starlingx
/
integ
Code Issues Proposed changes
StarlingX Integration and packaging
1,025 Commits 23 Branches 10 Tags 51 MiB
Shell 34.5%
JavaScript 23.7%
Perl 14.1%
Python 10.1%
C++ 6.4%
Other 11%
Go to file
Scott Little 4761e4f3fa Secure boot no longer working 
Secure Boot's hasn't been tested since July 2018

The principle players in the Secure Boot chain of trust are Shim,
Grub, and the Linux kernel.  All three components have seen multiple
upgrades since the last test.

A new build option has been added to shim, (ENABLE_SHIM_CERT) that
enables/disables the support for an embedded shim key. It defaults
to disabled.  It also controls the generation of a random shim key,
and the build time signing of fallback and MokManager components.
Since we don't want a random shim key (reproducable builds), and we do
signing as a post build step, leaving it disabled seemed like the correct
setting initially... until it's function to disable shim keys entirely
was discovered.

This update reworks the shim patch so that we can embed a prebuilt
shim key, and still have shim key functionality active.

Closes-Bug: 1864245
Change-Id: Ibcb6bcfe3060ce0b3e2c2f3c23908bb7127b0ccd
Signed-off-by: Scott Little <scott.little@windriver.com>
 		2020-02-21 15:59:56 -05:00
base Add support for IPv6 and https to anaconda-preexec 2020-02-10 20:03:52 -05:00
bmc/Redfishtool Upgrade redfishtool to 1.1.0 version 2019-08-14 07:38:23 +00:00
ceph/ceph ceph-init-wrapper: Detect stuck peering OSDs and restart them 2019-11-25 09:37:48 +00:00
config update Barbican admin secret's user/project IDs during bootstrap 2019-11-08 09:51:24 -05:00
database Remove pike/master files 2019-04-03 22:30:59 -04:00
devstack Relocated some packages to repo 'utilities' 2019-09-05 20:31:36 -04:00
doc Update landing pages for docs and release notes: 2020-01-21 16:38:46 -08:00
docker/python-docker/centos Fix socket growth on system application operations 2019-08-09 15:45:35 -04:00
filesystem Relocated some packages to repo 'config-files' 2019-09-05 20:32:09 -04:00
grub Fix pxe boot fail, for incorrect folder access /pxe/EFI/ on controller-0 2019-02-12 05:06:53 +08:00
kernel Upgrade i40e driver to 2.10.19.82 2020-02-14 17:04:11 -05:00
kubernetes Merge "Fix containerd cannot pull image with old registry-token-server" 2020-02-18 14:35:53 +00:00
ldap Relocated some packages to repo 'config-files' 2019-09-05 20:32:09 -04:00
logging/logrotate/centos Relocated some packages to repo 'config-files' 2019-09-05 20:32:09 -04:00
networking Package /etc/default/lldpd as a config file 2019-10-30 16:22:55 -04:00
python Remove python-smartpm from build 2020-01-15 23:39:55 -05:00
releasenotes Update landing pages for docs and release notes: 2020-01-21 16:38:46 -08:00
requests-toolbelt [python2to3] upgrade requests-toolbelt to 0.9.1 version 2019-09-06 09:10:14 +08:00
security Secure boot no longer working 2020-02-21 15:59:56 -05:00
storage-drivers Add hooks for python wheel generation 2018-10-23 10:35:32 -04:00
tools Relocated some packages to repo 'monitoring' 2019-09-05 20:31:52 -04:00
virt Merge "Add back kvm_timer_advance_setup.service" 2019-07-30 20:28:33 +00:00
.gitignore Add Docker Registry Token Server 2019-01-08 11:42:04 -05:00
.gitreview OpenDev Migration Patch 2019-04-19 19:52:31 +00:00
.zuul.yaml Adding job to upload commits to GitHub 2020-02-06 10:50:16 -05:00
CONTRIBUTORS.wrs StarlingX open source release updates 2018-05-31 07:36:35 -07:00
LICENSE StarlingX open source release updates 2018-05-31 07:36:35 -07:00
README.rst Followup opendev cleanup and test jobs 2019-04-21 09:23:19 -05:00
bindep.txt Fix pylint zuul jobs failing due to libvirt-python and pkgconfig 2019-07-04 14:14:39 -05:00
centos_build_layer.cfg Build layering, add layer build config file and srpm and tarball lst 2019-10-21 09:24:22 +08:00
centos_extra_downloads.lst Build layering, add layer build config file and srpm and tarball lst 2019-10-21 09:24:22 +08:00
centos_guest_image.inc i40e Driver Upgrade in support of N3000 on-board NICs 2019-11-19 14:42:12 -05:00
centos_guest_image_rt.inc i40e Driver Upgrade in support of N3000 on-board NICs 2019-11-19 14:42:12 -05:00
centos_iso_image.inc Merge "Revert "Revert "add containerd package for kata container support""" 2020-01-22 01:03:23 +00:00
centos_pkg_dirs Merge "Revert "Revert "add containerd package for kata container support""" 2020-01-22 01:03:23 +00:00
centos_pkg_dirs_installer Config file changes for packages being relocated to repo 'compile' 2019-09-05 20:28:59 -04:00
centos_pkg_dirs_rt i40e Driver Upgrade in support of N3000 on-board NICs 2019-11-19 14:42:12 -05:00
centos_srpms_3rdparties.lst Build layering, add layer build config file and srpm and tarball lst 2019-10-21 09:24:22 +08:00
centos_srpms_centos.lst Update kernel-std patches for kernel upgrade to version 1062.1.2 2020-01-02 06:27:12 +00:00
centos_srpms_centos3rdparties.lst Update kernel-rt patches for kernel upgrade to version 1062.1.2 2019-11-27 12:52:43 +08:00
centos_stable_docker_images.inc Create OVS docker image with version 2.11.0 2019-06-04 02:34:14 +08:00
centos_stable_wheels.inc Add libvirt module to stable wheels for image build 2019-04-04 22:54:04 -04:00
centos_tarball-dl.lst Upgrade i40e driver to 2.10.19.82 2020-02-14 17:04:11 -05:00
distroless_stable_docker_images.inc add intel-gpu-plugin docker image to stable docker image build 2019-07-16 09:48:24 +08:00
pylint.rc Adding a pylint tox and zuul job for stx-integ 2019-01-08 11:14:46 -06:00
test-requirements.txt Add default test framework 2018-06-11 13:45:22 -05:00
tox.ini Update pylint target for python3 and upper constraints 2020-01-28 08:39:12 -06:00

README.rst

integ

StarlingX Integration