meta-security and DISTRO_FEATURES

meta-security and DISTRO_FEATURES

[Bills, Jason M]

Hi All,

I am getting a warning about meta-security when building:
WARNING: You have included the meta-security layer, but 'security' has 
not been enabled in your DISTRO_FEATURES. Some bbappend files and 
preferred version setting may not take effect. See the meta-security 
README for details on enabling security support.

I checked in the README and it recommends adding 'DISTRO_FEATURES_append 
= " security"' to a config file to enable all the security features.

I did a quick grep on our layers and don't see that added anywhere. 
Does anyone know if this is something that we need or want to enable? 
If so, should we enable it in a common layer or will each individual 
layer decide whether to enable it?

Thanks!
-Jason

Re: meta-security and DISTRO_FEATURES

[Patrick Williams]

[-- Attachment #1: Type: text/plain, Size: 1069 bytes --]

On Fri, Aug 06, 2021 at 09:32:45AM -0600, Bills, Jason M wrote:
> Hi All,
> 
> I am getting a warning about meta-security when building:
> WARNING: You have included the meta-security layer, but 'security' has 
> not been enabled in your DISTRO_FEATURES. Some bbappend files and 
> preferred version setting may not take effect. See the meta-security 
> README for details on enabling security support.
> 
> I checked in the README and it recommends adding 'DISTRO_FEATURES_append 
> = " security"' to a config file to enable all the security features.
> 
> I did a quick grep on our layers and don't see that added anywhere. 
> Does anyone know if this is something that we need or want to enable? 
> If so, should we enable it in a common layer or will each individual 
> layer decide whether to enable it?

There is this pending commit to handle it at a meta-phosphor level.  I think
we're just waiting on a minor spelling fix in the variable name upstream.

https://gerrit.openbmc-project.xyz/c/openbmc/openbmc/+/45322

-- 
Patrick Williams

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: meta-security and DISTRO_FEATURES

[George Liu]

On Fri, Aug 6, 2021 at 11:41 PM Patrick Williams <patrick@stwcx.xyz> wrote:
>
> On Fri, Aug 06, 2021 at 09:32:45AM -0600, Bills, Jason M wrote:
> > Hi All,
> >
> > I am getting a warning about meta-security when building:
> > WARNING: You have included the meta-security layer, but 'security' has
> > not been enabled in your DISTRO_FEATURES. Some bbappend files and
> > preferred version setting may not take effect. See the meta-security
> > README for details on enabling security support.
> >
> > I checked in the README and it recommends adding 'DISTRO_FEATURES_append
> > = " security"' to a config file to enable all the security features.
> >
> > I did a quick grep on our layers and don't see that added anywhere.
> > Does anyone know if this is something that we need or want to enable?
> > If so, should we enable it in a common layer or will each individual
> > layer decide whether to enable it?
>
> There is this pending commit to handle it at a meta-phosphor level.  I think
> we're just waiting on a minor spelling fix in the variable name upstream.
>
> https://gerrit.openbmc-project.xyz/c/openbmc/openbmc/+/45322

Yup, We have pushed a new patch to fix it.
https://lists.openembedded.org/g/openembedded-devel/message/92437

>
> --
> Patrick Williams