Commit Graph

21 Commits

Author SHA1 Message Date
Gonzalo Ruiz d065f53ac4 trustfence-tool: update recipe to v2.2
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2018-09-05 15:05:39 +02:00
Gabriel Valcazar f321da6a2c trustfence-tool: modify source name to include target CPU architecture
We now have different tarballs for each CPU architecture we compile for. Also,
add support for the aarch64 tarball.

https://jira.digi.com/browse/DEL-6046

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2018-07-06 13:46:23 +02:00
Jose Diaz de Grenu 7416361505 rocko migration: remove rng-tools
This tool was only needed for old kernels, newer kernels use the hardware
random number generator themselves.

https://jira.digi.com/browse/DEL-5518

Signed-off-by: Jose Diaz de Grenu <Jose.DiazdeGrenu@digi.com>
2018-01-12 15:59:12 +01:00
Arturo Buzarra d76db197e1 initramfs: launch rngd depending on kernel version
Use the kernel version to decide to launch the rngd tool
for kernels previous to v3.17

https://jira.digi.com/browse/DEL-5362
https://jira.digi.com/browse/DEL-5363

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2017-11-28 09:24:34 +01:00
Arturo Buzarra 8c14ae877f meta-digi recipes: adjust machine overrides for new platform
This commit modifies different recipes to support the new platform
ccimx6qpsbc and adapt it to maintain the support to ccimx6sbc.

https://jira.digi.com/browse/DEL-5082

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2017-10-18 09:20:11 +02:00
Sebastian Pastor 56b8cb8dd0 trustfence-tool: update recipe to v2.1
Signed-off-by: Sebastian Pastor <sebastian.pastor@digi.com>
2017-07-05 13:43:28 +02:00
Sebastian Pastor 2a6c4d6e04 trustfence-tool: update recipe to v2.1
Signed-off-by: Sebastian Pastor <sebastian.pastor@digi.com>
2017-07-05 13:43:28 +02:00
Tatiana Leon f510a438df trustfence-initramfs: do not boot non-encrypted rootfs if encryption is enabled
Allowing to boot a non-encrypted rootfs when encryption is enable is a security
hole: if an attacker can somehow write (offline) to the media, he could flash a
custom unencrypted rootfs and break into the system.

If the system is configured to use encryption, only encrypted rootfs will boot.
Trying to boot a non-encrypted rootfs will fail and power off the device.

https://jira.digi.com/browse/DEL-3829

Signed-off-by: Tatiana Leon <tatiana.leon@digi.com>
2017-03-14 19:19:33 +01:00
Tatiana Leon d441f8401e trustfence-initramfs: remove support for encrypted rootfs installation
The recovery ramdisk already contains functionality for encrypted rootfs
installation. The goal is to centralize all this functionality in the recovery
ramdisk.

https://jira.digi.com/browse/DEL-3829

Signed-off-by: Tatiana Leon <tatiana.leon@digi.com>
2017-03-14 19:19:33 +01:00
Javier Viguera e441b6fec5 trustfence-tool: install tool from tarball
Use the static binary from the tarball, which should be common across
different platforms and operating systems.

https://jira.digi.com/browse/DEL-3261

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-11-30 14:51:54 +01:00
Javier Viguera 37b9c9c5e3 trustfence-tool: install tool from local binaries
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-11-23 16:30:34 +01:00
Javier Viguera 55c291e340 trustfence-tool: update checksums
Version: 2.0-g49bafeb

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-11-18 11:07:59 +01:00
Alex Gonzalez 22fe619976 meta-digi-dey: trustfence-initramfs-init: Use printf instead of echos
This is a cosmetic change so that the newline characters are actually
used.

Signed-off-by: Alex Gonzalez <alex.gonzalez@digi.com>
2016-11-17 11:50:02 +01:00
Alex Gonzalez b3e5837cf4 trustfence-initramfs: Extend for the ccimx6ul
https://jira.digi.com/browse/DEL-3173

Signed-off-by: Alex Gonzalez <alex.gonzalez@digi.com>
2016-11-14 18:40:30 +01:00
Javier Viguera 6203b101b6 trustfence-tool: update checksums
Version: 1.0-gd725a21

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-29 10:35:27 +02:00
Javier Viguera ba0834ed88 trustfence-tool: update checksums
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-26 16:47:32 +02:00
Javier Viguera a8bec40bea meta-digi-dey: trustfence: implement encrypted rootfs installation
https://jira.digi.com/browse/DEL-2700

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-26 14:19:26 +02:00
Javier Viguera a8c50c16ea trustfence-initramfs-init: remove cryptsetup from init script
New functionality has been implemented in trustfence-tool application,
so there is no need to call cryptsetup command.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-22 09:50:47 +02:00
Javier Viguera 4ca3aa176a trustfence-initramfs-init: clean mount rootfs warnings
Get filesystem type of rootfs block device and pass it explicitly to the
mount command to clean following warnings on boot:

EXT4-fs (dm-0): couldn't mount as ext3 due to feature incompatibilities
EXT4-fs (dm-0): couldn't mount as ext2 due to feature incompatibilities

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-22 09:50:47 +02:00
Javier Viguera 4dd7d438af meta-digi-dey: new Trustfence initramfs package
This package adds some files needed by the trustfence initramfs and that
are not included in other packages.

https://jira.digi.com/browse/DEL-2278

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-07 17:59:25 +02:00
Javier Viguera 778aade696 meta-digi-dey: new recipe for trustfence-tool binary package
https://jira.digi.com/browse/DEL-2278

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-07 17:58:55 +02:00