Digi
/
meta-digi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fscrypt: include trustfence-fscrypt tool into rootfs 

Add also 'e2fsprogs-tune2fs' to the image, as busybox's version of
tune2fs command does not support setting the "encrypt" feature of the
EXT4 filesystem.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
This commit is contained in:
Mike Engel 2024-05-02 12:21:14 +02:00 committed by Javier Viguera
parent 994906d1de
commit 8a2a1beb08
2 changed files with 22 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
meta-digi-dey/recipes-core/trustfence/trustfence-fscrypt_0.1.bb Normal file
View File

@ -0,0 +1,19 @@
# Copyright (C) 2024 Digi International.
SUMMARY = "Trustfence fscrypt command line tool"
SECTION = "console/tools"
LICENSE = "CLOSED"
TF_FSCRYPT_ARCH = "${TARGET_ARCH}"
TF_FSCRYPT_ARCH:aarch64 = "arm64"
SRC_URI = "${DIGI_PKG_SRC}/${BP}-${TF_FSCRYPT_ARCH}.tar.gz;name=${TARGET_ARCH}"
SRC_URI[aarch64.md5sum] = "68291e8f9180312e5418247335434df0"
SRC_URI[aarch64.sha256sum] = "c6ffa9af67dee848e29bb10ddcbb4debd77323714e5f66f557f5ef4bf7d371f4"
SRC_URI[arm.md5sum] = "0831130450d6f0beeebbb68af9b6af29"
SRC_URI[arm.sha256sum] = "7dee4bbcff21d817bbbc152e904e8091362378446b08ad2d485f373b0da8b83b"
# Needed to resolve dependencies to libteec
RDEPENDS:${PN} += "optee-client"
inherit bin_package

5
meta-digi-dey/recipes-digi/packagegroups/packagegroup-dey-trustfence.bb
View File

@ -1,4 +1,4 @@
# Copyright (C) 2016 Digi International.
# Copyright (C) 2016-2024 Digi International.
SUMMARY = "DEY trustfence packagegroup"
@ -6,5 +6,6 @@ inherit packagegroup
RDEPENDS:${PN} = "\
${@oe.utils.conditional('TRUSTFENCE_CONSOLE_DISABLE', '1', 'auto-serial-console', '', d)} \
${@oe.utils.vartrue('TRUSTFENCE_FILE_BASED_ENCRYPT', 'e2fsprogs-tune2fs trustfence-fscrypt', '', d)} \
"
do_package[vardeps] += "TRUSTFENCE_CONSOLE_DISABLE"
do_package[vardeps] += "TRUSTFENCE_CONSOLE_DISABLE TRUSTFENCE_FILE_BASED_ENCRYPT"