Marta Rybczynska authored 2 years ago and Andrei Gherzan committed 2 years ago

Update the comment on ONIRO_LAYERS_CONF_VERSION to tell the user
that they also need to change ONIRO_REQUIRED_LAYERS_CONF_VERSION
and where to find it. Cover both cases of the sample and the
local file.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

When DISTRO_NAME was refactored, it reused the lowercase variant of
flavour name changing in this way its style. This fixes it to use
the "pretty" flavour name.

Fixes #786



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

* 33eec78 : ceph: upgrade v15.2.15 -> v15.2.17 - sakib.sajal@windriver.com
* 406eb64 : singularity: Drop explicit runtime dep glibc - Andrei Gherzan

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 10891d4 : lttng-modules: replace mips compaction fix with upstream change - Bruce Ashfield
* 86c1096 : lttng-modules: fix build against mips and v5.19 kernel - Bruce Ashfield
* a69cb04 : lttng-modules: fix 5.19+ build - Bruce Ashfield
* a894fda : selftest/wic: Tweak test case to not depend on kernel size - Richard Purdie
* 3f25837 : relocate_sdk.py: ensure interpreter size error causes relocation to fail - Paul Eggleton
* 394c1bb : nativesdk: Clear TUNE_FEATURES - Richard Purdie
* b60f4c7 : scripts/oe-setup-builddir: make it known where configurations come from - Alexander Kanavin
* aeec7cc : cmake: remove CMAKE_ASM_FLAGS variable in toolchain file - Martin Beeger
* f595240 : boost: fix install of fiber shared libraries - Mikko Rapeli
* 9079992 : create-spdx: ignore packing control files from ipk and deb - Jose Quaresma
* 504b50a : create-spdx: Fix supplier field - Mihai Lindner
* 31ed9d6 : archiver.bbclass: remove unsed do_deploy_archives[dirs] - Jose Quaresma
* fcb55a1 : runqemu: Add missing space on default display option - Mark Hatle
* 72bfdca : devtool/upgrade: catch bb.fetch2.decodeurl errors - Alexander Kanavin
* a7d406d : devtool/upgrade: correctly clean up when recipe filename isn't yet known - Alexander Kanavin
* 3aee342 : devtool: error out when workspace is using old override syntax - Roland Hieber
* 27e4c6f : vim: update from 9.0.0063 to 9.0.0115 - Randy MacLeod
* 46ac4a9 : zlib: CVE-2022-37434 a heap-based buffer over-read - Hitendra Prajapati
* 49781a7 : gnutls: CVE-2022-2509 Double free during gnutls_pkcs7_verify - Hitendra Prajapati
* af701fd : u-boot: fix CVE-2022-33103 - Sakib Sajal
* f2ebd77 : qemu: fix CVE-2022-0216 - Sakib Sajal
* 99c4b60 : qemu: fix CVE-2022-0358 - Sakib Sajal
* a171d1f : qemu: fix CVE-2021-4158 - Sakib Sajal
* 3be3101 : qemu: fix CVE-2021-3929 - Sakib Sajal
* 8ad9e87 : qemu: fix CVE-2021-3507 - Sakib Sajal
* 978bc91 : gdk-pixbuf: CVE-2021-46829 a heap-based buffer overflow - Hitendra Prajapati

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Add the below daily test jobs for qemuarm-efi and qemuarm64-efi
machines.

* ltp
* kselftest
* perf

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Luca Seritan authored 2 years ago and Andrei Gherzan committed 2 years ago

Current qemuarm-efi defconfig contains many useless features,
remove it and use the qemuarm base config with additional EFI features.

For linux-yocto compatibility, set qemuarm-efi to fetch from the same
machine specific branches as qemuarm.

Signed-off-by: Luca Seritan <luca.seritan@huawei.com>

Luca Seritan authored 2 years ago and Andrei Gherzan committed 2 years ago

Current qemuarm64-efi defconfig contains many useless features,
remove it and use the qemuarm64 base config with additional EFI features.

For linux-yocto compatibility, set qemuarm64-efi to fetch from the same
machine specific branches as qemuarm64.

Signed-off-by: Luca Seritan <luca.seritan@huawei.com>

Luca Seritan authored 2 years ago and Andrei Gherzan committed 2 years ago

Machines that have the efi feature also need the efi kernel features, so
add these by default to both linux-oniro and linux-yocto.

Signed-off-by: Luca Seritan <luca.seritan@huawei.com>

Luca Seritan authored 2 years ago and Andrei Gherzan committed 2 years ago

qemuarm-efi is an efi machine that does not support ACPI. To fix this,
drop ACPI as a dependency in efi.cfg. This will not affect x86 machines
as ACPI is enabled by default for those. For arm64, apply an additional
patch that defaults to ACPI=y.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Luca Seritan <luca.seritan@huawei.com>

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Modern ssh clients use SFTP protocol and refuse to connect using
SCP protocol (dropbear uses) by default. Adding sftp-server to allow
sftp connections in Oniro.
This requires workaround for [Yocto #14858] to be applied for every
Oniro images, not only extra-tests.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Document gcc and clang as supported toolchains, and how to
switch between them

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Bernhard Rosenkränzer authored 2 years ago and Andrei Gherzan committed 2 years ago

Fixes building without meta-network (e.g. meta-openharmony CI)

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Bernhard Rosenkränzer authored 2 years ago and Andrei Gherzan committed 2 years ago

Fixes building without meta-arm (e.g. meta-openharmony CI)

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

We define the initial value for these variables as being 1. We also need
to set a default value for ONIRO_LAYERS_CONF_VERSION because the check
will not be triggered when ONIRO_LAYERS_CONF_VERSION is not defined
(builds before this check is introduced).

Finally, we drop POKY_BBLAYERS_CONF_VERSION as it is  an artefact from
when the project was using the poky distro.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The logic is similar to how oe-core and poky handle their set of sample
configurations. The core difference is the fact that we only flag
currently (no automatic migrations yet) by providing a helpful build
error before parsing. In this way we can instruct an user to update
their bblayers.conf when the Oniro introduced new lateyers integrations.

The variables of interest here are ONIRO_LAYERS_CONF_VERSION and
ONIRO_REQUIRED_LAYERS_CONF_VERSION. Whenever the project's
bblayers.conf.sample changes, we need to bump both of these values.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Each distro configurations are now defining DISTRO and DISTRO_NAME based
on ONIRO_FLAVOUR (which in turn is autogenerated from
ONIRO_FLAVOUR_PRETTY). This reduces duplication but also allows to check
for the flavour at build time via querying ONIRO_FLAVOUR.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

* def57bd : ima: Remove disabling CONFIG_IMA_TEMPLATE - He Zhe

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 15cdda2 : linux-intel-dev: update to 5.19.0 - Naveen Saini
* 1b7dd7a : linux-intel-rt/5.15: update to v5.15.49 - Naveen Saini
* 54d5b80 : linux-intel/5.15: update to v5.15.49 - Naveen Saini
* 032466f : onednn: turn on PACKAGECONFIG for GPU engine - Anuj Mittal
* 43224e9 : onednn : Upgrade 2.6 -> 2.6.1 - Yogesh Tyagi
* ae72503 : intel-microcode: upgrade 20220510 -> 20220809 - Anuj Mittal
* 3898a44 : intel-compute-runtime: upgrade 22.23.23405 -> 22.31.23852 - Anuj Mittal
* 29ab273 : intel-microcode: update SRCREV for 20220510 - Yongxin Liu
* 3bf3a4b : openvino-inference-engine: enable GPU plugin - Anuj Mittal
* f47a4b0 : intel-graphics-compiler: upgrade 1.0.11378 -> 1.0.11702.1 - Anuj Mittal
* a6a0a70 : linux-intel: fix buildpaths issue - Anuj Mittal
* 9cb16a0 : onevpl-intel-gpu: Fix HEVC 12 bit Encode - Teng, Jin Chung
* 79ca0ec : intel-compute-runtime: upgrade 22.22.23355 -> 22.23.23405 - Anuj Mittal
* 3af3b5c : intel-graphics-compiler: upgrade 1.0.11279 -> 1.0.11378 - Anuj Mittal
* f322d4f : ixgbe : upgrade 5.14.6 -> 5.15.2 - Yogesh Tyagi
* ceb7e22 : ixgbevf : upgrade 4.14.5 -> 4.15.1 - Yogesh Tyagi

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* acbe748 : cryptsetup: Add support for building without SSH tokens - Peter Kjellerstedt
* ce74ad4 : libwebsockets: Avoid absolute paths in *.cmake files in the sysroot - Peter Kjellerstedt
* 9165fb0 : yasm: fix buildpaths warning - Anuj Mittal
* 73a17ff : frr: fix buildpaths issue - Mingli Yu
* 78e65e7 : apache2: Fix the buildpaths issue - Mingli Yu
* bbfdaf4 : openipmi: Fix buildpaths issue - Mingli Yu
* 055f26c : freeradius: Fix buildpaths issue - Mingli Yu
* fe7250a : postgresql: Fix the buildpaths issue - Mingli Yu
* 2594e97 : net-snmp: set ac_cv_path_PSPROG - Mingli Yu
* 72d3abd : ibus: Swith to use main branch instead of master - Khem Raj
* 3207be5 : polkit: update patches for musl compilation - Marta Rybczynska
* eb9a5dc : polkit: Add --shell /bin/nologin to polkitd user - Akash Hadke
* 5b7f7f3 : polkit-group-rule-udisks2: fix override syntax in RDEPENDS - Yi Zhao
* 64f9534 : polkit: add udisks2 rule - Vyacheslav Yurkov
* a8b879b : glmark2: fix compatibility with python-3.11 - Martin Jansa

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 2cafa6e : build-appliance-image: Update to kirkstone head revision - Richard Purdie
* 455acda : lttng-modules: Fix build failure for kernel v5.15.58 - He Zhe
* 5fb62be : lttng-modules: update 2.13.3 -> 2.13.4 - Alexander Kanavin
* 6216cc2 : linux-yocto/5.15: fix reproducibility issues - Bruce Ashfield
* f9c284c : linux-yocto/5.15: update to v5.15.59 - Bruce Ashfield
* 2bca0a8 : linux-yocto-rt/5.15: update to -rt48 (and fix -stable merge) - Bruce Ashfield
* 5a6bc91 : linux-yocto/5.15: update to v5.15.58 - Bruce Ashfield
* 373f857 : linux-yocto/5.10: update to v5.10.135 - Bruce Ashfield
* c6435f0 : glibc: revert one upstream change to work around broken DEBUG_BUILD build - Martin Jansa
* ec5de25 : glibc : stable 2.35 branch updates - Sundeep KOKKONDA
* c33eb7f : openssh: Add openssh-sftp-server to openssh RDEPENDS - Alex Kiernan
* 4d6b260 : strace: set COMPATIBLE_HOST for riscv32 - Mingli Yu
* 9d2f5c1 : kernel.bbclass: pass LD also in savedefconfig - Martin Jansa
* 10bc315 : linux-firwmare: restore WHENCE_CHKSUM variable - Dmitry Baryshkov
* 38fb876 : libgcc: Fix standalone target builds with usrmerge distro feature - Khem Raj
* fd56896 : package_manager/ipk: do not pipe stderr to stdout - Shruthi Ravichandran
* 4eb53b3 : binutils: stable 2.38 branch updates - Sundeep KOKKONDA

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Oniro disables user namespaces by default. We want podman be able to
override it (re-enable it) when rootless mode is enabled.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Having a priority number makes it easier to order other configurations
for achiving overriding results.
This also cleans up a bit the recipe (FILES not needed, formatting
etc.).

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This is done using the features_check bbclass that checks for the distro
features in REQUIRED_DISTRO_FEATURES.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This gives a bit more clarity on what is running on a system without
sacrificing on flexibility.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This will start pulling in the containers software stack in our
reference images.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This offers the ability to have persistent data for features that
requires user data: for example running podman in rootless mode.
This change also makes sure that the home directory of user 'oniro'
exists on the appdata partition (using systemd tmpfiles).

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Skopeo is the component that podman uses to comunicate with container
registries so we configure skopeo for the OS requirements of the
project.

The most notable change is that we use the application partition for the
root's graphroot. This is where the data (including images) is stored
for the root user.

We also explicitly set the storage driver and runtime directory.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

There are files in shadow (for example subid files) that are required at
runtime too - for example for podman rootless support. Make sure this
package is not removed even when disto/image is dealing with a ro
rootfs.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Podman requires subids configuration[1] but when creating them, shadow
does it using backup files. Clean them up too if available.

[1] https://github.com/containers/podman/blob/main/docs/tutorials/rootless_tutorial.md#etcsubuid-and-etcsubgid-configuration



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

shadow utils are used when creating users at image creation time. The
useradd/usermod tools will only try to add a default configuration for
subid files if they exist. subid files are needed for podman rootless
support.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The meta-virtualization layer gets enabled via a distro feature and
given that we now rely on its components for the Oniro containers
software stack, we enable it by default.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>