ExternalVendorCode/heads
1
0
Fork 0
mirror of https://github.com/linuxboot/heads.git synced 2024-12-18 20:47:55 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
fa0f90cbec
heads/modules/mbedtls

22 lines
526 B
Makefile
Raw Normal View History

Build time configuration for startup scripts and modules. This addresses multiple issues: * Issue #63: initrd is build fresh each time, so tracked files do not matter. * Issue #144: build time configuration * Issue #123: allows us to customize the startup experience * Issue #122: manual start-xen will go away * Issue #25: tpmtotp PCRs are updated after reading the secret * Issue #16: insmod now meaures modules
2017-03-31 15:18:46 +00:00
modules-$(CONFIG_MBEDTLS) += mbedtls
porting Makefile to use a modular build system for each package
2016-08-02 23:25:47 +00:00
bump mbedssl version to 2.4.2
2017-03-27 10:41:13 +00:00
mbedtls_version := 2.4.2
Download and build almost all dependencies. As part of issue #1, we should build all libraries and programs that we deploy into the Heads initrd. This modifies the module configurations for all of them to install into heads/install so that we can build against them. Add dmsetup, cryptsetup and veritysetup (issue #46). Build gpgv 1.4 as a standalone tool (issue #23). Modify populate-lib to use the install directory by setting LD_LIBRARY_PATH (issue #35).
2016-12-28 17:45:12 +00:00
mbedtls_dir := mbedtls-$(mbedtls_version)
modules/mbetls: move dl from tls.mbed.org to github - licensing change to APACHE 2.0 - sha256sum changed too TODO: bump version to 3.1+, not trivial.
2022-06-17 14:13:26 +00:00
mbedtls_tar := mbedtls-$(mbedtls_version).tar.gz
mbedtls_url := https://github.com/ARMmbed/mbedtls/archive/$(mbedtls_tar)
mbedtls_hash := b7afab6a0f86e29c6055848b70d183c4e2531cb0ec955b66c0e4e1b7e4954bf4
porting Makefile to use a modular build system for each package
2016-08-02 23:25:47 +00:00
Remove populate-lib, rework libraries and kernel module installation. The populate-lib program was buggy on some systems and could accidentally introduce unwanted libraries into the initrd. The Makefile now uses the modules' $(module_libraries) variable to select which libraries should be installed into the initrd. Kernel modules are now stripped and installed using a similar system.
2017-03-29 19:15:03 +00:00
mbedtls_libraries := library/libmbedcrypto.so.0
improve library/binary handling in building initrd (issue #21)
2016-09-10 21:36:36 +00:00
porting Makefile to use a modular build system for each package
2016-08-02 23:25:47 +00:00
mbedtls_configure :=
Remove populate-lib, rework libraries and kernel module installation. The populate-lib program was buggy on some systems and could accidentally introduce unwanted libraries into the initrd. The Makefile now uses the modules' $(module_libraries) variable to select which libraries should be installed into the initrd. Kernel modules are now stripped and installed using a similar system.
2017-03-29 19:15:03 +00:00
Build initrd tools with musl-libc (issue #77). This adds compilations modules for musl-libc and kernel-headers. The entire initrd (busybox, cryptsetup, gpgv, kexec, etc) can be built with the much smaller libc and it appears to work with chroot. Library paths are not set correctly and files are installed into heads/install to make them accessible to other modules. This prevents the initrd from working without manual fixup; need to fix before merging into master. Build times have gone up since everything is being rebuilt more often for some reason.
2016-12-29 23:23:08 +00:00
mbedtls_target := \
SHARED=1 \
Pass -O3 and -O2 (optimize for speed) to -Os (Optimize for space) Adresses @easrentai suggestion to pass modules build optimization for space here: #590 (comment) - Uniformized module's $(CROSS_TOOLS) being passed as environment variable, prior of ./configure call Doesn't work for: - busybox (HOSTCXXFLAGS="-Os" attempted prior of ./configure call) - zlib (CFLAGS="-Os" attempted prior of ./configure call) - npth (CFLAGS="-Os" attempted prior of ./configure call)
2023-03-01 16:12:46 +00:00
CFLAGS="-Os" \
Build initrd tools with musl-libc (issue #77). This adds compilations modules for musl-libc and kernel-headers. The entire initrd (busybox, cryptsetup, gpgv, kexec, etc) can be built with the much smaller libc and it appears to work with chroot. Library paths are not set correctly and files are installed into heads/install to make them accessible to other modules. This prevents the initrd from working without manual fixup; need to fix before merging into master. Build times have gone up since everything is being rebuilt more often for some reason.
2016-12-29 23:23:08 +00:00
DESTDIR=$(INSTALL) \
Define $(CROSS_TOOLS) to ensure reproducible builds (issue #173) Each of the submodule configuration files defined a subset of the cross compiler tools that it used and many were picking up the system `ar`, `nm`, `strip, `ld`, etc. They all now use a `Makefile` macro that defines the path to the proper cross compiler tools. For ones that need the tools, but not the musl-libc gcc, there is $(CROSS_TOOLS_NOCC) that is all of them without gcc. This is for musl-libc itself, as well as xen and the Linux kernel.
2017-04-08 17:23:34 +00:00
$(CROSS_TOOLS) \
limit parallel make load (issue #131)
2017-03-21 18:29:07 +00:00
$(MAKE_JOBS) \
Build initrd tools with musl-libc (issue #77). This adds compilations modules for musl-libc and kernel-headers. The entire initrd (busybox, cryptsetup, gpgv, kexec, etc) can be built with the much smaller libc and it appears to work with chroot. Library paths are not set correctly and files are installed into heads/install to make them accessible to other modules. This prevents the initrd from working without manual fixup; need to fix before merging into master. Build times have gone up since everything is being rebuilt more often for some reason.
2016-12-29 23:23:08 +00:00
install
mbedtls_depends := $(musl_dep)
Reference in New Issue Copy Permalink