feat: adds measured boot recipe

recipes-attestation/measured-boot/measured-boot_dev.bb

@@ -0,0 +1,18 @@
+inherit go-mod
+LICENSE = "CLOSED"
+
+GO_IMPORT = "github.com/flashbots/measured-boot"
+SRC_URI = "git://${GO_IMPORT};protocol=https;branch=main"
+SRCREV = "${AUTOREV}"
+
+GO_LINKSHARED = ""
+
+# reproducible builds
+INHIBIT_PACKAGE_DEBUG_SPLIT = '1'
+INHIBIT_PACKAGE_STRIP = '1'
+GO_EXTRA_LDFLAGS:append = " -s -w -buildid="
+
+RDEPENDS:${PN}-dev += "bash"
+
+do_compile[network] = "1"
+

recipes-core/images/cvm-image-azure.bb

@@ -13,6 +13,9 @@ CONVERSION_CMD:vhd:prepend = "truncate -s %1MiB ${IMAGE_NAME}.wic; \
                               qemu-img convert -O vpc -o subformat=fixed,force_size ${IMAGE_NAME}.wic ${IMAGE_NAME}.wic.vhd; \
                               echo "
 
+DEPENDS = "measured-boot"
+IMAGE_CMD:wic:prepend = "measured-boot ${IMGDEPLOYDIR}/${IMAGE_NAME}.wic ${IMGDEPLOYDIR}/measurements.json"
+
 
 IMAGE_FEATURES[validitems] += "hyperv"
 IMAGE_FEATURES = "hyperv"