXCLUDERECIPES_ABISAFE += " \ >> diff --git a/meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc b/ >> meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc >> index 9d3cc612..15c05e04 100644 >> --- a/meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc >> +++ b/meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc >> @@ -5,7 +5,7 @@ >> # TI_CORE_INITRAMFS_ENABLED = "0" >> # >> >> #------------------------------------------------------------------------------ >> -TI_CORE_INITRAMFS_ENABLED ?= "${@ '1' if >> d.getVar('TI_CORE_INITRAMFS_KERNEL_MODULES') or >> d.getVar('TI_CORE_INITRAMFS_EXTRA_INSTALL') else '0'}" >> +TI_CORE_INITRAMFS_ENABLED ?= "${@ '1' if >> d.getVar('TI_CORE_INITRAMFS_KERNEL_MODULES') or >> d.getVar('TI_CORE_INITRAMFS_EXTRA_INSTALL') or >> bb.utils.contains('DISTRO_FEATURES', 'luks', True, False, d) else '0'}" >> TI_CORE_INITRAMFS_KERNEL_MODULES ?= "" >> TI_CORE_INITRAMFS_EXTRA_INSTALL ?= "" >