Closes #810



Signed-off-by: Chase Qi <chase.qi@linaro.org>

default.xml: Bump meta-virtualization revision

Closes #781

See merge request !297

* e11d5b6 : podman: Fix merge typo - Andrei Gherzan
* 2b28d64 : podman: Patch for CVE-2022-27649 - Andrei Gherzan

Fixes: #781



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

flavours: add reference to oniro-bundle-base recipe

See merge request !261

ci: run zephyr twister jobs only on scheduled pipelines

See merge request !295

.oniro-ci: exclude symbolic link for zephyr image test

See merge request !286

docs: Fix login information missing from virtual targets

Closes docs#156

See merge request eclipse/oniro-core/oniro!291

libuv: Extend to nativesdk-libuv recipe

See merge request !292

Fix classpath related cve-check issues on distros without x11

Closes #737

See merge request !296

yocto-project.rst: Fix links for Yocto Build and Reference

Closes docs#152

See merge request !270

Twister jobs appear to be extremely heavy. Given that we do not have resources
to run them on each change, spawn them only in scheduled pipelines.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

flavours/linux: Fix runqemu arguments to run without X11

Closes #794

See merge request !294

modbus-testing: recipe and modbus Oniro docs

Closes docs#11

See merge request !293

Grzegorz Gwóźdź authored 2 years ago and Grzegorz Gwóźdź committed 2 years ago

The Yocto Project site has been moved to a different URL, so currently the links are not up to date

Signed-off-by: Grzegorz Gwóźdź <grzegorz.gwozdz@huawei.com>

classpath is an indirect dependency of this package that also has a
required distro feature on x11. Without having the same feature check
here, a world build would fail when x11 is not enabled. Reflecting the
same feature check in this recipe, makes sure that world will skip it as
well.

The patch is waiting upstream inclusion in the kirkstone branch:
https://lists.openembedded.org/g/openembedded-devel/message/98294



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

classpath is a dependency of this package that also has a required
distro feature on x11. Without having the same feature check here, a
world build would fail when x11 is not enabled. Reflecting the same
feature check in this recipe, makes sure that world will skip it as
well.

The patch is waiting upstream inclusion in the kirkstone branch:
https://lists.openembedded.org/g/openembedded-devel/message/98293



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This will make it easier to maintain reflecting the same distro check on
packages depending on classpath (in the dependency chain)

The patch is waiting upstream inclusion in the kirkstone branch:
https://lists.openembedded.org/g/openembedded-devel/message/98292



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Description of the current status of Modbus integration in Oniro. Brief
context on Modbus itself before going into the details how to enable it
in Oniro and using the offered testing tools.

Closes: eclipse/oniro-core/docs#11



Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

The libmodbus project does not offer examples of library usage in their
distribution. To make the life easier for Oniro integrators and
developers we provide a basic set of examples to get a head-start when
developing an application using libmodbus.

The scope for these examples is Oniro, so the recipe here is not
targeted at staging (I have no plans to upstream this), but at the
meta-oniro-core layer.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

default.xml: Bump upstream revisions

See merge request !290

runqemu's nographic option sets qemu argument `display` to `none` and
this allows to use runqemu script in headless environment (without X11)
Using nographic qemuparam doesn't affect display setting and `sdl` is
used which causes `Could not initialize SDL(x11 not available) -
exiting` error

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

This is needed for building nativesdk-hdc in meta-openharmony.

Signed-off-by: Esben Haabendal <esben.haabendal@huawei.com>

Patch has been merged upstream:
* 6063ad1 : podman: Rename podman-rootless.conf sysctl file to aid
  overrides - Andrei Gherzan

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 5be5485 : skopeo: Mark CVE-2019-10214 as fixed - Andrei Gherzan
* 6063ad1 : podman: Rename podman-rootless.conf sysctl file to aid overrides - Andrei Gherzan

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 1a74be5 : cryptfs-tpm2: fix ld warnings with binutils 2.39 - Kai Kang

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 54ee67b : vim: Upgrade 9.0.0115 -> 9.0.0242 - Richard Purdie
* 7709a8c : packagegroup-self-hosted: update for strace - Kai Kang
* 9661656 : create-spdx: handle links to inaccessible locations - Peter Marko
* 099e000 : linux-yocto: prepend the the value with a space when append to KERNEL_EXTRA_ARGS - Jose Quaresma
* 00337a5 : apt: fix nativesdk-apt build failure during the second time build - Changqing Li
* 2556d0b : archiver.bbclass: some recipes that uses the kernelsrc bbclass uses the shared source - Jose Quaresma
* 6d1beda : perf: Fix reproducibility issues with 5.19 onwards - Richard Purdie
* ed0cbea : libpam: use /run instead of /var/run in systemd tmpfiles - Beniamin Sandu
* a5555a2 : tcp-wrappers: Fix implicit-function-declaration warnings - Khem Raj
* 123f04b : cracklib: Drop using register keyword - Khem Raj
* 3e1c254 : python3-pip: Fix RDEPENDS after the update - Daiane Angolini
* 4579002 : weston: upgrade 10.0.1 -> 10.0.2 - Alexander Kanavin
* c13a40b : webkitgtk: upgrade 2.36.4 -> 2.36.5 - Alexander Kanavin
* 63b38e5 : mobile-broadband-provider-info: upgrade 20220511 -> 20220725 - Alexander Kanavin
* 8dc75fd : libwebp: upgrade 1.2.2 -> 1.2.3 - Alexander Kanavin
* 70cd3c0 : libcap: upgrade 2.64 -> 2.65 - Alexander Kanavin
* b23e43e : libcap: upgrade 2.63 -> 2.64 - wangmy
* 2d0254a : iso-codes: upgrade 4.10.0 -> 4.11.0 - Alexander Kanavin
* 56b8dbf : ell: upgrade 0.49 -> 0.50 - Alexander Kanavin
* 89feb5d : libwpe: upgrade 1.12.0 -> 1.12.2 - Alexander Kanavin
* 4fdb3d4 : bluez5: update 5.64 -> 5.65 - Alexander Kanavin
* 5acea6e : go: update v1.17.12 -> v1.17.13 - Sakib Sajal
* 057a6f8 : cve-check: Don't use f-strings - Ernst Sjöstrand
* 5e99aaa : grub2: fix several CVEs - Yongxin Liu
* 8123b22 : u-boot: fix CVE-2022-33967 - Sakib Sajal
* db5212c : u-boot: fix CVE-2022-30552 - Sakib Sajal
* ea0d6f2 : connman: Backports for security fixes - Khem Raj
* a2806f2 : libxml2: Ignore CVE-2016-3709 - Khem Raj
* 4ad7470 : libtiff: CVE-2022-34526 A stack overflow was discovered - Hitendra Prajapati

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* bc85c04 : runqueue: Change pressure file warning to a note - Richard Purdie

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Drop the 0001-libsanitizer-cherry-pick patch as it is no longer
needed with 12.2.

Submitted upstream at
https://lists.openembedded.org/g/openembedded-core/message/169719



Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

This is in sync with openembedded-core
commit a2f52f6f698a1073f264dfb8afcdb4dcbcec6be8

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

All qemu targets miss information regarding login and how to shutdown
the qemu. Add a reference to the section in linux flavour that contains
this information.

Signed-off-by: Luca Seritan <luca.seritan@huawei.com>

The linux flavour page contains information about the login and qemu
usage which is useful for all build targets. To avoid duplication and
more easily maintain changes to this information, separate this into
a section that can be referenced at need.

Signed-off-by: Luca Seritan <luca.seritan@huawei.com>

Grzegorz Gwóźdź authored 2 years ago and Stefan Schmidt committed 2 years ago

We will not support those two machines in the future so that is why we remove them

Signed-off-by: Grzegorz Gwóźdź <grzegorz.gwozdz@huawei.com>

The oniro-bundle-base recipe can be used to build a RAUC update bundle
corresponding to the oniro-image-base. By including this in the conf-notes.txt
file we surface this information where more users will see it.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

The new QEMU ARM machines all use EFI/GRUB and act and behave like a typcal
x86_64 box would. In addition, re-order the entries so that physical machines
and virtual machines are clustered together, and in the same order.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

The Oniro pipeline is a bit special, because it has to cope with several layers
of git repositories. On one hand side oniro.git uses git-repo manifests, this
presents the first complexity of a branch trying to change the manifest that
needs special care to test correctly (so that the test correctly verifies the
change, rather than previous, known-good commit). On the other hand side it can
be used as a reusable pipeline in other repositories that are described by the
manifest naturally have distinct projects with their own pipelines.

As a sort-of special case, oniro.git fits both of those conditions. Changes to
oniro.git need to both replace the manifest checkout stage (repo init && repo
sync) _and_ replace what the manifest would have checked out to instead use
what GitLab wants to check out inside $CI_PROJECT_DIR.

This presents us with a puzzle, what _did_ GitLab runner do? What exactly is
checked out in $CI_PROJECT_DIR? This depends on project settings, pipeline type
and perhaps other things we have yet to encounter.

Instead of trying to correctly model all the variants, let's do something
stupid and brutal, but correct. When the pipeline indicates that manifest
element needs to be replaced by setting $CI_ONIRO_GIT_REPO_PATH to a non-empty
value then remove the git checkout prepared by git-repo and replace it with a
symbolic link to $CI_PROJECT_DIR.

This allows us to work with merge trains, pipelines for branches and pipelines
for merge requests all at the same time.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Bernhard Rosenkränzer authored 2 years ago and Stefan Schmidt committed 2 years ago

Update documentation on building with openharmony support after
!250
and
https://gitlab.eclipse.org/eclipse/oniro-core/meta-openharmony/-/merge_requests/65


have landed

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Marta Rybczynska authored 2 years ago and Pavel Zhukov committed 2 years ago

Enable TPM-related distro features. We're interested in TPM2, so
we need to enable both tpm and tpm2.

Also enable security dependencies. The dependency on meta-security
we have already had before, now add also tpm and tpm2 as we enable
the feature.

As a next step we need to enable related MACHINE_FEATURES for the
machines TPM (or software TPM) is available.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

Marta Rybczynska authored 2 years ago and Pavel Zhukov committed 2 years ago

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

Marta Rybczynska authored 2 years ago and Pavel Zhukov committed 2 years ago

Add LEDGE forks with kirkstone-related changes. We use forks because
the meta-ts layer doesn't have kirkstone support yet,
and meta-ledge-secure has some dependencies we do not need right now
(especially meta-selinux). Discussions for the two layers are in
progress, but may still take some time. When all our required changes
are upstream, we may switch to using the upstream directly.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>