From 77e5781c7aaf55ccbc5fcd0ff01d34d554cfecbf Mon Sep 17 00:00:00 2001
From: Oniro Core Project Bot <oniro-core-bot@eclipse.org>
Date: Wed, 9 Nov 2022 16:07:45 +0000
Subject: [PATCH] docs repository snapshot -
main:f9eb9bcd6d08e9ccf9eeb113cc9dba43e85a8eba
Signed-off-by: Oniro Core Project Bot <oniro-core-bot@eclipse.org>
---
index.rst | 1 +
oniro/index.rst | 1 +
oniro/supported-technologies/ledge.rst | 47 ++++++++++++++++++++++++++
3 files changed, 49 insertions(+)
create mode 100644 oniro/supported-technologies/ledge.rst
diff --git a/index.rst b/index.rst
index 4ee42cb..5355952 100644
--- a/index.rst
+++ b/index.rst
@@ -75,6 +75,7 @@ daily life.
oniro/supported-technologies/containers
oniro/supported-technologies/modbus
oniro/supported-technologies/lvgl
+ oniro/supported-technologies/ledge
.. toctree::
:caption: Supported Toolchains
diff --git a/oniro/index.rst b/oniro/index.rst
index 6bb12b9..cf355c8 100644
--- a/oniro/index.rst
+++ b/oniro/index.rst
@@ -39,6 +39,7 @@ Build System Guide
supported-technologies/containers
supported-technologies/modbus
supported-technologies/lvgl
+ supported-technologies/ledge
.. toctree::
:caption: Supported Toolchains
diff --git a/oniro/supported-technologies/ledge.rst b/oniro/supported-technologies/ledge.rst
new file mode 100644
index 0000000..dd16e13
--- /dev/null
+++ b/oniro/supported-technologies/ledge.rst
@@ -0,0 +1,47 @@
+.. SPDX-FileCopyrightText: Linaro Ltd
+..
+.. SPDX-License-Identifier: CC-BY-4.0
+
+.. include:: ../definitions.rst
+
+LEDGE (Experimental integration)
+################################
+
+The `LEDGE group from Linaro <https://www.linaro.org/automotive-iot-and-edge-devices/>`__
+is providing a set of reference layers for features as dependable boot, image signing
+and more. |main_project_name| is integrating Yocto Project/OpenEmbedded layers provided
+by the group. Please note that currently |main_project_name| is providing forks of the
+work with some changes required by |main_project_name| that have not been upstreamed yet.
+
+The layers are included by default in all |main_project_name|, while a selected set
+of features is enabled.
+
+
+meta-ts
+*******
+
+The `meta-ts layer <https://gitlab.com/Linaro/trustedsubstrate/meta-ts>`__ provides
+Yocto Project/OpenEmbedded packaging of the
+`Trusted Substrate <https://linaro.atlassian.net/wiki/spaces/TS/overview>`
+providing firmware for a selected set of boards, with features like UEFI secure boot,
+measured boot with TPM, and dual-banked firmware update with bricking protection.
+
+You can learn more about `meta-ts` features from the
+`documentation <https://trs.readthedocs.io/en/latest/firmware/index.html>`__.
+
+meta-ledge-secure
+*****************
+
+The `meta-ledg-secure layer <https://gitlab.com/Linaro/trustedsubstrate/meta-ledge-secure>`
+provides features like kernel and module signing, configuration of SELinux, software
+modules needed to support TPMs.
+
+|main_project_name| currently uses the OPTEE and TPM support packaging from
+`meta-ledge-secure`. Other features will be added in the near future.
+
+Other security layers
+*********************
+
+`meta-ts` and `meta-ledge-secure` depend on a number of other security layers from the
+industry, like `meta-secure-core` and `meta-security`. All those layers are included
+in the default build of |main_project_name|.
--
GitLab