Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Without bootindex option qemu doesn't respect boot order when
booting with EFI and writes wrong boot order information into the ovmf
image which breaks boot order permanently.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Right now, we do a remove in DISTRO_FEATURES, that, while we don't
neccessarily support them, due to the finality of :remove we force our
end users to not use them either.

By moving DISTRO_FEATURES:remove to DEFAULT_DISTRO_FEATURES:remove, we
allow end users to still use oniro.conf but add in those removed
features.

We also move IMAGE_FEATURES from a distro level var to the image.
IMAGE_FEATURES should generally be put in image recipes. This also gives
end users a way to use Oniro and work around our :remove defaults.

Signed-off-by: Eilís Ní Fhlannagáin <pidge@pidge.org>

Move compiler security options from only linux to all kernels

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Upstream moved the default definition of TCLIBC as part of:

commit 57aa60ef6422568b425b6ccc4451567efc578469
Author: Martin Jansa <Martin.Jansa@gmail.com>
Date:   Wed Sep 16 15:28:52 2020 +0200
    bitbake.conf: use ${TCMODE}-${TCLIBC} directory for CACHE

This moved TCLIBC from defaultsetup.conf to bitbake.conf but the problem
is that it did it before the place were bitbake.conf includes the distro
configuration changing its behaviour. With this change, a ?= in the
distro configuration will be ignored as the first one is already
defined in bitbake.conf.

Because of the above, we ended up with defaulting to glibc. We revert
this by forcing the value of TCLIBC accordingly. This will have a side
effect that shell environment variable will be ignored. So doing that
through BB_ENV_EXTRAWHITE will be broken from now on. If we want that
ability in the future, we can try to address.

Fixes: https://booting.oniroproject.org/distro/oniro/-/issues/252



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The oniro-grub-bootconf recipe provides the virtual-grub-bootconf
package which in turn contains a stub grub.cfg and empty grubenv file.

The change is spread around a considerable number of areas. Specifically
the kick-start file needs to explicitly reference the grub.cfg file which
must be placed in the wic/ directory. Since we need the same file in
grub/files directory, so that it can be installed into the image,
a symbolic link is employed.

The distribution configuration file, oniro-linux.conf sets
IMAGE_EFI_BOOT_FILES so that the grubenv file is installed into the boot
partition. This is required since grub cannot create the file by itself,
it can only edit the file, in-place, if it is present there already.

The actual configuration file for GRUB is a stub. Appropriate file with
some non-trivial logic will be proposed separately. The stub file boots
the first slot all the time. The kernel is loaded from the rootfs.

This test-boots fine in x86 and x86-64 qemu builds.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Similar to how the SECO board was handled, the QEMU x86 machine can now
use EFI and GRUB correctly. This change is split over three parts,
MACHINE_FEATURES is modified to enable efi, WKS_FILE_DEPENDS to build
EFI firmware and lastly WKS_FILE to pick the new unified kick-start
file.

This was tested with:

        qemu-system-i386 -cpu IvyBridge -machine q35 -bios ovmf.qcow2 \
                oniro-image-base-qemux86.wic -m 1024 -nographic

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Similar to how the SECO board was handled, the QEMU x86-64 machine can
now use EFI and GRUB correctly. This change is split over three parts,
MACHINE_FEATURES is modified to enable efi, WKS_FILE_DEPENDS to build
EFI firmware and lastly WKS_FILE to pick the new unified kick-start
file.

This was tested with:

        qemu-system-x86_64 -cpu IvyBridge -machine q35 -bios ovmf.qcow2 \
                oniro-image-base-qemux86-64.wic -m 1024 -nographic

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Prefer GRUB as the EFI provider.

The SysOTA+RAUC stack supports GRUB as the point of integration. This is
caused by both RAUC downstream support for GRUB and GRUB's ability to
load the kernel from a squashfs image.

In addition, add TODO about GRUB and microcode updates

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Oniro is based on wayland for the graphics stack. There is no testing
nor support for x11 so let's drop it in the distro's default
configuration.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

All these were needed for backporting 5.10 on dunfell. Now that the
meta-raspberrypi was updated, we have all we need in the BSP layer.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The reproducible_build bbclass was merged in base hence enabled by
default now.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

These are now aligned with oe-core defaults so no need for any
additional configuration here.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This was a relic from poky distro but there is no need to pull in
packagegroup-core-device-devel by default. In the meanwhile poky distro
also dropped it.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

meta-security and meta-rauc are now enabled via a distro feature:
security and rauc respectively.

Also, pam is a required distro feature for packagegroup-core-weston.
This due to weston-init requiring pam if started via systemd.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Major changes have been included with the kirkstone/honister update so
let's bump LOCALCONF_VERSION for compatibility.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The codename should be the oniro codename of a specific release. For the
development branches, let's use something generic like 'dev'.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

oe-core now comes with a newer version: 3.10.0. 3.8.12 version was an
upgrade for dunfell but now that we move to newer layers, we can drop it
and use the latest in upstream.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

oe-core now comes with a newer version: 1.17.3. 1.16.10 version was an
upgrade for dunfell but now that we move to newer layers, we can drop it
and use the latest in upstream.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

oe-core now comes with a newer version: 6.1.0. 5.2.0 version was an
upgrade for dunfell but now that we move to newer layers, we can drop it
and use the latest in upstream.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Pavel Zhukov authored 3 years ago and Stefan Schmidt committed 3 years ago

dunfell branch is not Jasmine (1.0.0) anymore. bumping to 1.99.99 to be
symver compatible.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Set the preferred Python version to 3.8.12 with security
fixes.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

This commit adds support for the qemu-generic-arm64 machine as a basic
qemu machine for arm SystemReady devices. It requires
meta-arm-dunfell-backports in order to function.

Signed-off-by: Eilís Ní Fhlannagáin <elizabeth.flanagan@huawei.com>

This was needed for meta-homeassistant and now that we have moved this
out of the main oniro repository, we can also drop this fix which will
be included in the meta-oniro-blueprint repository.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

dunfell ships go 1.14.% which is EOL'ed and doesn't get security fixes
anymore.

Upstream-status: Backport
Upstream-URL: https://git.openembedded.org/openembedded-core/commit/?id=69c68f470e8e12456a4d9abf2d1c33b857e4ea37
Fixes: https://booting.oniroproject.org/distro/oniro/-/issues/188


Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Homeassistant requires pyyaml == 5.3 while oe layer provides newer
version. Specifying preferred older version to fix the broken
dependencies.

Fixes: https://booting.oniroproject.org/distro/oniro/-/issues/187


Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

This overrides value from default toolchain to avoid building older
versions of qemu and qemu-native packages.

Closes: https://booting.oniroproject.org/distro/oniro/-/issues/183


Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Weston failed to start on rPi4 with 7' HDMI display due to lack of dri
card. Switching to vc4-kms-v3d driver fixes the problem. GPU mem size is set to
be 128 Mb because this configuration has been tested on vending machine
blueprint thus copying it here for consistency.

Closes: https://booting.oniroproject.org/distro/oniro/-/issues/182
Related: https://github.com/agherzan/meta-raspberrypi/issues/802


Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

We are assigning linux-yocto to 5.10 further down in the file.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Having the PACKAGECONFIG_remove in an bbappend file makes it really hard
to consume this layer and bring the specific config back with an _append
(happens for me with the gateway blueprint.

Instead we are now making a direct assignment, with he values removed
taken into account, from our distro as policy. This allows other distros
or layers consuming meta-oniro-core to change it as needed.

A new oniro-packageconfig.inc include file is created in which we will
consolidate other PACKAGECONFIG changes in the next commit.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

overlay_map.dtb is to be deployed in the overlays subdirectory but
dunfell only decides on what to deploy there based on extension. An
exception for overlay_map.dtb was added in later versions but was never
backported as it only makes sense on newer kernel which dunfell doesn't
support. We fix this manually in IMAGE_BOOT_FILES.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

It's better to use the same version of toolchain components across
different kernels -- set the defaults in oniro.inc instead of
just oniro-linux.conf

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>