b0f8873811
As a result of this change: - fips140 is no longer part of the GKI build but a separate module, so it is not signed (CONFIG_MODULE_SIG_ALL is not set) - GKI images (e.g. system_dlkm image, boot images) etc. are no longer part of the build -- because they are unnecessary. - The build config no longer inherits from build.config.gki.aarch64 directly to avoid building unnecessary system_dklm, boot images, GKI artifacts, etc. Test: BUILD_CONFIG=common/build.config.gki.aarch64.fips140 build/build.sh Test: tools/bazel build //common:fips140_dist Bug: 232083350 Change-Id: I2cb0ee0b55c2a5ea46e6d73ecad4aa97585c1989 Signed-off-by: Yifan Hong <elsk@google.com>
24 lines
728 B
Plaintext
24 lines
728 B
Plaintext
. ${ROOT_DIR}/${KERNEL_DIR}/build.config.common
|
|
. ${ROOT_DIR}/${KERNEL_DIR}/build.config.aarch64
|
|
. ${ROOT_DIR}/${KERNEL_DIR}/build.config.gki
|
|
|
|
FILES="
|
|
crypto/fips140.ko
|
|
"
|
|
|
|
MAKE_GOALS="
|
|
modules
|
|
"
|
|
|
|
if [ "${LTO}" = "none" ]; then
|
|
echo "The FIPS140 module needs LTO to be enabled."
|
|
exit 1
|
|
fi
|
|
|
|
MODULES_ORDER=android/gki_aarch64_fips140_modules
|
|
KERNEL_DIR=common
|
|
|
|
DEFCONFIG=fips140_gki_defconfig
|
|
PRE_DEFCONFIG_CMDS="mkdir -p \${OUT_DIR}/arch/arm64/configs/ && KCONFIG_CONFIG=\${OUT_DIR}/arch/arm64/configs/${DEFCONFIG} ${ROOT_DIR}/${KERNEL_DIR}/scripts/kconfig/merge_config.sh -m -r ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/gki_defconfig ${ROOT_DIR}/${KERNEL_DIR}/arch/arm64/configs/fips140_gki.fragment"
|
|
POST_DEFCONFIG_CMDS=""
|