This reflects the CI reality in the docs.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This also includes a set of additional small tweaks:
1. formatting and small rewarding
2. explicitly use the kitkstone branch for repo init (this avoids
confusion and also saves us from repo edge cases where the default one
is ignored)

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The file was refreshed using the script and generic project-wide text
available in
https://gitlab.eclipse.org/eclipse/oniro-core/docs/-/tree/main/contributing

.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This change makes the git operations reference the project's name and a
generic project CI email.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The EF infrastructure (GitLab) doesn't support image registry. This
change switches the container images to use the OSTC registry while
EF catches up[1].

[1] eclipsefdn/helpdesk#1108



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The relevant repository was now migrated to EF Gitlab so reflect that in
the comments mentioning the Dockerfiles.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This change tweaks the CI comments and references to the EF migrated
repositories.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Some projects rely on additional tools, which are not used by the GN itself,
like readelf of strip being present in the GN toolchain definition and
therefore gn.bbclass should expose those as they are provided in the bitbake
build environment.

Signed-off-by: Robert Drab <robert.drab@huawei.com>

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Right now, we do a remove in DISTRO_FEATURES, that, while we don't
neccessarily support them, due to the finality of :remove we force our
end users to not use them either.

By moving DISTRO_FEATURES:remove to DEFAULT_DISTRO_FEATURES:remove, we
allow end users to still use oniro.conf but add in those removed
features.

We also move IMAGE_FEATURES from a distro level var to the image.
IMAGE_FEATURES should generally be put in image recipes. This also gives
end users a way to use Oniro and work around our :remove defaults.

Signed-off-by: Eilís Ní Fhlannagáin <pidge@pidge.org>

Chase Qi authored 2 years ago and Andrei Gherzan committed 2 years ago

Fail lava-report if incomplete job found. Allow lava-report to fail to
run the downstream lava-badage job.

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: Robert Drab <robert.drab@huawei.com>

This reverts commit 82e0bd85.

The build directory is created in the do_configure task that is executing GN
which relies on the build directory check. The os.path.samefile() raises an
exception when os.stat() fails and therefore cannot be used to compare paths
of non-existing directories.

Signed-off-by: Robert Drab <robert.drab@huawei.com>

Signed-off-by: Robert Drab <robert.drab@huawei.com>

Currently only the case where GN_TARGET_ARCH_NAME variable is undefined was
caught. The variable defined as an empty string would bypass the check.

Signed-off-by: Robert Drab <robert.drab@huawei.com>

Chase Qi authored 2 years ago and Andrei Gherzan committed 2 years ago

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Chase Qi authored 2 years ago and Andrei Gherzan committed 2 years ago

Add the recipe to `-base-tests` image for kselftest.

Add kernel-selftest.bbappend to install the kselftest runner scripts
and also make it compatible with libc-musl.

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Francesco Pham authored 2 years ago and Stefan Schmidt committed 2 years ago

- convert to kirkstone override syntax
- restrict example package to include only examples directory

Signed-off-by: Francesco Pham <francesco.pham@huawei.com>

This provides a gn_base.bbclass which can be used instead of gn.bbclass in
recipes where a different method for managing toolchain configuration is used.

Note, any recipes calling gn_do_configure or gn_do_compile will need to call the
new gn_base_do_configure and gn_base_do_compile respectively instead.

Signed-off-by: Esben Haabendal <esben.haabendal@huawei.com>

According to discussions with upstream the focus has now moved
towards stabilization. Making sure we update from time to time to
include these bug fixes until there is a 1.0 release at some point
this year.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

This patch has been submitted upstream now.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Only re-ordering of lines, no functionality changes.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

The main changes are the update to a newer upstream revision and the
switch to using the cmake build system of openthread. We also disabled
the fetch of external git submodules in third party to reduce the code
and involved licenses (which are not needed for the posix build).

Last but not least Thread 1.2 and spinel reset connection have been
enabled to work better with the meta-zephyr generated firmware images on
the radios.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Only re-ordering of lines, no functionality changes.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

This project is pretty inactive and the bump to HEAD does only include
two patches. The security fix we already carried localy and a
documentation update without any impact on the code.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Fix override for op-tee preferred version.
This will build the right op-tee recipe,
which contains the necessary configurations for the
board with 4Gb of RAM

Signed-off-by: Natalia Kovalenko <waykovalenko@gmail.com>

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Read-only Oniro images now have space to provision rauc-hawkbit-updater
configuration file. The startup of the update service is conditional on
the presence of that file. The default configuration file is stored as
an example in the read-only image.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

This fixes a crash on NULL pointer on startup.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Closes #487

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The EF infrastructure (GitLab) doesn't support image registry. This
moves the CI logic of building and deploying all the container images to
the OSTC instance while EF catches up[1].

[1] eclipsefdn/helpdesk#1108



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

The new revision does offer more Thread 1.2 features we are starting to
use now. One patch got obsolete and the number of third_party modules
was reduced (and with it the number of license files and licenses).

An additional fix is needed for the systemd unit file to start.

Fixes: #38



Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

drop mbedtls patch because mbedtls has been updated to v2.28.0 in oe-core

-Wformat-truncation level has been reduces upstream so this patch is not necessary anymore: 
https://github.com/Mbed-TLS/mbedtls/commit/2065a8d8af27c6cb1e40c9462b5933336dca7434



Signed-off-by: Francesco Pham <francesco.pham@huawei.com>

This patch implements the YAML output for CVE-check and re-implements
the coverage pass using this format (also simplifies the logic).

Add an option to output the CVE check in a JSON-based format.
This format is easier to parse in software than the original
text-based one and allows post-processing by other tools.

Output formats are now handed by CVE_CHECK_FORMAT_TEXT and
CVE_CHECK_FORMAT_JSON. Both of them are enabled by default.

The JSON output format gets generated in a similar way to the
text format with the exception of the manifest: appending to
JSON arrays requires parsing the file. Because of that we
first write JSON fragments and then assemble them in one pass
at the end.

Until now the CVE checker was giving information about CVEs found for
a product (or more products) contained in a recipe. However, there was
no easy way to find out which products or recipes have no CVEs. Having
no reported CVEs might mean there are simply none, but can also mean
a product name (CPE) mismatch.

This patch adds CVE_CHECK_COVERAGE option enabling a new type of
statistics. Then we use the new JSON format to report the information.
The legacy text mode report does not contain it.

This option is expected to help with an identification of recipes with
mismatched CPEs, issues in the database and more.

This work is based on [1], but adding the JSON format makes it easier
to implement, without additional result files.

[1] https://lists.openembedded.org/g/openembedded-core/message/159873

This is a backported version of two patches submitted upstream:
https://lists.openembedded.org/g/openembedded-core/message/163745 and
https://lists.openembedded.org/g/openembedded-core/message/163746



The difference is that we bring back the yaml merge function that is
in the lib/ directory in the upstream proposal.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

Update the class to OE-core 6002bdc77643c363a8326bf163baecba8b36e3e0.

This includes:
- inclusive language changes
- the rework of the database lock

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

This avoids warnings like:

warning: redirecting to
https://gitlab.eclipse.org/eclipse/oniro-core/oniro.git/



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>