Re: [yocto] [meta-security][PATCH 00/10] move tpm into its own layer

2017-05-10 Thread akuster



On 05/10/2017 12:46 AM, Dominig ar Foll (Intel Open Source) wrote:

Armin,

very interesting move. Could you tell us where is located your git repo ?

http://git.yoctoproject.org/cgit/cgit.cgi/meta-security/

currently the changes are in master-next

- armin

Regards

Dominig

Le 09/05/2017 à 16:46, Armin Kuster a écrit :

tpm recipes copied as-is

This was done to allow inclusion of TPM components independent of the rest of 
the layer.
minimizes layerdepends

fixed incorrect use of DISTRO_FEATURES

Updated tpm kernel configs to newer version

added a few new packagegroups

Armin Kuster (10):
   tpm: move to a sub layer
   change tpm from distro to machine feature
   meta-tpm: add base package group as was in meta-security
   packagegroup: remove tpm components
   tpm packagegroups: split into logical units
   tpm-i2c: some systems us i2c TPM
   kernel tpm rework
   tpm-image: used for testing for now.
   linux-stable: fix module selections
   tpm2: package groups fixes

  meta-tpm/README|  0
  meta-tpm/conf/layer.conf   | 13 ++
  meta-tpm/recipes-core/images/security-tpm-image.bb | 19 ++
  .../packagegroup/packagegroup-security-tpm-i2c.bb  | 19 ++
  .../packagegroup/packagegroup-security-tpm.bb  | 29 ++
  .../packagegroup/packagegroup-security-tpm2.bb | 18 ++
  .../packagegroup/packagegroup-security-vtpm.bb | 14 +++
  meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg  |  8 ++
  meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc  |  3 +++
  meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg |  6 +
  meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc |  3 +++
  .../recipes-kernel/linux/linux-yocto/tpm_i2c.cfg   | 15 +++
  .../recipes-kernel/linux/linux-yocto/tpm_i2c.scc   |  6 +
  .../recipes-kernel/linux/linux-yocto/tpm_x86.cfg   |  4 +++
  meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg |  5 
  meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc |  4 +++
  .../recipes-kernel/linux/linux-yocto_4.%.bbappend  | 17 +
  .../Convert-another-vdprintf-to-dprintf.patch  |  0
  .../files/Use-format-s-for-call-to-dprintf.patch   |  0
  .../libtpm/files/fix_signed_issue.patch|  0
  .../recipes-tpm}/libtpm/libtpm_1.0.bb  |  0
  .../recipes-tpm}/swtpm/files/fix_fcntl_h.patch |  0
  .../swtpm/files/fix_lib_search_path.patch  |  0
  .../swtpm/files/fix_signed_issue.patch |  0
  .../recipes-tpm}/swtpm/files/ioctl_h.patch |  0
  .../recipes-tpm}/swtpm/swtpm-wrappers-native.bb|  0
  .../recipes-tpm}/swtpm/swtpm_1.0.bb|  0
  .../tpm-tools/files/tpm-tools-extendpcr.patch  |  0
  .../recipes-tpm}/tpm-tools/tpm-tools_git.bb|  0
  .../recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb  |  0
  .../tpm2.0-tss/tpm2.0-tss/ax_pthread.m4|  0
  .../tpm2.0-tss/fix_musl_select_include.patch   |  0
  .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb  |  0
  .../tpm2simulator/tpm2simulator-native_116.bb  |  0
  ...path-use-POSIX-getpwent-instead-of-getpwe.patch |  0
  .../recipes-tpm}/trousers/files/tcsd.service   |  0
  .../trousers/files/trousers-udev.rules |  0
  .../recipes-tpm}/trousers/files/trousers.init.sh   |  0
  .../recipes-tpm}/trousers/trousers_git.bb  |  0
  recipes-kernel/linux/linux-yocto_4.10.bbappend |  3 ---
  .../packagegroup/packagegroup-core-security.bb | 18 ++
  41 files changed, 185 insertions(+), 19 deletions(-)
  create mode 100644 meta-tpm/README
  create mode 100644 meta-tpm/conf/layer.conf
  create mode 100644 meta-tpm/recipes-core/images/security-tpm-image.bb
  create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
  create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
  create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
  create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc
  create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
  rename {recipes-tpm => 
meta-tpm/recipes-tpm}/libtpm/files/Convert-another-vdprintf-to-dprintf.patch (100%)
  rename {recipes-tpm => 

Re: [yocto] [meta-security][PATCH 00/10] move tpm into its own layer

2017-05-10 Thread Dominig ar Foll (Intel Open Source)

  
  
Armin,
  
  very interesting move. Could you tell us where is located your git
  repo ?
  Regards
  
  Dominig

Le 09/05/2017 à 16:46, Armin Kuster a
  écrit :


  tpm recipes copied as-is

This was done to allow inclusion of TPM components independent of the rest of the layer.
minimizes layerdepends

fixed incorrect use of DISTRO_FEATURES

Updated tpm kernel configs to newer version

added a few new packagegroups

Armin Kuster (10):
  tpm: move to a sub layer
  change tpm from distro to machine feature
  meta-tpm: add base package group as was in meta-security
  packagegroup: remove tpm components
  tpm packagegroups: split into logical units
  tpm-i2c: some systems us i2c TPM
  kernel tpm rework
  tpm-image: used for testing for now.
  linux-stable: fix module selections
  tpm2: package groups fixes

 meta-tpm/README|  0
 meta-tpm/conf/layer.conf   | 13 ++
 meta-tpm/recipes-core/images/security-tpm-image.bb | 19 ++
 .../packagegroup/packagegroup-security-tpm-i2c.bb  | 19 ++
 .../packagegroup/packagegroup-security-tpm.bb  | 29 ++
 .../packagegroup/packagegroup-security-tpm2.bb | 18 ++
 .../packagegroup/packagegroup-security-vtpm.bb | 14 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg  |  8 ++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc  |  3 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg |  6 +
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc |  3 +++
 .../recipes-kernel/linux/linux-yocto/tpm_i2c.cfg   | 15 +++
 .../recipes-kernel/linux/linux-yocto/tpm_i2c.scc   |  6 +
 .../recipes-kernel/linux/linux-yocto/tpm_x86.cfg   |  4 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg |  5 
 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc |  4 +++
 .../recipes-kernel/linux/linux-yocto_4.%.bbappend  | 17 +
 .../Convert-another-vdprintf-to-dprintf.patch  |  0
 .../files/Use-format-s-for-call-to-dprintf.patch   |  0
 .../libtpm/files/fix_signed_issue.patch|  0
 .../recipes-tpm}/libtpm/libtpm_1.0.bb  |  0
 .../recipes-tpm}/swtpm/files/fix_fcntl_h.patch |  0
 .../swtpm/files/fix_lib_search_path.patch  |  0
 .../swtpm/files/fix_signed_issue.patch |  0
 .../recipes-tpm}/swtpm/files/ioctl_h.patch |  0
 .../recipes-tpm}/swtpm/swtpm-wrappers-native.bb|  0
 .../recipes-tpm}/swtpm/swtpm_1.0.bb|  0
 .../tpm-tools/files/tpm-tools-extendpcr.patch  |  0
 .../recipes-tpm}/tpm-tools/tpm-tools_git.bb|  0
 .../recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb  |  0
 .../tpm2.0-tss/tpm2.0-tss/ax_pthread.m4|  0
 .../tpm2.0-tss/fix_musl_select_include.patch   |  0
 .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb  |  0
 .../tpm2simulator/tpm2simulator-native_116.bb  |  0
 ...path-use-POSIX-getpwent-instead-of-getpwe.patch |  0
 .../recipes-tpm}/trousers/files/tcsd.service   |  0
 .../trousers/files/trousers-udev.rules |  0
 .../recipes-tpm}/trousers/files/trousers.init.sh   |  0
 .../recipes-tpm}/trousers/trousers_git.bb  |  0
 recipes-kernel/linux/linux-yocto_4.10.bbappend |  3 ---
 .../packagegroup/packagegroup-core-security.bb | 18 ++
 41 files changed, 185 insertions(+), 19 deletions(-)
 create mode 100644 meta-tpm/README
 create mode 100644 meta-tpm/conf/layer.conf
 create mode 100644 meta-tpm/recipes-core/images/security-tpm-image.bb
 create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
 create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
 create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
 create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
 rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/Convert-another-vdprintf-to-dprintf.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/Use-format-s-for-call-to-dprintf.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/fix_signed_issue.patch (100%)
 rename {recipes-tpm =>