tree 73933744f85c31c5a07194de4ee862d646ded40c
parent 70ea3842793afc4c641fd88b5e2231d69044818f
author Damian Wrobel <dwrobel@ertelnet.rybnik.pl> 1686144287 +0200
committer Simon Chung <simon.chung@rdkcentral.com> 1694123331 +0100

RDKCOM-4122: RDKDEV-774 Add support for DAC-sec distro feature

Adds support for "DAC-sec" distro feature in rdkservices
allowing encrypted containers to be used.
- Adds new PACKAGECONFIG[ocicontainersec] which allows
  OCIContainer plugin to support dm-verity[1] based
  encrypted bundles. It uses OMI[2] service to mount
  encrypted bundles.
  Note: PACKAGECONFIG[ocicontainersec] requires
        PACKAGECONFIG[ocicontainer] to be enabled as well.
- Adds support for "DAC-sec" distro feature.
  Note: "DAC-sec" distro feature requires "DOBBY_CONTAINERS"
  distro feature to be enabled as well. When "DAC-sec" is
  enabled it checks if the "DOBBY_CONTAINERS" feature has been
  enabled and generates an error if it is not the case.
  In other words having enabled:
    DISTRO_FEATURES_append=" DOBBY_CONTAINERS DAC-sec"
  makes sure that both:
    PACKAGECONFIG[ocicontainer] and
    PACKAGECONFIG[ocicontainersec]
  gets enabled.
[1] https://docs.kernel.org/admin-guide/device-mapper/verity.html
[2] https://code.rdkcentral.com/r/plugins/gitiles/rdk/components/generic/rdk-oe/meta-cmf/+/refs/heads/rdk-next/recipes-support/omi/omi.bb
Signed-off-by: Damian Wrobel <dwrobel.contractor@libertyglobal.com>
Signed-off-by: Damian Wrobel <dwrobel@ertelnet.rybnik.pl>

Reason for change: RDKDEV-774 Add support for DAC-sec distro feature
Test Procedure: None.
Risks: Low.

(cherry picked from commit 773cf91b5057e868bacfae3757490093e65b583d)
Change-Id: Ib04ca8a9e1476b5eee5abe57d40ee136d22cd933
(cherry picked from commit 646dc7bee67d2943bb7c7479b70bf3df70032f3c)