Transparent user permissions using devcontainers

Requirements Lets say our docker image/devcontainer setup has the following requirements: a default username - user - that can be used by all host users user must have permissions to modify the local project files within the container, without modifying the host files ownership. user must have sudo access user must have passwordless sudo access…

Read the full article

Yocto rootfs overlay

Use the ROOTFS_POSTPROCESS_COMMAND to specify a list of functions to call once the OpenEmbedded build system has created the root filesystem. Create a rootfs/ directory in the image recipe directory.…

Read the full article

Yocto MULTICONFIG recipe control

Running tasks using bitbake: Run task on specific multiconfig: bitbake mc:<config>:<recipe> -c cleanall bitbake mc:<config>:<recipe> -c configure `bitbake mc:: -e | grep ^BB_CURRENT_MC=`` Run task on multiconfig and default config (only one target can be used with the –environment option): bitbake mc:<config>:<recipe> <recipe> -c cleanall bitbake mc:<config>:<recipe> <recipe> -c configure Testing the current multiconfig within…

Read the full article

EL2 virtualization on Zynq Ultrascale+ notes

Exception Levels: Execution States: Security State Service Call Routing: Hypervisor mode executes at EL2 in the AArch32 state. EL2 is implemented only in a non-secure state, to support guest operating system management. EL2 virtualization provides: virtual values for the contents of a small number of identification registers traps for EL2 exceptions (a hypervisor might be…

Read the full article

Yocto Tasks

Create BSP layer with three machines. Each uses a common recipe that echos "hello from $MACHINE". Create a custom distribution layer with a mutilconfig build Set the local.conf to use the multiconfig build and save the template configuration

Linux IMA notes

Glossary IMA Integrity Measurement Architecture, responsible for calculating the hashes of files and programs before they are loaded, and supports reporting on the hashes and validate if they adhere to a predefined list. TCB Trusted Computing Base, a set of all hardware, firmware, and/or software components that are critical to the security of a computer…

Read the full article

Ultrascale+ PL Full/Partial configuration

Using Processor Configuration Access Port (PCAP) Device tree overlays are not supported by Xilinx DTG and must be hand-crafted Kernel configuration is required Note, partial reconfiguration of the PL regions requires partioning of the bitstream into blocks so that they can be replaced as part of a higher level bitstream design. As far as I…

Read the full article

Xilinx Yocto reading list

Performance Local shared download/sstate caches. Site shared download mirrors. hash equivelance sstate server. https://www.thegoodpenguin.co.uk/blog/improving-yocto-build-time/ Secureboot Susbsystem Use Secure Boot Features to Protect Your Design Zynq UltraScale+ MPSoC Software Developer Guide -> Security Features Zynq UltraScale+ MPSoC Embedded Design Tutorial » Boot and Configuration ARM Trusted Firmware Docs Xilinx ATF Development Workflow eSDK PetaLinux PetaLinux vs…

Read the full article