On 5/9/23 14:19, Stefan Berger wrote:
On 5/9/23 14:11, Jose Quaresma wrote:
CONFIG_SYSTEM_TRUSTED_KEYS=
Unfortunately this is not enough because in the full patchset you are
overriding the do_configure task
on meta-integrity/recipes-kernel/linux/linux_ima.inc and this file is included
in every recipe that follies the
pattern starting by linux- (recipes-kernel/linux/linux-%.bbappend).
You are referring tho this here?
do_configure() {
sed -i
"s|^CONFIG_SYSTEM_TRUSTED_KEYS=.*|CONFIG_SYSTEM_TRUSTED_KEYS=\"${IMA_EVM_ROOT_CA}\"|"
.config
}
You are saying that this deactivates some other do_configure's ? If this is the
case, what would be the right syntax to fix it?
Jose, is the correct syntax to use do_configure:append () ? Can you try with
this syntax?
Stefan
It's a no-op on a .config that does not contain the CONFIG_SYSTEM_TRUSTED_KEYS=
option already.=
Stefan
This breaks many recipes like linux-firmware and maybe others.
The root cause of the issue is now on f4f7624d2e but because this patch is too
evasive, maybe everything has to be reversed.
I am now building with the full patchset revert and so far the build is looking
good.
Jose
3 files changed, 44 deletions(-)
delete mode 100644
meta-integrity/recipes-kernel/linux/linux/0001-ovl-Increment-iversion-upon-file-changes.patch
-- 2.34.1
--
Best regards,
José Quaresma
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#59944): https://lists.yoctoproject.org/g/yocto/message/59944
Mute This Topic: https://lists.yoctoproject.org/mt/98789504/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
