meta-security and DISTRO_FEATURES

[Patrick Williams]

On Fri, Aug 06, 2021 at 09:32:45AM -0600, Bills, Jason M wrote:
> Hi All,
> 
> I am getting a warning about meta-security when building:
> WARNING: You have included the meta-security layer, but 'security' has 
> not been enabled in your DISTRO_FEATURES. Some bbappend files and 
> preferred version setting may not take effect. See the meta-security 
> README for details on enabling security support.
> 
> I checked in the README and it recommends adding 'DISTRO_FEATURES_append 
> = " security"' to a config file to enable all the security features.
> 
> I did a quick grep on our layers and don't see that added anywhere. 
> Does anyone know if this is something that we need or want to enable? 
> If so, should we enable it in a common layer or will each individual 
> layer decide whether to enable it?

There is this pending commit to handle it at a meta-phosphor level.  I think
we're just waiting on a minor spelling fix in the variable name upstream.

https://gerrit.openbmc-project.xyz/c/openbmc/openbmc/+/45322

-- 
Patrick Williams
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.ozlabs.org/pipermail/openbmc/attachments/20210806/fa560169/attachment.sig>