[meta-intel] [PATCH] linux-intel-dev: add recipe

Naveen Saini naveen.kumar.saini at intel.com
Wed May 15 22:04:30 PDT 2019


Builds base from mainline-tracking production kernel.

In addition to intel-common kernel configs from yocto-kernel-cache, this
also includes security.scc feature which enables a set of configs with
the aim of reducing the kernel attack surface and/or of performing
additional checks and validation of commonly used structures in kernel.

Signed-off-by: Naveen Saini <naveen.kumar.saini at intel.com>
---
 recipes-kernel/linux/linux-intel-dev.bb | 35 +++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 recipes-kernel/linux/linux-intel-dev.bb

diff --git a/recipes-kernel/linux/linux-intel-dev.bb b/recipes-kernel/linux/linux-intel-dev.bb
new file mode 100644
index 00000000..d454b606
--- /dev/null
+++ b/recipes-kernel/linux/linux-intel-dev.bb
@@ -0,0 +1,35 @@
+require recipes-kernel/linux/linux-yocto.inc
+require recipes-kernel/linux/meta-intel-compat-kernel.inc
+
+FILESEXTRAPATHS_prepend := "${THISDIR}/linux-intel:"
+
+SRC_URI = " \
+           git://github.com/intel/mainline-tracking.git;protocol=https;name=machine;branch=${KBRANCH}; \
+           git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=${KMETA_BRANCH};destsuffix=${KMETA} \
+           file://0001-menuconfig-mconf-cfg-Allow-specification-of-ncurses-.patch \
+          "
+SRC_URI_append_core2-32-intel-common = " file://disable_skylake_sound.cfg"
+
+KMETA = "kernel-meta"
+KCONF_BSP_AUDIT_LEVEL = "2"
+
+KBRANCH = "base"
+KMETA_BRANCH = "master"
+
+LIC_FILES_CHKSUM = "file://COPYING;md5=bbea815ee2795b2f4230826c0c6b8814"
+
+DEPENDS += "elfutils-native openssl-native util-linux-native"
+
+LINUX_VERSION ?= "5.1.0"
+SRCREV_machine ?= "abcfe412cc5140d20a592965744c050fd3cc3d19"
+SRCREV_meta ?= "ed0395000726df343227e2cc29867757c76c9335"
+
+LINUX_VERSION_EXTENSION ?= "-mainline-tracking-${LINUX_KERNEL_TYPE}"
+PV = "${LINUX_VERSION}+git${SRCPV}"
+
+COMPATIBLE_MACHINE ?= "(intel-corei7-64|intel-core2-32)"
+
+# Functionality flags
+KERNEL_FEATURES_append = " ${KERNEL_EXTRA_FEATURES}"
+KERNEL_FEATURES_append = " ${@bb.utils.contains("TUNE_FEATURES", "mx32", " cfg/x32.scc", "" ,d)}"
+KERNEL_EXTRA_FEATURES ?= "features/netfilter/netfilter.scc features/security/security.scc"
-- 
2.17.0



More information about the meta-intel mailing list