Skip to content

packagegroup-ni-runmode: add aide to runmode RDEPENDS#1047

Draft
Vairamani-NI wants to merge 1 commit into
ni:nilrt/master/nextfrom
Vairamani-NI:add-aide
Draft

packagegroup-ni-runmode: add aide to runmode RDEPENDS#1047
Vairamani-NI wants to merge 1 commit into
ni:nilrt/master/nextfrom
Vairamani-NI:add-aide

Conversation

@Vairamani-NI

@Vairamani-NI Vairamani-NI commented Jul 10, 2026

Copy link
Copy Markdown

Summary of Changes

Include the AIDE file integrity checker in the runmode packagegroup so it is baked into the base system image (BSI) on device.

Justification

https://dev.azure.com/ni/DevCentral/_workitems/edit/3470293

Testing

Build

  • nilrt-base-system-image builds for x64 with the AIDE change; no new build/QA warnings attributable to AIDE.
  • ARM (xilinx-zynq): pending — not yet built.
  • aide 0.19.3 + aide-lic appear in the nilrt-runmode-rootfs manifest.
  • /etc/aide.conf ships the NI policy (verified overrides the upstream sample); /var/lib/aide present.

On-target validation (x64, cRIO-9045, run mode)

  • Installed BSI, booted into run mode, aide 0.19.3 functional.
  • no false positives: aide --init baseline (33,069 entries), then aide --check on the unmodified image → "AIDE found NO differences … Looks okay!!" (exit 0).
  • intrusion detected: modified 1 monitored file, removed 1, added 1 → detected 1 changed / 1 removed / 1 added with per-file hash/size detail (exit 7).

Footprint

  • AIDE ~290 KiB installed (/usr/bin/aide 253 KiB + aide-lic 35 KiB); deps already in base.
  • Baseline DB aide.db.gz ≈ 2.97 MiB (~33k entries); peak RSS ~45 MiB (--init) / ~59 MiB (--check).

Procedure

Include the AIDE file integrity checker in the runmode packagegroup so it
is baked into the base system image (BSI) on device.
Copilot AI review requested due to automatic review settings July 10, 2026 16:36

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds the AIDE file integrity checker to the NI run mode packagegroup so it is included by default in run mode images (and therefore in the base system image composition when this packagegroup is used).

Changes:

  • Add aide to packagegroup-ni-runmode RDEPENDS so it is installed in run mode rootfs images.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants