Message ID | 20230130150204.697758-3-Quirin.Gylstorff@siemens.com (mailing list archive) |
---|---|
State | Superseded |
Headers | show |
Series | Encrypt Partition in initramfs | expand |
On 30.01.23 16:02, Quirin Gylstorff wrote: > From: Quirin Gylstorff <quirin.gylstorff@siemens.com> > > Systemd >= 251 is required for systemd-cryptenroll. This version > is part of backports. > > Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com> > --- > conf/distro/debian-bullseye-backports.list | 1 + > .../preferences.bullseye-backports.tpm.conf | 3 +++ > kas/opt/tpm.yml | 18 ++++++++++++++++++ > 3 files changed, 22 insertions(+) > create mode 100644 conf/distro/debian-bullseye-backports.list > create mode 100644 conf/distro/preferences.bullseye-backports.tpm.conf > create mode 100644 kas/opt/tpm.yml > > diff --git a/conf/distro/debian-bullseye-backports.list b/conf/distro/debian-bullseye-backports.list > new file mode 100644 > index 0000000..3a55e4c > --- /dev/null > +++ b/conf/distro/debian-bullseye-backports.list > @@ -0,0 +1 @@ > +deb http://ftp.us.debian.org/debian bullseye-backports main contrib non-free > diff --git a/conf/distro/preferences.bullseye-backports.tpm.conf b/conf/distro/preferences.bullseye-backports.tpm.conf > new file mode 100644 > index 0000000..0905fbf > --- /dev/null > +++ b/conf/distro/preferences.bullseye-backports.tpm.conf > @@ -0,0 +1,3 @@ > +Package: * Please list the package here that you need to pull. Otherwise, we may pull more than desired. > +Pin: release n=bullseye-backports > +Pin-Priority: 801 > diff --git a/kas/opt/tpm.yml b/kas/opt/tpm.yml > new file mode 100644 > index 0000000..03e8e47 > --- /dev/null > +++ b/kas/opt/tpm.yml > @@ -0,0 +1,18 @@ > +# > +# CIP Core, generic profile > +# > +# Copyright (c) Siemens AG, 2022 > +# > +# Authors: > +# Quirin Gylstorff <quirin.gylstorff@siemens.com> > +# > +# SPDX-License-Identifier: MIT > +# > + > +header: > + version: 12 > + > +local_conf_header: > + systemd-cryptenroll: | > + DISTRO_APT_SOURCES_append_bullseye = " conf/distro/debian-bullseye-backports.list" > + DISTRO_APT_PREFERENCES_append_bullseye = " conf/distro/preferences.bullseye-backports.tpm.conf" We still allow buster builds, no? Or will you prevent that later in the series for this feature? Jan
diff --git a/conf/distro/debian-bullseye-backports.list b/conf/distro/debian-bullseye-backports.list new file mode 100644 index 0000000..3a55e4c --- /dev/null +++ b/conf/distro/debian-bullseye-backports.list @@ -0,0 +1 @@ +deb http://ftp.us.debian.org/debian bullseye-backports main contrib non-free diff --git a/conf/distro/preferences.bullseye-backports.tpm.conf b/conf/distro/preferences.bullseye-backports.tpm.conf new file mode 100644 index 0000000..0905fbf --- /dev/null +++ b/conf/distro/preferences.bullseye-backports.tpm.conf @@ -0,0 +1,3 @@ +Package: * +Pin: release n=bullseye-backports +Pin-Priority: 801 diff --git a/kas/opt/tpm.yml b/kas/opt/tpm.yml new file mode 100644 index 0000000..03e8e47 --- /dev/null +++ b/kas/opt/tpm.yml @@ -0,0 +1,18 @@ +# +# CIP Core, generic profile +# +# Copyright (c) Siemens AG, 2022 +# +# Authors: +# Quirin Gylstorff <quirin.gylstorff@siemens.com> +# +# SPDX-License-Identifier: MIT +# + +header: + version: 12 + +local_conf_header: + systemd-cryptenroll: | + DISTRO_APT_SOURCES_append_bullseye = " conf/distro/debian-bullseye-backports.list" + DISTRO_APT_PREFERENCES_append_bullseye = " conf/distro/preferences.bullseye-backports.tpm.conf"