prplos/profiles/lcm.yml
Nabil BIZID 9474ce9b8c profiles: lcm.yml: feed_lcm: Container capabilities: Using non-root user
Integrates:
cthulhu-pcm
- ddb16e4: ("cthulhu-pcm: add upgrade persistence for EnableHostCapabilities", 2026-08-06)
cthulhu-capabilities
- 8defb8d: ("ci: doc: enable Doxygen documentation for static functions", 2026-08-13)
- eaf3f36: ("ci: baf: update autogenerated files", 2026-07-30)
- f7cc593: ("cthulhu-capabilities: add configurable BlackList for Linux capabilities", 2026-07-08)
timingila-cthulhu
- d2e98b5: ("ci: doc: enable Doxygen for static functions", 2026-08-14)
- 77f16b0: ("timingila-cthulhu: sync Privileged/EnableHostCapabilities parameters", 2026-06-26)
cthulhu-lxc
- 3c67bad: ("ci: doc: add Doxygen configuration and documentation generation", 2026-08-14)
- 6233055: ("cthulhu-lxc: add support for capabilities inheritance in unprivileged mode", 2026-06-26)
libcthulhu
- 2e8b391: ("ci: enable support for Cobertura XML report generation", 2026-08-14)
- 5265d4d: ("unit-tests: add tests for cthulhu_ctr_start_data_clean and cthulhu_ctr_start_data_init", 2026-08-14)
- c6c0767: ("ci: doc: enable Doxygen doc from extra dirs and for static functions", 2026-08-14)
- 7725928: ("libcthulhu: add enable_host_capabilities to cthulhu_ctr_start_data_t", 2026-06-26)
timingila
- 30f97e6: ("timingila: add support for unprivileged user capabilities inheritance", 2026-06-26)
cthulhu
- 46560fd: ("README.md: describe host capabilities inheritance", 2026-08-18)
- 054d283: ("ci: cthulhu: enable Doxygen documentation for static functions", 2026-08-13)
- 437a6ec: ("cthulhu: allow inheriting Linux capabilities on host namespace for non-root containers", 2026-06-26)

References: PCF-2687
Signed-off-by: Nabil BIZID <nabil.bizid@softathome.com>
Signed-off-by: FAOUZI YAHYA <faouzi.yahya_ext@softathome.com>
2026-08-27 13:42:47 +01:00

100 lines
2.7 KiB
YAML

---
description: Packages and features for LCM
feeds:
- name: feed_lcm
uri: https://gitlab.com/prpl-foundation/prplos/feeds/feed_lcm.git
revision: main@4bd17b8daeaa326ff8cf31c5fcdfbe39f57be07e
packages:
- cthulhu
- cthulhu-dhcpc
- cthulhu-lxc
- cthulhu-capabilities
- cthulhu-lpm
- cthulhu-networking
- cthulhu-pcm
- cthulhu-plugin-usp
- cthulhu-syslog
- lxc
- lxc-attach
- lxc-auto
- lxc-autostart
- lxc-cgroup
- lxc-checkconfig
- lxc-common
- lxc-config
- lxc-configs
- lxc-console
- lxc-copy
- lxc-create
- lxc-destroy
- lxc-device
- lxc-execute
- lxc-freeze
- lxc-hooks
- lxc-info
- lxc-ls
- lxc-monitor
- lxc-start
- lxc-stop
- lxc-templates
- lxc-top
- lxc-unfreeze
- lxc-unprivileged
- lxc-unshare
- lxc-user-nic
- lxc-usernsexec
- lxc-wait
- packet-interception
- rlyeh
- timingila
- timingila-cthulhu
- timingila-rlyeh
- timingila-rlyeh-security
- image-authentication
diffconfig: |
# lxc options for LCM
CONFIG_SAH_SERVICES_TIMINGILA_INIT_ADAPTERS=y
CONFIG_SAH_SERVICES_TIMINGILA_ADAPTER_PACKAGER="/usr/lib/timingila-rlyeh/timingila-rlyeh.so"
CONFIG_SAH_SERVICES_TIMINGILA_ADAPTER_CONTAINER="/usr/lib/timingila-cthulhu/timingila-cthulhu.so"
# CONFIG_SAH_LIB_CTHULHU-LXC_PRPL_OS_RPATH is not set
# kernel options for lcm
CONFIG_KERNEL_ARM_PMU=y
CONFIG_KERNEL_BLK_CGROUP=y
CONFIG_KERNEL_BLK_DEV_THROTTLING=y
CONFIG_KERNEL_CGROUPS=y
CONFIG_KERNEL_CGROUP_CPUACCT=y
CONFIG_KERNEL_CGROUP_DEVICE=y
CONFIG_KERNEL_CGROUP_FREEZER=y
CONFIG_KERNEL_CGROUP_PERF=y
CONFIG_KERNEL_CGROUP_PIDS=y
CONFIG_KERNEL_CGROUP_SCHED=y
CONFIG_KERNEL_CPUSETS=y
CONFIG_KERNEL_DEVPTS_MULTIPLE_INSTANCES=y
CONFIG_KERNEL_FAIR_GROUP_SCHED=y
CONFIG_KERNEL_FREEZER=y
CONFIG_KERNEL_IPC_NS=y
CONFIG_KERNEL_LXC_MISC=y
CONFIG_KERNEL_MEMCG=y
CONFIG_KERNEL_MEMCG_KMEM=y
CONFIG_KERNEL_MEMCG_SWAP=y
CONFIG_KERNEL_MEMCG_SWAP_ENABLED=y
CONFIG_KERNEL_MM_OWNER=y
CONFIG_KERNEL_NAMESPACES=y
CONFIG_KERNEL_NETPRIO_CGROUP=y
CONFIG_KERNEL_NET_CLS_CGROUP=y
CONFIG_KERNEL_NET_NS=y
CONFIG_KERNEL_PERF_EVENTS=y
CONFIG_KERNEL_PID_NS=y
CONFIG_KERNEL_POSIX_MQUEUE=y
CONFIG_KERNEL_PROC_PID_CPUSET=y
CONFIG_KERNEL_RESOURCE_COUNTERS=y
CONFIG_KERNEL_RT_GROUP_SCHED=y
CONFIG_KERNEL_SECCOMP=y
CONFIG_KERNEL_SECCOMP_FILTER=y
CONFIG_KERNEL_USER_NS=y
CONFIG_KERNEL_UTS_NS=y