| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Turn on support for unprivileged user accounts in the Petitboot
environment, including setting up a basic non-root user and group.
The implementation also requires using the agetty package rather than
the busybox getty utility, calling the initial pb-console helper on
login rather than directly, and moving some shell init logic from
Petitboot and into a .shrc script.
If no root password is configured in NVRAM or at runtime then this has
no effect aside from some nicer shell behaviour. Once a password is
configured then most actions in Petitboot will require this password and
the shell runs as a normal user.
Signed-off-by: Samuel Mendoza-Jonas <sam@mendozajonas.com>
|
| |
|
|
|
|
| |
Scan for any available logical volumes on boot.
Signed-off-by: Samuel Mendoza-Jonas <sam@mendozajonas.com>
|
| |
|
|
|
|
|
|
|
|
| |
Add S10udev and S17udevsettle to the overlay to replace the existing
S10udev from buildroot. `udevadm settle` can wait up to 30 seconds which
delays the start of pb-discover and can cause important information to
miss the Petitboot UI. Start pb-discover first and then settle to have
the UI receive all events and bring up devices in the same time.
Signed-off-by: Samuel Mendoza-Jonas <sam@mendozajonas.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
This adds basic support for the Integrity Measurement Subsystem to the
skiroot kernel.
The changes to skiroot_defconfig are the kernel config options to enable IMA
and the basic security subsystem. The values were obtained by running a make
menuconfig, enabling IMA and the Nuvoton TPM driver, running a make defconfig,
then updating skiroot_defconfig with this result.
The changes to /etc/fstab ensure securityfs is mounted at boot.
Signed-off-by: Dave Heller <hellerda@us.ibm.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
This change adds translations for petitboot. We already have the message
catalogues for a bunch of languages, so enable building these into the
final image.
We enable these for firestone and habanero, but there's no reason we
couldn't do this for other languages too.
Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
|
| |
|
|
|
|
|
|
|
|
| |
We don't need a separate tmpfs on /tmp and /run, as we're already
providing a completely in-ram filesystem.
This requires us to override fstab, and device table - these are just
the buildroot standard ones, but with /tmp and /run removed.
Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
|
|
|
We'd like to make some customisations to the overlay, without adding more
delta to the openpower buildroot tree.
This change updates to a buildroot tree that no longer carries the
overlay/ directory, and adds the overlay (and necessary config updates)
to our own op-build tree.
Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
|
