summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
* readline: 8.2 -> 8.2.13hongxu2024-08-2313-664/+19
| | | | | | | | | | | | Drop backport patches: - readline82-001.patch ~ readline82-010.patch Rebase norpath.patch to 8.2.13 (From OE-Core rev: 14bdb5ee0bf2a8c0aaac6fd625aa6a7d0ea02548) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: 2.12.8 -> 2.13.3hongxu2024-08-231-4/+3
| | | | | | | | | | | | | * Remove Trio and updated Copyright to remove Trio [1] * Remove --with-fexceptions configuration option [2] [1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/7d6969d95509a94347d6f96167ac5420abafa291 [2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/e349709ae7e07a2183304ccc9352b6ac86f62a18 (From OE-Core rev: 786a24228ee0793f43258133c7e5df6acb3e9de2) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux/util-linux-libuuid: upgrade from 2.40.1 to 2.40.2Chen Qi2024-08-234-1/+67
| | | | | | | | | | | | | Upgrade util-linux from 2.40.1 to 2.40.2. 0001-Revert-autotools-make-pam-install-path-configurable.patch is added to solve a problem of lastlog2 pam module not installed in the expected location. (From OE-Core rev: 2303f28de507ceb88a012647f70b74e0fad6ec4b) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysvinit: take release tarballs from githubAlexander Kanavin2024-08-231-2/+3
| | | | | | | | | | | | | | Upstream no longer publishes them on savannah, e.g. release announcement for 3.10: https://lists.gnu.org/archive/html/sysvinit-devel/2024-07/msg00016.html There's been several new versions since: https://github.com/slicer69/sysvinit/releases (From OE-Core rev: 6cb71eaf3d225de14e62cfc1b76dc8094f8f4aed) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: Add PACKAGECONFIG option to mitigate rootfs remount errorNiko Mauno2024-08-231-1/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 2.39 version of util-linux took new file descriptors based mount kernel API into use. In relation to this change, the upstream release notes in https://github.com/util-linux/util-linux/blob/v2.39/Documentation/releases/v2.39-ReleaseNotes#L14-L21 mention that This change is very aggressive to libmount code, but hopefully, it does not introduce regressions in traditional mount(8) behavior. After observing following failure when booting a board using a bit older 6.1 series kernel together with initramfs rootfs based boot flow [FAILED] Failed to start Remount Root and Kernel File Systems. See 'systemctl status systemd-remount-fs.service' for details. closer inspection revealed: demoboard ~ # systemctl status -l systemd-remount-fs.service x systemd-remount-fs.service - Remount Root and Kernel File Systems Loaded: loaded (/usr/lib/systemd/system/systemd-remount-fs.service; enabled-runtime; preset: disabled) Active: failed (Result: exit-code) since Wed 2024-08-14 14:53:48 UTC; 1min 22s ago Docs: man:systemd-remount-fs.service(8) https://www.freedesktop.org/wiki/Software/systemd/APIFileSystems Process: 76 ExecStart=/usr/lib/systemd/systemd-remount-fs (code=exited, status=1/FAILURE) Main PID: 76 (code=exited, status=1/FAILURE) Aug 14 14:53:48 demoboard systemd-remount-fs[76]: /usr/bin/mount for / exited with exit status 32. Aug 14 14:53:48 demoboard systemd-remount-fs[81]: mount: /: mount point not mounted or bad option. Aug 14 14:53:48 demoboard systemd-remount-fs[81]: dmesg(1) may have more information after failed mount system call. Aug 14 14:53:48 demoboard systemd[1]: systemd-remount-fs.service: Main process exited, code=exited, status=1/FAILURE Aug 14 14:53:48 demoboard systemd[1]: systemd-remount-fs.service: Failed with result 'exit-code'. Aug 14 14:53:48 demoboard systemd[1]: Failed to start Remount Root and Kernel File Systems. also consequentially, 'systemctl status' reported: State: degraded When issuing 'strace -ff mount -o remount /' the failure occurred at mount_setattr(3, "", AT_EMPTY_PATH, {attr_set=MOUNT_ATTR_RDONLY|MOUNT_ATTR_NOATIME|MOUNT_ATTR_NODIRATIME, attr_clr=MOUNT_ATTR_NOSUID|MOUNT_ATTR_NODEV|MOUNT_ATTR_NOEXEC|MOUNT_ATTR_NOATIME|MOUNT_ATTR_STRICTATIME|MOUNT_ATTR_NOSYMFOLLOW|0x40, propagation=0 /* MS_??? */, userns_fd=0}, 32) = -1 EINVAL (Invalid argument) After further investigation, The issue was pinpointed to lack of Linux kernel commit https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=95de4ad173ca0e61034f3145d66917970961c210 ("fs: relax mount_setattr() permission checks") in the kernel version that was being used. Above mitigation was discussed in email related to then-rejected CVE-2024-26821: https://lore.kernel.org/linux-cve-announce/2024051606-imaging-entrench-b327@gregkh/T/ After testing with qemuarm64 machine different linux-yocto versions, it was observed that the issue impacts following versions of currently supported LTS kernels: - 6.6.17 (fixed since 6.6.18 i.e. mount_setattr() returns 0) - 6.1.78 (fixed since 6.1.79 i.e. mount_setattr() returns 0) - 5.15.164 which is currently the newest of 5.15.y series (i.e. no known working version) Taking the above findings into consideration, add a new PACKAGECONFIG option removing which enables users to opt-out from using the feature which can cause issues with a bit older kernels. The option is enabled only for class-target here, since it otherwise causes following error during util-linux-native's do_configure task on Debian 11 build host (mountfd_api requirement fails): | configure: error: libmount_mountfd_support selected, but required mount FDs based API not available Versions 5.10.223, 5.4.279 and 4.10.317 were also tested with qemuarm64 but the issue was not reproduced with those versions - using strace showed that the mount_setattr call associated with the new mount API problem was not issued with these LTS kernel versions, which seemed to be confirmed also by following libmount debug message in these cases: 415: libmount: HOOK: [0x7fa115e818]: failed to init new API Note: In addition to the aforementioned, this change was tested also briefly using the current latest kernel versions 6.1.104, 6.6.45 and 6.10.3 that using the old mount API with newest kernels did not introduce any observable regression to the boot flow. (From OE-Core rev: dc086d9a8613143607af3583c72ed892e20b4d66) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: upgrade 256.4 -> 256.5Wang Mingyu2024-08-214-1/+1
| | | | | | | (From OE-Core rev: 0c0de2c8ca95ad73940430a7afe43b0219d4dec6) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ttyrun: upgrade 2.33.1 -> 2.34.0Wang Mingyu2024-08-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changes of existing tools: - ap_tools/ap-check: Add support for vfio-ap dynamic configuration - dbginfo.sh: Update/Add additional DASD data collection - dumpconf: Add new parameter 'SCP_DATA' for SCSI/NVMe/ECKD dump devices - libutil: Make formatted meta-data configurable - s390-tools: Replace 'which' with built-in 'command -v' - zdump/dfi_elf: Support core dumps of vr-kernels Bug Fixes: - chzdev: Fix warning about failed ATTR writes by udev - rust/pv: Try again if first CRL-URI is invalid - rust/pvattest: Add short option for --arpk - zdump: Fix 'zgetdump -i' ioctl error on s390 formatted dump file (From OE-Core rev: c0f57f1210396278a30efa757252c841e86b6ff4) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta-world-pkgdata: Inherit nopackagesMartin Jansa2024-08-201-1/+1
| | | | | | | | | | | | Since this is a recipe with PACKAGES = "", inherit the nopackages class to skip the various packaging functions which wouldn't do anything anyway. This fixes errors from buildhistory changes where packages-split would be empty. (From OE-Core rev: c94b18885fc4a684d5b403f864c7da2cb8b0d188) Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: update from 256 to 256.4Mikko Rapeli2024-08-156-70/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: 566210c272 meson: Bump version to 256.4 16de138427 mkosi: update debian commit reference b731debea9 hwdb: update to main@{2024-07-24} a78a524652 add udev rules for trezor hw wallet devices b825a8be0b core: reliably check if varlink socket has been deserialized 83c9043727 mkosi: Bump device timeout even more e60d01bdbf man/systemd-repart: extend description and reword some sentences 766af3f782 Document that MemorySwapMax supports % configuration 1922d49fd6 Make vcs-tag do something useful for non-developer mode as well 5b9ad0bbb8 tools/fetch-distro: switch to the target branch 8334be48a3 tools/fetch-distro: only fetch the configured branch 92890d56e8 tools/update-distro-hash: rename, fetch the repository if appropriate 1f079607f8 Merge pull request #33803 from bluca/v256-stable e05f93b5c4 mkosi: update arch commit reference c9d39eea98 mkosi: update fedora commit reference dbeed95d76 mkosi: Use the Fedora Rawhide spec for CentOS 6108f13fc0 mkosi: Switch back to PKG_SUBDIR instead of symlinks fd2a6ea0a8 zsh/_networkctl: remove duplicated argument for completion (#31926) 995c702a34 import-creds: when we hit ENOENT on SMBIOS 11 do not even debug log 6a3cb4cd11 core/unit: ignore dropins for masked units completely when checking need_reload f81659f5f3 test: add a reproducer for #33672 7fcfb73d71 shared: log error when execve fail 7da84cc154 test-execute: ExecStop= and friends should not get credentials 8f58652f5e test: override blocking localed policy in TEST-73-LOCALE d6f8575f1e meson: fix missing failure if bpf-framework was enabled e274de4b74 zsh: add varlinkctl completions cae58967a5 docs: Document how to do stable releases 468b064634 man: Mention Type=oneshot timeout directive d870f2335b l10n: fix credits for the French translation 8aa9e60f89 sd-device: remove debug log message when dirs are missing 86ec58a55c id128: refuse --app-specific= if we're listing GPT types b60d5bc1b7 gpt: add more architecture aliases b786185406 kernel-install: Remove existing loader entries and UKIs e63ae80a89 bootspec: correct log level for fatal errors 3736e21341 bootspec: implement sorting by tries left/done, to match what sd-boot does 18143edf3e boot: compare filename suffixes without case 78fcf31f08 man: some fixes bcda6d4637 man: fix typo in unit options section 1747350ffd fsck: do not pull down mount units on soft-reboot a68188e985 man: fix typo in the alias symlink name 15c236806c vmspawn: define default machines for mips targets fa2b2da146 path: drop IN_ATTRIB from parent directory watches 35e2f62967 Remove extra period at the end of systemd-bsod's unit description. (#33632) a40eb432cb test: Set priority for TEST-73-LOCALE 172ffeb813 TEST-06-SELINUX: Disable RuntimeBuildSources= 2fd3514456 test: Add missing --no-rebuild to doc 69c9044525 meson: Bump version to 256.3 16b12506a6 core/cgroup: check root cgroup earlier for unit_get_memory_accounting 06c2ee3979 core/cgroup: make unit_has_host_root_cgroup take const Unit* 15732ee31f core: unify reset_accounting handling 50a0a55066 core: do not drop CGroupRuntime when unit stops, but only on GC b08b5996d3 core/cgroup: use > 0 comparison rather than == 1 ffd90200b2 core/cgroup: actually make use of the cached accounting values 7684f52839 test-install-root: introduce test case for #33411 a42db16a1c shared/install: correctly report changes in install_info_symlink_alias() bb83650f96 shared/install: propagate all errors in install_info_apply() 908edce5b6 shared/install: drop unneeded initialization f414ca0ee3 systemctl: do not try to acquire triggering units for template units 67e0d09368 systemctl: skip triggering unit warning if unit vanished bb71d5dfb4 man/systemctl: --no-reload is honored by mask/unmask/preset too 7122e226c3 logind-dbus: set gc_mode to USER_GC_BY_PIN when disable linger 5d6bf58cf2 logind-user: take gc_mode into account when reporting user state bcb13a3fa2 test_ukify: do not use files from /boot 88264411b6 test_ukify: use sha384 in the signing tests 8b3bedd821 test_ukify: add instructions 168b788104 terminal-util: don't issue "ESC c" sequence on reset, but only when erasing the screen 5e4464bb64 mkosi: Bump default device timeout a little 0009ed8ee1 meson: Drop version from 256.3 to v256.2 1354f6194c meson: Drop ~devel suffix from systemd-stable version fe37213c55 Merge pull request #33774 from DaanDeMeyer/mkosi-backport 677126d300 mkosi: Fix indentation 4c25e572a9 mkosi: Fix typo 400222fa1c mkosi: Drop util-linux from centos/fedora packages dc3543a391 mkosi: Drop udev from Packages= list 82e2a5f47f mkosi: Fix formatting 11f065d3ee mkosi: Build CentOS Stream 10 images by default c54eab5dd0 mkosi: Streamline running the integration tests without building systemd 3bde2db7a4 meson: Drop genkey target baad1c0d0e mkosi: Skip sync script if NO_BUILD is enabled 102ed56c61 mkosi: Remove enforcing=0 from default kernel command line 611e82e660 mkosi: Stop setting apparmor=0 fa7892a690 docs: update mkosi version mentioned in HACKING.md (#33723) ad444842e0 Merge pull request #33735 from DaanDeMeyer/backport-mkosi a63e82ca4a repart: Allow overriding fstype per partition designator 9d05f2d559 mkosi: List library packages explicitly in VolatilePackages= 4a55046779 mkosi: Build initrd as a subimage 81bafc8dd9 mkosi: Drop CacheOnly=always from two subimages 1be0b1f54b TEST-13-NSPAWN: make sure we don't load libnss_systemd 0b9df91ce2 mkosi: Disable unique debug source names 89904fc10c systemd-networkd-tests: Skip tests requiring dhcpd if it is not available c3342c3dc7 TEST-55-OOMD: Remove the opensuse user@ dropin 127f8362c1 mkosi: Install binutils 1a995b9d66 TEST-64-UDEV-STORAGE: Use max_ioqpairs instead of num_queues 367ad876a6 mkosi: Use clang --print-runtime-dir 8b859fa29d mkosi: Extend arch build script comment about symlinks a8a7a6716e test: do not attempt to set xattr on tmpfs 3fc259ae25 mkosi: Add CI for CentOS Stream 10 945013a092 mkosi: Use squashfs for sysext if mkfs.erofs is not available 480f8fa839 mkosi: Make epel repositories optional for CentOS Stream 9 76e14148f6 mkosi: Introduce build image abc3a61e59 mkosi: update fedora commit reference 748cd5a703 mkosi: Update to latest 6d07d59237 Merge pull request #33691 from DaanDeMeyer/backport-mkosi 180814f22f mkosi: Switch back to code.opensuse.org for opensuse 976a0d998e test: install split-out sshd-session binary if present ca97b9a7e6 mkosi: update opensuse commit reference fef4746218 tools/update-distro-hash: Fix path 54eb9b9301 TEST-06-SELINUX: Various fixes de6c473b40 mkosi: Don't fail if /var/log/journal does not exist 74475a5169 test: Switch to ncat instead of nc 0c51e28088 TEST-55-OOMD: Switch to stress-ng 0c7d634157 docs: Simplify update commands in HACKING.md 5685a59371 mkosi: Update to latest 370bf11ec4 mkosi: Build a sysext if SYSEXT=1 is specified 0bdb879b3c mkosi: Check for configured build directory if WIPE=1 880c32b7e3 mkosi: Install erofs-utils cd357eb029 Merge pull request #33674 from DaanDeMeyer/backport-mkosi c350e02631 mkosi: Fix git commit 00bcc619db mkosi: Adapt configuration to take into account configuration rework 3cf12f4f9a mkosi: use apt pinning for locally built debian/ubuntu packages 7ab51fef1f mkosi: Make .autorelabel file empty 0123dbee1b mkosi: Update to latest 32981c454c build(deps): bump actions/checkout from 4.1.6 to 4.1.7 ab11d7e177 mkosi: policykit-1 was renamed to polkitd 8dd54e5adc mkosi: Use the "default" root filesystem for each distribution d28aa922fd meson: add option to build systemd-executor "statically" c3b4032fc3 meson: build libsystemd-core via an intermediate static library 9be2fe707e meson: rename libbasic to libbasic_static fcbafc3ffe Bump meson version to 256.3~devel c7e144eb4a Finalize v256.2 709655ea0d mkosi: switch debian to ci/v256-stable branch e8bbe635cd workflows/labeler: do not set labels on stable backport PRs aa1eb0b066 labeler: match all mkosi files 32f2b9bba6 labeler: remove matches for dropped files (Makefile) 9a2f16e4ed vmm: make sure we can handle smbios objects without variable part c32f71aa14 README: update requirements for signed dm-verity abba1e6bc2 sysusers: handle NSS errors gracefully df1ed3fbe2 man: fully adopt ~/.local/state/ 9d40e5c9c6 man: mention that distinction between /usr/lib/ and /usr/share/ is really about shared *ownership* 8dbb7e2a72 man: drop version info from file hiearchy man page 160b539a9d os-util: avoid matching on the wrong extension-release file 0ff6d2cf47 load-fragment: allow MountImages= with paths starting with /dev cc4472c31e zsh: add run0 completions d0a9cf084d docs: Update HACKING a50e6c5709 README: add missing CONFIG_MEMCG kernel config option for oomd 71de25f2df boot: cover for hardware keys on phones/tablets 243276f008 core/manager: invoke special targets on signal only for system manager efc44e0c3e core/dbus-manager: refuse SoftReboot() for user managers 399e788553 meson: Define __TARGET_ARCH macros required by bpf a946258e9d coredump: correctly take tmpfs size into account for compression 05dcd242dc docs: update RELEASE.md to use same repository for stable branches 0a97db8789 docs: Add section to HACKING.md on distribution packages 3c91ea49d2 docs/CODING_STYLE: document that we nowadays prefer (const char*) for func ret type ea92f16422 test: fix TEST-74-AUX-UTILS.ssh.sh on SUSE f52475dcf3 test: preserve symlink in inst_recursive() 10b7e0a0af test: fix TEST-24-CRYPTSETUP on SUSE 4f7d6885a1 test: install /etc/hosts e94e33b566 test: split the resolved test suite into separate test cases 4d561a0e08 mkosi: update debian commit reference 05c9bc547b units: add dep on systemd-logind.service by user@.service d1cd66ca97 repart: add sections to --help text c2f74defaa Conditional PSI check to reflect changes done in 5.13 df990be913 core: try again bind mounting if the destination was already created 24987eb3cc mkfs-util: Set sector size for btrfs as well e34f436433 repart: Don't set filesystem sector size to 512 3c88c94432 repart: Log more about filesystem sector size 86d47d63b0 core/unit: follow merged units before updating SourcePath= timestamp too 9dec66fc5f meson: use less verbose quoting 6c8e99dedd TEST-54-CREDS: Use UEFI firmware if available 78631dcafd TEST-18-FAILUREACTION: Set auto firmware 71fb49d02c TEST-09-REBOOT: Set auto firmware 938f7b6f29 TEST-06-SELINUX: Explicitly pull in autorelabel.service 37412c952d TEST-70-TPM2: Use UEFI firmware if available 7ee60a8614 resolved: correct parsing of OPT extended RCODEs 711f843e3a TEST-45-TIMEDATE: Use syslog identifier journalctl match 6ead24fcac resolved: allow the full TTL to be used by OPT records dc0167b674 TEST-64-UDEV-STORAGE: Make nvme_subsystem expected pci symlinks more generic fb747bd8cd LICENSES/README: expand text to summarize state for binaries and libs ffc8126cc6 test: pull in multi-user.target explicitly b908f492bc TEST-64-UDEV-STORAGE: Fix python 3.9 compatibility 1c4f25c296 TEST-64-UDEV-STORAGE: Use bus pci slot 1 instead of 0 9663bb7410 TEST-58-REPART: reverse order of diff args 2f455914f7 man/tmpfiles: remove outdated behavior regarding symlink ownership 24dd273402 test-mountpoint-util: add a test for bind mounted symlinks 99cb4bdbbb mountpoint-util: do not assume symlinks are not mountpoints 4437967cab hostnamed: if polkit authentication fails for Varlink Describe() call, don't reply to client with an error fb7ec285c9 core/exec-invoke: use sched_setattr instead of sched_setscheduler 5911f1ec25 cryptsetup: improve TPM2 blob display 57661f4ea9 util: make file_read() 64bit offset safe e2fb3dda24 man/capsule@.service: the capsule user is prefixed with "c-" rather than "p_" 2547de4629 man/capsule@.service.xml: fix typo 98928cf0a7 nspawn, vmspawn: honor the new window title switch 9cbb3aadd5 run: add environment variable to prevent the setting of terminal title 81acc5b39a test-execute: add a test case for issue #33299 d008b3fb26 core: do not filter out write() if required in the very late stage d580b1f850 core: use write() to send handoff timestamp 52eeeb7d3d seccomp-util: split out seccomp_filter_set_add_by_name() 8e775590f1 Fix typo in CAP_BPF description (#33464) 54910267ba test-network: check if static routes not overridden by NDisc routes 4fda6e8f34 network/ndisc: do not remove static routes when received RA with zero lifetime 34bef8dfac network/ndisc: do not override conflicting static routes 0b909bf685 core/exec-invoke: reopen OpenFile= fds with O_NOCTTY 52371fe526 core: verify WorkingDirectory= is outside of API VFS only under mount namespacing ec5ac3ea53 terminal-util: use colon as separator for specifying color 421ccd7094 man: fix double is typo in systemd-tmpfiles 778034f42e test: skip test-cgroup-id on ENOSYS from cg_cgroupid_open 3174fae67b meson: bpf: propagate 'sysroot' for cross compilation a6906475be kernel-install: correct the place where it works in man and help text 3e435e970d man/systemd.exec: list inaccessible files for ProtectKernelTunables 90b5cb35e9 Use consistent spelling of systemd.condition_first_boot argument b6316b8fac login/user-runtime-dir: free ignored sd_bus_error, avoid triggering assertion 71546deef5 login/user-runtime-dir: use STRLEN where appropriate fbfc88af5e pretty-print: take console glyph width into account when drawing progress bar 058fca7e6c mkosi: add support for TEST_SAVE_JOURNAL to integration test wrapper 50ae476efd semaphore: pin packaging to ci/v256/stable branch 771bb489bf test: skip TEST-69-SHUTDOWN on Debian 69c51768ef meson: Bump version to 256.2~devel 273b5622ac meson: Fix various versions 9150ffc98a src/boot/efi/meson.build: ensure VERSION_TAG exists in case of cross build 1eb122033f mkosi: Build a disk image by default again 84d6fec8f9 meson: Deal with potential stable versions 851f991b1c mkosi: bump to latest commit 3d3bc1d999 mkosi: Switch back to btrfs ce41fdbfdc mkosi: Install btrfs-progs on CentOS as well 1566c15fe4 mkosi: Enable hyperscale-packages-experimental for CentOS 33ad0ea834 mkosi: Drop leftover systemd-coredump-debuginfo package for opensuse 2286ae91f4 mkosi: Drop s390x console patch from opensuse spec 7404ba69cf mkosi: use new standalone-shutdown package for debian's exitrd 3f0763b5a6 mkosi: update debian commit reference 9d0259e5bc mkosi: bump Debian Salsa commit to latest 87fc64db36 mkosi: install new split-out systemd packages 245d17d8dd mkosi: update arch commit reference 8717dc0dd4 mkosi: switch opensuse to devel branch 6f720b609a mkosi: update fedora commit reference a09800cd16 mkosi: update fedora commit reference e3703f4327 mkosi: Install zypper in opensuse images a7da351f39 mkosi: Fix sync script git command a39473aac7 mkosi: Clean up old packages from the build directory 2e0af5f6fe mkosi: remove conflicting deb packages from builddir 6a898c35da mkosi: Copy packages to the build directory as well 16ea64e2be mkosi: Make sure we don't hide errors from git merge-base 3f42d88faa mkosi: Install perf f2c782c043 mkosi: Install pciutils 054fc83a23 mkosi: move variable to the right scope 8abb2e0f55 mkosi: Don't touch the packaging checkout if work is being done 59ab01d32f vmspawn: define QEMU_MACHINE_TYPE for loongarch64 ba28889c65 vmspawn: define QEMU_MACHINE_TYPE for riscv 715d146a3a docs: fix dead link to GNOME documentation 34ba18b012 logs-show: do not use _SOURCE_MONOTONIC_TIMESTAMP field f8f669fd69 repart: fix memory leak 7b18adadde mkosi: restrict noble-backports to noble builds 08b8237303 tmpfiles: move --purge to command section in --help text where it belongs e760157389 tmpfiles: insist on at least one configuration file being specified on --purge 90ec026570 tmpfiles: honour --dry-run when removing directories c26e56d08f install: allow removing symlinks even for units that are gone a776dcf7af NEWS: fix typo d89c99c7ad mkosi: bump to latest b455006ae1 CI: disable secure boot in mkosi GHA runs 4cc6da9a5d test-network: mention that the captive portal option is supported since v2.20 f7d55cc801 core/service: fix accept-socket deserialization 7d65709901 test: use 'auto' instead of 'uefi' for automated fallback 6178aa4bbc test: support TEST_NO_QEMU in mkosi integration wrapper a36cb5660e test: support TEST_NO_KVM df1e7d9572 test: drop obsolete comment 51a2e7be5e test: drop unneeded firmware: uefi setting 50b53b8221 test: check the skip condition before installing additional files 9802a28b36 mkosi: install EFI packages only on EFI architectures 21feae324e mkosi: use ports.ubuntu.com for non-x86 backports 9f5f3c2f8b mkosi: enable unprivileged user ns for integration tests 1a0e6961cf man,units: drop "temporary" from description of systemd-tmpfiles aedeaf7450 man: add a bit of a warning to systemd-tmpfiles --purge 3706b5e8e9 fundamental: declare flex array updated for gcc15 and clang 19 51390a1f41 analyze: show pcrs also in sha384 bank a61a83a22b CODING_STYLE: document "reterr_" return parameters 2034de6157 shell-completion: only offer devices for completion 4ebcdcb136 NEWS: note that new stable releases will be in the main repo d316aed5d8 repart: Use CRYPT_ACTIVATE_PRIVATE 4a468387ac test: dump a simple summary at the end of TEST-02-UNITTEST 70f5fb2f7a repart: Use crypt_reencrypt_run() if available ba031f1fe8 resolved: permit dnssec rrtype questions when we aren't validating 30df42a927 tpm2-setup: Don't fail if we can't access the TPM due to authorization failure 514ef0f93b strbuf: use GREEDY_REALLOC to grow the buffer a3d94332a2 rules: Limit the number of device units generated for serial ttys 0d573787ea sd-dhcp-server: clear buffer before receive f2b5c1ff51 hostnamed: don't allow hostnamed to exit on idle if varlink connections are still ongoing d918804408 man/systemd: reorder content a bit 1c27c902ad Create CNAME Dropped merged patches: 0001-src-boot-efi-meson.build-ensure-VERSION_TAG-exists-i.patch 0003-meson-bpf-propagate-sysroot-for-cross-compilation.patch Changed git repo back to systemd main one since that is going to be used for v256-stable branch and newer releases instead of the systemd-stable git repo. (From OE-Core rev: ab6c94006c1e902d63cdd04d978ea3b74fe811b2) Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* zlib: Add CVE_PRODUCT to exclude false positivesHet Patel2024-08-091-1/+3
| | | | | | | | | | | | To avoid false positives (such as CVE-2023-6992, cloudflare:zlib), add a CVE_PRODUCT to identify the vendors that have been used. Removing the present existing CVE_STATUS for CVE-2023-6992. (From OE-Core rev: 119b775b36dfd51286493763cffb6e965893b8fd) Signed-off-by: Het Patel <hetpat@cisco.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: Update merged patch to backport statusRichard Purdie2024-08-091-1/+2
| | | | | | (From OE-Core rev: 80b082dbb0e04d8d7af096046b3ac1e806d0a9d8) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: Fix intermittent ptest issueRichard Purdie2024-08-082-0/+30
| | | | | | | | | | | | The test writes to the disk and means the space used changes. If this crosses a number boundary, the heading spacing can change causing a test failure. This was triggered by a recent gcc upgrade. Add a fix for this which has been shared with upstream. (From OE-Core rev: ca6f0d81fc7d5e53d216e5131724e826369fd4ae) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-initial: Inherit nopackagesRichard Purdie2024-08-081-0/+1
| | | | | | | | | | | Since this is a bootstrap recipe with PACKAGES = "", inherit the nopackages class to skip the various packaging functions which wouldn't do anything anyway. This fixes errors from buildhistory changes where packages-split would be empty. (From OE-Core rev: 731c3d6f16fdf7f9eb862a477a5363c82cac237c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc-y2038-tests: Don't force distro policyRichard Purdie2024-08-081-6/+0
| | | | | | | | | How debugging is laid out is for the distro to decide, not the recipe. If the user wants this, they can set this. This recipe isn't special. (From OE-Core rev: 3250bdf1d9da2908b80326f4d3a61b0131fe6e2b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc-y2038-tests: Fix debug split and drop INSANE_SKIPsRichard Purdie2024-08-081-7/+1
| | | | | | | | | Create the separate dbg package and then drop and the INSANE_SKIP values as none of them appear to be needed once debug splitting is fixed. (From OE-Core rev: 922b5e7272c9b63c39d0c5ee0a67f08664994ab9) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext: Drop ptest INSANE_SKIPsRichard Purdie2024-08-081-3/+0
| | | | | | | | | In my local testing there are now no QA issues from this recipe so we can drop the ptest INSANE_SKIPs. (From OE-Core rev: 0a6821ca4a1c8aa26d3bf6ec1e8b2f86597a1699) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Show error when used with multilibsRichard Purdie2024-08-071-0/+6
| | | | | | | | | | | | | | | | As discussed in the bugzilla entry, musl doesn't work with multilibs. I originally sent this patch in 2020 but was told that support was being added. I recently revisited the bug and retested a basic config which still fails the way it did in 2019. Since clearly nobody is using this, make it clear we don't support it. If anyone does add support, we can remove this error very easily. [YOCTO #13122] (From OE-Core rev: 4da308d37aa51231b617fedb401076c13cafd89a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve_check: Use a local copy of the database during buildsRichard Purdie2024-08-051-5/+13
| | | | | | | | | Rtaher than trying to use a sqlite database over NFS from DL_DIR, work from a local copy in STAGING DIR after fetching. (From OE-Core rev: 03596904392d257572a905a182b92c780d636744) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* create-spdx-3.0/populate_sdk_base: Add SDK_CLASSES inherit mechanism to fix ↵Richard Purdie2024-07-261-0/+3
| | | | | | | | | | | | | | | | | | | | | | | tarball SPDX manifests Currently, "tarball" sdk based recipes don't generate SPDX manifests as they don't include the rootfs generation classes. Split the SPDX 3.0 image class into two so the SDK components can be included where needed. To do this, introduce an SDK_CLASSES variable similar to IMAGE_CLASSES which the SDK code can use. Migrate testsdk usage to this. Also move the image/sdk spdx classes to classes-recipe rather than the general classes directory since they'd never be included on a global level. For buildtools-tarball, it has its own testsdk functions so disable the class there as a deferred inherit would overwrite it. (From OE-Core rev: 662396533177b72cc1d83e95841b27f7e42dcb20) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: cleanup old cve statusPeter Marko2024-07-261-2/+0
| | | | | | | | | | This CVE status should have been removed on version update. CPE says >=2.34 and <2.39 while our version is already 2.40. (From OE-Core rev: b568a8f428e76f75bb8c374983f62822325ebe8a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tclibc-picolibc: Adds a new TCLIBC variant to build with picolibc as C libraryAlejandro Hernandez Samaniego2024-07-265-0/+221
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enables usage of TCLIBC=picolibc extending OE functionality to build and use picolibc based toolchains to build baremetal applications. Picolibc is a set of standard C libraries, both libc and libm, designed for smaller embedded systems with limited ROM and RAM. Picolibc includes code from Newlib and AVR Libc, but adresses some of newlibs concerns, it retains newlibs directory structure, math, string and locale implementations, but removed the GPL bits used to build the library, swiches old C style code for C18 and replaces autotools with meson. This patch adds a picolibc recipe for the C library, a picolibc-helloworld recipe that contains an example application and a testcase that builds it. Picolibc can be built for ARM and RISCV architectures, its been tested both for 32 and 64 bits, the provided example recipe produces the following output: hello, world Runqemu does not automatically show any output since it hides QEMU stderr which is where the QEMU monitors output is directed to when using semihosting, but, manually running the same QEMU command does work properly. (From OE-Core rev: c7535ecaccb72ef21a61f9aec5c68e61fb4f6fb6) Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-networking: upgrade 2.78.1 -> 2.80.0Ross Burton2024-07-262-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2.80.0 - March 14, 2024 ======================= - Mark plugin functions as exports on Windows (!250, Amyspark) - Updated translations 2.80.rc - February 29, 2024 =========================== - GnuTLS: fix improper use of IP address in SNI extension (!247, MARTINSONS Frederic) - GnuTLS: major performance improvement: reduce unnecessary trust list creation (!249) - OpenSSL: properly handle BIO_CTRL_EOF (!248) - Updated translations 2.80.alpha - January 5, 2024 ============================ - GnuTLS: Add warning when system has no trusted certificates (!243) - OpenSSL: Fix bug when populating trust store (!244, Alessandro Bono) - Fix license on dtls-connection.c test (!245, David King) - Updated translations As exposed by the warning when there are no trusted certificates, we should RDEPEND on ca-certificates if either of the crypto backends are enabled so that cryptography is usable. (From OE-Core rev: 0e52a74bcf08cfdd879c74bff9b241a5007c7ef5) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Mitigate /var/tmp type mismatch issueNiko Mauno2024-07-231-0/+1
| | | | | | | | | | | | | | | | | | | The base-files recipe provides /var/tmp -> /var/volatile/tmp symlink which is in conflict with systemd upstream tmpfiles.d/tmp.conf which defines it as a directory (or subvolume on btrfs). This generates following error in journal: Jul 03 15:37:21 qemux86-64 systemd-tmpfiles[158]: "/var/tmp" already exists and is not a directory. Mitigate the issue by defining /var/tmp as symlink corresponding to the one created by base-files. (From OE-Core rev: 1f1f6f45e3cfe24dfee8a09d01a5d32f3080e381) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Remove redundant configure option --disable-werrorKhem Raj2024-07-221-1/+0
| | | | | | | | | This is applied unconditionally few lines above (From OE-Core rev: e9c6dcbe0e93f943ee622ee88d30ce0eb3dd3329) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Upgrade to 2.40Khem Raj2024-07-2232-155/+140
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major new features: * The <stdbit.h> header type-generic macros have been changed when using GCC 14.1 or later to use __builtin_stdc_bit_ceil etc. built-in functions in order to support unsigned __int128 and/or unsigned _BitInt(N) operands with arbitrary precisions when supported by the target. * The GNU C Library now supports a feature test macro _ISOC23_SOURCE to enable features from the ISO C23 standard. Only some features from this standard are supported by the GNU C Library. The older name _ISOC2X_SOURCE is still supported. Features from C23 are also enabled by _GNU_SOURCE, or by compiling with the GCC options -std=c23, -std=gnu23, -std=c2x or -std=gnu2x. * The following ISO C23 function families (introduced in TS 18661-4:2015) are now supported in <math.h>. Each family includes functions for float, double, long double, _FloatN and _FloatNx, and a type-generic macro in <tgmath.h>. - Exponential functions: exp2m1, exp10m1. - Logarithmic functions: log2p1, log10p1, logp1. * A new tunable, glibc.rtld.enable_secure, can be used to run a program as if it were a setuid process. This is currently a testing tool to allow more extensive verification tests for AT_SECURE programs and not meant to be a security feature. * On Linux, the epoll header was updated to include epoll ioctl definitions and the related structure added in Linux kernel 6.9. * The fortify functionality has been significantly enhanced for building programs with clang against the GNU C Library. * Many functions have been added to the vector library for aarch64: acosh, asinh, atanh, cbrt, cosh, erf, erfc, hypot, pow, sinh, tanh * On x86, memset can now use non-temporal stores to improve the performance of large writes. This behaviour is controlled by a new tunable x86_memset_non_temporal_threshold. Deprecated and removed features, and other changes affecting compatibility: * Architectures which use a 32-bit seconds-since-epoch field in struct lastlog, struct utmp, struct utmpx (such as i386, powerpc64le, rv32, rv64, x86-64) switched from a signed to an unsigned type for that field. This allows these fields to store timestamps beyond the year 2038, until the year 2106. Please note that applications are still expected to migrate off the interfaces declared in <utmp.h> and <utmpx.h> (except for login_tty) due to locking and session management problems. * __rseq_size now denotes the size of the active rseq area (20 bytes initially), not the size of struct rseq (32 bytes initially). (From OE-Core rev: 4dd98c39204c1bfdf54b10ec72c3003118ac1dba) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: install lastlog2 volatile fileYi Zhao2024-07-211-1/+8
| | | | | | | | | | | | | | Install lastlog2 volatile file to create /var/lib/lastlog directory to fix runtime error: $ lastlog2 lastlog2: Couldn't read entries for all users lastlog2: Cannot open database (/var/lib/lastlog/lastlog2.db): unable to open database file (From OE-Core rev: 0b651441363a6195a8d025f8010728bc42ae2ee5) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: stable 2.39 branch updates.Deepthi Hemraj2024-07-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Below commits on glibc-2.39 stable branch are updated. e8f5217097 Linux: Make __rseq_size useful for feature detection (bug 31965) 143a7a0623 elf: Make dl-rseq-symbols Linux only 1062ebbd19 nptl: fix potential merge of __rseq_* relro symbols 5c46e6b666 s390x: Fix segfault in wcsncmp [BZ #31934] a036311246 stdlib: fix arc4random fallback to /dev/urandom (BZ 31612) d2cbfcf1d9 math: Provide missing math symbols on libc.a (BZ 31781) d473c9bb3b math: Fix isnanf128 static build (BZ 31774) 3950cbd7a1 math: Fix i386 and m68k exp10 on static build (BZ 31775) 6cb25aff85 math: Fix i386 and m68k fmod/fmodf on static build (BZ 31488) 74630b1bb7 posix: Fix pidfd_spawn/pidfd_spawnp leak if execve fails (BZ 31695) 7f9f25f255 Linux: Include <dl-symbol-redir-ifunc.h> in dl-sysdep.c 198632a05f NEWS: update list of fixed CVEs in 2.39 77bb3c7154 NEWS: update list of fixed bugs in 2.39 f05638731e x86: Properly set x86 minimum ISA level [BZ #31883] b7f5b0a711 x86: Properly set MINIMUM_X86_ISA_LEVEL for i386 [BZ #31867] e1d0040a6d localedata: ssy_ER: Fix syntax error 9de9cd17e7 malloc: New test to check malloc alternate path using memory obstruction a2da98aa2a malloc: Improve aligned_alloc and calloc test coverage. 305ee48826 malloc/Makefile: Split and sort tests 00899eba26 x86/cet: fix shadow stack test scripts 6ade91c211 elf: Avoid some free (NULL) calls in _dl_update_slotinfo 70f560fc22 misc: Add support for Linux uio.h RWF_NOAPPEND flag c9d8534406 i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782) aee37de299 Reinstate generic features-time64.h dd535f4f19 Always define __USE_TIME_BITS64 when 64 bit time_t is used 26e7005728 socket: Use may_alias on sockaddr structs (bug 19622) 9f2b100d67 parse_fdinfo: Don't advance pointer twice [BZ #31798] (From OE-Core rev: 95fd926a23d20bcbf5ffe1e91df60dadc77481b4) Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ell: upgrade 0.66 -> 0.67Ross Burton2024-07-211-1/+1
| | | | | | | | | * Add support for handling sysctl char settings. (From OE-Core rev: a3c246763bdf5bab48d2856cad19376dc23bf6d3) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* volatile-binds: Remove workdir if OverlayFS failsRicardo Simoes2024-07-181-0/+1
| | | | | | | | | | | | | | | | | | | To fulfill OverlayFS workdir requirements, the mount-copybind script creates a workdir. But if the mount operation fails for any reason, the workdir is left there. Then, subsequent runs of mount-copybind will again try to create the directory and pollute system logs with failed mkdir error messages. This commit mitigates the problem by unconditionally removing workdir if the OverlayFS is not used or fails to run. (From OE-Core rev: 7872edbb33024fc710ac683eaef5635b89a1b994) Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com> Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* volatile-binds: Do not create workdir if OverlayFS is disabledRicardo Simoes2024-07-181-1/+3
| | | | | | | | | | | | | | | | | | | When the mountpoint parameter is a directory, the mount-copybind will first try to use OverlayFS. Because of that, it needs to create the OverlayFS workdir (determined by the overlay_workdir). But if the environment variable MOUNT_COPYBIND_AVOID_OVERLAYFS is set to "1", the script uses bind mount. In that case, the overlay_workdir is useless, leaving the spec parent directory in a dirty state. This commit changes mount-copybind so that the overlay_workdir is only created when MOUNT_COPYBIND_AVOID_OVERLAYFS is not set to 1. (From OE-Core rev: 323765607f262b5fea0f19e8a05aeffe5076235a) Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com> Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Move the MIME file to a separate packagePeter Kjellerstedt2024-07-181-1/+5
| | | | | | | | | | | | The systemd-mime package is added as a recommendation for systemd so that it is installed by default, but can be excluded, e.g., via BAD_RECOMMENDATIONS. Excluding it avoids pulling in the MIME database for products that have no use for it. (From OE-Core rev: 5560243137f772683e53b614f134dd632b62be8b) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Correct the indentation in do_install()Peter Kjellerstedt2024-07-181-13/+14
| | | | | | | | | There was a mix of using tabs and spaces for indentation. (From OE-Core rev: e0442c791578c55c7f198ae389cb820a7bf437d5) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Replace deprecate udevadm commandKhem Raj2024-07-181-1/+1
| | | | | | | | | | | | | | | In postinstall we run this script on target these days systemd-hwdb is recommended Fixes ... Configuring udev-hwdb. udevadm hwdb is deprecated. Use systemd-hwdb instead. (From OE-Core rev: 16f3eba7f5097976a53e3ffabd3723d889df56e6) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: fix VERSION_TAG related build errorKai Kang2024-07-181-0/+1
| | | | | | | | | | | The patch 0001-src-boot-efi-meson.build-ensure-VERSION_TAG-exists-i.patch for systemd-boot is also required by systemd to resolve VERSION_TAG related build error. (From OE-Core rev: dd0100137f5f7bcaea7f665ac08754a682cb2983) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Add fix for CVE-2023-42366Khem Raj2024-07-182-0/+38
| | | | | | | | (From OE-Core rev: 34ba71151c93d6fb19469555131519dcb820ab3c) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: CVE-2023-42364 and CVE-2023-42365 fixesKhem Raj2024-07-183-0/+295
| | | | | | | | | | | | backport upstream fix for CVEs and fix the regression that introduced [1] [1] http://lists.busybox.net/pipermail/busybox/2024-May/090766.html (From OE-Core rev: 91d7580344fe5a15a9bf059dceedab42f7ba3e54) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Fix tc applet build when using kernel 6.8+Khem Raj2024-07-182-0/+62
| | | | | | | | | | | | | | We now have 6.9 kernel headers in master which means busybox builds with CONFIG_TC will fail to build due to CBQ being dropped in kernel 6.8+ Apply a fix which is reported upstream (From OE-Core rev: 3afbeb1ea418a69a452e82cbce00c36452b75f1e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revision5.1_M2Richard Purdie2024-07-161-1/+1
| | | | | | (From OE-Core rev: 758508614541c68dd6a2b7084e07287c71f40a8f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: add task to list exported symbolsRoss Burton2024-07-161-0/+11
| | | | | | | | | | | | | When upgrading glibc it's important to know if there are any new symbols that pseudo needs to wrap. In the future a generalised ABI comparison tool would be good, but to solve the immediate need we can simply list the exported symbols to files in WORKDIR. (From OE-Core rev: 395e057743f04e5ee862d790dcfce026220a2699) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Mitigate /var/log type mismatch issueNiko Mauno2024-07-161-2/+3
| | | | | | | | | | | | | | | | | | | When VOLATILE_LOG_DIR evaluates as True, the base-files recipe provides /var/log -> /var/volatile/log symlink which is in conflict with systemd upstream tmpfiles.d/var.conf.in which defines it as a directory. This generates following error in journal: Jul 03 14:28:00 qemux86-64 systemd-tmpfiles[165]: "/var/log" already exists and is not a directory. Mitigate the issue by defining /var/log as symlink corresponding to the one created by base-files, when appropriate. (From OE-Core rev: 711ee36e88c8968e3c45ea787b3adcf64352adf9) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-passwd: upgrade 3.6.3 -> 3.6.4Wang Mingyu2024-07-163-7/+7
| | | | | | | | | | | | 0001-Add-a-shutdown-group.patch 0005-Add-kvm-group.patch refreshed for 3.6.4 (From OE-Core rev: 096175565182eb92daee8fc7b92d12aa90c68d6b) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Patch CVE-2023-42363Peter Marko2024-07-132-0/+68
| | | | | | | | | Backport patch for CVE-2023-42363. (From OE-Core rev: 814f97922e1d6c24a36b03ee0e865f2210ff6d7c) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Patch CVE-2021-42380Peter Marko2024-07-133-0/+194
| | | | | | | | | | Backport patch for CVE-2021-42380. Additionally backport clang regression fix caused by this patch. (From OE-Core rev: 66543769ff79d81508bb703bd2fc34871a16e2c7) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes-recipe: nospdx: Add classJoshua Watt2024-07-132-6/+2
| | | | | | | | | Adds a class that allows recipes to opt out of generating SPDX (From OE-Core rev: 170277da0dc34e3f797451473ebfbde82922f593) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: reconfigure wget https support by default for securityRichard Purdie2024-07-131-3/+3
| | | | | | | | | | | | | | | | | | | | | The default busybox wget https support is suboptimal, it silently ignores checking certificate validity which isn't great for security. Switch our defaults to disable the internal busybox tls code and the https support using it and configure the openssl backend instead. This this is done by spawning an openssl command, we don't need dependencies on openssl for build. For runtime, we can assume people would install openssl if they need/want this. These changes put our default busybox configuration in a more secure initial set of settings. [YOCTO #14125] (From OE-Core rev: 5d4ad13462f12355ff0f2bc1773ab4b1814b165a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bitbake.conf: Further cleanup compiler optimization flagsRichard Purdie2024-07-131-1/+1
| | | | | | | | | | | | | | Move the -pipe option out of the optimization flags and directly into the flags variables since we always use it now. Also move the debug prefix mapping there to match the nativesdk case which already does this. Fix the documentation and two recipe usages to match the change. (From OE-Core rev: 9badf68d78d995f7d5d4cf27e045f029fc6d4044) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux/util-linux-libuuid: upgrade from 2.39.3 to 2.40.1Chen Qi2024-07-139-136/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: =============== GPL-2.0 is changed to GPL-2.0-only in README.licensing. The following two patches are removed as they've been there in new release: 0001-login-utils-include-libgen.h-for-basename-API.patch mit-license.patch Other existing patches are refreshed to avoid patch-fuzz error. A new PACKAGECONFIG, lastlog2, is added, which serves as a switch to build Y2038 safe lastlog pam module. This is a new functionality added in 2.40. This 2.40.1 version has the problem of unnecessary remake, causing intermmittent errors at parallel make. The do_compile:prepend is a workaround for this. Upstream issue and PR are: https://github.com/util-linux/util-linux/issues/3061 https://github.com/util-linux/util-linux/pull/3064 do_install is changed to do_install:append, the legacy codes are removed. They've been there since the born of oe-core. I tested with ccache, there's no error. A new dependency, diffutils, is added to ptest. Because the mkswap-offset test case needs 'cmp' from diffutils. The tests/ts/misc/enosys test case is deleted for musl. This is because the test case is comparing error description output and that's libc specific. Results below can demonstrate the case. ''' root@qemux86-64:/usr/lib/util-linux/ptest# cat /usr/lib/util-linux/ptest/tests/expected/misc/enosys-ioctl test_enosys: ioctl r=0 errno=Success test_enosys: ioctl r=-1 errno=Function not implemented test_enosys: ioctl r=-1 errno=Inappropriate ioctl for device test_enosys: ioctl r=-1 errno=Inappropriate ioctl for device test_enosys: ioctl r=-1 errno=Function not implemented root@qemux86-64:/usr/lib/util-linux/ptest# cat /usr/lib/util-linux/ptest/tests/output/misc/enosys-ioctl test_enosys: ioctl r=0 errno=No error information test_enosys: ioctl r=-1 errno=Function not implemented test_enosys: ioctl r=-1 errno=Not a tty test_enosys: ioctl r=-1 errno=Not a tty test_enosys: ioctl r=-1 errno=Function not implemented ''' (From OE-Core rev: 2c5f70e7e73362502a7d8d0773fbd04520b26eef) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: upgrade from 255.6 to 256Chen Qi2024-07-133-0/+34
| | | | | | | | | | Patch 0001-src-boot-efi-meson.build-ensure-VERSION_TAG-exists-i.patch is added to resolve build time error. (From OE-Core rev: c3f53f641d04109bf88e51e44debb6c74582b5d0) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: upgrade from 255.6 to 256Chen Qi2024-07-1331-1027/+564
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 'cgroupv2' PACKAGECONFIG is dropped as systemd now only supports cgroupv2. The 'kmod' PACKAGECONFIG is now added 'libkmod' as a runtime dependency. This is because systemd 256 uses dlopen to make use of libkmod, and there's no way for our library detection codes to know this and add such dependency automatically. So we add it explicitly. mime is now inherited because ${datadir}/mime/packages/io.systemd.xml is a mime type file. For musl specific patches, most are refreshed. One old patch is dropped, and four new ones are added. Newly added: build-path.c: avoid boot time segfault for musl adjust header inclusion order to avoid redeclaration undef stdin for references using stdin as a struct member include signal.h to avoid the 'undeclared' error Dropped: src/basic/missing.h: check for missing strndupa (drop reason: systemd does not use strndupa any more) (From OE-Core rev: 89b75b46371d5e9172cb496b461824d8551a2af5) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* native/nativesdk: Stop overriding unprefixed *FLAGS variablesRichard Purdie2024-07-011-2/+2
| | | | | | | | | | | | | | | | | | | | We're currently encouraging an "arms race" with the FLAGS variables since a recipe might want to set a specific flag for all variants but to do so, += won't work due to the assignment in the native/nativesdk class files. This means recipes are using append. Since the default variables are constructed out of TARGET_XXX variables and we redefine these, there is no need to re-define the un-prefixed variables. If we drop that, the += appends and similar work and recipes don't have to resort to append. Change the classes and cleanup a number of recipes to adapt to the change. This change will result in some flags appearing to some native/nativesdk variants but that is probably what was originally expected anyway. (From OE-Core rev: a157b2f9d93428ca21265cc860a3b58b3698b3aa) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-11-15 15:26:20 +0000