RDKCOM-4122: RDKDEV-774 Add support for DAC-sec distro feature
Adds support for "DAC-sec" distro feature in rdkservices
allowing encrypted containers to be used.
- Adds new PACKAGECONFIG[ocicontainersec] which allows
OCIContainer plugin to support dm-verity[1] based
encrypted bundles. It uses OMI[2] service to mount
encrypted bundles.
Note: PACKAGECONFIG[ocicontainersec] requires
PACKAGECONFIG[ocicontainer] to be enabled as well.
- Adds support for "DAC-sec" distro feature.
Note: "DAC-sec" distro feature requires "DOBBY_CONTAINERS"
distro feature to be enabled as well. When "DAC-sec" is
enabled it checks if the "DOBBY_CONTAINERS" feature has been
enabled and generates an error if it is not the case.
In other words having enabled:
DISTRO_FEATURES_append=" DOBBY_CONTAINERS DAC-sec"
makes sure that both:
PACKAGECONFIG[ocicontainer] and
PACKAGECONFIG[ocicontainersec]
gets enabled.
[1] https://docs.kernel.org/admin-guide/device-mapper/verity.html
[2] https://code.rdkcentral.com/r/plugins/gitiles/rdk/components/generic/rdk-oe/meta-cmf/+/refs/heads/rdk-next/recipes-support/omi/omi.bb
Signed-off-by: Damian Wrobel <dwrobel.contractor@libertyglobal.com>
Signed-off-by: Damian Wrobel <dwrobel@ertelnet.rybnik.pl>
Reason for change: RDKDEV-774 Add support for DAC-sec distro feature
Test Procedure: None.
Risks: Low.
(cherry picked from commit 773cf91b5057e868bacfae3757490093e65b583d)
Change-Id: Ib04ca8a9e1476b5eee5abe57d40ee136d22cd933
(cherry picked from commit 646dc7bee67d2943bb7c7479b70bf3df70032f3c)
1 file changed
