summaryrefslogtreecommitdiffstats
path: root/recipes-extended/xen
Commit message (Collapse)AuthorAgeFilesLines
* xen-vtpm : fix patch fuzz, whitespace-only changeChristopher Clark2018-08-141-4/+4
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* tpm-emulator: apply patch to fix memcmp defect found by gccChristopher Clark2018-08-142-0/+29
| | | | | | | | | | | | | | | tpm_emulator-0.7.4/tpm/tpm_deprecated.c:437:7: | error: 'memcmp' reading 20 bytes from a region of size 8 | [-Werror=stringop-overflow=] | if (memcmp(&b1, &newAuthLink, sizeof(TPM_HMAC))) { | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Apply patch from Xen: vtpm_TPM_ChangeAuthAsymFinish.patch Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: upgrade to 4.10.1, and apply patches for gcc 8.1 compatibilityChristopher Clark2018-08-1412-38/+409
| | | | | | | | | | Adds packaging for new binary: xen-shim. Builds the hypervisor before building the tools to workaround an upstream parallel build bug that causes the shim to be rebuilt during install. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: vTPM and vTPM Manager stubdomsKurt Bodiker2018-05-012-0/+132
| | | | | | | | | | | | | | | | | | | The vTPM stubdomain allows a virtual TPM to be created and used to provide TPM functionality to Xen guest domains. The vTPM Manager stubdomain seals the secrets of each vTPM to the physical TPM, thereby extending the chain of trust to the virtual machines in Xen. More information on Xen vTPMs found at https://xenbits.xen.org/docs/unstable/man/xen-vtpm.7.html This xen-vtpm recipe uses Xen/stubdom source tree to build the Xen vTPM and vTPM Manager binaries and MiniOS source tree to build the Xen vTPM and vTPM Manager stubdomains. This recipe provides the ability to modify how the vTPM stubdomains are created and the ability to independently patch the vTPM stubdomain source code as necessary. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: TPM Emulator for Xen stubdomsKurt Bodiker2018-05-0110-0/+679
| | | | | | | | | | | | | | | | TPM Emulator is a software-based TPM and MTM emulator. This TPM Emulator recipe creates a static library that is cross-compiled against MiniOS, Xen, LWIP, Newlib, PolarSSL, and the stubdom-specific GMP headers and subsequently used during the cross-compilation and linking of the Xen vTPM and vTPM Manager stubdomains. The current Xen source code is hardcoded to fetch a specific version of this package. The patch files originate from the Xen/stubdom source tree. This recipe provides the flexibility to change version or modify the patches. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: GMP recipe for Xen stubdomsKurt Bodiker2018-05-012-0/+57
| | | | | | | | | | | | GMP is a fast precision arithmetic library targeted for cryptographic applications. This GMP recipe creates a static library that is cross-compiled against that is cross-compiled against MiniOS, Xen, LWIP, Newlib, and PolarSSL headers and subsquently used during the cross-compilation and linking of the TPM Emulator and the Xen vTPM and vTPM Manager stubdomains. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: PolarSSL recipe and patches for Xen stubdomsKurt Bodiker2018-05-013-0/+110
| | | | | | | | | | | | | | | | PolarSSL (now mbedTLS) is a lightweight SSL library optimized for embedded systems. In the case of Xen stubdomains, we are using MiniOS. This PolarSSL recipe creates a static library that is cross-compiled against MiniOS, Xen, LWIP, and Newlib headers and subsequently used during the cross-compilation and linking of the stubdom specific GMP, TPM Emulator, and the Xen vTPM and vTPM Manager stubdomains. The current Xen source code is hardcoded to fetch a specific version of this package. The patch files originate from the Xen/stubdom source tree. This recipe provides the flexibility to change version or modify the patches. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Newlib recipe and patches for Xen stubdomsKurt Bodiker2018-05-015-0/+983
| | | | | | | | | | | | | | | Newlib provides a fast, C library optimized for embedded systems. In the case of Xen stubdomains, we are using MiniOS. This Newlib recipe creates static libraries that are cross-compiled against MiniOS, Xen, and LWIP headers and subsequently used during the cross-compilation and linking of PolarSSL, the stubdom specific GMP, TPM Emulator, and the Xen vTPM and vTPM Manager stubdomains. The current Xen source code is hardcoded to fetch a specific version of this package. The patch files originate from the Xen/stubdom source tree. This recipe provides the flexibility to change version or modify the patches. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Mini-OS source code with make links target appliedKurt Bodiker2018-05-013-0/+89
| | | | | | | | | | | | | | | | | | | | | Mini-OS is a tiny OS kernel distributed with the Xen Project Hypervisor sources. It is mainly used as operating system for stub domains that are used for Dom0 Disaggregation. The Mini-OS source tree is updated and released in coordination with Xen releases. The Mini-OS source tree and architecture-specific symbolic links are required for building the dependencies used to build Xen stubodmains. For convenience, the make links target was executed before packaging. Otherwise, this is a source package. The current build methods for Xen stubdomains require either a source archive which contains the Mini-OS source code or execution of a make target that will fetch the appropriate Mini-OS source tree from it's git repository. This recipe removes the mysticism of relating to the version of Mini-OS being used and it's origins and provides the flexibility to easily changes versions or patch as necessary. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: LWIP source code with patches applied for stubdomsKurt Bodiker2018-05-014-0/+2454
| | | | | | | | | | | | | | | | lwIP is a small implementation of the TCP/IP stack designed for use in embedded systems. This lwIP recipe does not configure nor does it build the product. Instead, this recipe applies the patches normally found in the Xen/stubdom source tree and creates a source package that can be used for cross-compiling for MiniOS. The current Xen source code is hardcoded to fetch a specific version of this package. The patch files originate from the Xen/stubdom source tree. This recipe provides the flexibility to change version or modify the patches. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Define standard values needed to build stubdomainsKurt Bodiker2018-05-011-0/+152
| | | | | | | | | | | This commit introduces the stubdom.inc file that is required for each recipe that is/will be built for Xen stubdomains. This file defines the standard values to be used such as common dependencies, compiler and linker flags, and unsets every flag and build tool that is exported into the OE environment. Signed-off-by: Kurt Bodiker <kurt.bodiker@braintrust-us.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: use oe.utils.str_filter_outRicardo Salveti2018-01-301-1/+1
| | | | | | | | oe_filter_out is not available in oe-core anymore so use oe.utils.str_filter_out instead. Signed-off-by: Ricardo Salveti <ricardo@opensourcefoundries.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: for 4.10.0: XSA-253 / CVE-2018-5244 patchChristopher Clark2018-01-122-0/+28
| | | | | | | Fix a memory leak with MSR emulation on x86. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add recipe for Xen 4.10.0Christopher Clark2018-01-121-0/+10
| | | | | | | Introduce the recipe for Xen 4.10.0. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: xen.inc: remove xen-blktap from xen-base RDEPENDSChristopher Clark2018-01-121-3/+3
| | | | | | | | | | | | In Xen 4.10, blktap is deprecated and no longer built by default, so make the xen-blktap, xen-libblktap and xen-libvhd packages optional instead of required dependencies for the xen-base package. Move xen-blktap and related packages to RRECOMMENDS to preserve xen.inc compatability with previous Xen releases. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Package libxentoolcore and xen-diag, introduced in Xen 4.10Christopher Clark2018-01-121-0/+9
| | | | | | | | Package a new library, libxentoolstore, introduced in Xen 4.10. Also package the xen-diag tool in the xen-misc package. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: upgrade 4.9.x recipe to 4.9.1 and apply XSA/CVE fix patchesChristopher Clark2018-01-1210-48/+671
| | | | | | | | | | | | | | | | Upgrade the Xen 4.9.x series recipe to latest 4.9.1 and apply patches for: XSA-245 / CVE-2017-17046 XSA-246 / CVE-2017-17044 XSA-247 / CVE-2017-17045 XSA-248 / CVE-2017-17566 XSA-249 / CVE-2017-17563 XSA-250 / CVE-2017-17564 XSA-251 / CVE-2017-17565 Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: delete references to xenstored.socket and xenstored_ro.socket in xen.incYan Yankovskyi2017-11-271-4/+0
| | | | | | | | | | | These files were removed since the followine patch http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=976ce01e103fc03bb3336cdbc6c951a709e285fe and are absent in xen 4.8.0 and further, which leads to the following error during the Xen build process: do_package: SYSTEMD_SERVICE_xen-xencommons value xenstored.socket does not exist Signed-off-by: Yan Yankovskyi <yan.yankovskyi@globallogic.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Replace 'inherit gettext' with explicit gettext-native dependencyChristopher Clark2017-09-191-1/+2
| | | | | | | | | | | | | | This fixes the build when libc-locale-code is not a DISTRO_FEATURE. xen's configure script checks for xgettext and will abort if not found. xgettext is provided by the gettext-native package but not by gettext-minimal-native. This means that "inherit gettext" is not sufficient to satisfy Xen's build requirements: gettext-native is required. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: patch to fix ARM libxc missing variable initChristopher Clark2017-09-192-0/+38
| | | | | | | | | | | | Fix Xen 4.9.0 build error on ARM architecture with gcc 7: Import upstream Xen patch 88bfbf90e35f1213f9967a97dee0b2039f9998a4 Error was: xc_dom_arm.c:229:31: error: 'domctl.u.address_size.size' may be used uninitialized in this function [-Werror=maybe-uninitialized] Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Add menuconfig task and enable menuconfig from devshellChristopher Clark2017-09-141-0/+35
| | | | | | | | | | | | | Xen supports Kconfig for configuring optional build settings. This commit adds the menuconfig task to simplify interactive use: bitbake xen -c menuconfig and also ensures that menuconfig works when using the devshell. This change adds ncurses-native as a build dependency. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Only generate long-double-32.h if absentChristopher Clark2017-08-291-1/+3
| | | | | | | | | | Only copy long-double-64.h to create long-double-32.h if it is not already present. Compile tested with both ARM 32-bit build and x86 64-bit build. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen : cp long-double-64.h long-double-32.h to fix hvmloader buildChristopher Clark2017-08-241-0/+1
| | | | | | | | | | | | Fix the xen build when MACHINE = "genericx86-64" by providing long-double-32.h Inspired by a similar recent patch to meta/recipes-bsp/gnu-efi/gnu-efi_3.0.5.bb since the contents of the header are minimal: cp ${STAGING_INCDIR}/bits/long-double-64.h ${STAGING_INCDIR}/bits/long-double-32.h Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: remove STAGING_DIR_HOST from the runtime search path for bios.binChristopher Clark2017-08-171-1/+1
| | | | | | | | | | This configuration option sets a run-time search path rather than the location of a build-time dependency. Tested with Xen 4.9 on OpenXT. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: remove 4.8 recipeBruce Ashfield2017-08-141-10/+0
| | | | | | We have 4.9 in the tree, so we no longer need the 4.8 variant. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add recipe for Xen 4.9.0Christopher Clark2017-08-141-0/+10
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Package .pc packageconfig files into dev packagesChristopher Clark2017-08-141-15/+60
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Package libxendevicemodel, introduced in Xen 4.9Christopher Clark2017-08-141-0/+5
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: Fix mistype error in xen-watchdog systemd servicepyro-nfvaccessIurii Mykhalskyi2017-04-301-1/+1
| | | | | | | | Due to error in naming this service will not be autoenabled in systems with systemd init manager Signed-off-by: Iurii Mykhalskyi <iurii.mykhalskyi@globallogic.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add a README to provide info for usersDoug Goldstein2017-01-061-0/+24
| | | | | | Provided some basic documentation on how to use the xen recipe properly. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: remove unused patchDoug Goldstein2017-01-061-58/+0
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: update license checksumDoug Goldstein2017-01-061-1/+1
| | | | | | The checksum of the license changed with the 4.8.0 release. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: ensure we build release buildsDoug Goldstein2017-01-041-0/+4
| | | | | | | | | Don't build with asserts on. This is the default for release tarballs but if someone bbappends patches in we should ensure they don't shoot themselves. Signed-off-by: Doug Goldstein <cardoe@cardoe.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: make it easy to override hypervisor configDoug Goldstein2017-01-041-0/+8
| | | | | | | | | The hypervisor is now configured with Kconfig like busybox and the kernel. This makes Xen behave like the busybox recipe by taking a defconfig if the user has one provided with a bbappend. Signed-off-by: Doug Goldstein <cardoe@cardoe.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add gnu-efi to DEPENDSDoug Goldstein2017-01-041-0/+1
| | | | | | | Allow Xen to build the EFI loader by including the required dependency. Signed-off-by: Doug Goldstein <cardoe@cardoe.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* Remove True option to getVar callsPaul Barker2017-01-032-6/+6
| | | | | | | getVar() now defaults to expanding by default. Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: bump to version 4.8.0Doug Goldstein2016-12-182-11/+10
| | | | | | Version bump to the latest release. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: switch to updated download URLDoug Goldstein2016-12-181-1/+1
| | | | | | | | The Xen Project has changed the officially supported download URL to be from xenproject.org. This changes to the officially supported URLs. Signed-off-by: Doug Goldstein <cardoe@cardoe.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add extra generated file to packageDoug Goldstein2016-12-181-0/+1
| | | | | | | | | xenstore is no longer launched by xencommons directly. Instead its launched indirectly via the launch-xenstore script to allow users to switch between xenstore running in a stubdom or within dom0 easily. Signed-off-by: Doug Goldstein <cardoe@cardoe.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: uprev to 4.7.0Chris Patterson2016-07-315-15/+92
| | | | | | | | | | | | | - update packages and add additional ones for new binaries (cpuid and livepatch) - update xen_git to point to 4.7, make branch= fully variable, and remove assumed .0 from release version - add patch to fix compilation of xen with gcc 6 on arm/aarch64 Build tested x86_64 and aarch64 targets. Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce@zedd.org>
* xen: deploy efi binary, if presentChris Patterson2016-03-311-0/+7
| | | | | Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add the extra packages released with xen 4.7Derek Straka2016-03-291-10/+37
| | | | | Signed-off-by: Derek Straka <derek@asterius.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add the flask policy to the set of files installed to the deploy directoryDerek Straka2016-03-291-0/+5
| | | | | Signed-off-by: Derek Straka <derek@asterius.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add the ability to configure the name of the policyDerek Straka2016-03-291-1/+3
| | | | | | | When using non-release versions, the policy files may have a different name (xenpolicy-${PV}-unstable). Allow the policy file name to be configured by the xen recipe. Signed-off-by: Derek Straka <derek@asterius.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: split the flask package into a policy and tools packageDerek Straka2016-03-291-1/+5
| | | | | Signed-off-by: Derek Straka <derek@asterius.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: add curl and gnutls to dependsChris Patterson2016-03-241-0/+2
| | | | | | | Addresses QA warnings with regards to rdepends for xen-qemu. Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen: uprev to 4.6.1Chris Patterson2016-03-243-133/+10
| | | | | | | Drop xsm fix backport, no longer required. Signed-off-by: Chris Patterson <pattersonc@ainfosec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* Fix QA Issues when building for aarch64 machinesMachon Gregory2016-03-071-0/+6
| | | | | | | | | | | | | | | | When building for the aarch64 based machines the following QA Issue is produced: ERROR: QA Issue: xen: Files/directories were installed but not shipped in any package: /usr/lib64 /usr/lib64/efi /usr/lib64/efi/xen-4.6.efi /usr/lib64/efi/xen-4.6.0.efi /usr/lib64/efi/xen.efi /usr/lib64/efi/xen-4.efi Signed-off-by: Machon Gregory <mbgrego@tycho.nsa.gov> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen.inc: fix ordering of stubs taskChris Patterson2016-02-241-1/+1
| | | | | | | | | | | | | | | | Placing the stubs function between patch and configure steps breaks because it has dependencies which are not guranteed until the configure step. Build error: "fatal error: gnu/stubs-32.h: No such file or directory" This patch simply moves the step between configure and compile to resolve the dependency issue. Reported-by: Machon Gregory <mbgrego@tycho.nsa.gov> Signed-off-by: Chris Patterson <cjp256@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* xen-arch: add explicit expansion parameterBruce Ashfield2016-02-221-1/+1
| | | | | | | To avoid parse errors with oe-core master, we need to expliictly pass the expansion parameter to getVar. Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>