Zygmunt Krynicki authored 3 years ago and Stefan Schmidt committed 3 years ago

The update bundle is built with the new hidden job .build-rauc-bundle.
The job is documented and instantiated in the main pipeline.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Zygmunt Krynicki authored 3 years ago and Stefan Schmidt committed 3 years ago

In retrospective I think I've misunderstood the compatible string to
mean "what is the image we expect" vs "what is the hardware we expect".
By setting the compatible string to describe the hardware, we get the
ability to restrict images for genuinely incompatible hardware without
locking down ability to move to other software images.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Zygmunt Krynicki authored 3 years ago and Stefan Schmidt committed 3 years ago

The oniro-bundle-base recipe creates a RAUC update bundle corresponding
to oniro-image-base. At the moment the recipe is only compatible with
Raspberry Pi 4.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Francesco Pham authored 3 years ago and Stefan Schmidt committed 3 years ago

Adding ovmf to runqemu commands since we switched to GRUB+EFI as boot solution. 

Without this argument it does not boot properly and remains stuck in "Booting from Hard Disk..."

Signed-off-by: Francesco Pham <francesco.pham@huawei.com>

Zygmunt Krynicki authored 3 years ago and Andrei Gherzan committed 3 years ago

Make sure that GRUB can load squashfs, so that it can mount the system
image and load the kernel, or other modules, from there directly.

Closes: https://booting.oniroproject.org/distro/oniro/-/issues/243



Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Add modeprobe.bb recipe
Create oniro-kernel-mod.conf as the modprob config file
Update packagegroup-oniro-core.bb to account for the new recipe

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Fix typo in net.ipv4.config.default.log_martians (now conf)

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Add option to not send ICMP redirects messages.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Zygmunt Krynicki authored 3 years ago and Andrei Gherzan committed 3 years ago

The rootfs already contains kernel modules so updating the image without
updating the kernel would cause a skew that would most likely prevent
the system from working.

On some platforms the kernel must be in a special area, as the
bootloader is more limited or closed, and the update process needs to
copy it to make progress.

On other platforms, we can use a more capable bootloader to load the
kernel from the rootfs directly. For all such platforms we want to add
the kernel-image package to the base oniro dependencies.

The kernel-image package is somewhat suboptimal, as ideally we would put
the kernel image into the root directory, making the /boot directory an
empty mount point for the boot partition.

Since doing this exceeds my skills and patience, the second best thing
will do.

Closes: https://booting.oniroproject.org/distro/oniro/-/issues/240



Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Pavel Zhukov authored 3 years ago and Andrei Gherzan committed 3 years ago

/var/run is a symlink to /run nowadays.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Add recipe for zenohd and zenoh-c

zenohd: installs the zenohd binary which is the executable for 
the zenoh router and provides support for zenoh communication 
routing and storage capabilities. 
Tested by running: `zenohd --plugin-search-dir /usr/lib`

zenoh-c: Zenoh C client library into a Yocto recipe that can be 
invoked as needed by applications.
The library has been tested and the zenoh primitives such as: pub, 
sub, put, get, scout.. appear to be working correctly.

Closes: https://git.ostc-eu.org/OSTC/planning/core-os/-/issues/242



Signed-off-by: Francesco Pham <francesco.pham@huawei.com>
.

This file is now entirely replaced by x-gpt-efi-disk.wks.in

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Similar to how the SECO board was handled, the QEMU x86 machine can now
use EFI and GRUB correctly. This change is split over three parts,
MACHINE_FEATURES is modified to enable efi, WKS_FILE_DEPENDS to build
EFI firmware and lastly WKS_FILE to pick the new unified kick-start
file.

This was tested with:

        qemu-system-i386 -cpu IvyBridge -machine q35 -bios ovmf.qcow2 \
                oniro-image-base-qemux86.wic -m 1024 -nographic

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Similar to how the SECO board was handled, the QEMU x86-64 machine can
now use EFI and GRUB correctly. This change is split over three parts,
MACHINE_FEATURES is modified to enable efi, WKS_FILE_DEPENDS to build
EFI firmware and lastly WKS_FILE to pick the new unified kick-start
file.

This was tested with:

        qemu-system-x86_64 -cpu IvyBridge -machine q35 -bios ovmf.qcow2 \
                oniro-image-base-qemux86-64.wic -m 1024 -nographic

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

This, coupled with the earlier EFI_PROVIDER change allows the generated
disk image to correctly boot with GRUB under QEMU/EFI. There is some
loss of functionality: the early-boot microcode patch system is gone,
for the moment, until we figure out how to bring it back with improved
and unified GRUB configuration files.

This was tested with:

        qemu-system-x86_64 -cpu IvyBridge -machine q35 -bios ovmf.qcow2 \
                oniro-image-base-seco-intel-b68.wic -m 1024 -nographic

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

This file is derived from QEMU+EFI file we already have while having
wider scope of supporting both virtual and physical machines alike.

The partition table is GPT and the boot system is based on EFI. The
EFI_PROVIDER variable can be used to select either grub or systemd-boot.

Over time the qemu-specific workspace files will be deprecated and
removed. This step makes the transition easier to process.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Prefer GRUB as the EFI provider.

The SysOTA+RAUC stack supports GRUB as the point of integration. This is
caused by both RAUC downstream support for GRUB and GRUB's ability to
load the kernel from a squashfs image.

In addition, add TODO about GRUB and microcode updates

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

While doing other maintenance in this area I've noticed that some
kickstart files use hard-coded timeout values instead of the
WIC_BOOTLOADER_TIMEOUT variable defined by Oniro.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Robert Drab authored 3 years ago and Andrei Gherzan committed 3 years ago

OpenHarmony build system is causing duplicate definition error when the native
and target toolchain definitions are together with the cflags targets.

Signed-off-by: robert.drab <robert.drab@huawei.com>

One too many O's.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Signed-off-by: NawabAhmad <nawab.ahmad.reshi@huawei.com>

Zygmunt Krynicki authored 3 years ago and Zygmunt Krynicki committed 3 years ago

This version of SysOTA is capable of network updates and rollbacks and
seems feature complete. It has some missing tests and validation of
non-essential properties.

The package is now both stateful and configurable. Configuration is
persisted in /etc/sysota. This allows a device to remember the location
and settings of the update server.

The new sysotactl executable allows configuring the update service and
performing updates. The executable is a symbolic link to sysota-mux. The
sysotad executable is also converted to a symbolic link to the mux
binary.

The default configuration files name the device and model as Oniro
Project Reference Device. Raspberry Pi is named more precisely.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Upstream fixes for mkdir_safe_internal and chase_symlinks_and_stat which
allow to create subdirectories whose path contains symlink.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Since ...

commit b68c4c76dbc294ca5ef1139e57689a9b005e22bd
Author: Christian Eggers <ceggers@arri.de>
Date:   Fri Jul 17 10:55:21 2020 +0200
    networkmanager: Package nmcli separately

... nmcli is packaged separately which made us drop it after the
kirkstone update. Bring it back by explicitely pulling it in the
packagegroup.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This includes fixes for the git protocol deprecation when using GitLab
URLs in SRC_URI.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Both layers are currently only targeting the linux flavour so we can
disable the warnings for the flavours where they are not in scope.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Both layers are currently only targeting the linux flavour so we can
disable the warnings for the flavours where they are not in scope.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This renames was introduce in oe-core as part of:

commit f5f97d33a1703d75b9fd9760f2c7767081538e00
Author: Ross Burton <ross@burtonini.com>
Date:   Thu Sep 10 22:04:13 2020 +0100
    cve-update-db-native: use fetch task

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Upstream now handles the dependecies of croco, glib and libxml through
PACKAGECONFIG (enabling external support by default).

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

With the master/kirkstone update, the rootfs grew by around 0.5G.
Accomodate this growth for now in the wic configuration.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>