[yocto] Yocto staged builds?

[Burton, Ross]

On Tue, 18 Dec 2018 at 16:07, Edmund Nadolski
<Edmund.Nadolski at microsoft.com> wrote:
> Create and sign binary files (ie kernel, modules, dtb, …).

Kernel modules can be signed.  No idea about DTB.  Also packages can be signed.

> Create fs images from above and sign those.

Depends how you want to sign the image, most likely not hard to implement.

> Create FIT images and sign.

Pass.

Yocto is generally flexible enough that any signing that isn't
currently doesn't wouldn't be too difficult to add.

Ross