On Wed, Mar 18, 2026 at 08:27:32PM +0530, Shiva Tripathi wrote: > Register dynamic-layers/security in layer.conf to conditionally > build LUKS encryption support when meta-security layer is present. > > Update ti-core-initramfs.inc to auto-enable initramfs generation > when DISTRO_FEATURES contains 'luks'. > > Signed-off-by: Shiva Tripathi <[email protected]> > --- > meta-ti-bsp/conf/layer.conf | 2 ++ > meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc | 2 +- > 2 files changed, 3 insertions(+), 1 deletion(-) > > diff --git a/meta-ti-bsp/conf/layer.conf b/meta-ti-bsp/conf/layer.conf > index f78da573..ce2883ac 100644 > --- a/meta-ti-bsp/conf/layer.conf > +++ b/meta-ti-bsp/conf/layer.conf > @@ -24,6 +24,8 @@ LAYERRECOMMENDS_meta-ti-bsp = " \ > > BBFILES_DYNAMIC += " \ > > openembedded-layer:${LAYERDIR}/dynamic-layers/openembedded-layer/recipes*/*/*.bbappend > \ > + security:${LAYERDIR}/dynamic-layers/security/recipes*/*/*.bb \ > + security:${LAYERDIR}/dynamic-layers/security/recipes*/*/*.bbappend \
As I've previously mentioned, TPM components currently are provided by multiple layers: 1. meta-security/meta-tpm - a community set of layers, backed by YP, active 2. meta-secure-core/meta-tpm2 - WindRiver vendor set of layers, active 3. meta-measured - personal layer, no longer active for 4 years Just to note that meta-arm already sets up dynamic-layer with own bbappend fixes for #2 meta-secure-core/meta-tpm2: https://git.yoctoproject.org/meta-arm/tree/meta-arm/dynamic-layers/meta-tpm2/recipes-tpm/tpm2-tools But I'm fine for meta-ti to go with #1 meta-security/meta-tpm. That said - have you tested your change? I'm afraid it won't work. You are only setting up meta-security, which is a top-level layer, parsing only recipes*/*/*.bb and recipes*/*/*.bbappend - please note that TPM recipes reside in meta-tpm sub-layer called "tpm-layer": https://git.yoctoproject.org/meta-security/tree/meta-tpm/conf/layer.conf > " > > SIGGEN_EXCLUDERECIPES_ABISAFE += " \ > diff --git a/meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc > b/meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc > index 9d3cc612..15c05e04 100644 > --- a/meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc > +++ b/meta-ti-bsp/conf/machine/include/ti-core-initramfs.inc > @@ -5,7 +5,7 @@ > # TI_CORE_INITRAMFS_ENABLED = "0" > # > > #------------------------------------------------------------------------------ > -TI_CORE_INITRAMFS_ENABLED ?= "${@ '1' if > d.getVar('TI_CORE_INITRAMFS_KERNEL_MODULES') or > d.getVar('TI_CORE_INITRAMFS_EXTRA_INSTALL') else '0'}" > +TI_CORE_INITRAMFS_ENABLED ?= "${@ '1' if > d.getVar('TI_CORE_INITRAMFS_KERNEL_MODULES') or > d.getVar('TI_CORE_INITRAMFS_EXTRA_INSTALL') or > bb.utils.contains('DISTRO_FEATURES', 'luks', True, False, d) else '0'}" > > TI_CORE_INITRAMFS_KERNEL_MODULES ?= "" > TI_CORE_INITRAMFS_EXTRA_INSTALL ?= "" > -- > 2.34.1
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#19767): https://lists.yoctoproject.org/g/meta-ti/message/19767 Mute This Topic: https://lists.yoctoproject.org/mt/118384102/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/meta-ti/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
