export YOCTO_BRANCH="kirkstone"

git clone --single-branch --branch "${YOCTO_BRANCH}" "https://git.yoctoproject.org/poky" "poky-amd-${YOCTO_BRANCH}"
pushd  poky-amd-${YOCTO_BRANCH}

git clone --single-branch --branch ${YOCTO_BRANCH} https://git.openembedded.org/meta-openembedded
git clone --single-branch --branch ${YOCTO_BRANCH} https://git.yoctoproject.org/meta-dpdk
git clone --single-branch --branch ${YOCTO_BRANCH} https://git.yoctoproject.org/meta-amd
git clone --single-branch --branch ${YOCTO_BRANCH} https://github.com/Wind-River/meta-secure-core.git

git checkout --quiet tags/yocto-4.0.5
pushd meta-openembedded

git checkout --quiet 50d4a8d2a983a68383ef1ffec2c8e21adf0c1a79
popd

pushd meta-dpdk
git checkout --quiet 0e62d02f2755fbbf7dfa6e243381377c0a1cd97c
popd

pushd meta-amd
git checkout --quiet tags/kirkstone-e3000-ga-202301
popd

export YOCTO_BRANCH="kirkstone"
export MACHINE="v3000"
export DISTRO="poky-amd"

cd ${DISTRO}-${YOCTO_BRANCH}

source ./oe-init-build-env build-${MACHINE}-${YOCTO_BRANCH}

tee conf/auto.conf <<EOF
# DL_DIR ?= "\${TOPDIR}/../downloads"
SSTATE_DIR ?= "/home/tdowty/yp/sstate"

MACHINE = "${MACHINE}"
DISTRO = "poky-amd"

# secure boot
INITRAMFS_IMAGE = "secure-core-image-initramfs"
DISTRO_FEATURES_NATIVE:append = " systemd ima tpm tpm2 efi-secure-boot luks"
DISTRO_FEATURES:append = " systemd ima tpm tpm2 efi-secure-boot luks modsign"
MACHINE_FEATURES_NATIVE:append = " efi"
MACHINE_FEATURES:append = " efi"
PACKAGE_CLASSES = "package_rpm"
INHERIT += "sign_rpm_ext"
SECURE_CORE_IMAGE_EXTRA_INSTALL ?= "\
    packagegroup-efi-secure-boot \
    packagegroup-tpm \
    packagegroup-tpm2 \
    packagegroup-ima \
    packagegroup-luks \
"
DEBUG_FLAGS:forcevariable = ""
IMAGE_INSTALL:append = " kernel-image-bzimage"

# Uncomment this line to modify the root parameter in boot command line if the default one
# is not working for you. It is helpful when secure boot is enabled.
#BOOT_CMD_ROOT = "/dev/hda2"
EOF


bitbake-layers add-layer ../meta-openembedded/meta-oe
bitbake-layers add-layer ../meta-openembedded/meta-perl
bitbake-layers add-layer ../meta-openembedded/meta-python
bitbake-layers add-layer ../meta-openembedded/meta-networking
bitbake-layers add-layer ../meta-openembedded/meta-filesystems
bitbake-layers add-layer ../meta-dpdk
bitbake-layers add-layer ../meta-amd/meta-amd-distro
bitbake-layers add-layer ../meta-amd/meta-amd-bsp

bitbake-layers add-layer ../meta-secure-core/meta
bitbake-layers add-layer ../meta-secure-core/meta-signing-key
bitbake-layers add-layer ../meta-secure-core/meta-tpm
bitbake-layers add-layer ../meta-secure-core/meta-tpm2
bitbake-layers add-layer ../meta-secure-core/meta-efi-secure-boot
bitbake-layers add-layer ../meta-secure-core/meta-integrity
bitbake-layers add-layer ../meta-secure-core/meta-encrypted-storage