aboutsummaryrefslogtreecommitdiffstats
path: root/meta-refkit
AgeCommit message (Collapse)Author
2017-12-05Merge pull request #326 from pohly/tpm2Mikko Ylinen
support whole-disk encryption with TPM 2.0
2017-12-05refkit: support whole-disk encryption with TPM 2.0Patrick Ohly
During installation, TPM 1.2 or 2.0 have to be chosen explicitly via the "tpm" env variable. Detecting whether a /dev/tpm0 supports TPM 1.2 or 2.0 turned out to be tricky (https://github.com/intel/tpm2-tools/issues/604) and probably isn't worth the effort and potential error cases. Conceptually TPM 2.0 supports is similar to the one for 1.2, with one exception: because it is possible to use NVRAM without taking ownership and taking ownership with known passwords wouldn't provide any advantages, the TPM 2.0 support code skips that step. Testing switches to swtpm2 for both the existing TPM1.2 test and the new TPM2.0 test. It just gets parameterized differently. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-12-04refkit: tpm2.0-tools from meta-measuredPatrick Ohly
This makes it possible to build tpm2-tools from meta-measured. That layer is used instead of meta-security/meta-tpm because WindRiver is also using meta-measured. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-12-01Pull meta-intel and update distro conf accordinglyJussi Laako
Pulls latest meta-intel changes. Due to restructuring in meta-intel layer, also update BBMASK in refkit.conf to match the new meta-intel layer structure. Signed-off-by: Jussi Laako <jussi.laako@linux.intel.com>
2017-10-27intel-iot-refkit: move to use mraa and upm from meta-oeMikko Ylinen
mraa/upm were added in meta-oe so there's no need to maintain them in meta-refkit-core anymore. The change needs adjustments in layer dependencies and a few other places to get the compatibility checks passing. * meta-openembedded 4a45235...5d6d21e (201): > libreport: fix Nothing RPROVIDES 'lib32-python3-libreport' > libpwquality: fix Nothing RPROVIDES 'lib32-python3-libpwquality' > postgresql: Update to 9.4.14 > stress-ng: Add recipe > fluidsynth: update 1.1.6 -> 1.1.8 > nodejs: Update to 8.7.0 > nodejs: Remove unreferenced patches > tslib: update project homepage > gperftools: Fix build on musl/mips > python3-asn1crypto: add support for Python 3 > python-cffi: update to version 1.11.2 > python-lxml: update to version 4.1.0 > imagemagick: 7.0.7-1 -> 7.0.7-7 > oprofile: move from oe-core, as it's being deprecated there > rocksdb: add version 5.8 > nodejs: Add npx to nodejs-npm package > toybox: Switch building from git src_uri > hostapd: fix WPA2 key replay security bug > libmnl: Move to oe-core > wireshark: update to 2.2.10 > gpsd: Fix gpsd Yocto pyro build for read only rootfs > python-asn1crypto: add new package > python-pytest: fix egg version of package > python-twisted: remove empty lore subpackage > meta-oe/conf/layer.conf: Remove "id" from HOSTTOOLS > nghttp2: add recipe for Nghttp2: HTTP/2 C Library. > python3-ujson: support Python 3 > python3-protobuf: add python3 version > netkit-rsh: correct the file attribute > mdns: move from meta-intel-iot-middleware > dnsmasq: upgrade to 2.78 > libauthen-radius-perl: move recipe to meta-networking > lldpd: Update to version 0.9.8 > ebtables: Add HOMEPAGE info into recipe file. > c-ares: Build native version > net-snmp: check that executable is used before testing for existance > openl2tp: Fix build with musl/libtirpc > yp-tools: Ignore cpp warnings as errors > drbd-utils: remove 0001-drbd-8.4.4-drbd-tools-only-rmmod-if-DRBD-is-a-module.patch > iproute2: Move tipc enablement to oe-core > network-manager-applet: Disable gobject-introspection on musl > klibc: Pass Optimization with KLIBCOPTFLAGS > breakpad: fix typo ( minidump_cpu_arm.h -> minidump_cpu_arm64.h ) > initramfs-kexecboot-image: replace deprecated license file > initramfs-debug: replace deprecated license file > python-grpcio-tools: update to version 1.6.3 > python-twisted: update to version 17.9.0 > python-parse-type: update to version 0.4.2 > python-flask-sqlalchemy: update to version 2.3.0 > python-cython: update to version 0.27.1 > python-pylint: update to version 1.7.4 > leveldb: fix parallel build II > Add python pandas recipes > upm: add recipe from meta-refkit-core > mraa: move recipe from meta-refkit-core > gperftools: Enable on mips > klibc.bbclass: Pass TUNE_CCARGS in flags > ubi-utils-klibc: Update to 1.5.2 release of mtd-utils > python-m2crypto: Upgrade to 0.26.4 > phoronix-test-suite: Upgrade from v6.6.1 to v7.4.0 > meta-perl: update layer.conf to include openembedded-layer > meta-webserver: update the layer.conf to include the openembedded-layer > mongodb: Pass computed endian variable > uftrace: update version to 0.8 > python-pyfirmata: move in from meta-intel-iot-middleware and upgrade > python-can: update to version 2.0.0b1 > libol: Add HOMEPAGE info into recipe file. > python-parse-type: update to version 0.4.1 > python-zopeinterface: update to version 4.4.3 > python-pyasn1: update to version 0.3.6 > python-pytest: update to version 3.2.2 > python-babel: update to version 2.5.1 > python-cython: update to version 0.27 > python-futures: Build native version > protobuf: Upgrade to 3.4.1 > lvm2: refactoring code to disable package config thin-provisioning-tools > mongodb: Fix build on aarch64 > leveldb: Fix parallel build > rcmd: Fix build with musl > nbench-byte: Update SRC_URI to fossies.org > breakpad: Fix build with musl/mips > toybox: Upgrade to 0.7.4 > openwsman: Fix build with musl > cpupower: add a new recipe > lvm2: fix start lvm2-monitor.service failed > lvm2: disable thin provisioning support if GPLv3 incompatible > dfu-util: Add HOMEPAGE info into recipe file. > byacc: Add HOMEPAGE info into recipe file. > opencv: fix CVE-2017-14136 > luajit: Fix mips build with clang > php: add libgcc to the runtime depends > php: update stable version to 5.6.31 > php: update version to 7.1.9 > msgpack-c: update to version 2.1.5 > jsoncpp: update to version 1.8.3 > opencv: Fix build on aarch64 > flatbuffers: Fix build with clang on big-endian machines > openct: Add HOMEPAGE info into recipe file. > python-bitarray: add a python3 version of the recipe > python-bcrypt: add a python3 version of the recipe > python-appdirs: add an initial recipe > python-twisted: update version to 17.5.0 > adduser: update to version 3.116 > breakpad: Fix mips build on musl > ltrace: Fix build with musl/mips > python3-multidict: update to version 3.2.0 > python-cassandra-driver: update to version 3.11.0 > python-protobuf: update to version 3.4.0 > python-pymisp: update to version 2.4.80 > python-pyasn1: update to version 0.3.5 > python-tornado: update to version 4.5.2 > python-grpcio-tools: update to version 1.6.0 > python-grpcio: update to version 1.6.0 > python-cmd2: update to version 0.7.7 > python-lxml: update to version 4.0.0 > python-pyro4: update to version 4.62 > python-pymongo: split the package into bson and original pymongo package > python-aws-iot-device-sdk-python: update to version 1.2.0 > python-six: update to version 1.11.0 > python-cffi: update to version 1.10.0 > python-psutil: update to version 5.3.1 > python-xlrd: update to version 1.1.0 > python-pyopenssl: update to version 17.3.0 > python-redis: update to version 2.10.6 > libnet-dns-perl: Add HOMEPAGE info into recipe file. > libhtml-parser-perl: Add HOMEPAGE info into recipe file. > ipc-run: Add HOMEPAGE info into recipe file. > fbset: Add HOMEPAGE info into recipe file. > eventlog: Add HOMEPAGE info into recipe file. > imagemagick: 7.0.6-9 -> 7.0.7-1 > python-cython: update to version 0.26.1 > python-babel: update to version 2.5.0 > python-ndg-httpsclient: update to version 0.4.3 > python-pybind11: update to version 2.2.1 > autoconf-archive: Delete ( moved to oe-core ) > android-tools: Fix build with musl > python-pymisp: update to version 2.4.79 > python-pymongo: update to version 3.5.1 > python-jsonpointer: update to version 1.12 > python-pytest-runner: update to version 2.12.1 > python-django: update to version 1.11.5 > python-pyasn1: update to version 0.3.4 > python-sqlalchemy: update to version 1.1.14 > nginx: update development version to 1.13.5 > breakpad: Upgrade to latest master > rsyslog: update from 8.22 to 8.29 > librelp: upgrade from 1.2.12 to 1.2.14 > python-pyparsing: add support for native build > networkmanager: Disable gobject-introspection on musl > netkit-telnet: Add HOMEPAGE info into recipe file. > opensaf: Upgrade to 5.17.07 > openhpi: Fix build with musl > ypbind-mt: Upgrade to 2.4 > stunnel: Add HOMEPAGE info into recipe file. > libtdb: Add HOMEPAGE info into recipe file. > samba: Add HOMEPAGE info into recipe file. > networkmanager: Add HOMEPAGE info into recipe file. > tcpdump: update to 4.9.2 to fix CVEs > ipvsadm: Add HOMEPAGE info into recipe file. > yp-tools: Upgrade to 4.2.2 > autofs: Fix build with musl > poco: update to 1.7.9 > krb5: CVE-2017-11462 > libp11: 0.4.0 -> 0.4.7 > recipes: fix invalid license file > gnome-keyring: Fix build with musl > apache2: change files layout to debian style > apache2: use volatiles for sysvinit > pidgin-otr: Upgrade to 4.0.2 > Nginx: use PACKAGECONFIG variables in configure > sgpio: Add HOMEPAGE info into recipe file. > orbit2: Add HOMEPAGE info into recipe file. > numactl: Add HOMEPAGE info into recipe file. > mozjs: Add HOMEPAGE info into recipe file. > mailcap: Add HOMEPAGE info into recipe file. > libnih: Add HOMEPAGE info into recipe file. > ceres-solver: add new recipe > gnome-keyring: Resolve conflict with gcr 3 and gold linking error > libndp: Add HOMEPAGE info into recipe file. > fbset: Add HOMEPAGE info into recipe file. > daemontools: Add HOMEPAGE info into recipe file. > liblockfile: Add HOMEPAGE info into recipe file. > libjs-sizzle: Add HOMEPAGE info into recipe file. > gerbera: clean recipe > libupnp: Add recipe for version 1.8.2 > capnproto: add version 0.6.1 > flatbuffers: add version 1.7.1 > libgpiod: bump version to v0.3.1 > protobuf-c: update to 1.3.0 > protobuf: update to 3.4.0 > debsums: inherit gettext > lvm2: Add HOMEPAGE info into recipe file. > libidl: Add HOMEPAGE info into recipe file. > v4l-utils: added missing dependency on udev > python-jsonschema, python3-jsonschema: add vcversioner-native dependency > system-setup-keyboard: delete blacklisted > smbnetfs: delete blacklisted > klibc.bbclass: Add -mfloat-abi on arm > klibc.bbclass: Use forcevariable override to define flags > klibc: Edit out gcc hardcoding in do_compile > leveldb: Fix build with clang Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-10-27refkit-ci.inc: stop CI DAFT tests on 570x HW (Joule)Olev Kartau
Signed-off-by: Olev Kartau <olev.kartau@intel.com>
2017-10-09Refkit CI: pull in the latest changesRefkit CI
* bitbake 9c0f6e8...28249c4 (9): > README: new readme file including main aspects of the project > bitbake-user-manual-metadata: include a space on a append example > bitbake-user-manual/bitbake-user-manual: remove YP as build system > Add args.force to localargs before do_add_layer > bitbake-user-manual: add more gitsm fetcher limitations > toaster: build missing toaster.conf settings > bitbake-user-manual: Updated kernel version in PREFERRED_VERSION example > bitbake: lib/bb/utils: fix movefile() copy to dir fallback > server/process: Increase runCommand timeout * meta-clang 4f13399...2c16196 (1): > llvm: Fix wrong code generation when floor() libm function is called * meta-intel 989db4c...9f9b61b (16): > backport-iwlwifi: Fix version check for Intel Production Kernel > linux-firmware: remove bbappend > backport-iwlwifi: comment about firmware requirements > backport-iwlwifi: don't use AUTOREV > meta-intel.inc: Use grub-efi for x32 > meta-qat: Move to independant meta-intel-qat layer > meta-dpdk: Move to independant layer > meta-*/layer.conf: Add LAYERDEPENDS > linux-intel/4.9: Update both SRCREVs > README*: Updates pyro -> rocko > lttng-modules: Add patch for API Change > qat: Move BSP specific configurations from recipes to machine.conf > dpdk: Move BSP specific configurations from recipes to machine.conf > Move dpdk and qat components to meta-dpdk and meta-qat > libyami: use git clone instead of unstable tarball > thermald: use git clone instead of unstable tarball * meta-security e180062...607d2bc (19): > linux-yocto/4.12: update path version > bastile: fix QA issue > lynis: move recipe to correct layer > openscap-daemon: fix QA issue > suricata: update to 4.0.0 > redhat-security: remove PR and fix style > checksecurity: fix recipe style > libenv-perl: add recipe removed from core > layer.conf: update layer depends > libewf: fix build issue > oe-release: add oe-release file for openscap > os-release: needed by openscap > openscap: Add oe specific files > openscap: add dameon > openscap: add scap-security-guide > openscap: add package > lynis: add auditing tool > meta-security-compliance: add new layer for compliance and audit applications > clamav: update llvm to use 5.0 to match version in core * meta-yocto 6909368...e1f3639 (5): > poky.conf: Fix typo > poky: Set version/codename for 2.4/rocko > yocto-bsp: add BBG dtb > poky-tiny: Bump default kernel version to 4.12 > conf: remove maintainers.inc, now in oe-core * openembedded-core a15ec97...70e5444 (178): > bash-ptest: install additional locales > lib/oe/package_manager.py (rpm): Allow use of non-signed packages > libxml2-ptest: set LC_ALL=en_US.UTF-8 > libxml2-ptest: support for encoding ISO-8859-5 > libxml2-ptest: improve reproducibility > oe-pkgdata-util: add unescape option to read-value > siteinfo: nios2-linux - remove wrong mutex info > argp-standalone: drop RDEPENDS dev/staticdev packages on main package > bitbake.conf: Add 'id' to HOSTTOOLS > python-ptest: various fixes > utils.bbclass: Support applications with arguments in check_app_exist() > libarchive: re-add non-recursive extract and list support > nspr, nss: Use BUILD_CC instead of hardcoded "gcc" > glibc-locale.inc: fix typo in comment > staging.bbclass: handle postinst-useradd-* fixmes > systemd: drop unreferenced uclibc specific agetty -> getty patch > systemd: drop uclibc specific exp10 support patch > lttng-modules: Backport fixes for kernel instrumentation > image_types: Fix bmaptool support for RSS > license.py: Correct selection of licenses in is_included() > packagegroup-go-sdk-target: inherit goarch > go-runtime: prevent host leakage into target objects > goarch.bbclass: rework mips architecture checks > cml1: remove diffconfig return code checking > openssh: Atomically generate host keys > libarchive: CVE-2017-14502 > systemd: add runtime dependencies to pam plugins. > package_manager: rpm: improve logging > rootfs.py: remove update-alternatives correctly > linux-firmware: package Broadcom BCM43362 firmware > ffmpeg: backport patches to fix 12 CVEs > glib-2.0: Remove recommend shared-mime-info for MinGW > libparted: Use read only when probing devices on linux > ovmf: add SUMMARY and fix HOMEPAGE url > update-rc.d: Add HOMEPAGE info into recipe file. > stat: Add HOMEPAGE info into recipe file. > prelink: Add HOMEPAGE info into recipe file. > at: Add HOMEPAGE info into recipe file. > systemd-serialtty: allow empty package > systemd-boot: Should not build x32 > wic: remove systemd-boot for x32 > arch-x86: Add x86-x32 to MACHINEOVERRIDES > curl: Added option to enable http2 protocol. > selftest/cases/runtime_test: ignore removal errors when cleaning temporary gpg directory > sign_rpm.bbclass: force rpm serial signing > core-image-sato-sdk-ptest: reduce size > wic: Add option to not change fstab > libgcrypt: fix CVE-2017-0379 > scripts: drop True option to getVar calls > meta: drop True option to getVar calls > systemd: move org.freedesktop.machine1.conf to systemd-container > go: Fix build with -buildmode=pie > go_1.9: remove obsolete overrides > go: disable PIE flags for cgo > goarch.bbclass: fixups for Go mips32 support > linux-firmware: bump to latest linux-firmware git revision > qemurunner: print tail qemu log in case bootlog is empty > classes: drop image dependencies on TOPDIR variable > useradd-staticids: don't create username-group if gid is specified > lame: fix CVE-2017-13712 > staging: Reduce verbosity of log messages > pseudo: Add fastop reply fix > pseudo: use epoll API on Linux > gstreamer1.0-libav: Fix build on mips > uboot-extlinux: fix extlinux creation race (take 2) > Revert "u-boot: fix extlinux creation race" > kernel-devicetree.bbclass: Add support to generate append to kernel > xf86-video-intel: use uxa to replace sna as the default acceleration mode > kernel-fitimage: support MIPS (compressed) > kernel-uboot: support compressed kernel on MIPS > kernel-uimage: optimise UBOOT_ENTRYSYMBOL support > kernel-fitimage: unbreak UBOOT_ENTRYSYMBOL support > kernel-fitimage: sanitize dtb section name (unbreak MIPS) > sysklogd: conflict with other syslog daemons > busybox: fix syslog related meta data > openssh: Fix key generation with systemd > wic: allow multiple /boot partitions with different content > qemu: Security fixes > qemu: remove unused patches > ptest-runner: fix segfault with -t option > strace_4.18.bb: improve reproducibility > gzip_1.8.bb: improve reproducibility > linux-yocto-tiny: Enable qemux86-64 on linux-yocto-tiny 4.12 > linux-yocto-tiny: Enable qemux86-64 on linux-yocto-tiny 4.10 > linux-yocto-tiny: Enable qemux86-64 on linux-yocto-tiny 4.9 > linux-yocto-tiny: Enable qemux86-64 on linux-yocto-tiny 4.4 > core-image-tiny-initramfs: Enable running poky-tiny on qemux86-64 > ltp: fix hanging issue for gdb01 case > psmisc: Add HOMEPAGE info into recipe file. > libffi: Add HOMEPAGE info into recipe file. > libcgroup: Add HOMEPAGE info into recipe file. > hdparm: Add HOMEPAGE info into recipe file. > tiff: Security fix CVE-2017-13726 and CVE-2017-13727 > meta/lib/oe/rootfs.py: clean up dnf cache after creating an image > sanity: check that path variables don't use ~ > sanity: correct Python version sanity check > oe-build-perf-report-email.py: add cc and bcc options > scripts: rename yocto-compat-layer to remove "compatible" nomenclature > ncurses: CVE-2017-13732, CVE-2017-13734, CVE-2017-13730, CVE-2017-13729, CVE-2017-13728, CVE-2017-13731 > kernel.bbclass: build host programs with native sysroots > image.bbclass: Sorted ctypes to avoid basehash error > classes/image: move image_qa to between rootfs and image > u-boot-fw-utils: Fix cross and target builds > strace: Fix ptest bulds with musl/mips > classes/image_live: fix using squashfs as image filesystem > nspr: Fix build with musl/mips > eudev: use archive tarball instead of Github generated tarball > cross-canadian.bbclass: drop TARGET_* flags overrides > systemd-serialgetty: remove systemd from RDEPENDS > systemd: change some RRECOMMENDS to RDEPENDS > classes/externalsrc: delete symlinks at start of do_buildclean > bzip2: Create Makefile for run-ptest > util-linux: package switch_root separately > bluez5: Correct support for building without systemd > sysvinit-inittab: start_getty: Cleanup comments > sysvinit-inittab: start_getty: consider whitespaces in tty driver name > core-image-tiny-initramfs: initramfs recipes should not generate an actual image file > devtools: qemu: Remove obsolete '--with-system-pixman' option > Add Go toolchain support > go.bbclass: set TMPDIR during compilation > go: fixes for cross-canadian builds > go: fix linking issues for nativesdk builds > go-crosssdk: fix host/target references and cleanup > alsa-state: Add HOMEPAGE info into recipe file. > udev-extraconf: Add HOMEPAGE info into recipe file. > trace-cmd: Add HOMEPAGE info into recipe file. > systemd-serialgetty: Add HOMEPAGE info into recipe file. > systemd-compat-units: Add HOMEPAGE info into recipe. > qemuwrapper-cross: Add HOMEPAGE info into recipe file. > opkg-arch-config: Add HOMEPAGE info into recipe file. > mobile-broadband-provider-info: Add HOMEPAGE info into recipe file. > lsbtest: Add HOMEPAGE info into recipe file. > lsbinitscripts: Add HOMEPAGE info into recipe file. > libxml-sax-perl: Add HOMEPAGE info into recipe file. > libxml-sax-base-perl: Add HOMEPAGE info into recipe file. > libxml-parser-perl: Add HOMEPAGE info into recipe file. > libtimedate-perl: Add HOMEPAGE info into recipe file. > kbd: Add HOMEPAGE info into recipe file. > initscripts: Add HOMEPAGE info into recipe file. > i2c-tools: Add HOMEPAGE info into recipe file. > dtc: Add HOMEPAGE info into recipe file. > conf: add maintainers.inc from meta-poky > gawk: Enable native building > useradd.bbclass: Unify writing of script file in useradd_sysroot_sstate() > binutils: apply mingw fix only for binutils-cross-canadian > scripts/oe-build-perf-report: show recipe version changes in html report > scripts/buildstats-diff: move more code to lib/buildstats.py > scripts/oe-build-perf-report: summary of task resource usage > scripts/buildstats-diff: move code to lib/buildstats.py > scripts/oe-build-perf-report: tidy up html syntax > scripts/oe-build-perf-report: provide valid title in the html report > scripts/oe-build-perf-report: remove dead code > scripts/oe-build-perf-report: use --hostname in --list > scripts/oe-build-perf-report: fix handling of --history-length > scripts/oe-build-perf-report: add AggregateTestData class > scripts/oe-build-perf-report: fix dumping buildstats > ruby: CVE-2017-14064 > attr: Backports to fix exported headers > gcc-6.3.inc: Use ucontext_t not struct ucontext. > oeqa/selftest/recipetool: use stable tarball for recipetool create test > logrotate: use stable download URL > libproxy: use stable download URL > useradd: don't override pseudo environment > systemd-machine-units: update LIC_FILES_CHKSUM > e2fsprogs: set dir's mode correctly > bitbake.conf: Add default FILESYSTEM_PERMS_TABLES > tcp-wrappers: Add HOMEPAGE info into recipe file. > sysprof: Add HOMEPAGE info into recipe file. > minicom: Add HOMEPAGE info into recipe file. > libxml-perl: Add HOMEPAGE info into recipe file. > libxml-namespacesupport-perl: Add HOMEPAGE info into recipe file. > libnotify: Add HOMEPAGE info into recipe file. > libgudev: Add HOMEPAGE info into recipe file. > blktrace: Add HOMEPAGE info into recipe file. > devtool: ensure recipes devtool is working on are unlocked within the eSDK > devtool: rework source extraction so that dependencies are handled > ovmf: fix do_compile error when len(tmp)=410 > wic: accept '-' in bitbake variables * meta-refkit(-core) > adapt refkit_poky.py selftest to OE-core yocto-compat-layer* renamings > revert earlier hotfix for running bmaptool properly as it's now fixed in OE-core
2017-10-04refkit-ci.inc: build fwupdPatrick Ohly
fwupd is not in any of the images, but we want to know that it builds. Therefore we have to list it explicitly. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-10-04refkit-supported-recipes.txt: add recipes for fwupd and fwupdatePatrick Ohly
This adds everything that is needed to build and run fwupd and fwupdate. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-10-04refkit: add groupcheck IDsPatrick Ohly
In order to use groupcheck in the refkit distro, we need statically assigned IDs. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-10-04refkit distro: sort pre-assigned IDsPatrick Ohly
Sorting by numeric ID has the advantage that it is easier to see which numbers are in use at the moment. The original motivation for sorting alphabetically was that it might avoid merge conflicts, but that logic is false because automatic merging then might lead to undetected reuse of the same ID. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-10-04refkit distro: remove broken group ID entriesPatrick Ohly
"dbus" and "dbus-x11" were added to Ostro because "they seem to be used only during the build". However, the format was wrong (two fields instead of three). Either they were not really needed in the first place or are not used anymore. We better remove them before sorting by numeric ID. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-10-04refkit distro: remove obsolete pre-assigned user/group IDsPatrick Ohly
These users and groups are no longer used and thus can be removed again. They were part of the custom app framework and the group-based security design. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-09-18refkit: use libmnl from @core layerMikko Ylinen
libmnl recipe from meta-networking was moved to OE-core while fixing some Yocto Compliance checker issues. Modify supported-recipes.txt to adapt to that change. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-09-15Refkit CI: pull in the latest changesRefkit CI
* bitbake 567f2cf...f0930f3 (4): > bitbake-user-manual: Edits to "inherit" section. > bitbake-user-manual: Removed bad links > bitbake-user-manual: Updated inherit and INHERIT sections > bitbake-user-manual: Clarified inherit, include, require relationships * meta-openembedded 8b99164...4a45235 (48): > opencv: Fix build with clang > xfsdump: Upgrade to 3.1.7 > ell: upgrade SRCREV > python-pytest: Add HOMEPAGE info into recipe file. > python-six: Add HOMEPAGE info into recipe file. > python-pyopenssl: Add HOMEPAGE info into recipe file. > python-pygobject: Add HOMEPAGE info into recipe file. > python-pycparser: Add HOMEPAGE info into recipe file. > python-py: Add HOMEPAGE info into recipe file. > python-pretend: Add HOMEPAGE info into recipe file. > python-pip: Add HOMEPAGE info into recipe file. > python-iso8601: Add HOMEPAGE info into recipe file. > python-enum34: Add HOMEPAGE info into recipe file. > python-cryptography-vectors: Add HOMEPAGE info into recipe file. > python-cryptography: Add HOMEPAGE info into recipe file. > python-cffi: Add HOMEPAGE info into recipe file. > klibc: Fix include_next stdarg.h with clang > fluentbit: Upgrade to 0.12.1 > minicoredumper: Switch src_uri to upstream lf git > xfsprogs: Upgrade to 4.12.0 > gerbera: Add recipe > efivar: fix build when host gcc version is < 4.9 > thrift: build lib for native and nativesdk > sblim-sfcc: Fix build with musl > dracut: Add HOMEPAGE info into recipe file. > umip: Update SRC_URI to github > tesseract: Upgrade to 3.05.01 > leptonica: Upgrade to 1.74.4 > pm-qa: Upgrade to 0.5.2 > aufs-util: Use cross strip tool > core-image-minimal-xfce: inherit distro_features_check > evince: Remove X dependency > florence: update 0.6.3 > libmtp: remove 'mtp-tools' from PACKAGES > recipes-multimedia: Add LICENSE_FLAGS > recipes-multimedia: Add LICENSE_FLAGS > mpv: Requires ffmpeg which has a LICENSE_FLAGS = commercial set > meta-xfce: depend on meta-multimedia > meta-gnome/layer.conf: Add meta-networking for the networkmanager > pinpoint: Add dependency on opengl for cogl > libart-lgpg: Obsolete, replaced by version in oe-core > open-vm-tools: only build if meta-networking and meta-filesystems is available > pywbem: Requires python-m2crypto-native (and others) from meta-python > telepathy-python: Move to meta-python, requires python-dbus > boinc-client: Add distro flag, requires opengl > xorg-drivers: Add opengl distro flag requirement to ati and nouveau > openlmi-tools: Only build if the necessary python pieces are available > glmark2: Set required distro features to opengl * meta-security 1014cc6...b646d8f (1): > nmap: update to 7.60 * openembedded-core de70799...583dca2 (19): > meta/conf/layers.conf: Add ca-certificates as ABISAFE > insane: consider INSANE_SKIP without package-specifier too > linux-firmware: package Marvell PCIe WiFi firmwares > insane: don't pass skip list to functions which don't respect it > u-boot: Upgrade to 2017.09 > m4: Add HOMEPAGE info into recipe file. > at-spi2-core: Add HOMEPAGE info into recipe file. > at-spi2-atk: Add HOMEPAGE info into recipe file. > devtool/standard: set a preferred provider when adding a new recipe with devtool > hostap-utils: use w1.fi for SRC_URI > python-nose: Add HOMEPAGE info into recipe file. > python-mako: Add HOMEPAGE info into recipe file. > dpkg: Support muslx32 build > qemu conf: Fix kernel module autoloading for uvesafb on genericx86 > busybox: using ip instead of ifconfig for ifup/ifdown > binutils: bump SRCREV to latest 2.29 branch > kernel: Move Device Tree support to kernel.bbclass > qemurunner.py: wait for PID to appear in procfs > oe-selftest: devtool: fix test_devtool_add hanging on some machines * meta-refkit-core: > meta-xfce changed its LAYERDEPENDS on meta-multimedia and that triggers a collection exception. Add meta-multimedia in BBLAYERS and refkit_poky.py selftest to fix it. > similarly, meta-gnome was set to depend on meta-networking. Adapt refkit_poky.py selftest to that too. This should be fixed in meta-security. > drop the efivar bbappend as it's now fixed in the recipe itself
2017-09-04intel-iot-refkit: meta-intel submodule updateMikko Ylinen
Submodule meta-intel e6d3676..8d44e72: > linux-intel.inc: remove iwlwifi depends and rms > backport-iwlwifi: Add KERNEL_MODULE_PACKAGE_PREFIX > iwlwifi: rename to backport-iwlwifi > ixgbe upgrade to version 5.1.3 > linux-intel: Update both SRCREVs > linux-intel: blacklist snd-soc-skl module > Add secureboot selftests > recipes-selftest: add images for use in secureboot selftests > ovmf: add secureboot bits from refkit > linux-intel: Seperate SRC_URI into Kernel and Config This commit reverts fixes added in 4ac370be579ca707f630cfb59f491b0886275d07 but at the same time adds new tweaks to ignore 'secureboot' oe-selftests and ovmf changes added in meta-intel. We prefer the refkit_secureboot implementation and refkit's ovmf patches because they allow us to test using refkit-image-common and give better control to setting the test keys. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-09-04intel-iot-refkit: meta-security submodule updateMikko Ylinen
* meta-security 25b8f02...1014cc6 (6): > fail2Ban: Add new package > sleuthkit: fix No GNU_HASH in the elf binary > linux-yocto: drop all 4.1 content > linux-yocto: add 4.12 bbappends > tripwire: update to 2.4.3.5 > samhain: update to 4.2.2 This commit also reverts BBMASK'in linux-yocto-4.1.bbappend added in 4ac370be579ca707f630cfb59f491b0886275d07. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-08-31intel-iot-refkit: pull in latest changesRefkit CI
* bitbake 2d0203f...8a60106 (31): > main: Attempt to gain bitbake.lock rather than just waiting > process: Clean up connection retry logic > fetch2: don't mandate path element in encodeurl() > bitbake: ui: Sort 'Dependent tasks' in taskexp > toaster: support custom Layer Index URL and fixture override > Toaster: custom start and stop actions > toaster: custom image updates and original creation > process: Ensure we call select() to know which fds to read > process: Increase server startup timeout > process: Improve client disconnects > cooker: Ignore common bitbake files for the parse cache invalidation > cooker: Improve inotify overflow handling > cooker: Ensure we handle inotify before running the next command > cooker: Track directories searched for bbappend/bb files > server/process: Ensure we don't loop on client EOFError > cooker/siggen: Reset siggen when reparsing > main: Handle BB_SERVER_TIMEOUT = -1 for no server timeout > process: Fix disconnect when BB_SERVER_TIMEOUT > main: Remove unneeded float() > Revert "tinfoil: fix duplication of log messages" > daemonize: Always print any remaning UI events at exit > cooker: Ensure all tasks are shown in task dependency tree > daemonize: clean up code > daemonize: Ensure child process exits safely > process: Add some extra server startup logs > process: Reorder server command processing and handle EOFError > wget: fix FusionForge workaround > toaster: move to new bitbake xmlrpc default > toaster: enable remote HTTP API for status aggregation > runqueue: Tweak debug message to make it more readable/diffable > fetch2: fix checkstatus fallback to MIRRORS * meta-intel fe6f23e...e6d3676 (33): > lms: use sh instead of bash in notifyDesktop.sh > linux-intel: Update SRCREV > conf/machine/intel-*: move core-image-minimal-initramfs PACKAGE_INSTALL > images: add core-image-minimal-initramfs bbappend > sbsigntool: depend on openssl10 > sbsigntool: port "sbsigntool: stop using gitsm fetcher" from refkit > efilinux: Enable muslx32 build > linux-yocto: Drop 4.1 kernel bbappends > linux-firmware: install iwlwifi LinuxCore driver firmware blobs > xf86-video-mga: upgrade 1.6.4 -> 1.6.5 > dpdk-dev-libibverbs: Fix additional warnings > libyami-utils: Fix build with clang > efilinux: Fix build warnings > libyami: Fix build with musl/clang > linux-intel: Update SRCREVs > iwlwifi: skip host install scripts > dpdk: Fix build error on the core2-64 > Revert "iwlwifi_git.bb: run make_scripts earlier" > iwlwifi: Fix install_append for usrmerge > dpdk: Link examples with BFD linker > dpdk: Fix build with examples > qat16: Fix build when ld-is-gold is set in DISTRO_FEATURES > libyami: Rename the file to be checked with LIC_FILES_CHKSUM > disable_skylake_sound: Temp disable config for core2-32 > linux-intel: Add linux-intel to files search path > linux-intel: Update SRCREV for 4.9.35 > dpdk: upgrade to version 17.05 > linux-intel: refactor and remove iwlwifi modules for out of tree enablement > intel-common-pkgarch: Add out of tree modules > iwlwifi_git.bb: run make_scripts earlier > iwlwifi: Clean-up and use module_install > iwlwifi: include iwlwifi OOT driver in meta-intel layer. > intel-microcode: Upgrade recipe version * meta-intel-realsense 7468b0c...211ce75 (3): > ReadMe: Fix layer name in Wind River instructions > Merge branch 'master' of https://github.com/IntelRealSense/meta-intel-realsense > ReadMe: Update supported Yocto versions * meta-security 89683b4...25b8f02 (8): > apparmor: Additional runtime fixes > libmhash: add new recipe > libgssglue: add new recipe > nmap: upgrade to 7.50 > keynote: add new recipe > tpm2.0-tools: update to 2.0.0 plus > xmlsec1: add new recipe > apparmor: Rework such that the utilities are functional by default * meta-yocto 76dd79e...a09b543 (10): > maintainers.inc: assign newly added recipes > maintainers.inc: fix pn- override > conf-notes.txt: add shell environment header > linux-yocto: Drop 4.1 kernel appends > poky: bump poky lsb to linux 4.9 > poky: bump preferred version of linux-yocto to 4.12 > poky: Add nios2 to list of qemu targets > poky.conf: Enable vulkan by default > maintainers.inc: assign newly added recipes > poky-world-exclude.inc: remove recipes from meta-qt4 * openembedded-core a2ab288..a8b89b3 (308): > default-providers: Add entries for pkgconfig (due to pkg-conf being added) > populate_sdk_ext: Add BB_SERVER_TIMEOUT to SDK_LOCAL_CONF_BLACKLIST > boost: add python to default PACKAGECONFIG options > kernel-yocto: relax BSP definition test > acl_2.25: improve reproducibility > attr: improve reproducibility > initramfs-framework/setup-live: quote bootparam_root variable > webkitgtk: disable gobject-introspection on armv7a > core/target/ssh.py: use reader to handle partial data > libinput: remove obsolete touchpad patch > gpg_sign: depress the owership warnings on homedir > kernel-yocto: fix typo in error message > vulkan: Only build when 'vulkan' distro flag is set > buildhistory.bbclass: add ptest > testimage.bbclass: update comments > buildhistory.bbclass: print message when no commit > core/target/ssh.py: replace decode errors > utils/logparser.py: fix section check > runtime/cases/_ptest.py: rename it to ptest.py > runtime/cases/_ptest.py: add skip status > oeqa/utils/logparser.py: add skip status > runtime/cases/_ptest.py: revive it > bmap-tools: add "python-mmap" to RDEPENDS > libva-utils: add opengl to REQUIRED_DISTRO_FEATURES > staging: add missing import errno to staging_populate_sysroot_dir > recipetool: create: fix npm license code regression > recipetool: create: fix broken import in npm module > runqemu: Use virtio to mount cdrom drives > oeqa/parselogs: Ignore device node warnings on mips > systemd-machine-units: import last recipe from meta-systemd > systemd: add dependency on initscripts-sushell for selinux > initscripts: split sushell into sub package > linux-firmware: package ibt-firmware > linux-firmware: package iwlfifi-3160-[10-17] firmware > valgrind: improvements for run-ptest > pkgconf: add recipe > meta: move some text from oe-setup-builddir to conf-notes.txt > build-appliance-image: include proxy on pip3 installation > oe/path.py: copyhardlinktree: don't overwrite existing symlinks > kernel.bbclass: external toolchain fix > python2.7: improve reproducibility > linux-yocto/4.10: CVE & misc fixes > kernel-yocto: ensure that only valid BSPs are built > qemu: bump default version to 4.12 > libc-headers: update to 4.12 > linux-yocto: remove 4.1 recipes > linux-yocto: introduce 4.12 recipes > linux-yocto: add usb-net configs by default > linux-yocto/4.1: fix fsl-ls10xx sdhci > kernel-yocto: configuration updates: x86 features > ghostscript: CVE-2017-9727, -9835, -11714 > ghostscript: fix several CVEs by adding bounds checking > grub2: fix build on gcc where _FORTIFY_SOURCE is defined > tiff: Security fixes > machine-sdk: oldest kernel for x86/x86_64 is 3.2.0 now > libcheck: fix file-rdeps QA issue > squashfs: fix build with glibc-2.26 > apt: Upgrade to 1.2.24 > dpkg: Upgrade to 1.18.24 > strace: 4.17 -> 4.18 > e2fsprogs: 1.43.4 -> 1.43.5 > tcl: 8.6.6 -> 0.8.7 > libbsd: 0.8.5 -> 0.8.6 > git: 2.13.2 -> 2.13.3 > kernel-module-split: rrecommend kernel-image instead of rdepend > connman: Fix for CVE-2017-12865 > gnupg: 2.1.20 -> 2.1.23 > gdk-pixbuf: fix ptest RDEPENDS for multilib build > recipetool: allow plugins to set LICENSE and LIC_FILES_CHKSUM > recipetool: allow plugins to set PN / PV more easily > devtool: import: new plugin to import the devtool workspace > devtool: append md5sum only if not already present > devtool: export: new plugin to export the devtool workspace > devtool: upgrade: enable branch checking when revision is provided > recipetool: create: replacing PV in SRCURI > recipetool: create: handle git URLs specifying only a tag > recipetool: create: being able to set branch when revision is provided > recipetool: create: disable PREMIRRORS and MIRRORS by default > devtool/copy_buildsystem: adds meta-skeleton layer in the eSDK installation. > initramfs-framework/setup-live: also boot live image if root=/dev/ram0 > openssl10: rename back to openssl and make it the default via PREFERRED_VERSION > prelink: Change the behavior to avoid checking USER_CLASSES > qemu conf: replace deprecated option with new option > qemu: backport patches to fix boot failure > ruby: fix CVE-2017-922{6-9} > dnf: fix "Unable to detect release version" warning > cve-check-tool: Fix progress bar patch for curl 7.55 > mesa: update to 17.1.6 > webkitgtk: Add a recommends on shared-mime-info. > mpg123: upgrade to 1.25.6 > oeqa: increase verbosity of dnf commands in dnf packagefeed test > perl: Don't change /usr/include references in docs to sysroot paths > libtool: remove /absolute/path/to/host references > valgrind: disable build for muslx32 > goarch: Disable build for muslx32 > openssl10: modified the define cryptodev > mesa: Fix build with llvmpipe enabled on musl > rootfs-postcommands.bbclass: Filter out dangling symlinks in ssh_allow_empty_password() > cairo: Fix CVE-2017-9814 > libsndfile1: Fix CVE-2017-8363 > libsndfile1: Fix CVE-2017-8362 > libsndfile1: Fix CVE-2017-8361 and CVE-2017-8365 > wget: Security fix CVE-2017-6508 > xserver-xorg: Fix CVE-2017-10971 > rootfs-postcommands.bbclass: Prevent linking testdata to itself > qemuboot.bbclass: Prevent creating a link loop > copy_buildsystem: include layer tree during build structure creation > report-error: provide distro identifier string in case of uninative build > sign_rpm: Allow pkg signing by chunks through RPM_GPG_SIGN_CHUNK > systemd-boot: Move adjacent to systemd > logrotate: fix systemd service not found while multilib > bash: 4.3.30 -> 4.4 > gpgme: remove local m4/python.m4 > gpgme: 1.8.0 -> 1.9.0 > build-appliance-image: Don't use COREBASE/LICENSE for checksumming > mc: unify curses initialization > connman: Remove musl patch that's no longer needed > packagefeed-stability.bbclass: change another bb.plain to bb.note > sqlite3: upgrade to 3.2.0 > ncurses: 6.0+20161126 -> 6.0+20170715 > libgcrypt: 1.7.8 -> 1.8.0 > elfutils: 0.168 -> 0.170 > dhcp: 4.3.5 -> 4.3.6 > apr-util: 1.5.4 -> 1.6.0 > cross-canadian.bbclass: add ilp32 support > package.bbclass: support persistent /var/log > initscripts: support persistent /var/log > base-files: respect VOLATILE_LOG_DIR > bitbake.conf: add VOLATILE_LOG_DIR variable > shadow: fix CVE-2017-12424 > nss: 3.30.2 -> 3.31.1 > harfbuzz: upgrade to 1.4.8 > screen: upgrade to 4.6.1 > ruby: fix CVE-2017-9224 > python3-native: Add python3-misc-native to RPROVIDES > mkelfimage: Make -fno-stack-protector effective > rpm: Disable perl dependency generation > package.bbclass: Restore functionality to detect RPM dependencies > ltp: Skip the filedependency scan > openssl: Add missing bash/python rdepends for ptest > bind: Use correct python interpreter path > image.bbclass: drop initramfs bundle related code > qemu: upgrade to 2.10-rc2 > gmp: improve reproducibility > cairo: Add pkgconfig for opengl support > musl: Update to latest master > gstreamer1.0-plugins-bad: do not provide a fallback to openssl 1.0 > gst-player: remove workaround which disable visualizations > libva: upgrade to 1.8.3 > libva-utils: add recipe > libarchive: Remove xz packageconfig --with-lzmadec option > liburi-perl: Upgrade to 1.72 > llvm: Swith to ARM ISA on armv5 and armv4t > package_rpm.bbclass: Filter out unwanted file deps for nativesdk packages > texinfo: Avoid a problem with a dependency on perl(Locale::gettext_xs) > git: Do not install git cvsserver and git svn by default > rpm: Add dependencies on bash, perl and python3-core > gpg_sign: perform rpm signing serially > packagegroup-self-hosted: include missing (pod2man scp ssh) RPEDENDS packages > systemd: Fix rootfs transaction error when PACKAGECONFIG has polkit > openssl10: Fix conflict between openssl and openssl10 man pages. > syslinux: Update HOMEPAGE > recipetool: create: fix incorrect URL variable usage > libx11: Add patch to fix hanging issue in _XReply > libtasn1: CVE-2017-10790 > nspr: 4.14 -> 4.16 > iproute2: add tipc support > gcc: Upgrade to 7.2.0 release > gdk-pixbuf: Upgrade 2.36.6 -> 2.36.8 > glib-2.0: Upgrade 2.52.2 -> 2.52.3 > fontconfig: Upgrade 2.12.1 -> 2.12.4 > cairo: Upgrade 1.14.8 -> 1.14.10 > dnf: expand dnf selftest to test signed package feeds > oeqa: fix temp file handling in dnf package feed test > oeqa: fix dnf tests > package_manager.py: enable dnf's repo_gpgcheck if feed signing is enabled > sign_package_feed.bbclass: install signing key into rootfs > signing-keys: delete unused tasks > dnf: rrecommend gnupg > lib/oe/package_manager: re-implement rpm feed signing > util-linux-native: Avoid use of getrandom > python3-native: Avoid use of getentropy/getrandom > packagefeed-stability.bbclass: change a bb.plain to bb.note > selftest/tinfoil: Filter LogRecords in test_event_wait > expat: Don't use getrandom() in the -native case > site/ix86-common: Drop ac_cv_sizeof_ino_t as it can be incorrect with large file support > image.bbclass: support binary reproducibility > kernel.bbclass: improve reproducibility > image-prelink.bbclass: support binary reproducibility > busybox.inc: improve reproducibility > python3: improve reproducibility > u-boot: update nios2 device tree for 10m50 board > e2fsprogs-doc: binary reproducible > python3-docutils: update to 0.14 > python*-setuptools: update to 36.2.7 > sysstat: fix creating configuration file for /var/log/sa > externalsrc: Handle .git not being a directory > expat: Upgrade to 2.2.3 > ltp: upgrade to upstream latest commit on 20170804 > mesa: Fix build with vulkan on non-x86 > image.bbclass: delete DATE variable too > run-postinsts: do not reload daemon configuration > opkg-configure: do not reload daemon configuration > dpkg-configure: do not reload daemon configuration > rm_work: fix build break for do_image_complete > musl: Build only in ARM mode when using clang > gstreamer1.0-python: upgrade to version 1.12.2 > gstreamer1.0-vaapi: upgrade to version 1.12.2 > gstreamer1.0-libav: upgrade to version 1.12.2 > gstreamer1.0-omx: upgrade to version 1.12.2 > gstreamer1.0-rtsp-server: upgrade to version 1.12.2 > gstreamer1.0-plugins-ugly: upgrade to version 1.12.2 > gstreamer1.0-plugins-bad: upgrade to version 1.12.2 > gstreamer1.0-plugins-good: upgrade to version 1.12.2 > gstreamer1.0-plugins-base: upgrade to version 1.12.2 > gstreamer1.0: upgrade to version 1.12.2 > selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting > pax-utils: check upstream version from debian servers > v86d: take tarball from debian > assimp: fix upstream version check > distrodata.bbclass: add UPSTREAM_VERSION_UNKNOWN and UPSTREAM_CHECK_UNRELIABLE > populate_sdk_base.bbclass: add handling package exclusions to do_populate_sdk > binutils: Upgrade to 2.29 > image-prelink: Disable for musl images > python-numpy: Upgrade to 1.13.1 > gstreamer-plugins-bad: replace openssl dependency with nettle for hls plugin > qemu: apic: fallthrough to PIC > musl: Drop the protected symbol optimization at configure time > sstatetests: limit the number of signature comparisons when differ > cryptodev-tests: depend on openssl 1.0 > openssh: depend on openssl 1.0 > openssl: add a 1.1 version > ca-certificates: update to 20170717 > insane: remove last remnants of unsafe-references-in-binaries check > insane: remove unsafe-references-in-scripts check > oeqa/buildoptions: remove unsafe-references-in-script test > gcc7: fix potential segmentation fault > btrfs-tools: update to 4.12 > gptfdisk: update to 1.0.3 > babeltrace: update to 1.5.3 > ffmpeg: update to 3.3.3 > libdnf: update to 0.9.3 > dnf: update to 2.6.3 > python2/python3: fix multiprocessing.BoundedSemaphore not work on qemux86/qemuarm > recipes-kernel: linux-dummy: provide dummy vmlinux package > context: Include a command line argument to run all except certain tests > oeqa/runtime_test: use subtests in test_postinst_rootfs_and_boot > glibc: Upgrade to 2.26 final release > llvm: Keep llvm-native dependency with clang toolchain > valgrind: enable on mips soft-float > openssl: Support musl-x32 build > wayland-protocols: upgrade to 1.10 > eudev: Remove udev-cache > slang: fix terminfo related problems > systemd: update to 234 > libid3tag: fix build with gperf 3.1 > libcap: fix build with gperf 3.1 > gperf: upgrade to 3.1 > libinput: Upgrade 1.7.3 -> 1.8.1 > checkpkg_exceptions: add LLVM > llvm: Raise SkipRecipe exception for unsupported architectures > mesa, llvm: Use native version of llvm-config > mesa: Depend on llvm-native > mesa: Use chrpath to delete rpaths > action: new bitbake-layer plugin to create a simple layer > scripts/oe-publish-sdk: use hook to call git update-server-info > devtool: sdk-update: fix pulling updates from git > package_manager: Fix support for NO_RECOMMENDATONS > gtk-icon-utils-native: 3.22.16 -> 3.22.17 > gtk+3: 3.22.16 -> 3.22.17 > x86-base.inc: enable live image type > chrpath: use https for SRC_URI > initramfs-framework/setup-live: remove superfluous break > automake: Add missing libtool tag for cppasm language > libpng: upgrade to 1.6.31 > gettext.bbclass: also search for files in target sysroot > webkitgtk: Do not use -isystem forcibly > python3-pycairo: Pass -fPIC via CFLAGS > go: Remove -fPIE -pie from SECURITY_PIE_CFLAGS > kexec-tools: Remove -fPIE -pie from SECURITY_PIE_CFLAGS > libsdl: Pass --tag option to libtool invocation > libproxy: Remove PIE flags from SECURITY_PIE_CFLAGS > ossp-uuid, libffi, libgcrypt: Pass --tag=CC option to libtool > devtool: fix handling of errors during task execution > bitbake.conf: whitelist BB_SERVER_TIMEOUT from config hash > terminal: wait for terminal task to finish before procedding > Revert "cml1.bbclass: wait until menuconfig terminal finishes" > sstatetests: Use python function instead of bitbake-diffsigs script > diffstat: exclude aclocal > diffstat: use HTTP mirror for SRC_URI > qemux86 qemux86-64: Enable pci > librsvg: 2.40.17 -> 2.40.18 > python: don't include -tests with modules > wic: improve generating disk system identifier > meta: drop do_bootdirectdisk do_vmimg references > autoconf-archive: GPLv3 + autoconf exception > re2c: fix build race > uninative: Allow a local own-mirror to work with uninative > mesa: Fix build when building with llvmpipe > llvm: Add recipe for 5.0 > re2c: Transfer recipe from meta-oe and upgrade to 0.16 > ninja: Add recipe > image: Make do_image_qa a dummy sstate task to match do_image_complete > image/rm_work: Promote do_image_complete to be more sstate like > image: Drop before do_build from do_rootfs and do_image > sstate: Improve SSTATE_SKIP_CREATION > rm_work: Improve handling for addto_recipe_sysroot > libpng: fix MIRRORS usage * meta-ros 8dcc2ba...14d4596 (1): > Merge pull request #546 from rojkov/binutils-workaround * meta-openembedded ac2a6d2...28d2c9b (75): > iproute2: Move append to meta-networking layer > multipath-tools: RDEPEND on bash > python-beautifulsoup4: add new recipe for both python2 and python3 > python-webencodings: add Python3 support > python-html5lib: add Python3 support > libreport: fix typo of SRC_URI > wvstreams: Fix parallel build > evolution-data-server: Fix build with clang > libhugetlbfs: Define HUGETLB_LDSCRIPT_PATH > python-paho-mqtt: fix downloading during do_compile > python-paho-mqtt: licensing improvements > libbonobo: Pass PERL_PATH to do_configure > udevil: Add missing rdep on bash > enscript: Define PERL variable > mpich: Define PERL variable and pass to configure > python*-astroid: use SPDX compatible license identifier > python*-pylint: upgrade to v1.7.2 and fix qa error > xorg-fonts-100dpi: unblacklist recipe > openldap: fix native LDFLAGS build error > logwarn: set correct paths and add missing dependency > python-pycrypto: Security fix CVE-2013-7459 > logcheck: update to 1.3.18 and move to meta-perl > gflags: add runtime dependency on bash > gperftools: fixup HOMEPAGE > collectd: 5.7.1 -> 5.7.2 > gnulib: upgrade to 2017-08-20.18 > vim: update to 8.0.0983 > python-markupsafe: Extend to build native version too > webmin: add systemd service file > iperf3: 3.1.3 -> 3.2 > adduser: use get_perl_version instead of PERLVERSION > mozjs: customize HOST_CFLAGS > makedumpfile: update to 1.6.2 > Dhrystone: add recipe 2.1 > postgresql: update to 9.4.13 > glibmm: fix perl path > sthttpd: update to 2.27.1 > python-requests: Update to version 2.18.4 > pcsc-lite: Update to 1.8.22 > phpmyadmin: upgrade to 4.7.3 > xmlrpc-c: add perl to RDEPENDS > python3-pykickstart: tweak shebang to python3 > multipath-tools: add bash to RDEPENDS > python*-pexpect: add v4.2.1 > python*-ptyprocess: add v0.5.2 > gd: update to 2.2.4 > libvpx: upgrade to 1.6.1 > rsyslog: install logrotate configuration file into correct location > rsyslog: fix CVE-2017-12588 > tipcutils: add runtime dependency for iproute2-tipc > iproute2: add bbappend for supporting tipc tool > openwsman: rename to 2.6.3 > openobex: disable building documentation > python-chardet: Extend to native and nativesdk > start-stop-daemon: Only create a link in ${base_sbindir} if necessary > fontforge: update to 20170731 to fix CVEs > vlock: add new recipe > php: disable this version by default > mailx: Force mailx to build with openssl10 > mailcap: upgrade to 2.1.48 > caps: Mark ARCH empty > gsoap: Upgrade to 2.8.51 > php: move to version 7.1.8 from 7.1.7 > python-pyro4: update to version 4.61 > python-pytest: update to version 3.2.1 > python-sqlalchemy: update to version 1.1.13 > python-cmd2: update to version 0.7.6 > python-wrapt: update to version 1.10.11 > geany-plugins: update 1.30 -> 1.31 > geany: update 1.30.1 -> 1.31 > upower: update 0.99.4 -> 0.99.5 > librcf: Add -latomic to LDFLAGS > python3-blivetgui: add recipe 2.1.5 > python3-blivet: add recipe 2.2.0 > mpv: Update to version 0.26.0. The following changes were needed to get the submodule update building: > one of the OE-core qemu patches was renamed. adapt to that in the bbappend > polkitd static IDs added to adapt to a systemd change that added USERDADD_PARAMS > BBMASK meta-security's linux-yocto_4.1.bbappend (patch submitted upstream) > add new group 'kvm' needed by systemd 234 > change --autologin regexp to accommodate changes in systemd 234 > add rpath-link to iotivity LINKFLAGS > install libva-utils (a newly added recipe) to get 'vainfo' needed by testing > blacklist snd-soc-skl module that fails on linux-intel 4.9.40 > drop linux-firmware-iwlwifi dependency from iwlwifi kernel module as the license checker won't work with that Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-08-16supported-recipes: add openssl10Mikko Ylinen
openembedded-core (currently in master-next) moved to openssl 1.1 but added openssl10 recipe for backwards compatibility (some recipes, like openssh, need it). Add the new openssl10 recipe in supported recipes to be able build it. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-08-10refkit-supported-recipes.txt: whitelist librealsense x11 dependenciesJussi Laako
Whitelist libraries needed by librealsense X11 support. This is needed for the computervision image to build with X11 support. Signed-off-by: Jussi Laako <jussi.laako@linux.intel.com>
2017-08-02refkit-supported-recipes.txt: whitelist iwlwifiJussi Laako
Due to recent BSP changes, new package iwlwifi needs to be added to the whitelist. Signed-off-by: Jussi Laako <jussi.laako@linux.intel.com>
2017-07-31CI: call default config "headless"Patrick Ohly
Now that we have "x11" and "wayland" builds, it looks odd to not have a name for the default configuration. For example, the tmp-glibc directory would end up getting published as just "glibc". It's better to explicitly use "tmp-headless-glibc", which then produces "headless-glibc" alongside "x11-glibc" and "wayland-glibc". "headless" is better than "default" or something like that because it describes the content instead of assuming that people know what the default is. If we want, we can then drop "glibc" later on. It's enabled by default in OE-core because the distro might also be built with other libc implementation, but we are not currently doing that. Testing and main build phase must agree on the TMPDIR value. Currently the "headless/x11/wayland" key words are spread across different build files. It probably would be better to refactor that so that they can be configured in refkit-ci.conf. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-31CI tester: added deploy path to tester paramsOlev Kartau
To support images in multiple locations, add path part to config what images CI shold test. tester-exec takes that additional parameter to locate images. Note that testsuite is published in glibc/ location only. Signed-off-by: Olev Kartau <olev.kartau@intel.com>
2017-07-27refkit: Merge multiple PRs in onePatrick Ohly
This merges PR #255, PR #257, PR #259. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-26refkit: create UEFI combo app via meta-intel's uefi-comboapp.bbclassPatrick Ohly
Most of the code was already moved to meta-intel. Once "[PATCH] uefi-comboapp.bbclass: support multiple UEFI combo apps + fixes" is also merged, we can create both versions of the UEFI combo app (for internal and removable media) with uefi-comboapp.bbclass, including Secure Boot signing. We keep the image-dsk.bbclass. Its usage is optional (as before) and enables UEFI combo app plus the refkit disk layout. This way uefi-comboapp.bbclass (and thus meta-intel) are only required when really used. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-26refkit_poky.py: work around bitbake.sock removal race conditionPatrick Ohly
Both rmtree() and the previous bitbake server instance try to remove bitbake.sock, leading to rmtree() throwing: FileNotFoundError: [Errno 2] No such file or directory: 'bitbake.sock' We must ensure that bitbake server terminates after a test. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-26refkit: continue to use xf86-video-mga@meta-intelPatrick Ohly
xf86-video-mga from meta-intel gets shadowed by the one from meta-oe due to layer dependencies. This may or may not be intended by the meta-intel maintainers (see https://bugzilla.yoctoproject.org/show_bug.cgi?id=11837), but for our builds we prefer to stay with the version that gets tested as part of meta-intel, so we blacklist the recipe from meta-oe. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-21refkit: upstream component updatePatrick Ohly
Several upstream changes made it necessary to adapt refkit: - x86-base.inc switched from "live" to "hddimg" as default IMAGE_FSTYPE. We still don't want any of the functionality (and dependencies) from image-live.bblcass, so now all of its types get removed. - One patch for meta-oic is now upstream. - wic dependencies can (and need to, in order to avoid the large set of default dependencies) be set via WKS_FILE_DEPENDS. - The "iotweb" collection was renamed to "iot-web" to match the meta-iot-web layer name. * bitbake 4a14b44...6683338 (6): > fetch2: fix indentation > cooker: fix whitespace > cache.py: fix whitespace > cookerdata: fix indentation and trailing spaces > knotty: fix indentation > bb/server/process: Handle EINTR on idle_commands select * iot-web-layers 6ca9065...4acc39f (2): > Merge pull request #2 from nagineni/readme > Merge pull request #1 from TizenTeam/master * meta-oic c8e87a3...0006fbd (1): > Hotfix: Include functional header for g++-7.1.0 * meta-openembedded 66b88f7...1cbd1bc (60): > unionfs-fuse: 0.26 -> 2.0 > gflags: update SRC_URI with git fetcher > po4a: add full functionalities > libunicode-linebreak-perl: add recipe > libtext-wrapi18n-perl: add recipe > libtext-charwidth-perl: add recipe > liblocale-gettext-perl: add recipe > libterm-readkey-perl: add recipe > libmime-charset-perl: add recipe > libsombok3: add recipe > klibc: Fix linking by using bfd linker when default linker is gold > proj: update to 4.9.3 > Intel: remove license file > fluentbit: fix SYSTEMD_SERVICE name > kodi: Fix build on arm > ubi-utils-klibc: Pass TUNE_CCARGS into CFLAGS > klibc: Fix build with musl > libdbus-c++: Add -pthread to linker flags > faac: update 1.28 -> 1.29 > abiword: update 3.0.1 -> 3.0.2 > gparted: update 0.27.0 -> 0.28.1 > garcon: update 0.4.0 -> 0.6.1 > gvfs: update 1.28.3 -> 1.32.1 > udisks2: update 2.1.7 -> 2.1.8 > meta-python: Add python-daemon recipe and its dependencies > meta-python: Add pybluez recipe > meta-python: Add Protobuf and gRPC Python recipes > kodi: Fix build on powerpc > ltrace: Fix build on musl > libdbus-c++: Fix build with gcc7 and unblacklist > webrtc-audio-processing: initial recipe > gnome-common: Add recipe (from oe-core) > libtinyxml2: upgrade to 5.0.1 > python-pytest: remove fetch during do_compile phase > python-pytest: update to version 3.1.3 > multipath-tools: 0.6.4 -> 0.7.1 > ser2net: upgrade to version 3.4 > kodi: User external crossguid > crossguid: Add recipe > gperftools: Fix build on ppc > librcf: Define byteorder for powerpc machines > libtorrent: Link in 64bit atomics for ppc > ltrace: Add mips64 support > tinymembench: Disable on mips64 > meson: Port pkgconfig-native patch to 0.40.1 > uim: Add support for aarch64 > rtorrent: Add and enable ipv6 packageconfig based on DISTRO_FEATURES > libtorrent: Implement 64bit atomics for mips32 > kodi: Update to 17.3 > synergy: Update to 1.8.8 release > assimp: Upgrade to 3.3.1 release > libsrtp: Fix build on mips > dietsplash: Fix build on mips > fluentbit: Fix parallel build race > gimp: Upgrade to 2.8.22 > babl: Upgrade to 0.1.28 > gegl: Upgrade to 0.3.18 > freerdp: Fix build on mips > librcf: fix mips/mips64 build > gst-plugins-gl_0.10.3.bb: Fix build on rpi/userland * meta-ros 2b77049...8428303 (1): > Merge pull request #533 from yangjiel/master * meta-yocto af19371...f99882d (6): > linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.9 > linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.4 > linux-yocto: Update genericx86* SRCREVs for linux-yocto 4.1 > meta-yocto-bsp: bump to the latest linux stable kernel for the non-x86 BSPs > mpc8315e-rdb: add wic.bmap to IMAGE_FSTYPES > poky: add Ubuntu 17.04 Zesty Zapus to SANITY_TESTED_DISTROS * openembedded-core b1c4661...c4c2fb3 (67): > libgcrypt: upgrade to 1.7.8 > libgcrypt: merge bb and inc file > systemd: refuse to load units with errors (CVE-2017-1000082) > webkitgtk: Upgrade to 2.16.5 > gnome-desktop: Don't use gnome-common > python3-pygobject: Don't use gnome-common > matchbox-desktop: Upgrade to 2.2 > libgcrypt: upgrade to 1.7.7 > libbsd: 0.8.3 -> 0.8.5 > apr: 1.5.2 -> 1.6.2 > ethtool: Upgrade to 4.11 > chrpath: reduce local pending patches > dropbear: reduce local pending patches > base-files: ignore "mesg n" error messages > util-linux: fix "su -" and package su separately > dhcp: fix shutdown not work by SIGTERM while bind9 enable threads > bind: 9.10.3-P3 -> 9.10.5-P3 > linux-yocto-dev: bump to 4.12+ > linux-yocto/4.9: update to v4.9.36 > linux-yocto/4.4: update to v4.4.76 > linux-yocto/4.1: update to v4.1.42 > kernel-yocto/meta: smp configuration changes > kernel-yocto: propagate configuration errors to bbclass > mesa: fix build race on src/intel/vulkan > mesa-gl: Clean recipe > mesa: Avoid installing khrplatfrom.h when not needed > git: 2.11.1 -> 2.13.2 > debianutils: 4.8.1 -> 4.8.1.1 > automake: 1.15 -> 1.15.1 > gnu-efi: Upgrade package to 3.0.6 and refresh patches > recipetool: git reformat URI mangling & parameter stripped > wayland-protocols: upgrade to 1.9 > libarchive: Upgrade to 3.3.2 release > valgrind: fix ptest compilation for PowerPC > valgrind: Update 3.12.0 -> 3.13.0 > valgrind: fix link failure with gold > gcc-7.1: Update the libsanitize stack_t patch to upstreamed version > gcc-cross: Fix linker and fortran symlinks > libxt: fix build failure > libx11: fix build error > selftest: Add vulkan-demos to checkpkg exceptions > vulkan-demos: Add recipe > acpitests: Remove as unmaintained > sign_rpm: support signing files in RPM payload > gpg_sign.py: fix overwriting the RPM macro __gpg in a wrong way > image_types: fix squashfs-lzo and squashfs-xz builds > imagefeatures: add test_image_fstypes test case > selftest: fixed 5 wic test cases > wic: isoimage-isohybrid: use grub-efi from deploy dir > image_types_wic: set default WKS_FILE_DEPENDS > wic-tools: don't create wic-tools.env > wic: isoimage-isohybrid: check result of glob() > wic: build wic-tools only if wic is run manually > wic: isoimage: do not remove temp directory > wic: get rid of using wic-tools > live-vm-common: add MKDOSFS_EXTRAOPTS variable > distro_alias.inc: update unmap packages to other distro > image_types: remove Hob convenience variable > classes/sanity: check for case-sensitive file systems > lib/oe/sstatesig: exclude ccache-native from signature hashes > ccache: let ccache create CCACHE_DIR, reducing hash changes > bitbake.conf: add CCACHE_NOHASHDIR to hash whitelist > ccache: don't export CCACHE_DISABLE globally > distrooverrides.bbclass: fix default configuration > x86-base: build only hddimg, rather than iso and hddimg, for x86 machines > runqemu: check exit code of 'ls -t' > runqemu: reworked exception handling Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-20refkit: update meta-intelPatrick Ohly
rmc.bb was split into rmc.bb and rmc-efi.bb. * meta-intel cebe15d...e76947d (20): > cryptodev-module: update 0001-zc-Force-4.10-get_user_pages_remote-API.patch > wic: Move WKS newer common location > lms8: Added Intel AMT ME notification infra patch to LMS. > thermald: upgrade to 1.6 > meta-intel.inc: Set default DISK_SIGNATURE_UUID > canned-wks: add generic-bootdisk kickstart template > classes: Add uefi-comboapp bbclass > recipes: move sbsigntool from refkit to meta-intel > systemd-boot_%.bbappend: compile and deploy EFI stub > lms8: Added 0003-Fix-device-file-referanc* patch which uses /dev/mei0. > Revert "meta-intel: Add override for EFI_PROVIDER and x32" > rmc: split rmc.bb and rmc-efi.bb into separate recipes > meta-tlk: Add linux-intel bbappend > meta-tlk: merge linux-yocto_tlk.inc with bbappend > rmc: add install.conf for platforms without internal storage > linux-intel: bump srcrevs > core-image-tiny-initramfs: Fixes WKS_FILE for Intel MACHINES > Revert "world-broken: Add for dpdk packages" > libva-intel-driver: upgrade to 1.8.3 > dpdk-dev-libibverbs: suppress gcc7 warnings Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-20refkit: update meta-securityPatrick Ohly
The TPM support was split out into its own layer. It now uses dynamic layer dependencies, including meta-xfce when x11 is enabled. We therefore must also add meta-xfce to our default layers, to ensure that builds with x11 enabled work. Because yocto-compat-layer.py does not handle such dynamic dependencies (and probably shouldn't have to?), we have to add the dependencies in advance. See "[yocto] dynamic layer dependencies in meta-security" for a discussion of the problem. * meta-security 3bcca12...89683b4 (22): > apparmor: fix python packaging issue > ecryptfs-utils: add new recipe > keyutils: add new recipe > layer.conf: fix typo (meta-filesystems vs mete-filesystems) > packagegroup-security-tpm-i2c: fix syntax > tor: add recipe > layer-conf: Use *_FEATURES in LAYERDEPENDS > security-core package group: add few more apps > clamav: fix new build error > sssd: update SRC_URI as git.fedorahosted.org shut down > tpm2: package groups fixes > linux-stable: fix module selections > tpm-image: used for testing for now. > kernel tpm rework > tpm-i2c: some systems us i2c TPM > tpm packagegroups: split into logical units > packagegroup: remove tpm components > meta-tpm: add base package group as was in meta-security > change tpm from distro to machine feature > tpm: move to a sub layer > swtpm-wrappers-native.bb: need netstat > freediameter: Add recipe Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-20refkit_poky.py: more thorough test_compat_meta_refkit_corePatrick Ohly
By adding several layers to the base configuration, we also catch signature changes in recipes that are in those layers (example: lvm2). Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-20secureboot.py: skip unnecessary cleaningPatrick Ohly
Whatever the problem was, it no longer seems to be necessary, so we can skip the time-consuming clean + full rebuild (5:04 min instead of 6:55min here). Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-19secureboot.py: avoid side effectsPatrick Ohly
The test needs to build an image multiple times with different image settings and cleans it when done. Using the normal refkit-image-common affects the time required for other tests (like the installer test, which can use an existing, unmodified refkit-image-common) and developers (refkit-image-common is gone after the test). Using an image recipe that is identical to refkit-image-common but has a different name avoids this. [YOCTO #11757] Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-19secureboot.py: ensure that efivars is installedPatrick Ohly
secureboot_with_image calls efivars regardless whether signing is enabled or not, and therefore it always has to be installed. Not sure how it worked before, perhaps because efivars was pulled in for other reasons. But after the recent changes, secureboot.SecureBootTests.test_boot_unsigned_image started to fail with: File ".../cases/secureboot.py", line 129, in secureboot_with_image self.assertTrue(status, 'SecureBoot not enabled (status=%s):\n%s' % (status, output)) File "/usr/lib/python3.5/unittest/case.py", line 678, in assertTrue raise self.failureException(msg) AssertionError: 0 is not true : SecureBoot not enabled (status=0): -sh: efivar: not found -sh: efivar: not found Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-12refkit: Merge multiple PRs in onePatrick Ohly
This merges PR #143, PR #222, PR #235, PR #242. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-12refkit: stop using forked yocto-compat-layer.pyPatrick Ohly
All of our changes have been merged into OE-core, so we can remove the local fork. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-10meta-iot-web: change url of meta-iot-web submoduleSudarsana Nagineni
We moved meta-iot-web layer to new repo to keep all web component layers in one place, so pull the layer from the new repo and bump LCONF_VERSION to 9. Signed-off-by: Sudarsana Nagineni <sudarsana.nagineni@intel.com>
2017-07-06refkit-ci.inc: build and test computervision eSDKMikko Ylinen
The computervision eSDK was missing from the earlied commit due to failures. Those failures turned out to be easy to fix so enable the computervision eSDK build&testing too. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-07-05CI: selftest comment updatePatrick Ohly
The bug which required us to run image-installer last has been fixed. Now there is a new bug which makes oe-selftest ignore the order in which tests are executed. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-05selftest: log command outputPatrick Ohly
With the recently enhanced runCmd/bitbake() in OE-core master we can get output from the invoked command passed through the logger that each test has, which provides much nicer output while a test runs: instead of test that just seems to hang, one gets a constant stream of messages with time stamps. The command also gets logged, so we can remove some extra output which now is a bit redundant. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-07-04Merge pull request #224 from pohly/ros_use_python32017.07Mikko Ylinen
refkit: reconfigure meta-ros in refkit-config.inc
2017-07-03post-build.sh: test eSDKsMikko Ylinen
testsdk.bbclass provides a test case that installs the eSDK runs various operations in it. We enable testsdk and run <profile>:do_testsdkext for the gateway profile and refkit-image-common. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-07-03esdk: build eSDK installer for gateway profile and common imageMikko Ylinen
[YOCTO: #11493] Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-07-03refkit.conf: make eSDK installer profile specificMikko Ylinen
IMAGE_BASENAME must be included in the SDK_NAME when building (e)SDKs for multiple profiles. SDK_NAME now follows the same naming pattern poky uses. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-07-03refkit.conf: configure eSDK type minimalMikko Ylinen
The preferred eSDK configuration is "minimal" but this assumes eSDK users/builders have a shared SSTATE_MIRROR in use when installing the eSDK. This condition is met for refkit's continuous integration builds and it makes it possible to run eSDK testing (and at the same time saves disk space on the infrastructure side since the eSDK installers do not copy the sstate data inside them). Documentation will be provided later on how end users would build their refkit based eSDKs using "minimal" (or "full") configuration. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>
2017-07-03refkit: reconfigure meta-ros in refkit-config.incPatrick Ohly
Setting ROS_USE_PYTHON3 in refkit-config.inc is better because: - other distros may also need that setting - all content re-configuration is one one place and thus easier to review Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-06-30refkit-ci.inc: removed explictly flatpak-enabled gateway image.Krisztian Litkey
There is no need for the explicitly flatpak-enabled gateway image, as the stock one is essentially now the same if the necessary distro features are enabled. Signed-off-by: Krisztian Litkey <krisztian.litkey@intel.com>
2017-06-29Merge multiple PRs in oneMikko Ylinen
This merge takes #145, #208, #211, #212, and #213.
2017-06-28refkit-ci.inc: OSTree selftestPatrick Ohly
The test ensures that OSTree builds and updating an installed image works. For that it needs to build two images and boot under Qemu twice (once into the original image, then into the updated image). Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
2017-06-28ostree: initial integration into refkitKrisztian Litkey
The OSTree recipe is taken from meta-flatpak, because that is what is already in intel-iot-refkit. The integration into the build process relies on using wic. Special support is provided for updating the UEFI combo app. This commit combines the initial work done by Krisztian Litkey with various cleanup changes by Patrick Ohly. It got squashed because the entire history would be confusing. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>