|
running application in user mode instead of root
#yocto
Hi, You can use start-stop-daemon command with "--chiud" parameter. Here is an example: https://git.yoctoproject.org/meta-security/tree/meta-parsec/recipes-parsec/parsec-service/files/parsec_init Chee
Hi, You can use start-stop-daemon command with "--chiud" parameter. Here is an example: https://git.yoctoproject.org/meta-security/tree/meta-parsec/recipes-parsec/parsec-service/files/parsec_init Chee
|
By
Anton Antonov
· #57218
·
|
|
[meta-security][PATCH] meta-parsec: Update Parsec runtime tests
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/README.md | 65 +++++++++ meta-parsec/lib/oeqa/runtime/cases/parsec.py | 135 ++++++++++++++++-- .../images/security-parsec-image.bb
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/README.md | 65 +++++++++ meta-parsec/lib/oeqa/runtime/cases/parsec.py | 135 ++++++++++++++++-- .../images/security-parsec-image.bb
|
By
Anton Antonov
· #57182
·
|
|
[meta-security][PATCH] Parsec-service: Fix arm32 build
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../recipes-parsec/parsec-service/parsec-service_1.0.0.bb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/meta-parsec/re
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../recipes-parsec/parsec-service/parsec-service_1.0.0.bb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/meta-parsec/re
|
By
Anton Antonov
· #57154
·
|
|
[meta-parsec][PATCH 3/3] oeqa: add parsec runtime tests
Hi Amir, Thank you very much for adding Parsec runtime testing. I have a few small comments: 1. You defined the security Parsec image without TPM (with packagegroup-security-parsec group) , but in the
Hi Amir, Thank you very much for adding Parsec runtime testing. I have a few small comments: 1. You defined the security Parsec image without TPM (with packagegroup-security-parsec group) , but in the
|
By
Anton Antonov
· #57153
·
|
|
[meta-security][PATCH] Parsec-service: Update installation procedure
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../parsec-service/files/parsec-tmpfiles.conf | 1 + .../parsec-service/parsec-service_1.0.0.bb | 16 +++++++++------- 2 files changed, 10 insert
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../parsec-service/files/parsec-tmpfiles.conf | 1 + .../parsec-service/parsec-service_1.0.0.bb | 16 +++++++++------- 2 files changed, 10 insert
|
By
Anton Antonov
· #57146
·
|
|
[meta-security][PATCH] Upgrade parsec-service to 1.0.0 and parsec-tool to 0.5.2
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/README.md | 36 ++- .../parsec-service/files/systemd.patch | 21 +- .../parsec-service/parsec-service_0.8.1.inc | 246 ---------------
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/README.md | 36 ++- .../parsec-service/files/systemd.patch | 21 +- .../parsec-service/parsec-service_0.8.1.inc | 246 ---------------
|
By
Anton Antonov
· #56684
·
|
|
[meta-security][PATCH] Upgrade parsec-tool to 0.5.1
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/conf/layer.conf | 2 +- ...sec-tool_0.4.0.bb => parsec-tool_0.5.1.bb} | 0 ...c-tool_0.4.0.inc => parsec-tool_0.5.1.inc} | 166 ++++++
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/conf/layer.conf | 2 +- ...sec-tool_0.4.0.bb => parsec-tool_0.5.1.bb} | 0 ...c-tool_0.4.0.inc => parsec-tool_0.5.1.inc} | 166 ++++++
|
By
Anton Antonov
· #56263
·
|
|
[meta-security][PATCH] Parsec service. Update PACKAGECONFIG definitions and README.md
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/README.md | 23 +++++++++++++++---- .../parsec-service/parsec-service_0.8.1.bb | 10 ++++---- 2 files changed, 23 insertions(+), 10 d
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- meta-parsec/README.md | 23 +++++++++++++++---- .../parsec-service/parsec-service_0.8.1.bb | 10 ++++---- 2 files changed, 23 insertions(+), 10 d
|
By
Anton Antonov
· #55120
·
|
|
[meta-security][PATCH] swtpm: update to 0.6.1
This recipe fails because of the wrong format in "PACKAGECONFIG[gnutls] = "--with-gnutls, --without-gnutls, gnutls, gnutls, expect bash tpm2-pkcs11-tools" There should be only four parts in the line s
This recipe fails because of the wrong format in "PACKAGECONFIG[gnutls] = "--with-gnutls, --without-gnutls, gnutls, gnutls, expect bash tpm2-pkcs11-tools" There should be only four parts in the line s
|
By
Anton Antonov
· #54905
·
|
|
[meta-security][PATCH] Upgrade parsec-service 0.8.1 and parsec-tool 0.4.0
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../parsec-service/files/cryptoki.patch | 18 -- .../parsec-service/parsec-service_0.7.0.inc | 147 ----------- ...rvice_0.7.0.bb => parsec-servi
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../parsec-service/files/cryptoki.patch | 18 -- .../parsec-service/parsec-service_0.7.0.inc | 147 ----------- ...rvice_0.7.0.bb => parsec-servi
|
By
Anton Antonov
· #54881
·
|
|
[meta-security][PATCH] Do not use clang toolchain in Parsec recipes
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../recipes-parsec/parsec-service/parsec-service_0.7.0.bb | 3 +-- meta-parsec/recipes-parsec/parsec-tool/parsec-tool_0.3.0.bb | 2 -- 2 files ch
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../recipes-parsec/parsec-service/parsec-service_0.7.0.bb | 3 +-- meta-parsec/recipes-parsec/parsec-tool/parsec-tool_0.3.0.bb | 2 -- 2 files ch
|
By
Anton Antonov
· #54125
·
|
|
[meta-raspberrypi] Booting a Raspberry Pi 4 using PXE
I don't know what exactly you mean by "whenever the Raspi is booting over the network". When a machine boots from network (i,e. using DHCP/BOOTP) then usually DHCP server points to, for example, a TFT
I don't know what exactly you mean by "whenever the Raspi is booting over the network". When a machine boots from network (i,e. using DHCP/BOOTP) then usually DHCP server points to, for example, a TFT
|
By
Anton Antonov
· #53393
·
|
|
#yocto llvm support
#yocto
Hi Steven, I used meta-clang in my recipes and I noticed that: 1. The current release of poky uses LLVM v11.1.0 by default (poky/meta/recipes-devtools/llvm/llvm_git.bb) 2. Meta-clang requires LLVM v12
Hi Steven, I used meta-clang in my recipes and I noticed that: 1. The current release of poky uses LLVM v11.1.0 by default (poky/meta/recipes-devtools/llvm/llvm_git.bb) 2. Meta-clang requires LLVM v12
|
By
Anton Antonov
· #53192
·
|
|
[meta-security][PATCH] gitlab-ci: Move all parsec builds into a separate job
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .gitlab-ci.yml | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index f673ef6..
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .gitlab-ci.yml | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index f673ef6..
|
By
Anton Antonov
· #53124
·
|
|
[meta-security][PATCH] Clearly define clang toolchain in Parsec recipes
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../recipes-parsec/parsec-service/parsec-service_0.7.0.bb | 4 ++-- meta-parsec/recipes-parsec/parsec-tool/parsec-tool_0.3.0.bb | 3 +-- 2 files
Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .../recipes-parsec/parsec-service/parsec-service_0.7.0.bb | 4 ++-- meta-parsec/recipes-parsec/parsec-tool/parsec-tool_0.3.0.bb | 3 +-- 2 files
|
By
Anton Antonov
· #53084
·
|
|
[meta-security][PATCH 2/2] Define secure images with parsec-service and parsec-tool included and add the images into gitlab CI
From: Anton Antonov <anton.antonov@...> Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .gitlab-ci.yml | 25 +++++++++++++++++++++++++ kas/kas-security-parsec.yml | 21 ++++++++++++++++++++
From: Anton Antonov <anton.antonov@...> Signed-off-by: Anton Antonov <Anton.Antonov@...> --- .gitlab-ci.yml | 25 +++++++++++++++++++++++++ kas/kas-security-parsec.yml | 21 ++++++++++++++++++++
|
By
Anton Antonov
· #53065
·
|
|
[meta-security][PATCH 1/2] Add meta-parsec layer into meta-security.
From: Anton Antonov <anton.antonov@...> The layer contains recipes for Parsec service version 0.7.0 and parsec-tool version 0.3.0. The Parsec service is built with all supported providers and depl
From: Anton Antonov <anton.antonov@...> The layer contains recipes for Parsec service version 0.7.0 and parsec-tool version 0.3.0. The Parsec service is built with all supported providers and depl
|
By
Anton Antonov
· #53064
·
|
|
[meta-security][PATCH] Use libest "main" branch instead of "master".
This patch fixes the issue: WARNING: libest-3.2.0-r0 do_fetch: Failed to fetch URL git://github.com/cisco/libest, attempting MIRRORS if available ERROR: libest-3.2.0-r0 do_fetch: Fetcher failure: Unab
This patch fixes the issue: WARNING: libest-3.2.0-r0 do_fetch: Failed to fetch URL git://github.com/cisco/libest, attempting MIRRORS if available ERROR: libest-3.2.0-r0 do_fetch: Fetcher failure: Unab
|
By
Anton Antonov
· #53049
·
|