Fixed
Created: Jul 30, 2023
Updated: Sep 27, 2023
Resolved Date: Aug 29, 2023
Found In Version: 10.23.30.1
Fix Version: 10.23.30.2
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: BSP
When enabling the dm-verity template, the DM_VERITY kernel option isn't enabled by default for the RT kernel. The fix [1] has already been merged into the upstream meta-security layer.
[1] https://git.yoctoproject.org/meta-security/commit/?id=b727a4c94d007805c6827774c52ec11799f6c491
/lpg-build/cdc/fast_prod/WRL10_23/RCPL0001_LX02/wrlinux-10/setup.sh --machines nxp-s32g --templates feature/docker feature/dm-verity --distros wrlinux --dl-layers=1 --accept-eula=yes
source environment-setup-x86_64-wrlinuxsdk-linux
source oe-init-build-env build
echo 'PREFERRED_PROVIDER_virtual/kernel = "linux-yocto-rt"' >> conf/local.conf
echo 'SHARED_IMAGE_BASE = "/net/pek-lpgtest7408/buildarea1/SharedImage"
FIRMWARE_DIR_BASE = "${SHARED_IMAGE_BASE}/wr-bsp-images/nxp-s32g/firmwares"
HSE_LOCAL_FIRMWARE_DIR = "${FIRMWARE_DIR_BASE}/hse"
HSE_FW_VERSION_S32G2 = "0.1.0.5"
HSE_FW_VERSION_S32G3 = "0.2.16.1"
HSE_FW_NAME_S32G2 = "s32g2xx_hse_fw_0.1.0_1.0.5_pb220413.bin.pink"
HSE_FW_NAME_S32G3 = "rev1.0_s32g3xx_hse_fw_0.20.0_2.16.1_pb221011.bin.pink"
LLCE_LOCAL_FIRMWARE_DIR = "${FIRMWARE_DIR_BASE}/llce/1.0.6/s32g2"
LLCE_LOCAL_FIRMWARE_DIR_S32G3 = "${FIRMWARE_DIR_BASE}/llce/1.0.6/s32g3"
IPCF_M7_APP_BIN_DIR = "${FIRMWARE_DIR_BASE}/ipcf/4.8"
PFE_LOCAL_FIRMWARE_DIR = "${FIRMWARE_DIR_BASE}/pfe/1.6.0"
WRL_RECIPES:wr-nxp-s32g += "llce"
IMAGE_INSTALL:append = " llce ipc-shm pkcs11-hse pkcs11-hse-examples pfe pfe-slave libfci-cli"
S32G_SOC_VARIANT ?= "s32g2"' >> conf/local.conf
bitbake wrlinux-image-std
