0.1 Secureboot Enablement
* Working on Key in a separte repo.
* Need to have a different repo/storage
to storage keys without changing any code.
-
* Scott is creating the git and manifest setup. Fix up the meta data in control file, and send that back to LiZhu.
* One option is to interface with the concept
of Vault.
* Sent the checksum into the Vault to get
sign. and the key is always in the Vault.
* Put the public key into the public key
ring.
* Level of indirection, to put the signing
method(s) behind an API.
* AI: to invite DevSecOPs team from Studio
side to discuss Vault's implementation. (lwang8 to invite Yasin) [Done]
0.2 ISO size bigginer than 4G
with OOT driver may need to include the
kernel source/debug package that will allow OOT tree driver to be built on customer target.
* This will add the ISO size back up to greater
than 4G.
* Extension to the ISO build standard, 9660,
for longer file names, addresses the daisy chain of the ISO for larger archieve.
* AI: need to investigate the "ISO daisy
chain extension of another 4G, and tooling needs. Need to createa story board ticket.
0.3 Kernel Live Patching Integration with the
build system
* start to look into the requirements of
integration of feature.
0.4 STX tree udpate
- *
Built a temp, and failure to STX8 docker images due to invalid tag.
0.5 CentOS7 on main (master) branch build
* Build has stopped/disabled on Feb 7.
0.6 Initramfs will changed for new driver updates
* initramfs should *only* be updated if it
needs modifications to gain access to the rootfs. This will not mean that it never gets updated, but it will be rare.
3. Open Request for help
- * Raspberry
Pi support as Edge.
- * AI:
Mark to reply to the thread and investigate further.