Artem Kondratiuk authored 2 years ago and Artem Kondratiuk committed 2 years ago

Signed-off-by: artem.kondratiuk <artem.kondratiuk@huawei.com>

    manifests/default.xml:      Add new project meta-seco-rockchip
    local.conf.sample:          Add seco-px30-d23 to MACHINE
    bblayers.conf.sample:       Add meta-seco-rockchip layer to BBLAYERS
    conf-notes.txt              Add seco-px30-d23 to supported machines
    machines-and-flavours.yaml  Add linux-seco-px30-d23 and linux-seco-px30-d23-extra jobs
    linux-flavour.rst:          Add seco-px30-d23 to supported machines
    machines-and-flavours.rst   Add linux-seco-px30-d23 job
    boards/index.rst            Add seco-px30-d23 to supported boards

    Add the seco-px30-d23.rst file representing the new Seco's
    JUNO board (SBC-D23) in the oniro project.

Signed-off-by: Natalia Kovalenko <waykovalenko@gmail.com>

Use squad build ID to query test pass percentage.

The lava-badge job is only needed by scheduled pipeline as calculating
pass rate of full testing makes more sense. Enabling the job here for
MR in draft status is mainly for debugging purpose.

Signed-off-by: Chase Qi <chase.qi@linaro.org>

This reverts commit a180a4b8.

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Artem Kondratiuk authored 2 years ago and Pawel Stankiewicz committed 2 years ago

Signed-off-by: artem.kondratiuk <artem.kondratiuk@huawei.com>

These will, as other LAVA jobs, end up in SQUAD and, consequently,
in LAVA. It's basic tests on QEMU, running `rauc status` and `rauc
install bundle` commands and validating output.

Signed-off-by: Stevan Radaković <stevan.radakovic@linaro.org>

Standard and OpenHarmony-compatible images require different
documentation for running a qemu-based system. Restructure quilck build
document to clarify this.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

There is an incompatibility issue between the sphinx version in Ubuntu
focal and the docutils version pulled in by sphinx-tabs. We need to make
sure that pip doesn't pull in a version of docutils that would break
sphinx:

https://github.com/sphinx-doc/sphinx/issues/9841



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The Ubuntu version we downgraded to doesn't have support for
sphinx-tabs. Switch that to pip until we can upgrade to 22.04.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The currently used version, impish, is not updatable anymore since July
the 14th and we don't have a newer version in our repository. Downgrade
this to focal to fix the container image builds.

Fixes: #724


Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

To help Oniro with
eclipsefdn/helpdesk#1565, EF created
a bot for us that is passing the ECA checks. Use it to unblock the docs
pipelines.

Fixes: #723


Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Chase Qi authored 2 years ago and Stefan Schmidt committed 2 years ago

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Chase Qi authored 2 years ago and Stefan Schmidt committed 2 years ago

Check the current version with `bitbake -s` and the last tested version
via squad's api. When version is changed, continue the following tests,
otherwise, skip the tests.

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Chase Qi authored 2 years ago and Stefan Schmidt committed 2 years ago

gcc test suite has been integrated in oe-selftest framework. It allows
to run gcc test against qemu vm and within the build env using qemu
linux-user mode.

These tests can be run in gitlab CI with qemu friendly runners. This
commit add three oe-selftest jobs to run the tests using qemu
linux-user, qemu x86-64 vm and qemu arm64 vm.

Test log and sum files are collected as job artifacts.

When all test jobs finish, report job will be triggered to parse the
sum files to generate results in the format that supported by squad. The
report job will upload results to squad for reporting.

Closes issues #8 and #9.

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Enable a modem/usbmodem MACHINE_FEATURE to install the needed packages
for NetworkManager and ModemManager in the image. Also enabling the
ModemManager PACKAGECONFIG for NetworkManager to build the needed support.

Fixes: #60



Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Pavel Zhukov authored 2 years ago and Andrei Gherzan committed 2 years ago

We need to analyse ABI and keep ABI data for different images/arches
thus artifact name should be job specific

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Pavel Zhukov authored 2 years ago and Andrei Gherzan committed 2 years ago

It was broken because of BITBAKE_TMPDIR variable definition removal as
part of the cleanup. Define BITBAKE_TOPDIR variable instead which serves
needs of ABI checker better.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The most important elements of this include file is the OpenHarmony
version definition along with the associated preferred version.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This is required on recipes like
oniro-openharmony-toolchain-integration provided by meta-openharmony.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This avoids build warnings and it is in line with what meta-openharmony
is using.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

* 78fce73 : arm/lib: Improve FVPRunner shutdown logic - Peter Hoyes

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* ea42364 : class: bundle: support incremental image property - Jan Luebbe

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* c79262a : meta-integrity: kernel-modsign: prevents splitting out debug symbols - Jose Quaresma
* e54e064 : clamav: make install owner match the added user name - Jeremy A. Puhlman
* c29ef97 : python3-privacyidea: add correct path to lib/privacyidea - Jeremy A. Puhlman
* ab90048 : libmhash: add multilib header - Jeremy A. Puhlman
* 7e3596e : sssd: ignore CVE-2018-16838 - Davide Gardenal

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* 2e785f2 : Merge pull request #1139 from Freescale/backport-1138-to-kirkstone - Otavio Salvador
* ded83a4 : conf/machine/ls1046ardb.conf: Add DTB fsl-ls1046a-rdb-usdpaa-shared.dtb - Jun Zhu

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* a47ef04 : openflow: ignore unrelated CVEs - Davide Gardenal
* 4b4c6f4 : freeradius: ignore patched CVEs - Davide Gardenal
* b7c6c47 : quagga: ignore CVE-2016-4049 - Davide Gardenal
* 66106e1 : spice: ignore patched CVEs - Davide Gardenal
* 5166896 : thrift: add CVE_PRODUCT to fix CVE reporting - Davide Gardenal
* 7e1a69d : wireshark: upgrade 3.4.11 -> 3.4.12 - Davide Gardenal
* 743f6e7 : ntp: ignore many CVEs - Davide Gardenal
* c1e7b0b : openflow: ignore CVE-2018-1078 - Davide Gardenal
* 9bb4434 : usrsctp: add CVE_VERSION to correctly check for CVEs - Davide Gardenal
* 0af58eb : zabbix: upgrade 5.2.6 -> 5.4.12 - Changqing Li
* d1e28ae : apache2: upgrade 2.4.53 -> 2.4.54 - Changqing Li
* ffe6e46 : redis: upgrade 7.0-rc3 -> 7.0.2 - Changqing Li
* b109169 : redis: upgrade 6.2.6 -> 6.2.7 - Changqing Li

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Zygmunt Krynicki authored 2 years ago and Stefan Schmidt committed 2 years ago

Some jobs care about images and licenses, those look at the
$TMPDIR/deploy, taking some effort to find the correct tmpdir while
hard-coding the deploy dir. Take a shortcut and query for the right
variable (DEPLOY_DIR).

This allows non-trivial layouts with DEPLOY_DIR and TMPDIR placed on
distinct filesystems, for efficiency.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Pavel Zhukov authored 2 years ago and Stefan Schmidt committed 2 years ago

ABI checker implementation is meta-binaryaudit. Adding it for CI only
to not extend support surface of the project.
Added to three flavours for now. It can be easily extended to all jobs
if needed in the future

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Part of gcc oeself-test is client/server based. It uses qemu vm for
native tests via ssh. The vm is launched by runqemu command which
requires the following changes in the docker image.

* passwordless sudo permission
* package iptables pre-installed

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Oniro documentation recommends using of slirp option to have
network connection from/to the image in qemu. Adjust conf-notes.txt
to be consistent with the docs.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

The default compression has been changed from bzip to gz. Update
leftovers accordingly

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

The reference is provided only when repo is used with runner persistent
storage. This is not a major change, just a clean-up of the existing
logic.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Add basic documentation for the debug mode.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

Capitalize the title to match other chapter titles.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

Document the change in the default user/password for the production
images.

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>

The old GPLv2 identifier has been deprecated in oe-core. Time to catch
up with this recipe.

Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Fix for CVE-2022-33068 brings a regression in clang builds.
Fixes in upstream with fixup commit.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

* b9bbc38 : protobuf-c: update to 1.4.1 fix CVE-2022-33070 - Wentao Zhang
* 6d1dbf7 : modemmanager: update to 1.18.8 - Adrian Freihofer
* 2dd643a : imagemagick: upgrade 7.0.10-25 -> 7.0.10-62 - Davide Gardenal
* 4eaa309 : ntfs-3g-ntfsprogs: upgrade to 2022.5.17 - Chen Qi
* 1a09e4f : php: upgrade 8.1.6 -> 8.1.7 - wangmy
* e5b177a : cyrus-sasl: CVE-2022-24407 failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands - Hitendra Prajapati
* bf2822d : dlt-daemon: upgrade to commit 6a3bd901d8 to fix CVE-2022-31291 - Yue Tao
* 97375c7 : emlog: ignore unrelated CVEs - Davide Gardenal
* c455cba : freeradius: mutlilib fixes - Jeremy Puhlman

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>