This layer contains metadata to enable security features when building a Linux system for Toradex SoMs.

For more information on available Toradex SoMs, please visit:

https://www.toradex.com/computer-on-modules

This layer depends on:

URI: git://git.openembedded.org/openembedded-core
layers: meta
branch: kirkstone
revision: HEAD

URI: git://git.yoctoproject.org/meta-security
branch: kirkstone
revision: HEAD

URI: git://git.toradex.com/meta-toradex-nxp.git
branch: kirkstone
revision: HEAD

URI: git://git.toradex.com/meta-toradex-ti.git
branch: kirkstone
revision: HEAD

This layer supports the following security features:

• Secure boot
  • Bootloader signature checking.
  • U-Boot hardening.
  • FIT image signature checking (kernel, DTBs and ramdisk).
  • Rootfs signature checking via dm-verity.
• Data-at-rest encryption
  • Encryption key management via the Trusted Keys kernel subsystem
  • Block device encryption with dm-crypt
• TEE (Trusted Execution Environment)
  • Support for running OP-TEE

For more information on the available features, please check the corresponding documentation:

This layer only works on Toradex Embedded Linux 6.3.0 and newer releases.

All metadata is MIT licensed unless otherwise stated. Source code and binaries included in tree for individual recipes are under the LICENSE stated in each recipe (.bb file) unless otherwise stated.

This README document is Copyright (C) 2024 Toradex AG.