summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add secureboot selftestsCalifornia Sullivan2017-08-301-0/+176
| | | | | | | | | | | | | | | | | | | | | | | | | | This was based on the secureboot selftests in meta-refkit: https://github.com/intel/intel-iot-refkit/blob/3bf04941a3a150ed86d8ae61366ae3a19443a600/meta-refkit/lib/oeqa/selftest/cases/secureboot.py It had to be modified a bit to work in meta-intel, as we can't depend on efivar which resides in meta-openembedded. Instead, in order to test that secureboot is enabled, we first try to boot with an unsigned, then image signed with incorrect keys, and search for a "Security Violation" error message in each log. If the image booted successfully or that error did not occur, something went wrong and the third test becomes invalid. The third test is simply booting an image that is signed with the enrolled keys, getting to a login screen and running a simple command. Note that these tests can be quite time consuming, as we have to wait for the first two tests to timeout, and the timeout values have to be somewhat high as it sometimes takes a while for the ovmf firmware to come up. Original work by Mikko Ylinen and Patrick Ohly. Signed-off-by: California Sullivan <california.l.sullivan@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* recipes-selftest: add images for use in secureboot selftestsCalifornia Sullivan2017-08-306-0/+118
| | | | | | | | | | | | This patch adds two image recipes and several keys for use in secureboot selftests. One image is an unsigned comboapp with a startup.nsh file calling bootx64.efi. The other is a comboapp image signed with the refkit keys by default. These are the same keys enrolled in the ovmf firmware. Also included is another set of keys to sign the image with that do not match the ovmf firmware's enrolled keys. Signed-off-by: California Sullivan <california.l.sullivan@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* ovmf: add secureboot bits from refkitCalifornia Sullivan2017-08-303-0/+124
| | | | | | | | | | | This patch adds a couple secureboot elements to ovmf that originated from refkit. It includes a patch that adds a certificate to the ovmf's enrolled keys, and an image recipe which calls the enrollkeys app. Original work by Mikko Ylinen and Patrick Ohly. Signed-off-by: California Sullivan <california.l.sullivan@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-intel: Seperate SRC_URI into Kernel and ConfigSaul Wold2017-08-301-2/+7
| | | | | | | This allows for setting a different kernel config URI without having to completely reset the main SRC_URI for the kernel also. Signed-off-by: Saul Wold <sgw@linux.intel.com>
* lms: use sh instead of bash in notifyDesktop.shCalifornia Sullivan2017-08-231-1/+1
| | | | | | | | | | | | | | | | | | | | A recent update to OE-core revealed the missing runtime dependency: ERROR: lms8-8.0.0-7-r0 do_package_qa: QA Issue: /usr/bin/notifyDesktop.sh contained in package lms8 requires /bin/bash, but no providers found in RDEPENDS_lms8? [file-rdeps] But it turns out that notifyDesktop doesn't actually require bash: $ checkbashisms.pl notifyDesktop.sh could not find any possible bashisms in bash script notifyDesktop.sh So just change the shebang line to /bin/sh. Signed-off-by: California Sullivan <california.l.sullivan@intel.com> CC: mikko.ylinen@linux.intel.com CC: anand.vastrad@intel.com Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-intel: Update SRCREVSaul Wold2017-08-233-3/+3
| | | | | | Fixes CVE-2017-1000112 Signed-off-by: Saul Wold <sgw@linux.intel.com>
* conf/machine/intel-*: move core-image-minimal-initramfs PACKAGE_INSTALLCalifornia Sullivan2017-08-233-4/+3
| | | | | | | A machine configuration file wasn't the correct place to put this in the first place. It should be in a bbappend, which we now have. Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* images: add core-image-minimal-initramfs bbappendCalifornia Sullivan2017-08-231-0/+3
| | | | | | | | | | | Modify core-image-minimal-initramfs to use the initramfs-framework init scripts instead of the old ones when using an Intel MACHINE type. The initramfs-framework scripts are preferred, as they allow for booting on both live and real images and are more modular, allowing additions via new modules. Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* sbsigntool: depend on openssl10California Sullivan2017-08-231-1/+1
| | | | | | | sbsigntool does not currently work with openssl version 1.1 which was just added to OE-core, so depend on version 1.0.* instead. Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* sbsigntool: port "sbsigntool: stop using gitsm fetcher" from refkitMikko Ylinen2017-08-231-2/+5
| | | | | | | | | | | | | | | | | | | From Mikko: gitsm fetcher does not work well with download cache (submodules never get to the local source mirror) and each builds ends up cloning ccan. Move to use git fetcher (with https protocol) for both sbsigntool and ccan independently to speed up fetching and to get the mirroring benefits. The gitsm fetcher limitations are reported in YOCTO #11594. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com> This syncs us up with the sbsigntool recipe in meta-refkit. Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* efilinux: Enable muslx32 buildsweeaun2017-08-231-0/+8
| | | | | | | | | Enable muslx32 build for efilinux. Using -m64 instead of -mx32 in TUNE_CCARGS as efi needed to be built for 64 bits. Signed-off-by: sweeaun <swee.aun.khor@intel.com> [Fixed whitespace error] Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* linux-yocto: Drop 4.1 kernel bbappendsRichard Purdie2017-08-233-88/+0
| | | | | | The 4.1 kernel was dropped from OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* linux-firmware: install iwlwifi LinuxCore driver firmware blobsMikko Ylinen2017-08-151-0/+21
| | | | | | | | | | | | | | | | | meta-intel maintains a recipe that installs iwlwifi's LinuxCore wifi driver releases. For some iwfwifi LinuxCore supported wireless chips, the best/latest firmware blobs are found in the iwlwifi's linux-firmware.git fork. See: https://wireless.wiki.kernel.org/en/users/drivers/iwlwifi/core_release This bbappend fetches the -31.ucode (currently, for Intel Wireless 8260 only!) that is the best match for the iwlwifi LinuxCore release built. The bbappend can later be extended to pull in firmware blobs for other chips too. Fixes: [YOCTO #11925] Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* xf86-video-mga: upgrade 1.6.4 -> 1.6.5sweeaun2017-08-152-41/+3
| | | | | | | | | Upgrade xf86-video-mga version to 1.6.5. Adapt block/wakeupHandler signature for ABI 23 patch has been removed as the change already available from Upstream 1.6.5. Signed-off-by: sweeaun <swee.aun.khor@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* dpdk-dev-libibverbs: Fix additional warningsKhem Raj2017-08-155-1/+239
| | | | | | | Clang detects more warnings as errors and these fixes address it Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* libyami-utils: Fix build with clangKhem Raj2017-08-152-1/+102
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* efilinux: Fix build warningsKhem Raj2017-08-153-1/+70
| | | | | | | Additional warnings found with clang Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* libyami: Fix build with musl/clangKhem Raj2017-08-1510-1/+417
| | | | | | | These patches are interesting from upstreaming point of view as well Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-intel: Update SRCREVs8.0-rocko-2.4_M2Saul Wold2017-08-102-2/+2
| | | | Signed-off-by: Saul Wold <sgw@linux.intel.com>
* iwlwifi: skip host install scriptsMikko Ylinen2017-08-102-2/+39
| | | | | | | | | | | | The scripts run in install target are relevant (and working) only if the driver installation is run on the build host. To fix build errors on some setups we add a patch that skips the scripts completely when cross-compiling. Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com> [sgw - Added missing Upstream-Status] Signed-off-by: Saul Wold <sgw@linux.intel.com>
* dpdk: Fix build error on the core2-64Guojian Zhou2017-08-101-1/+1
| | | | | | | Use the "m64" to parse the flag of x86-64 toolchains. Signed-off-by: Guojian Zhou <guojian.zhou@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* Revert "iwlwifi_git.bb: run make_scripts earlier"Saul Wold2017-08-091-2/+0
| | | | | | | This change is now in master, so no need to have this buried in the recipe also. This reverts commit 03e589efedb03515d3bfe4542e257b1acc83445d.
* iwlwifi: Fix install_append for usrmergeSaul Wold2017-08-081-4/+1
| | | | | | | | | | Since everything is installed into /usr when usrmerge is enabled, don't rm /usr! Also the is not needed for anything do don't create it in the first place. [YOCTO #11882] Signed-off-by: Saul Wold <sgw@linux.intel.com>
* dpdk: Link examples with BFD linkerKhem Raj2017-08-021-1/+1
| | | | | | | | Bypass the gold bug https://sourceware.org/bugzilla/show_bug.cgi?id=21882 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* dpdk: Fix build with examplesKhem Raj2017-08-022-0/+45
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* qat16: Fix build when ld-is-gold is set in DISTRO_FEATURESKhem Raj2017-08-023-1/+19
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* libyami: Rename the file to be checked with LIC_FILES_CHKSUMKhem Raj2017-08-021-1/+1
| | | | | | | COPYING.LIB doesn't exist anymore Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* disable_skylake_sound: Temp disable config for core2-32Saul Wold2017-07-312-0/+16
| | | | | | | This is needed because the current kernel has a missing kernel config check for 32bit skylake sound Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-intel: Add linux-intel to files search pathSaul Wold2017-07-311-0/+2
| | | | | | | Since both linux-intel and linux-intel-rt need config fragments let's share the same linux-intel patch directory via FILESEXTRAPATH Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-intel: Update SRCREV for 4.9.35Saul Wold2017-07-313-5/+5
| | | | | | | | | | | | | | | | | | | | | The kernel updates includes more camera changes Includes meta update with the following changes: e8095d4 Alejandro Hernandez common-pc: Adds usb-net configs to genericx86 builds 37cff3d Alejandro Hernandez common-pc-64: Adds usb-net configs to genericx86-64 builds 24325ac Alejandro Hernandez intel-common-drivers: Adds usb-net configs to intel builds 5ea1dcf Syed Johan Arif Bin Syed Mohamad Fauzi features/qat: additional configurations, CONFIG_CRYPTO_RSA and CONFIG_CRYPTO_DH b3fadcf Syed Johan Arif Bin Syed Mohamad Fauzi features/netfilter: additional configurations 7a4f036 Syed Mohamad Fauzi, Syed Johan Arif features/x2apic: add X2APIC feature e71bcaa Syed Johan Arif Bin Syed Mohamad Fauzi features/vfio: add VFIO feature d1b7785 Syed Johan Arif Bin Syed Mohamad Fauzi features/numa: Add NUMA feature 62c9858 Syed Johan Arif Bin Syed Mohamad Fauzi features/mtd: add MTD feature 9a6c643 Syed Johan Arif Bin Syed Mohamad Fauzi features/iommu: add IOMMU feature 1e004c5 Syed Johan Arif Bin Syed Mohamad Fauzi features/intel-txt: add intel-txt feature 63c1229 Saul Wold common-pc-wifi: Enable SDIO for BroadCom BRCMFMAC Signed-off-by: Saul Wold <sgw@linux.intel.com>
* dpdk: upgrade to version 17.05Syed Mohamad Fauzi, Syed Johan Arif2017-07-315-82/+6
| | | | | Signed-off-by: Syed Mohamad Fauzi, Syed Johan Arif <syed.johan.arif.syed.mohamad.fauzi@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-intel: refactor and remove iwlwifi modules for out of tree enablementSaul Wold2017-07-313-58/+41
| | | | | | | | | | | | Create a linux-intel.inc that is shared between standard and rt kernel for the common bits. By removing these modules here, we can then build and install the out of tree modules from the backport-iwlwifi tree. Move the Autoloading to the kernel module also Signed-off-by: Saul Wold <sgw@linux.intel.com>
* intel-common-pkgarch: Add out of tree modulesSaul Wold2017-07-311-0/+1
| | | | | | | Since we want to support the out of tree modules for wifi and ethernet we need to also have them as common for all machines in the common arch. Signed-off-by: Saul Wold <sgw@linux.intel.com>
* iwlwifi_git.bb: run make_scripts earlierCalifornia Sullivan2017-07-311-0/+2
| | | | | | | | | | | | This out-of-tree module requires we create scripts before configuration but module.bbclass runs make scripts sometime before do_compile. In some builds this results in a failure, as it might not be soon enough. Run make scripts again but earlier. Ideally we change module.bbclass instead, but its currently frozen for M2 testing, so we need this temporary local fix. Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* iwlwifi: Clean-up and use module_installSaul Wold2017-07-311-41/+9
| | | | | | | | | | | Use the MODULES_INSTALL_TARGET to correctly set the make target for install, also use AUTOLOAD for ensuring the modules get loaded correctly. Let the module class to the correct packaging and install. Install all the linux-firmware-iwlwifi blobs Signed-off-by: Saul Wold <sgw@linux.intel.com>
* iwlwifi: include iwlwifi OOT driver in meta-intel layer.Priyalee Kushwaha2017-07-312-0/+85
| | | | | | | | iwlwifi driver is built as OOT driver and replaces driver built in kernel. Signed-off-by: Kushwaha, Priyalee <priyalee.kushwaha@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* intel-microcode: Upgrade recipe versionsweeaun2017-07-311-4/+4
| | | | | | | Upgraded intel-microcode recipe to 20170707 version. Signed-off-by: sweeaun <swee.aun.khor@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-yocto-4.1: Fix kernel versionCalifornia Sullivan2017-07-271-1/+1
| | | | | | | My script set it to v4.1.41, when its actually v4.1.42. Signed-off-by: California Sullivan <california.l.sullivan@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* thermald: Add openmp to dependencies when building with clangKhem Raj2017-07-271-1/+1
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* meta-intel.inc: Ensure thermald is installed for most targetsSaul Wold2017-07-271-2/+2
| | | | | | This will ensure thermald is installed on all target images except core-image-minimal Signed-off-by: Saul Wold <sgw@linux.intel.com>
* linux-yocto/4.1: Update kernel to version 4.1.41California Sullivan2017-07-243-9/+9
| | | | Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* linux-yocto/4.4: Update kernel to version 4.4.76California Sullivan2017-07-243-15/+15
| | | | Signed-off-by: California Sullivan <california.l.sullivan@intel.com>
* intel-gpu-tools: Upgrade to version 1.19Ng, Wei Tee2017-07-191-2/+2
| | | | | | | Upgrade intel-gpu-tools recipe to version 1.19 Signed-off-by: Ng, Wei Tee <wei.tee.ng@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* uefi-comboapp.bbclass: Split signing functionality into its own bbclassCalifornia Sullivan2017-07-192-34/+55
| | | | | | | | | In the future more secure boot implementations will be offered, with each one needing the signing method. Instead of repeating a forty line block of code across several recipes, just use a configurable bbclass. Signed-off-by: California Sullivan <california.l.sullivan@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* uefi-comboapp.bbclass: support multiple UEFI combo apps + fixesPatrick Ohly2017-07-191-23/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The original code in intel-iot-refkit allows to create more than one UEFI combo app and uses that to create one for removable media and one for fixed media (after installation), with different boot=PARTUUID=xxx parameters. This way, an installed image never ended up booting from the install media. uefi-comboapp.bbclass now supports the same feature, with create_uefiapp() as the API function that can be used to create additional UEFI apps and create_uefiapps as the method where the call can be added. In addition, several shortcomings are getting addressed: - A UEFI combo app must be stored under a name that is specific to the image for which it gets created, otherwise different image recipes end up overwriting (or using) files from other images. - Signing must be done after creating the apps and before deploying them, otherwise the unsigned apps get copied to the image when using do_uefiapp_deploy. - The common code for deployment is now in uefiapp_deploy_at. - $dest is used instead of ${DEST} because the latter might get expanded by bitbake. - Because do_uefiapp always had to run anew to produce the clean, unsigned input for do_uefiapp_sign, having two different tasks just added unnecessary complexity. Now all code is in do_uefiapp. - Old files matching the output pattern get removed explicitly, because they might not get overwritten when the optional app suffix changes between builds, or when the task fails in the middle. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* cryptodev-module: update 0001-zc-Force-4.10-get_user_pages_remote-API.patchRobert Yang2017-07-131-8/+5
| | | | | | | Update it for cryptodev-module 1.9. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* wic: Move WKS newer common locationSaul Wold2017-07-126-0/+0
| | | | | | | This cleans up the wic scripts location to match the newer top-level wic directory location. Signed-off-by: Saul Wold <sgw@linux.intel.com>
* lms8: Added Intel AMT ME notification infra patch to LMS.Anand Vastrad2017-07-112-0/+2650
| | | | | | | | | | | | | | LMS will now capture and notify Intel AMT ME notifications to user in realtime. For example if AMT tool establishes a KVM session, the user sees a notification for the same. Intel ME provides event details in WsMan XML format which is parsed by LMS. LMS extracts the AlertID-Arguments from WxMan XML and its relevant desription from preinitialized AlertId-Arguments:Description map. The verbose description is then notfied to the user. Along with the lms binary the package ships AMTAlerts.xml and notifyDesktop.sh script with it. Signed-off-by: Anand Vastrad <anand.vastrad@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* thermald: upgrade to 1.6sweeaun2017-07-111-2/+2
| | | | | | | Upgrade thermald recipe to 1.6. Signed-off-by: sweeaun <swee.aun.khor@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* meta-intel.inc: Set default DISK_SIGNATURE_UUIDCalifornia Sullivan2017-07-101-0/+2
| | | | | | | | This lets the uefi-comboapp and new kickstart template work well together out of the box. Signed-off-by: California Sullivan <california.l.sullivan@intel.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-04-28 07:31:59 +0000