Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Modern ssh clients use SFTP protocol and refuse to connect using
SCP protocol (dropbear uses) by default. Adding sftp-server to allow
sftp connections in Oniro.
This requires workaround for [Yocto #14858] to be applied for every
Oniro images, not only extra-tests.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Document gcc and clang as supported toolchains, and how to
switch between them

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Bernhard Rosenkränzer authored 2 years ago and Andrei Gherzan committed 2 years ago

Fixes building without meta-network (e.g. meta-openharmony CI)

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Bernhard Rosenkränzer authored 2 years ago and Andrei Gherzan committed 2 years ago

Fixes building without meta-arm (e.g. meta-openharmony CI)

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

We define the initial value for these variables as being 1. We also need
to set a default value for ONIRO_LAYERS_CONF_VERSION because the check
will not be triggered when ONIRO_LAYERS_CONF_VERSION is not defined
(builds before this check is introduced).

Finally, we drop POKY_BBLAYERS_CONF_VERSION as it is  an artefact from
when the project was using the poky distro.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The logic is similar to how oe-core and poky handle their set of sample
configurations. The core difference is the fact that we only flag
currently (no automatic migrations yet) by providing a helpful build
error before parsing. In this way we can instruct an user to update
their bblayers.conf when the Oniro introduced new lateyers integrations.

The variables of interest here are ONIRO_LAYERS_CONF_VERSION and
ONIRO_REQUIRED_LAYERS_CONF_VERSION. Whenever the project's
bblayers.conf.sample changes, we need to bump both of these values.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Each distro configurations are now defining DISTRO and DISTRO_NAME based
on ONIRO_FLAVOUR (which in turn is autogenerated from
ONIRO_FLAVOUR_PRETTY). This reduces duplication but also allows to check
for the flavour at build time via querying ONIRO_FLAVOUR.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

* def57bd : ima: Remove disabling CONFIG_IMA_TEMPLATE - He Zhe

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 15cdda2 : linux-intel-dev: update to 5.19.0 - Naveen Saini
* 1b7dd7a : linux-intel-rt/5.15: update to v5.15.49 - Naveen Saini
* 54d5b80 : linux-intel/5.15: update to v5.15.49 - Naveen Saini
* 032466f : onednn: turn on PACKAGECONFIG for GPU engine - Anuj Mittal
* 43224e9 : onednn : Upgrade 2.6 -> 2.6.1 - Yogesh Tyagi
* ae72503 : intel-microcode: upgrade 20220510 -> 20220809 - Anuj Mittal
* 3898a44 : intel-compute-runtime: upgrade 22.23.23405 -> 22.31.23852 - Anuj Mittal
* 29ab273 : intel-microcode: update SRCREV for 20220510 - Yongxin Liu
* 3bf3a4b : openvino-inference-engine: enable GPU plugin - Anuj Mittal
* f47a4b0 : intel-graphics-compiler: upgrade 1.0.11378 -> 1.0.11702.1 - Anuj Mittal
* a6a0a70 : linux-intel: fix buildpaths issue - Anuj Mittal
* 9cb16a0 : onevpl-intel-gpu: Fix HEVC 12 bit Encode - Teng, Jin Chung
* 79ca0ec : intel-compute-runtime: upgrade 22.22.23355 -> 22.23.23405 - Anuj Mittal
* 3af3b5c : intel-graphics-compiler: upgrade 1.0.11279 -> 1.0.11378 - Anuj Mittal
* f322d4f : ixgbe : upgrade 5.14.6 -> 5.15.2 - Yogesh Tyagi
* ceb7e22 : ixgbevf : upgrade 4.14.5 -> 4.15.1 - Yogesh Tyagi

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* acbe748 : cryptsetup: Add support for building without SSH tokens - Peter Kjellerstedt
* ce74ad4 : libwebsockets: Avoid absolute paths in *.cmake files in the sysroot - Peter Kjellerstedt
* 9165fb0 : yasm: fix buildpaths warning - Anuj Mittal
* 73a17ff : frr: fix buildpaths issue - Mingli Yu
* 78e65e7 : apache2: Fix the buildpaths issue - Mingli Yu
* bbfdaf4 : openipmi: Fix buildpaths issue - Mingli Yu
* 055f26c : freeradius: Fix buildpaths issue - Mingli Yu
* fe7250a : postgresql: Fix the buildpaths issue - Mingli Yu
* 2594e97 : net-snmp: set ac_cv_path_PSPROG - Mingli Yu
* 72d3abd : ibus: Swith to use main branch instead of master - Khem Raj
* 3207be5 : polkit: update patches for musl compilation - Marta Rybczynska
* eb9a5dc : polkit: Add --shell /bin/nologin to polkitd user - Akash Hadke
* 5b7f7f3 : polkit-group-rule-udisks2: fix override syntax in RDEPENDS - Yi Zhao
* 64f9534 : polkit: add udisks2 rule - Vyacheslav Yurkov
* a8b879b : glmark2: fix compatibility with python-3.11 - Martin Jansa

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 2cafa6e : build-appliance-image: Update to kirkstone head revision - Richard Purdie
* 455acda : lttng-modules: Fix build failure for kernel v5.15.58 - He Zhe
* 5fb62be : lttng-modules: update 2.13.3 -> 2.13.4 - Alexander Kanavin
* 6216cc2 : linux-yocto/5.15: fix reproducibility issues - Bruce Ashfield
* f9c284c : linux-yocto/5.15: update to v5.15.59 - Bruce Ashfield
* 2bca0a8 : linux-yocto-rt/5.15: update to -rt48 (and fix -stable merge) - Bruce Ashfield
* 5a6bc91 : linux-yocto/5.15: update to v5.15.58 - Bruce Ashfield
* 373f857 : linux-yocto/5.10: update to v5.10.135 - Bruce Ashfield
* c6435f0 : glibc: revert one upstream change to work around broken DEBUG_BUILD build - Martin Jansa
* ec5de25 : glibc : stable 2.35 branch updates - Sundeep KOKKONDA
* c33eb7f : openssh: Add openssh-sftp-server to openssh RDEPENDS - Alex Kiernan
* 4d6b260 : strace: set COMPATIBLE_HOST for riscv32 - Mingli Yu
* 9d2f5c1 : kernel.bbclass: pass LD also in savedefconfig - Martin Jansa
* 10bc315 : linux-firwmare: restore WHENCE_CHKSUM variable - Dmitry Baryshkov
* 38fb876 : libgcc: Fix standalone target builds with usrmerge distro feature - Khem Raj
* fd56896 : package_manager/ipk: do not pipe stderr to stdout - Shruthi Ravichandran
* 4eb53b3 : binutils: stable 2.38 branch updates - Sundeep KOKKONDA

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Oniro disables user namespaces by default. We want podman be able to
override it (re-enable it) when rootless mode is enabled.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Having a priority number makes it easier to order other configurations
for achiving overriding results.
This also cleans up a bit the recipe (FILES not needed, formatting
etc.).

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This is done using the features_check bbclass that checks for the distro
features in REQUIRED_DISTRO_FEATURES.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This gives a bit more clarity on what is running on a system without
sacrificing on flexibility.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This will start pulling in the containers software stack in our
reference images.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This offers the ability to have persistent data for features that
requires user data: for example running podman in rootless mode.
This change also makes sure that the home directory of user 'oniro'
exists on the appdata partition (using systemd tmpfiles).

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Skopeo is the component that podman uses to comunicate with container
registries so we configure skopeo for the OS requirements of the
project.

The most notable change is that we use the application partition for the
root's graphroot. This is where the data (including images) is stored
for the root user.

We also explicitly set the storage driver and runtime directory.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

There are files in shadow (for example subid files) that are required at
runtime too - for example for podman rootless support. Make sure this
package is not removed even when disto/image is dealing with a ro
rootfs.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Podman requires subids configuration[1] but when creating them, shadow
does it using backup files. Clean them up too if available.

[1] https://github.com/containers/podman/blob/main/docs/tutorials/rootless_tutorial.md#etcsubuid-and-etcsubgid-configuration



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

shadow utils are used when creating users at image creation time. The
useradd/usermod tools will only try to add a default configuration for
subid files if they exist. subid files are needed for podman rootless
support.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The meta-virtualization layer gets enabled via a distro feature and
given that we now rely on its components for the Oniro containers
software stack, we enable it by default.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Oniro relies on this layer for containers support.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Oniro relies on this layer for containers support.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Reorganize SQUAD groups and projects to make it easier to find out what
is tested by looking at the group/project overview.

New group/project org.

```
squad/
├── merge-request
│   ├── meta-zephyr
│   └── oniro
├── release
├── scheduled-daily
│   ├── kselftest
│   ├── ltp
│   ├── perf
│   └── zephyr
└── scheduled-weekly
    └── gcc
```

This closes: #731

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

db2d47e5 was supposed to bump the
version of a bbappend but it also moved the recipe as an unwanted side
effect effectively masking the bbappend. Move it back in place.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This is particularly useful to make sure the compiler uses the recipe
sysroot for headers avoiding host contaminations like:

| opts-GCC.h:42:
| /usr/include/stdint.h:26:10: fatal error: 'bits/libc-header-start.h'
file not found
| #include <bits/libc-header-start.h>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Luca Seritan <luca.seritan@huawei.com>

Upstream breaks the sed operation because '*' match misses a preceeding
'.'.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Luca Seritan <luca.seritan@huawei.com>