* Add security library libseccomp Enable libseccomp to activate seccomp support in HAOS. This will compile systemd and Docker with seccomp support. Note: Traditionally Supervisor required to disable seccomp. This seems no longer to be the case with current Supervisor, but it needs further testing. All containers started by Supervisor get currently started with seccomp disabled. * Enable seccomp in the kernel
134 lines
5.1 KiB
Plaintext
134 lines
5.1 KiB
Plaintext
BR2_arm=y
|
|
BR2_cortex_a7=y
|
|
BR2_ARM_FPU_VFPV4=y
|
|
BR2_DL_DIR="/cache/dl"
|
|
BR2_CCACHE=y
|
|
BR2_CCACHE_DIR="/cache/cc"
|
|
BR2_OPTIMIZE_2=y
|
|
BR2_GLOBAL_PATCH_DIR="$(BR2_EXTERNAL_HASSOS_PATH)/patches $(BR2_EXTERNAL_HASSOS_PATH)/board/raspberrypi/patches"
|
|
BR2_SSP_REGULAR=y
|
|
BR2_TOOLCHAIN_BUILDROOT_GLIBC=y
|
|
BR2_PACKAGE_HOST_LINUX_HEADERS_CUSTOM_6_1=y
|
|
BR2_GCC_VERSION_11_X=y
|
|
BR2_TOOLCHAIN_BUILDROOT_CXX=y
|
|
BR2_GCC_ENABLE_LTO=y
|
|
BR2_TARGET_GENERIC_HOSTNAME="homeassistant"
|
|
BR2_TARGET_GENERIC_ISSUE="Welcome to Home Assistant"
|
|
BR2_INIT_SYSTEMD=y
|
|
# BR2_TARGET_GENERIC_REMOUNT_ROOTFS_RW is not set
|
|
BR2_ROOTFS_OVERLAY="$(BR2_EXTERNAL_HASSOS_PATH)/rootfs-overlay $(BR2_EXTERNAL_HASSOS_PATH)/board/raspberrypi/rootfs-overlay"
|
|
BR2_ROOTFS_POST_BUILD_SCRIPT="$(BR2_EXTERNAL_HASSOS_PATH)/scripts/post-build.sh"
|
|
BR2_ROOTFS_POST_IMAGE_SCRIPT="$(BR2_EXTERNAL_HASSOS_PATH)/scripts/post-image.sh"
|
|
BR2_ROOTFS_POST_SCRIPT_ARGS="$(BR2_EXTERNAL_HASSOS_PATH)/board/raspberrypi/rpi2 $(BR2_EXTERNAL_HASSOS_PATH)/board/raspberrypi/hassos-hook.sh"
|
|
BR2_LINUX_KERNEL=y
|
|
BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
|
|
BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,e9b8fd92399bd707bde31e3464472c1b06f5e2a0)/linux-e9b8fd92399bd707bde31e3464472c1b06f5e2a0.tar.gz"
|
|
BR2_LINUX_KERNEL_DEFCONFIG="bcm2709"
|
|
BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="$(BR2_EXTERNAL_HASSOS_PATH)/kernel/hassos.config $(BR2_EXTERNAL_HASSOS_PATH)/kernel/docker.config $(BR2_EXTERNAL_HASSOS_PATH)/kernel/device-support.config $(BR2_EXTERNAL_HASSOS_PATH)/board/raspberrypi/kernel.config"
|
|
BR2_LINUX_KERNEL_LZ4=y
|
|
BR2_LINUX_KERNEL_DTS_SUPPORT=y
|
|
BR2_LINUX_KERNEL_INTREE_DTS_NAME="bcm2709-rpi-2-b bcm2710-rpi-2-b"
|
|
BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y
|
|
BR2_LINUX_KERNEL_NEEDS_HOST_LIBELF=y
|
|
BR2_PACKAGE_BUSYBOX_CONFIG="$(BR2_EXTERNAL_HASSOS_PATH)/busybox.config"
|
|
BR2_PACKAGE_BUSYBOX_INDIVIDUAL_BINARIES=y
|
|
BR2_PACKAGE_JQ=y
|
|
BR2_PACKAGE_DOSFSTOOLS=y
|
|
BR2_PACKAGE_DOSFSTOOLS_FSCK_FAT=y
|
|
BR2_PACKAGE_E2FSPROGS=y
|
|
BR2_PACKAGE_E2FSPROGS_E2IMAGE=y
|
|
BR2_PACKAGE_IPROUTE2=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_87XX_BT=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_88XX_BT=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_MEDIATEK_MT7601U=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RALINK_RT73=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RALINK_RT2XX=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_81XX=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_USB_SERIAL_TI=y
|
|
BR2_PACKAGE_RPI_FIRMWARE=y
|
|
BR2_PACKAGE_RPI_FIRMWARE_BOOTCODE_BIN=y
|
|
BR2_PACKAGE_RPI_FIRMWARE_VARIANT_PI=y
|
|
BR2_PACKAGE_RPI_FIRMWARE_VARIANT_PI_X=y
|
|
BR2_PACKAGE_RPI_FIRMWARE_VARIANT_PI_CD=y
|
|
BR2_PACKAGE_GPTFDISK=y
|
|
BR2_PACKAGE_GPTFDISK_SGDISK=y
|
|
# BR2_PACKAGE_LVM2_STANDARD_INSTALL is not set
|
|
BR2_PACKAGE_RNG_TOOLS=y
|
|
BR2_PACKAGE_USB_MODESWITCH_DATA=y
|
|
BR2_PACKAGE_CA_CERTIFICATES=y
|
|
BR2_PACKAGE_LIBCURL_CURL=y
|
|
BR2_PACKAGE_LIBDNET=y
|
|
BR2_PACKAGE_LIBCGROUP=y
|
|
BR2_PACKAGE_LIBCGROUP_TOOLS=y
|
|
BR2_PACKAGE_LIBSECCOMP=y
|
|
BR2_PACKAGE_BLUEZ5_UTILS=y
|
|
BR2_PACKAGE_BLUEZ5_UTILS_CLIENT=y
|
|
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_AUDIO=y
|
|
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_HID=y
|
|
BR2_PACKAGE_BLUEZ5_UTILS_PLUGINS_HOG=y
|
|
BR2_PACKAGE_BLUEZ5_UTILS_TOOLS=y
|
|
BR2_PACKAGE_DBUS_BROKER=y
|
|
BR2_PACKAGE_DHCP=y
|
|
BR2_PACKAGE_DHCP_CLIENT=y
|
|
BR2_PACKAGE_DROPBEAR=y
|
|
# BR2_PACKAGE_IFUPDOWN_SCRIPTS is not set
|
|
BR2_PACKAGE_NETWORK_MANAGER=y
|
|
BR2_PACKAGE_NETWORK_MANAGER_CLI=y
|
|
BR2_PACKAGE_IPTABLES_NFTABLES=y
|
|
BR2_PACKAGE_IPTABLES_NFTABLES_DEFAULT=y
|
|
BR2_PACKAGE_WIRELESS_REGDB=y
|
|
BR2_PACKAGE_WPA_SUPPLICANT=y
|
|
BR2_PACKAGE_WPA_SUPPLICANT_DBUS=y
|
|
BR2_PACKAGE_WPA_SUPPLICANT_DBUS_INTROSPECTION=y
|
|
BR2_PACKAGE_WPA_SUPPLICANT_WEXT=y
|
|
BR2_PACKAGE_WPA_SUPPLICANT_NL80211=y
|
|
BR2_PACKAGE_WPA_SUPPLICANT_AP_SUPPORT=y
|
|
BR2_PACKAGE_APPARMOR=y
|
|
BR2_PACKAGE_APPARMOR_PROFILES=y
|
|
BR2_PACKAGE_TINI=y
|
|
BR2_PACKAGE_DOCKER_CLI=y
|
|
BR2_PACKAGE_DOCKER_ENGINE=y
|
|
BR2_PACKAGE_PROCPS_NG=y
|
|
BR2_PACKAGE_RAUC=y
|
|
BR2_PACKAGE_RAUC_DBUS=y
|
|
BR2_PACKAGE_RAUC_NETWORK=y
|
|
BR2_PACKAGE_SYSTEMD_JOURNAL_REMOTE=y
|
|
BR2_PACKAGE_SYSTEMD_COREDUMP=y
|
|
# BR2_PACKAGE_SYSTEMD_HWDB is not set
|
|
BR2_PACKAGE_SYSTEMD_LOGIND=y
|
|
# BR2_PACKAGE_SYSTEMD_NETWORKD is not set
|
|
BR2_PACKAGE_SYSTEMD_RANDOMSEED=y
|
|
BR2_PACKAGE_UTIL_LINUX_LOGIN=y
|
|
BR2_PACKAGE_UTIL_LINUX_NOLOGIN=y
|
|
BR2_PACKAGE_UTIL_LINUX_PARTX=y
|
|
BR2_PACKAGE_UTIL_LINUX_SULOGIN=y
|
|
BR2_PACKAGE_UTIL_LINUX_ZRAMCTL=y
|
|
BR2_TARGET_ROOTFS_SQUASHFS=y
|
|
BR2_TARGET_ROOTFS_SQUASHFS4_LZ4=y
|
|
# BR2_TARGET_ROOTFS_TAR is not set
|
|
BR2_TARGET_UBOOT=y
|
|
BR2_TARGET_UBOOT_BUILD_SYSTEM_KCONFIG=y
|
|
BR2_TARGET_UBOOT_CUSTOM_VERSION=y
|
|
BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2023.01"
|
|
BR2_TARGET_UBOOT_BOARD_DEFCONFIG="rpi_2"
|
|
BR2_TARGET_UBOOT_CONFIG_FRAGMENT_FILES="$(BR2_EXTERNAL_HASSOS_PATH)/bootloader/uboot.config $(BR2_EXTERNAL_HASSOS_PATH)/board/raspberrypi/uboot.config"
|
|
BR2_PACKAGE_HOST_DOSFSTOOLS=y
|
|
BR2_PACKAGE_HOST_E2FSPROGS=y
|
|
BR2_PACKAGE_HOST_GPTFDISK=y
|
|
BR2_PACKAGE_HOST_MTOOLS=y
|
|
BR2_PACKAGE_HOST_RAUC=y
|
|
BR2_PACKAGE_HOST_UBOOT_TOOLS=y
|
|
BR2_PACKAGE_HOST_UBOOT_TOOLS_BOOT_SCRIPT=y
|
|
BR2_PACKAGE_HOST_UBOOT_TOOLS_BOOT_SCRIPT_SOURCE="$(BR2_EXTERNAL_HASSOS_PATH)/board/raspberrypi/uboot-boot.ush"
|
|
BR2_PACKAGE_HASSIO=y
|
|
BR2_PACKAGE_HASSIO_ARCH="armv7"
|
|
BR2_PACKAGE_HASSIO_MACHINE="raspberrypi2"
|
|
BR2_PACKAGE_OS_AGENT=y
|
|
BR2_PACKAGE_OS_AGENT_BOARD="RaspberryPi2"
|
|
BR2_PACKAGE_RPI_RF_MOD=y
|
|
BR2_PACKAGE_RPI_RF_MOD_DTS=y
|
|
BR2_PACKAGE_HOST_TEMPIO=y
|
|
BR2_PACKAGE_UDISKS2=y
|
|
BR2_PACKAGE_V4L2LOOPBACK=y
|