This Yocto layer provides scripts for image manifest generation used for security monitoring and notification, customer support, recipe source mirroring, recipe modifications, demos, etc.

Some of the features are aimed at Timesys customers with active subscriptions. Using these features requires an API Keyfile, which you can learn about setting up from the LinuxLink document here:

https://linuxlink.timesys.com/docs/wiki/engineering/LinuxLink_Key_File

The fastest way to try meta-timesys and its security features is to try dropping it into your existing BSP (clone alongside other layers, add to bblayers.conf). These are instructions to try it from scratch with a pretty minimal Yocto environment.

Although a build is not required to create an image manifest or use the CVE script, BitBake does need to run (to make the manifest), so it is easiest if you adhere to the Yocto system requirements as found here:

http://www.yoctoproject.org/docs/2.4/ref-manual/ref-manual.html#intro-requirements

git clone git://git.yoctoproject.org/poky.git -b rocko
git clone https://github.com/TimesysGit/meta-timesys.git -b rocko

source poky/oe-init-build-env

Follow format of the file, just add meta-timesys after the default poky/meta, etc.

../meta-timesys/scripts/manifest.sh core-image-minimal manifest.json

../meta-timesys/scripts/checkcves.py manifest.json

Steve Bedford <[email protected]>

Ian Campbell <[email protected]>