ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-24 07:06:42 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
patch-failure-pr
heads/modules/mbedtls

21 lines
497 B
Plaintext
Raw Permalink Normal View History

Build time configuration for startup scripts and modules. This addresses multiple issues: * Issue #63: initrd is build fresh each time, so tracked files do not matter. * Issue #144: build time configuration * Issue #123: allows us to customize the startup experience * Issue #122: manual start-xen will go away * Issue #25: tpmtotp PCRs are updated after reading the secret * Issue #16: insmod now meaures modules
2017-03-31 15:18:46 +00:00
modules-$(CONFIG_MBEDTLS) += mbedtls
porting Makefile to use a modular build system for each package
2016-08-02 23:25:47 +00:00
bump mbedssl version to 2.4.2
2017-03-27 10:41:13 +00:00
mbedtls_version := 2.4.2
Download and build almost all dependencies. As part of issue #1, we should build all libraries and programs that we deploy into the Heads initrd. This modifies the module configurations for all of them to install into heads/install so that we can build against them. Add dmsetup, cryptsetup and veritysetup (issue #46). Build gpgv 1.4 as a standalone tool (issue #23). Modify populate-lib to use the install directory by setting LD_LIBRARY_PATH (issue #35).
2016-12-28 17:45:12 +00:00
mbedtls_dir := mbedtls-$(mbedtls_version)
porting Makefile to use a modular build system for each package
2016-08-02 23:25:47 +00:00
mbedtls_tar := mbedtls-$(mbedtls_version)-gpl.tgz
correct path for mbedtls package
2016-08-03 03:25:34 +00:00
mbedtls_url := https://tls.mbed.org/download/$(mbedtls_tar)
bump mbedssl version to 2.4.2
2017-03-27 10:41:13 +00:00
mbedtls_hash := d01f2d5586a52055329d194d909103f445bd2d0b6b2b5f1c830fbf828ac6299f
porting Makefile to use a modular build system for each package
2016-08-02 23:25:47 +00:00
Remove populate-lib, rework libraries and kernel module installation. The populate-lib program was buggy on some systems and could accidentally introduce unwanted libraries into the initrd. The Makefile now uses the modules' $(module_libraries) variable to select which libraries should be installed into the initrd. Kernel modules are now stripped and installed using a similar system.
2017-03-29 19:15:03 +00:00
mbedtls_libraries := library/libmbedcrypto.so.0
improve library/binary handling in building initrd (issue #21)
2016-09-10 21:36:36 +00:00
porting Makefile to use a modular build system for each package
2016-08-02 23:25:47 +00:00
mbedtls_configure :=
Remove populate-lib, rework libraries and kernel module installation. The populate-lib program was buggy on some systems and could accidentally introduce unwanted libraries into the initrd. The Makefile now uses the modules' $(module_libraries) variable to select which libraries should be installed into the initrd. Kernel modules are now stripped and installed using a similar system.
2017-03-29 19:15:03 +00:00
Build initrd tools with musl-libc (issue #77). This adds compilations modules for musl-libc and kernel-headers. The entire initrd (busybox, cryptsetup, gpgv, kexec, etc) can be built with the much smaller libc and it appears to work with chroot. Library paths are not set correctly and files are installed into heads/install to make them accessible to other modules. This prevents the initrd from working without manual fixup; need to fix before merging into master. Build times have gone up since everything is being rebuilt more often for some reason.
2016-12-29 23:23:08 +00:00
mbedtls_target := \
SHARED=1 \
DESTDIR=$(INSTALL) \
Define $(CROSS_TOOLS) to ensure reproducible builds (issue #173) Each of the submodule configuration files defined a subset of the cross compiler tools that it used and many were picking up the system `ar`, `nm`, `strip, `ld`, etc. They all now use a `Makefile` macro that defines the path to the proper cross compiler tools. For ones that need the tools, but not the musl-libc gcc, there is $(CROSS_TOOLS_NOCC) that is all of them without gcc. This is for musl-libc itself, as well as xen and the Linux kernel.
2017-04-08 17:23:34 +00:00
$(CROSS_TOOLS) \
limit parallel make load (issue #131)
2017-03-21 18:29:07 +00:00
$(MAKE_JOBS) \
Build initrd tools with musl-libc (issue #77). This adds compilations modules for musl-libc and kernel-headers. The entire initrd (busybox, cryptsetup, gpgv, kexec, etc) can be built with the much smaller libc and it appears to work with chroot. Library paths are not set correctly and files are installed into heads/install to make them accessible to other modules. This prevents the initrd from working without manual fixup; need to fix before merging into master. Build times have gone up since everything is being rebuilt more often for some reason.
2016-12-29 23:23:08 +00:00
install
mbedtls_depends := $(musl_dep)
Reference in New Issue Copy Permalink