Mikko Ylinen 31d6839eb5 tools: let confidential guest kernel builds to exclude fragments ...

build-kernel.sh supports exluding fragments from the common base
set based on the kernel target architecture.

However, there are also cases where the base set must be stripped
down for other reason. For example, confidential guest builds want to
exclude some drivers the untrusted host may try to add devices (e.g.,
virtio-rng).

Make build-kernel.sh to skip fragments tagged using '!confidential'
when confidential guest kernels are built.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>

2025-05-09 17:53:22 +03:00

23 KiB

Executable File

Raw Blame History

View Raw