Enable a modem/usbmodem MACHINE_FEATURE to install the needed packages
for NetworkManager and ModemManager in the image. Also enabling the
ModemManager PACKAGECONFIG for NetworkManager to build the needed support.

Fixes: eclipse/oniro-core/oniro#60



Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com>

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

The most important elements of this include file is the OpenHarmony
version definition along with the associated preferred version.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This is required on recipes like
oniro-openharmony-toolchain-integration provided by meta-openharmony.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

This avoids build warnings and it is in line with what meta-openharmony
is using.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

oe-core recommends openssh-sftp-server since [1] this causes conflict
between openssh and dropbear when -tests image is building.
This happens because openssh-ptest is pulled in as complementary package
of openssh-sftp-server
Adding openssh to PACKAGE_EXCLUDE_COMPLEMENTARY excluded openssh from
the list. As a downside of this openssh-ptest,  -dev or -dbg packages
will not be installed using install_complementary and have to be
installed manually (IMAGE_INSTALL:append or similar).
Proper fix should go to oe-core (use -O flag to switch back to old scp
protocol if newer openssh server is used) however it's not clear if
openssh will keep this feature.

Upstream-Bug: https://bugzilla.yoctoproject.org/show_bug.cgi?id=14858

Fixes:
Error:
 Problem: problem with installed package dropbear-2020.81-r0.cortexa53_crypto
  - package dropbear-2020.81-r0.cortexa53_crypto conflicts with openssh provided by openssh-8.9p1-r0.cortexa53_crypto
  - package openssh-8.9p1-r0.cortexa53_crypto conflicts with dropbear provided by dropbear-2020.81-r0.cortexa53_crypto
  - package openssh-ptest-8.9p1-r0.cortexa53_crypto requires openssh, but none of the providers can be installed
  - conflicting requests
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages)

[1] https://git.openembedded.org/openembedded-core/commit/?id=a98188e83b2c027d99cc38e3367e1ec2a98efbb0



Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

The rootfs size is no more affected by the debug mode, the reverted
commit has no purpose now.

This reverts commit 7a5149bc.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

oniro-image-base-tests and oniro-image-extra-tests needs
an empty root password to correctly run their tests, this
is enabled by debug-tweaks.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Apache-2.0 licensed patches can't be applied to (L)GPL 2.x code
without legal issues.
These patches should have been under the same license as the
upstream project in the first place.

Thanks to shoragan for spotting this.

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Building the base test image with debug mode enabled returns the below
error.

```
ERROR: File system image of partition / is larger (2269180 kB) than its
allowed size 2097152 kB.
```

Increasing rootfs size to 2500M solves the issue.

Signed-off-by: Chase Qi <chase.qi@linaro.org>

Create bbclass files in meta-oniro-core
that enable the user to activate the debug mode
in local.conf.

Activating it is equivalent to build -dev images
as of this commit.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

oniro-user is a class that can be inherited in local.conf
and it adds a user named oniro with default password oniro.
The class also installs sudo and adds oniro to the suders.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

When sysota is built with toolchain-clang broken dynamicaly linked
binary file is produced [1] if shared linking (GO_DYNLINK) is disabled.
As the result strip phase of do_packages fails with [2]
Sysota is built with disabled shared linking because of another bug [3]
The problem with stripping can be fixed with specifying external linker
for clang toolchain (by default Go swutched to internal linker on 64bit
arches if -pie has been specified since version 1.15 [4] ).
Limiting this change to clang only to be safe.

[1] **readelf: Error: no .dynamic section in the dynamic segment**

[2] Subprocess output:x86_64-oniro-linux-llvm-strip: error: SHT_STRTAB
        string table section [index 7] is non-null terminated

[3] sysota#7

[4] https://go.dev/doc/go1.15#linker



Fixes: #624

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

The change (disable systemd+musl warning)  is distro specific
and not going to be upstream'ed.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Re-allow overriding of TCLIBC via local.conf/shell env.
Upstream part has been merged into kirkstone branch:
oe-core:e30ef926e440b505e93e404c056034d86364a241

Fixes: #608

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

This helps with rebases on newer oe-core and helps avoiding
redundant/duplicated patches

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Pavel Zhukov authored 2 years ago and Stefan Schmidt committed 2 years ago

The change has been implemented upstream in d28d84c5b43ffcc312808af085d949e403805aca

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Ettore Chimenti authored 2 years ago and Stevan Radaković committed 2 years ago

In some configuration in SECO-B68 (using a USB drive or sata),
it can happen that boot devices do not show up. It needs 'rootwait'
to prevent panic.

Signed-off-by: Ettore Chimenti <ettore.chimenti@seco.com>

Davide Gardenal authored 2 years ago and Pavel Zhukov committed 2 years ago

The following patches are now in oe-core so we can delete them:
 - ovmf/0001-edk2-BaseTools-gcc12.patch
 - ovmf/0002-edk2-LZMA-gcc12.patch

openembedded-core update includes:
e63013cc38 gcc: Upgrade to 11.3 release
1887a69a17 rust-common: Fix native signature dependency issues
cf7c1cde3a rust-common: Drop LLVM_TARGET and simplify
a4886f02df rust-common: Fix for target definitions returning 'NoneType' for arm
84e891d812 rust-common: Ensure sstate signatures have correct dependencues for do_rust_gen_targets
424b81ae68 rust-common: Fix sstate signatures between arm hf and non-hf
d28d84c5b4 ovmf: Fix native build with gcc-12
bbb7dcb461 pciutils: avoid lspci conflict with busybox
d96022a389 insane.bbclass: make sure to close .patch files
b34aaa9acb libseccomp: Add missing files for ptests
bd72b15e9a staging.bbclass: process direct dependencies in deterministic order
8d5f5823b3 mesa.inc: package 00-radv-defaults.conf
862c1b109c ncurses: update to patchlevel 20220423
9cf49b4f07 libpcre2: upgrade 10.39 -> 10.40
02982668ac linux-yocto/5.10: update to v5.10.114
7d734c95ba linux-yocto/5.15: update to v5.15.38
96ed22ed1e linux-yocto/5.10: update to v5.10.113
90628b9bbc linux-yocto/5.15: update to v5.15.37
8fd6a9f521 cve-check: Allow warnings to be disabled
726ce5bf1e cve-extra-exclusions: Add kernel CVEs
65498411d7 cve-check: Only include installed packages for rootfs manifest
af227e0c62 cve-check: Add helper for symlink handling
637d6ff44b cve-check.bbclass: Added do_populate_sdk[recrdeptask].
82f4186ec0 libxslt: Mark CVE-2022-29824 as not applying
95f1c5d0bb tiff: Add jbig PACKAGECONFIG and clarify CVE-2022-1210
c703b970f6 vim: Upgrade 8.2.4912 -> 8.2.5034 to fix 9 CVEs

meta-openembedded update includes:
fcc7d7eae python3-matplotlib: add missing dependency
4e66373fe devmem2: the source and patches moved to github repo
17da928a8 python3-speedtest-cli: fix RDEPENDS
18a923d20 sdbus-c++-libsystemd: Fix patch fuzz
99496d2b3 sdbus-c++: Link with libatomic for rv32
9a2029553 sdbus-c++: Link with libatomic on mips/ppc32
16f08eb5a conntrack-tools: fix postinst script
db3a802f8 graphviz: rrecommends on liberation-fonts
79e28d1c8 libportal: add distro features check
442af705f unattended-upgrades: Disable auto-detecting modules
4895c4d65 mariadb: Fix i386 Clang builds
367e8927b mariadb: update to 10.7.4
ff3a018b2 libmtp: Add doxygen-native dependency in case documentation build is enabled in PACKAGECONFIG. This fixes a FTBFS due to missing dependency.
b23cd1031 sdbus-c++-libsystemd: Bump SRCREV to last commit of 250-stable branch
133d2c200 postgresql: upgrade 14.2 -> 14.3
71613a9fa php: upgrade 8.1.5 -> 8.1.6
7566c789d php: upgrade 8.1.4 -> 8.1.5
a104444d2 python3-wxgtk4: backport patch to fix svg issue
2c051c65a jq: Fix typo OE_EXTRACONF -> EXTRA_OECONF
6104aead9 libcamera: fix packaging
0b7836265 bats: upgrade 1.6.0 -> 1.6.1
3a76ff41a conntrack-tools: fix postinst script
8c0dca405 ostree: prevent ostree-native depending on target virtual/kernel to provide kernel-module-overlay
797684d24 bats: Add patch to fix false-negatives caused by teardown code
ab1e20941 imlib2: update SRC_URI
166ef8dbb minidlna: fix obsolete license warning
91bcdd0a7 vboxguestdrivers: upgrade 6.1.32 -> 6.1.34
122685c98 devmem2: update SRC_URI according to redirect
b095a248c devmem2: add support for different page sizes
c8f5b7a27 devmem2: reinstate previous patches, removed by mistake
a6556526d s-nail: Set VAL_MTA
fe57c67d2 openldap: Upgrade 2.5.9 -> 2.5.12
6c63579af openldap: Remove libgcrypt dependency
f2f81539d networkmanager: fix parallel build failure
26f6e6968 meta-gnome: fix layer depends.
94ca14269 python3-wxgtk4: Needs x11 for sip module
204fd35a3 meta-python-image: Fix build depends
aebfc98d8 python3-astroid: upgrade 2.11.2 -> 2.11.3
947ff549c evolution-data-server: Do not pass --library-path to gir compiler
9f4bdefa4 evince: Add dbus to depnedencies on non-x11 builds
35b74d369 makedumpfile: Use right TARGET for ppc32
802b41d21 mimic: Use special rateconv.c license
353934eb6 libcereal: Enable for glibc/ppc
3a34f2f64 ufw: Fix packaging errors found with ppc64
21b475078 conntrack-tools: Fix missing capability
49a170035 frr: inherit autotools-brokensep instead of autotools
99ae5037e meta-oe-image: fix build depends

meta-intel update includes:
8e472da7 openvino-inference-engine: change branch name master -> main
c2e2f371 level-zero: remove devtool comments
db17ad72 onevpl-intel-gpu: remove patch
0683aea4 onevpl-intel-gpu: upgrade 22.1.0 -> 22.3.2
6bd8a1f4 intel-mediasdk: upgrade 22.1.0 -> 22.3.0
0487f539 intel-media-driver: upgrade 22.1.1 -> 22.3.1
dedf1093 libva-intel-utils: upgrade 2.13.0 -> 2.14.0
3936e566 libva-intel: upgrade 2.13.0 -> 2.14.0
dd16e1bf gmmlib: upgrade 22.0.3 -> 22.1.2
bc8899d6 intel-microcode: upgrade 20220419 -> 20220510
f72ea519 maintainers.inc: add missing entry for vc-intrinsics
e533acc2 ipp-crypto-mb: update to latest
97f52272 intel-graphics-compiler: define SRCREV_FORMAT

meta-freescale update includes:
92df6b76 Merge pull request #1097 from Freescale/backport-1096-to-kirkstone
c3bc5edf layer wide: remove lzop dependency dropped upstream

meta-security update includes:
d3d8e62 lib-perl: prefix man pages to avoid conflicting with base perl
b874791 Parsec-service: Update installation procedure
0325071 oeqa/cases/tpm2: fix and enhance test suite
4270d36 tpm2-tools: Add missing rdepends
2f91f34 tpm2-pkcs11: tpm2-pkcs11 module missing
ed75b88 aide: Update 01.17.4
8727b7c aide: Add depend on audit when audit is enabled.
9301e39 fscrypt: add distro_check on pam

meta-arm update includes:
93cf02a kas: corstone1000: drop the use of the FVP script
207f298 kas: corstone1000: set HEADs to kirkstone and drop use of meta-arm-image
fc09cc0 CI: use external-arm-toolchain 10.3
b3c3f77 arm/linux-yocto: fix boot failure in qemuarm64-secureboot
43224b6 arm-bsp/tf-a-tests: Add recipe to build and install TFTF

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

This fixes oniro-image-[base, extra]-dev do_image_wic task.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

When building oniro-image-extra-dev the task do_image_wic returns an error
because the size of "/" is over the fixed size. This solves the issue.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Add ROOTFS_PARTITION_SIZE and set it to 2G to fix an error in
do_image_wic where the rootfs "/" size is greater than it's limit.

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

wheel group doesn't exist in oe-core/oniro but systemd is build with
wheel group support. This causes ACL warnings during boot process.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

Without bootindex option qemu doesn't respect boot order when
booting with EFI and writes wrong boot order information into the ovmf
image which breaks boot order permanently.

Signed-off-by: Pavel Zhukov <pavel.zhukov@huawei.com>

This makes is faster to build images, easier to handle them, e.g.
Raspberry Pi imager transparently supports .gz but not .bz2 and makes
virtually no difference to the size of the image.

Remember that the actual image is already compressed, as it is stored
inside the filesystem as a squashfs object.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

This enables configuration pieces required for RAUC verity bundles.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Andrei Gherzan authored 2 years ago and Stefan Schmidt committed 2 years ago

The 5.10.109 version of linux-yocto comes with this patch included.
Avoid build error on trying to apply this patch on the linux-yocto*
recipes. Let the patch only apply to linux-oniro.

Fixes #546



Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>

Pull in 3 patches for edk2 to make it build with modern compilers.
The patches have already landed upstream.

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>
Upstream-Status: Backport

Build Zephyr debug info in DWARF-4 format instead of DWARF-5.
The Zephyr test suite uses tools that can't handle DRAWF-5 properly yet
(py-elfutils), causing tests to fail if Zephyr has been built with
DWARF-5.

Signed-off-by: Bernhard Rosenkränzer <bernhard.rosenkraenzer.ext@huawei.com>

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

I missed this in the earlier patch-set. I've added a note to the RAUC
recipe to allow people to notice this better than by trial and error.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

As we add support for additional boards, doing it by copying and
modifying a file with relatively few parts changing got tedious.

The change adds half a dozen new variables for selecting the boot loader
type, various strings and directories. The defaults are safe, even if
unused, for all kinds of boards. The machine-specific overrides tune the
bootloader used by each board and provide proper identification strings.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

For the moment this allows booting from USB storage. Ideally we would
have one config that works for eMMC, nvme, USB and SATA but we're not
there yet.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

As we add support for additional boards, doing it by copying and
modifying a file with relatively few parts changing got tedious.

The change adds three new variables - RAUC_{COMPAT,SLOT_A,SLOT_B},
and defines them for the boards supported thus far.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

This is useful for the outer squashfs used to deliver a RAUC update
bundle.  The inner squashfs uses stronger compression. The outer is now
using zstd (since a5437196). Having two layers of strong compression
makes no sense, as it cannot offer any improvements, and is much heavier
on CPU and memory.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

The configuration files are very similar to what is available for
Raspberry Pi 4. In general all the files, except for COMPATIBLE
setting can become identical over time, as we move to GPT partition
identifiers to identify the slots.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>

This script implements proper A/B update with automatic rollback.
Refer to sysota.grub(7) manual page for details.

The script should become built-into grub EFI executable but that will be
pursued separately.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@huawei.com>