This merge introduces a new GPIT image with UEFI SecureBoot based on a generic ARM64 machine, enhances CI job control and build processes, and adds new layers and package support. This new image is required because we don't have a customizable image that works with the Internet on the LAA/kv260. Internet access is required to add LVFS testing using fwupd.

Key changes:

• Build "core-base-image" based on generic ARM64 with UEFI Secure Boot.
• Don't follow the poky master branch. Poky introduces breaking changes that affect the required layers for Secure Boot.
• Add a meta-gpit layer with support files and a custom WKS image for EFI disk image partitioning.
• Integrate several layers required by UEFI Secure Boot and install the fwupd package in the image; mask problematic recipes to avoid parsing errors.
• Add a dedicated build job for the "core-base-image" and refactor build scripts for more robust error handling and validation.
• Update .gitignore to exclude the .gnupg/ directory used by kas-container.
• Use UKI with UEFI Secure Boot.
• Include xtest to be used by LEDGE CI to test OPTEE Test Suite.
• Add fwupd to do LVFS testing in LEDGE CI.
• Use the latest linux-yocto dev kernel.

Signed-off-by: Javier Tia javier.tia@linaro.org

Edited Jul 22, 2025 by Javier Tia