dm-verity in multiconfig

dm-verity in multiconfig

Add meta-security to bblayers.conf

 

Add tometa-agl-ic-container/conf/include

DISTRO_FEATURES:append = " integrity" don’t need
DM_VERITY_IMAGE = "agl-instrument-cluster-container-demo"
DM_VERITY_IMAGE_TYPE = "ext4"
IMAGE_CLASSES += "dm-verity-img"
DM_VERITY_IMAGE_DATA_BLOCK_SIZE = "4096"
DM_VERITY_IMAGE_HASH_BLOCK_SIZE = "4096"

 

Add multiconfig

IMAGE_FSTYPES:aglcontainerguest = "container ext4 ext4.verity"

 

Needs

How to wait, copy, and mount dm-verity images.

  • How to wait to compleate dm-verity operations

  • How to copy verity setting from guest image build artifact.

  • How to create mount operation service in host

 

New AGL featurs

agl-verity ?

→ will break agl-verity without agl-ic-container ?

 

How to optional?

if CONTAINR_FEATURE = “verity” set at local.conf, the verity support is enabled?