Skip to content

Commit

Permalink
balena-image-bootloader-initramfs: add modules needed for secure boot
Browse files Browse the repository at this point in the history
The balena bootloader needs to mount encrypted disks to kexec the final
kernel which is stored in the encrypted root partitions.

It also needs to run the data partition expander twice on boot, once in the
balena bootloader that expands the disk, and later on the final
initramfs to expand the file system.

Change-type: patch
Signed-off-by: Alex Gonzalez <alexg@balena.io>
  • Loading branch information
alexgg committed May 3, 2024
1 parent dccf188 commit dfa88cf
Showing 1 changed file with 3 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,9 @@ PACKAGE_INSTALL = " \
initramfs-framework-base \
udev \
"

PACKAGE_INSTALL:append = "${@oe.utils.conditional('SIGN_API','','',' initramfs-module-cryptsetup initramfs-module-resindataexpander',d)}"

BAD_RECOMMENDATIONS += "busybox-syslog"

# Do not pollute the initrd image with rootfs features
Expand Down

0 comments on commit dfa88cf

Please sign in to comment.