[cip-dev][cip-kernel-config][PATCH 0/2] Add options for read-only rootfs

[cip-dev][cip-kernel-config][PATCH 0/2] Add options for read-only rootfs

[Q. Gylstorff]

From: Quirin Gylstorff <quirin.gylstorff@siemens.com>

Add the necessary kernel options for a read-only rootfs with
dm-verity, secure-boot and swupdate + overlay of /etc.

Quirin Gylstorff (2):
  x86/cip_qemu_defconfig: Add options for read-only rootfs
  x86/siemens_ipc227e_defconfig: Add options for read-only rootfs

 4.19.y-cip/x86/cip_qemu_defconfig        | 4 ++++
 4.19.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
 5.10.y-cip/x86/cip_qemu_defconfig        | 4 ++++
 5.10.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
 4 files changed, 16 insertions(+), 2 deletions(-)

-- 
2.30.2

[cip-dev][cip-kernel-config][PATCH 1/2] x86/cip_qemu_defconfig: Add options for read-only rootfs

[Q. Gylstorff]

From: Quirin Gylstorff <quirin.gylstorff@siemens.com>

Add the necessary kernel option to support a read only rootfs
with dm-verity and overlay.

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
---
 4.19.y-cip/x86/cip_qemu_defconfig | 4 ++++
 5.10.y-cip/x86/cip_qemu_defconfig | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/4.19.y-cip/x86/cip_qemu_defconfig b/4.19.y-cip/x86/cip_qemu_defconfig
index 4d29397..521fa52 100644
--- a/4.19.y-cip/x86/cip_qemu_defconfig
+++ b/4.19.y-cip/x86/cip_qemu_defconfig
@@ -302,3 +302,7 @@ CONFIG_PROVIDE_OHCI1394_DMA_INIT=y
 CONFIG_EARLY_PRINTK_DBGP=y
 CONFIG_DEBUG_BOOT_PARAMS=y
 CONFIG_OPTIMIZE_INLINING=y
+CONFIG_DM_VERITY=y
+CONFIG_DM_CRYPT=y
+CONFIG_SQUASHFS=y
+CONFIG_OVERLAY_FS=y
diff --git a/5.10.y-cip/x86/cip_qemu_defconfig b/5.10.y-cip/x86/cip_qemu_defconfig
index 899eab4..42199ca 100644
--- a/5.10.y-cip/x86/cip_qemu_defconfig
+++ b/5.10.y-cip/x86/cip_qemu_defconfig
@@ -286,3 +286,7 @@ CONFIG_BLK_DEV_IO_TRACE=y
 CONFIG_PROVIDE_OHCI1394_DMA_INIT=y
 CONFIG_EARLY_PRINTK_DBGP=y
 CONFIG_DEBUG_BOOT_PARAMS=y
+CONFIG_DM_VERITY=y
+CONFIG_DM_CRYPT=y
+CONFIG_SQUASHFS=y
+CONFIG_OVERLAY_FS=y
-- 
2.30.2

[cip-dev][cip-kernel-config][PATCH 2/2] x86/siemens_ipc227e_defconfig: Add options for read-only rootfs

[Q. Gylstorff]

From: Quirin Gylstorff <quirin.gylstorff@siemens.com>

Add the necessary kernel option to support a read only rootfs
with dm-verity and overlay.

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
---
 4.19.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
 5.10.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/4.19.y-cip/x86/siemens_ipc227e_defconfig b/4.19.y-cip/x86/siemens_ipc227e_defconfig
index 3e1d305..0ad5b7a 100644
--- a/4.19.y-cip/x86/siemens_ipc227e_defconfig
+++ b/4.19.y-cip/x86/siemens_ipc227e_defconfig
@@ -378,7 +378,7 @@ CONFIG_QUOTA=y
 CONFIG_QUOTA_NETLINK_INTERFACE=y
 CONFIG_AUTOFS4_FS=m
 CONFIG_FUSE_FS=m
-CONFIG_OVERLAY_FS=m
+CONFIG_OVERLAY_FS=y
 CONFIG_MSDOS_FS=m
 CONFIG_VFAT_FS=m
 CONFIG_PROC_KCORE=y
@@ -449,3 +449,6 @@ CONFIG_MEMTEST=y
 # CONFIG_X86_VERBOSE_BOOTUP is not set
 CONFIG_EARLY_PRINTK_EFI=y
 CONFIG_OPTIMIZE_INLINING=y
+CONFIG_DM_VERITY=y
+CONFIG_DM_CRYPT=y
+CONFIG_SQUASHFS=y
diff --git a/5.10.y-cip/x86/siemens_ipc227e_defconfig b/5.10.y-cip/x86/siemens_ipc227e_defconfig
index 2ddf145..7f98e4b 100644
--- a/5.10.y-cip/x86/siemens_ipc227e_defconfig
+++ b/5.10.y-cip/x86/siemens_ipc227e_defconfig
@@ -362,7 +362,7 @@ CONFIG_QUOTA=y
 CONFIG_QUOTA_NETLINK_INTERFACE=y
 CONFIG_AUTOFS4_FS=m
 CONFIG_FUSE_FS=m
-CONFIG_OVERLAY_FS=m
+CONFIG_OVERLAY_FS=y
 CONFIG_MSDOS_FS=m
 CONFIG_VFAT_FS=m
 CONFIG_PROC_KCORE=y
@@ -428,3 +428,6 @@ CONFIG_BLK_DEV_IO_TRACE=y
 # CONFIG_X86_VERBOSE_BOOTUP is not set
 CONFIG_TEST_USER_COPY=m
 CONFIG_MEMTEST=y
+CONFIG_DM_VERITY=y
+CONFIG_DM_CRYPT=y
+CONFIG_SQUASHFS=y
-- 
2.30.2

Re: [cip-dev][cip-kernel-config][PATCH 0/2] Add options for read-only rootfs

[Jan Kiszka]

On 12.11.21 17:38, Q. Gylstorff wrote:
> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
> 
> Add the necessary kernel options for a read-only rootfs with
> dm-verity, secure-boot and swupdate + overlay of /etc.
> 
> Quirin Gylstorff (2):
>   x86/cip_qemu_defconfig: Add options for read-only rootfs
>   x86/siemens_ipc227e_defconfig: Add options for read-only rootfs
> 
>  4.19.y-cip/x86/cip_qemu_defconfig        | 4 ++++
>  4.19.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
>  5.10.y-cip/x86/cip_qemu_defconfig        | 4 ++++
>  5.10.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
>  4 files changed, 16 insertions(+), 2 deletions(-)
> 

Ping. Are merge requests preferred for this?

Jan

-- 
Siemens AG, T RDA IOT
Corporate Competence Center Embedded Linux

Re: [cip-dev][cip-kernel-config][PATCH 0/2] Add options for read-only rootfs

[nobuhiro1.iwamatsu]

Hi,

> > Add the necessary kernel options for a read-only rootfs with
> > dm-verity, secure-boot and swupdate + overlay of /etc.
> >
> > Quirin Gylstorff (2):
> >   x86/cip_qemu_defconfig: Add options for read-only rootfs
> >   x86/siemens_ipc227e_defconfig: Add options for read-only rootfs
> >
> >  4.19.y-cip/x86/cip_qemu_defconfig        | 4 ++++
> >  4.19.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
> >  5.10.y-cip/x86/cip_qemu_defconfig        | 4 ++++
> >  5.10.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
> >  4 files changed, 16 insertions(+), 2 deletions(-)
> >
> 
> Ping. Are merge requests preferred for this?
> 

Sorry, reply was too late.
I reviewed this patch,  applied.

Best regards,
  Nobuhiro
________________________________________
差出人: Jan Kiszka <jan.kiszka@siemens.com>
送信日時: 2021年11月24日 16:36
宛先: Q. Gylstorff; cip-dev@lists.cip-project.org; iwamatsu nobuhiro(岩松 信洋 □ＳＷＣ◯ＡＣＴ)
件名: Re: [cip-dev][cip-kernel-config][PATCH 0/2] Add options for read-only rootfs

On 12.11.21 17:38, Q. Gylstorff wrote:
> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
>
> Add the necessary kernel options for a read-only rootfs with
> dm-verity, secure-boot and swupdate + overlay of /etc.
>
> Quirin Gylstorff (2):
>   x86/cip_qemu_defconfig: Add options for read-only rootfs
>   x86/siemens_ipc227e_defconfig: Add options for read-only rootfs
>
>  4.19.y-cip/x86/cip_qemu_defconfig        | 4 ++++
>  4.19.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
>  5.10.y-cip/x86/cip_qemu_defconfig        | 4 ++++
>  5.10.y-cip/x86/siemens_ipc227e_defconfig | 5 ++++-
>  4 files changed, 16 insertions(+), 2 deletions(-)
>

Ping. Are merge requests preferred for this?

Jan

--
Siemens AG, T RDA IOT
Corporate Competence Center Embedded Linux