summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* oci-runtime-tools: fix do package qa warningChangqing Li2018-10-111-1/+1
| | | | | | | | | | | | | | | | | | | 1. After security flag PIE is enabled by default, we might met below QA warning on some arch, like aarch64, fix it by skip textrel QA check refer commit b689c72a of oe-core oci-runtime-tools-0.1.0+gitAUTOINC+6e7da8148f-r0 do_package_qa: QA Issue: ELF binary 'work/aarch64-poky-linux/oci-runtime-tools/0.1.0+gitAUTOINC+6e7 da8148f-r0/packages-split/oci-runtime-tools/usr/sbin/oci-runtime-tool' has relocations in .text [textrel] 2. This problem is caused since security_flags.inc is used by default. so alternative work around is: SECURITY_CFLAGS_pn-oci-runtime-tools = "${SECURITY_NOPIE_CFLAGS}" SECURITY_LDFLAGS_pn-oci-runtime-tools = "" Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* iasl: remove iasl in favor of acpica in openembedded-coreChris Patterson2018-10-115-202/+2
| | | | | | | | | | It is out of date, causes compilation errors, and is replacable with acpica. This commit removes the iasl recipe as well as updating references within seabios and xen, even though acpcica PROVIDES iasl. Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* ipxe: recipe cleanup and uprev to currentChris Patterson2018-10-111-9/+4
| | | | | | | | | | | | - Use OE's cross compiler (was building with host's). - Uprev to latest git (no releases) - Update LICENSE file path and checksum - Remove configure sed and set isolinux bin variable used in Makefile - Scrub LDFLAGS and use LD - Add xz depends Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* ceph: only support x86-64Dengke Du2018-10-092-0/+23
| | | | | Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxcfs: move recipe from meta-overc to hereMark Asselstine2018-10-043-0/+99
| | | | | | | | | | | | This recipe was originally written and included in meta-overc as it was used by the overc framework so we implemented it there to sort out the kinks. Since this package is not specific to the OverC framework and people may be interested in including it in their images without having any interest in the OverC framework we are moving this recipe here, alongside lxc and other container related recipes. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* ceph: add support for cephDengke Du2018-09-306-0/+207
| | | | | | | | Ceph is a distributed object, block, and file storage platform, ceph depends on oath-toolkit, so add the oath-toolkit also. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* kernel: forcedly load nf_conntrack_ipv6 to work around kernel module loading ↵He Zhe2018-09-301-1/+1
| | | | | | | | | | | | | | failure In the v4.18 kernel, there is a problem with the locking and init sequence of the kernel modules. This would cause nf_conntrack_ipv6 failed to be loaded. In kernel v4.19, nf_conntrack_ipv6 has been merged to nf_conntrack and the problematic code has gone. This patch just works around by forcedly loading nf_conntrack_ipv6. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* libvirt: backport LXC AB / BA deadlock fixMark Asselstine2018-09-302-0/+107
| | | | | | | | | This fix will most likely be part of libvirt 4.8.0 but since we took the time to investigate and fix this issue we are including it now to prevent others from hitting this issue. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* libvirt: uprev to v4.7.0Mark Asselstine2018-09-303-6/+6
| | | | | | | | | | | | | | | | | | | | A straight-forward uprev to the latest stable release. As usual basic runtime sanity tests have been run along with the ptests. The following is the results of the ptests: ==================================== Testsuite summary for libvirt 4.7.0 ==================================== # TOTAL: 120 # PASS: 117 # SKIP: 0 # XFAIL: 0 # FAIL: 3 # XPASS: 0 # ERROR: 0 Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* layer: add thud to compatible releasesBruce Ashfield2018-09-301-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* containerd: Disable for all mips machinesHe Zhe2018-09-251-0/+2
| | | | | | | | containerd does not support mips since it depends on boltdb which does not support mips. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: fix build with _FORTIFY_SOURCE, gcc 8.2 and glibc 2.28Christopher Clark2018-09-254-0/+148
| | | | | | | | | | | | | Apply upstream-reviewed patch to fix compilation. Patch reorders header includes to issue a pragma to disable SSE before including any potentially always_inline functions that would use SSE. Also modify the recipe to supply compiler flags via the tools variables where they will get used, necessary as _FORTIFY_SOURCE requires optimization flags to be supplied. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* seabios: update to 1.11.2 and use github for SRC_URIChristopher Clark2018-09-221-3/+4
| | | | | | | | | | | | | Update to version 1.11.2 fixes compile errors encountered with 1.9.1. Use the official QEMU github mirror of git.qemu.org/seabios as a stable, maintained, available SRC_URI for seabios releases. While downloads.seabios.org is documented as the official source, it has not published tarballs for the most recent releases. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: Make named avoid listening on lxc network interfaceHe Zhe2018-09-112-0/+5
| | | | | | | | | | | | lxc-net wants to take care of DNS itself using dnsmasq, while named in bind does the same thing on all network interfaces by default and causes the following error. dnsmasq: failed to create listening socket for 10.0.3.1: Address already in use Failed to setup lxc-net. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* layer.conf: recommend meta-webserver as nagios-core depends on apache2Chen Qi2018-09-061-0/+5
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* fs-perms-nagios.txt: add perms conf fileChen Qi2018-09-061-0/+2
| | | | | | | | | | | | | | Add this perms conf file to avoid do_rootfs failure due to conflicts among nagios packages. The error message is like below. Error: Transaction check error: file /etc/nagios conflicts between attempted installs of \ nagios-core-4.0.8-r0.core2_64 and nagios-nrpe-plugin-2.15-r0.core2_64 Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* nagios-plugins: add recipe with latest stable version 2.2.1Chen Qi2018-09-061-0/+73
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* nagios-nsca: add recipe with latest stable version 2.9.1Chen Qi2018-09-064-0/+216
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* nagios-nrpe: add recipe with latest stable version 3.2.1Chen Qi2018-09-065-0/+216
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* nagios-core: add recipe with latest stable version 4.4.2Chen Qi2018-09-069-0/+464
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* openvswitch: Turn off ssl integration by defaultJason Wessel2018-09-061-0/+1
| | | | | | | | | | | | | | | The openssl library is an optional component for the openvswitch. The problem with it enabled by default is that it will consume system entropy to try to initialize the openssl library even though we are not using it by default. With the 4.16 kernel and up there is not always enough entropy available at the early boot time which can cause a lengthy stall, while waiting to initialize the openvswitch. If ssl is needed, it can of course be turned on with the package config option "ssl". Signed-off-by: Jason Wessel <jason.wessel@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* python-webob:1.7.3.bb->1.8.2Hong Liu2018-09-051-2/+2
| | | | | | | Upgrade python-webob from 1.7.3 to 1.8.2. Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* python-sphinx:1.7.6:1.7.8Hong Liu2018-09-051-2/+2
| | | | | | | Upgrade python-sphinx from 1.7.6 to 1.7.8. Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* diod/ops.c: add header file for makedevHongzhi.Song2018-09-052-0/+41
| | | | | | | | | | | | | | | Error: diod/ops.c:845: undefined reference to `makedev' Fixed: Glibc removes sys/sysmacros.h which defines makedev from sys/types.h since v2.28. [Commit ID: e16deca62e16f] And then glibc suggestions us to include <sys/sysmacros.h> directly if code needs it. Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* openvswitch: do not use 'exit 1' to postpone to first bootHongxu Jia2018-09-051-11/+2
| | | | | | | | | Since `229f4e9 package.bbclass: add support for pkg_postinst_ontarget()' applied in oe-core, use pkg_postinst_ontarget to run postinst at first boot. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* openvswitch: fixup the ovsdb-server.serviceMark Asselstine2018-09-043-6/+40
| | | | | | | | | The service currently fails to run since the runtime directories aren't being created. Create the runtime directories and fixup the path to echo to get things working again. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* openvswitch: uprev to v2.10.0Mark Asselstine2018-09-044-20/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | The current version (v2.9.3) started to fail to build due to changes in openssl. Upstream must have run into similar issues as this was identified and addressed in v2.10.0 by including a copy of 'dhparams.c' instead of relying on it being generated. (see commit "dhparams: Add pregenerated .c file to the repository.") Additionally v2.10.0 is better aligned for our kernel and dpdk versions: kernel === 2.10.x 3.10 to 4.17 dpdk === 2.10.x 17.11.3 The changes in this commit allow for the building of v2.10.0. A second commit will be necessary to deal with a few runtime changes which prevent ovsdb-server from starting correctly. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* kernel: update bbappends to match oe-coreBruce Ashfield2018-09-042-1/+0
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: enable 32-bit ARM buildsChristopher Clark2018-08-201-1/+6
| | | | | | | | Enable recipe for COMPATIBLE_HOST = 'arm-.*-linux-gnueabi' Tested with a cubietruck, upstream's reference device for this class. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: fix truncation warning in tools build for ARM 32-bitChristopher Clark2018-08-202-0/+79
| | | | | | | | | Adds xen-tools-xenpmd-snprintf.patch to fix string format compiler truncation warning in xenpmd: assists the compiler by masking the value to provide an obvious low upper bound for the value range. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: fix build on aarch64 w/ gcc 8.2Christopher Clark2018-08-202-0/+102
| | | | | | | | Adds patch for compatibility with gcc 8.2, to fix string lengths for copied values to prevent array-bounds warnings. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* libvirt: uprev to v4.5.0Mark Asselstine2018-08-202-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Although v4.6.0 was just recently released we do not want to jump to it due to: https://bugzilla.redhat.com/show_bug.cgi?id=1614569 Unfortunately the mess around the above defect basically renders that release useless. We will need to keep an eye for either a v4.7.0 or grab updates off of the 'v4.5-maint' over the coming weeks. As usual I have tested using qemu and lxc usecases (define, boot and 'virsh console' onto a guest). The ptests results match those of v4.3.0: ====================================== Testsuite summary for libvirt 4.5.0 ====================================== # TOTAL: 119 # PASS: 114 # SKIP: 0 # XFAIL: 0 # FAIL: 5 # XPASS: 0 # ERROR: 0 Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* libvirt: fixup ptest to prevent attempts to build tests on the targetMark Asselstine2018-08-201-0/+1
| | | | | | | | | | | | | | | | | Oddly something seems to have changed since I did the uprev of libvirt to v4.3.0. Previously using the 'run-ptests' script would only run the tests and not attempt to build them first. In preparation for the uprev to v4.5.0 I attempted to run the tests and found that they would fail to run and instead the tests were attempting to be built. I suspect this change is caused by an uprev of autotools and the handling of the 'TESTS' built-in. To prevent this we are explicitly using the '--with-test-suite' configure option and this return the previously observed behavior, where the tests are simply run and not built. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* seabios: update SRC_URI to: https://www.seabios.org/downloads/...Christopher Clark2018-08-141-1/+1
| | | | | | | | According to the latest seabios download instructions, this is now the preferred source for release downloads. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: add runtime depends for util-linux-getoptDengke Du2018-08-141-0/+1
| | | | | | | | | | | | | When runing: lxc-create -t download -n test The system reports that the getopt command can't find. This is because the lxc-download template depends on getopt command. So add the runtime depends on util-linux-getopt for lxc. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* Xen: improve build reproducibilityChristopher Clark2018-08-141-0/+27
| | | | | | | | Enable reproducible builds of the hypervisor binaries by defining build variables and setting compiler flags to support this. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Update git recipe to build latest upstream staging branchChristopher Clark2018-08-021-3/+4
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: package depriv-fd-checkerChristopher Clark2018-08-021-0/+1
| | | | | | | A new tool introduced in the Xen 4.12 dev cycle. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: remove 4.10.1 recipe and patches no longer requiredChristopher Clark2018-08-028-370/+0
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystem.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: remove 4.9.1 recipe and patches no longer requiredChristopher Clark2018-08-028-671/+0
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen-vtpm : fix patch fuzz, whitespace-only changeChristopher Clark2018-08-021-4/+4
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen-vtpm,mini-os : upgrade to Xen 4.11.0Christopher Clark2018-08-023-48/+4
| | | | | | | | drops the gcc7 compatibility patch -- no longer required as it is present in the upstream version. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* tpm-emulator: apply patch to fix memcmp defect found by gccChristopher Clark2018-08-022-0/+29
| | | | | | | | | | | | | | | tpm_emulator-0.7.4/tpm/tpm_deprecated.c:437:7: | error: 'memcmp' reading 20 bytes from a region of size 8 | [-Werror=stringop-overflow=] | if (memcmp(&b1, &newAuthLink, sizeof(TPM_HMAC))) { | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Apply patch from Xen: vtpm_TPM_ChangeAuthAsymFinish.patch Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add recipe for 4.11.0Christopher Clark2018-08-021-0/+12
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: upgrade to 4.10.1, and apply patches for gcc 8.1 compatibilityChristopher Clark2018-08-0212-38/+409
| | | | | | | | | | Adds packaging for new binary: xen-shim. Builds the hypervisor before building the tools to workaround an upstream parallel build bug that causes the shim to be rebuilt during install. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* libvirt: use relative path to local .m4 filesJoe Slater2018-08-021-0/+6
| | | | | | | | | | If our project is in a directory with a pathname of longer than about 125 characters, configuration will fail with an "Argument list too long" error. This patch uses the technique that was applied to the coreutils recipe. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* criu: uprev to version 3.10Mark Asselstine2018-08-023-13/+14
| | | | | | | | | | | | | | | | | | | | | | A fairly straightforward uprev requiring minimal patch refreshing since a few hunks were failing due to conflicts with upstream updates. Unfortunately upstream starting using the now overloaded "PYTHON" variable in their Makefiles, this is not the path to the python executable but rather the name 'python2' or 'python3' which is used to determine which local directories to include. Due to this we must explicitly assign values to 'PYTHON_FULL' and 'PYTHON'. We use 'python2' since we are using 'setuptools' and therefore are explicitly using python v2, at some point we might want to make this recipe work with either python v2 or v3 but for now we continue to explicitly use v2. Instead of using version specific filename we switch to using _git.bb which is inline with similar 'git' recipes found in oe-core and other repos. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* docker: remove stale .service fileBruce Ashfield2018-08-021-15/+0
| | | | | | | | We use the systemd service file from within the docker git repo. Removing the unused recipe space version, since it is invalid and causes confusion. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* libvirt: Remove unsupported configure options and fix warningHe Zhe2018-07-261-4/+2
| | | | | | | | | | | | | | xen and xen-inotify have been removed from upstream. We change PACKAGECONFIG accordingly. pkg_postinst has been deprecated, use pkg_postinst_ontarget instead. WARNING: do_rootfs: Intentionally failing postinstall scriptlets of ['libvirt'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} (). Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* linux-yocto: Fix systemd-modules-load.service start failureHe Zhe2018-07-261-2/+0
| | | | | | | | | | | | | | systemd-modules-load.service bindly load whatever in modules-load.d/*.conf, in this case, kvm_intel and kvm_amd. One of them must fail on a specific board and causes the following failure. This patches remove them from KERNEL_MODULE_AUTOLOAD and leaves them to udev. systemd-modules-load.service: Main process exited, code=exited, status=1/FAILURE Failed to start Load Kernel Modules. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>