summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* libvirt: fix CVE-2025-13193scarthgapPraveen Kumar2025-12-022-0/+41
| | | | | | | | | | | | | | | | A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-13193 Upstream-patch: https://gitlab.com/libvirt/libvirt/-/commit/a379327d8abcde8ac8d3e16fe5e4ba6f790d767a Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kvmtool: Backport patch for musl compatibilityJaeyoon Jung2025-12-022-0/+52
| | | | | | | | Backporting a patch from kvm tool tip to enable it for musl on older releases. Signed-off-by: Jaeyoon Jung <jaeyoon.jung@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: Fix CVE-2024-11584Vijay Anusuri2025-11-192-0/+105
| | | | | | | | | | | | import patch from debian to fix CVE-2024-11584 Upstream-Status: Backport [import from debian 22.4.2-1+deb12u3 Upstream commit https://github.com/canonical/cloud-init/commit/8b45006c4765fd75f20ce244571b563dbc49d4f2] Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Fix for CVE-2024-10220Hitendra Prajapati2025-11-192-0/+61
| | | | | | | Upstream-Status: Backport from https://github.com/kubernetes/kubernetes/commit/4b7b754099e32ce4b67dacd51d60daa2686ddd94 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: upgrade 2.0.5 -> 2.0.7Vijay Anusuri2025-11-191-3/+3
| | | | | | | | | | Includes CVE fix for CVE-2024-25621 and CVE-2025-64329 Release Notes: https://github.com/containerd/containerd/releases/tag/v2.0.7 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: Fix for CVE-2025-5187Vijay Anusuri2025-09-032-0/+92
| | | | | | | Upstream-commit: https://github.com/kubernetes/kubernetes/commit/2e6eaa1fbedd776ea9357b4f472c66dec01955b5 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: require catatonitPatrick Wicki2025-09-031-1/+1
| | | | | | | | | | | | | | | | Alternatively, we could add it to RRECOMMENDS. But I would say, given its name, managing pods is part of podman's core functionality and that requires catatonit, which is currently only pulled in for the ptest: root@qemux86-64:~# podman pod create Error: building local pause image: finding pause binary: exec: "catatonit": executable file not found in $PATH Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> (cherry picked from commit 380eae7bdd14319069960f7eb8d82c0ec0608b8a) Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: remove skopeo rdependsPatrick Wicki2025-09-031-1/+2
| | | | | | | | | | | | | | | | | | Podman does not require skopeo to run. They are both independent tools. In distros like Debian, Fedora and Arch they don't depend on it either. Skopeo also seems to be used in some of podman's tests, so it makes sense to keep it around for the ptest. We do require skopeo's libdevmapper dependency, so include that directly. And inherit container-host to make sure the container configs are present on the device. Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> (cherry picked from commit 992253f8714c7bccaade9dc6cda9d2f01c51b763) Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Use slirp4netns instead of pastaMarcus Flyckt2025-09-031-0/+5
| | | | | | | | | | | | | | | podman uses pasta as the default rootless network command since 5.0.0, but only slirp4netns is available when building for Yocto. This commit adds a containers.conf file setting slirp4netns as default rootless command if 'rootless' is set in PACKAGECONFIG Signed-off-by: Marcus Flyckt <mafl@kvaser.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> (cherry picked from commit e8214becb94e7bc786bcde59b00a5ee7c4de389e) Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* grpc-go 1.59.0+git: Ignore CVE-2024-7246Anil Dongare2025-09-031-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream Repository: https://github.com/grpc/grpc-go Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2024-7246 Type: Security Fix CVE: CVE-2024-7246 Score: 6.3 (Medium) Patch: https://github.com/grpc/grpc/issues/36245 Analysis: -CVE-2024-7246 describes an HTTP/2 HPACK header table poisoning issue found in the gRPC C-core implementation (grpc/grpc). -The vulnerability does not apply to the pure Go implementation (grpc-go) used in Yocto (meta-virtualization layer). -Marking as not-applicable-config (implementation difference). -The affected code path is not present in grpc-go.Hence ignoring the CVE for grpc-go. Reference: [1] https://nvd.nist.gov/vuln/detail/CVE-2024-7246 [2] https://github.com/grpc/grpc/issues/36245 [3] Upstream gRPC release notes confirming fixed versions for gRPC C-core (not grpc-go). Signed-off-by: Anil Dongare <adongare@cisco.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainer: Fix typo in Makefile for static-pie optionDeepak Rathore2025-09-032-0/+31
| | | | | | | | | | | | | | | | | runc-opencontainer build is failing with clang toolchain due to typo error for --static-pie option. Build Error Logs: | running x86_64-oe-linux-clang failed: exit status 1 | x86_64-oe-linux-clang: error: unknown argument '--static-pie'; did you mean '-static-pie'? | | make: *** [Makefile:69: static] Error 1 | ERROR: oe_runmake failed Fixed it by replacing --static-pie with -static-pie in LDFLAGS_STATIC. Signed-off-by: Deepak Rathore <deeratho@cisco.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: fix for CVE-2024-6174Hitendra Prajapati2025-09-032-0/+104
| | | | | | | Upstream-Status: Backport from https://github.com/canonical/cloud-init/commit/f43937f0b462734eb9c76700491c18fe4133c8e1 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* doc: Fix typo in READMEDarshan Patel2025-09-031-2/+2
| | | | | | | - Corrected minor typographical error(s) in the documentation for clarity. Signed-off-by: Darshan Patel <darshan.patel@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: remove ptestChen Qi2025-08-182-39/+1
| | | | | | | | | | | | | | | | | The ptest was added almost three years ago and since then nobody ever fixed anything. It's almost impossible that the ptest never failed. As an evidence, for the current version, the test cases cannot even run. Remove this ptest. People who care about podman ptest should be maintaining it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> (cherry picked from commit a8175deded4decb9b889901caabb48bf8c4edc73) Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix CVE-2024-9341Praveen Kumar2025-08-182-0/+46
| | | | | | | | | | | | | | | | | | | A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-9341 Upstream-patch: https://github.com/containers/common/commit/e7db06585c32e1a782c1d9aa3b71ccd708f5e23f Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix CVE-2024-9341Praveen Kumar2025-08-182-0/+46
| | | | | | | | | | | | | | | | | | | A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-9341 Upstream-patch: https://github.com/containers/common/commit/e7db06585c32e1a782c1d9aa3b71ccd708f5e23f Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-manager: update RDEPENDSChua, Zachary Zet Li2025-07-311-2/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update RDEPENDS to fix following errors when run virt-manager: | File "/usr/share/virt-manager/virtManager/virtmanager.py", line 13, in <module> | import gi | ModuleNotFoundError: No module named 'gi' | File "/usr/lib/python3.12/site-packages/gi/__init__.py", line 122, in require_version | raise ValueError('Namespace %s not available' % namespace) | ValueError: Namespace LibvirtGLib not available | File "/usr/share/virt-manager/virtinst/xmlapi.py", line 7, in <module> | import libxml2 | ModuleNotFoundError: No module named 'libxml2' | File "/usr/share/virt-manager/virtinst/install/urlfetcher.py", line 16, in <module> | import requests | ModuleNotFoundError: No module named 'requests' Update RDEPENDS for package virt-manager-install which are required by command virt-install. For example, the error is as follows when missing virsh: Error launching ['virsh', '--connect', 'qemu:///system', 'console', 'myvm']: [Errno 2] No such file or directory Commits are taken from 'master' branch: - 032415ef6b7d48ca34bb1d23cb8c194a38e0c369 - 238020e42060764e7d2aadbb43a12792ed8b7e27 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Chua, Zachary Zet Li <zachary.zet.li.chua@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: upgrade from 2.0.0-beta to 2.0.5Chen Qi2025-07-082-34/+6
| | | | | | | | 0001-Makefile-update-default-PACKAGE-to-v2.patch is dropped as it has been merged in new version. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix CVE-2025-6032Praveen Kumar2025-07-082-0/+62
| | | | | | | | | | | | | | | A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-6032 Upstream-patch: https://github.com/containers/podman/commit/1569c209829530b1f42e8c2fce851de8003ab3fe Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: Fix CVE-2024-9675Praveen Kumar2025-04-192-0/+114
| | | | | | | | | | | | | | | | | | A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah. References: https://nvd.nist.gov/vuln/detail/CVE-2024-9675 https://security-tracker.debian.org/tracker/CVE-2024-9675 Upstream-patch: https://github.com/containers/buildah/commit/cffa820dc8be07efdb7fc4e8e8b9ff44c70aaf93 Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: fix Upstream-Status formatMartin Jansa2025-04-092-4/+2
| | | | | | | | | | | | | | | | | * fixes: DEBUG: Executing python function do_qa_patch ERROR: QA Issue: Malformed Upstream-Status in patch TOPDIR/meta-virtualization/recipes-containers/docker/files/CVE-2024-36620.patch Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : Upstream-Status: [patch-status] ERROR: QA Issue: Malformed Upstream-Status in patch TOPDIR/meta-virtualization/recipes-containers/docker/files/CVE-2024-36621.patch Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : Upstream-Status: [patch-status] ERROR: Fatal QA errors were found, failing task. Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* openvswitch: fix ptest contains reference to TMPDIR [buildpaths]Bin Lan2025-04-021-1/+10
| | | | | | | | | | | | | The EGREP in ptest/tests/atlocal contains the build paths. The CFLAGS in ptest/tests/atlocal contains the build paths. This change set fixs: - set EGREP to "grep -E" in ptest/tests/atlocal - set CFLAGS to " " in ptest/tests/atlocal by updating the patch openvswitch-add-ptest-71d553b995d0bd527d3ab1e9fbaf5a2ae34de2f3.patch. Signed-off-by: Bin Lan <bin.lan.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: Fix CVE-2024-36621Praveen Kumar2025-04-022-0/+84
| | | | | | | | | | | | | | | | moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-36621 Upstream-patch: https://github.com/moby/moby/commit/37545cc644344dcb576cba67eb7b6f51a463d31e Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: Fix CVE-2024-36620Praveen Kumar2025-04-022-0/+41
| | | | | | | | | | | | | | moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-36620 Upstream-patch: https://github.com/moby/moby/commit/ab570ab3d62038b3d26f96a9bb585d0b6095b9b4 Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: Adjust to glibc __rseq_size semantic changeGuocai He2025-04-022-1/+96
| | | | | | | | | | | On criu version 3.19.0: When use "criu restore -d -D checkpoint" to restore, the error is: 1272: Error (criu/cr-restore.c:1498): 1295 killed by signal 11: Segmentation fault The root casue is that the glibc updated and criu should adjust to glibc __rseq_size semantic change. Signed-off-by: Guocai He <guocai.he.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* tini: Support posix basename from musl libcKyungjik Min2025-03-242-0/+77
| | | | | | | This fixes building with musl libc. Signed-off-by: Kyungjik Min <dpmin7@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix CVE-2025-24976Chen Qi2025-03-062-0/+50
| | | | | | | Backport patch to fix CVE-2025-24976. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: patch CVE-2025-24965Peter Marko2025-03-062-0/+46
| | | | | | | Pick commit https://github.com/containers/crun/commit/0aec82c2b686f0b1793deed43b46524fe2e8b5a7 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: fix CVE-2024-9676Chen Qi2025-01-302-0/+188
| | | | | | | Backport patch to fix CVE-2024-9676. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix CVE-2024-9676Chen Qi2025-01-302-0/+188
| | | | | | | Backport patch to fix CVE-2024-9676. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.30.8Chen Qi2025-01-301-2/+2
| | | | | | | | | The following two patches are dropped as they are in 1.30.8: - CVE-2024-5154-0001.patch - CVE-2024-5154-0002.patch Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-opencontainers: upgrade 1.1.12 -> 1.1.14Hugo SIMELIERE2025-01-071-2/+2
| | | | | | | | | | | | | Alignment with runc-docker version Includes fix for CVE-2024-45310 and other bug fixes Changelog: ========== https://github.com/opencontainers/runc/blob/v1.1.14/CHANGELOG.md Signed-off-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: Add runtime dependenciesLeonard Anderweit2025-01-071-1/+4
| | | | | | | | | Add missing runtime dependencies on python modules asyncio, json and getpass provided by unixadmin. Sort the dependencies alphabetically while at it. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen.inc: python 3.12: fix datetime deprecation warningStanley Stanton2024-11-271-1/+1
| | | | | | | | | | | | | | | | | | | Parsing xen.inc with a host distro that provides python 3.12 (such as Ubuntu 24.04) generates the following deprecation warning: DeprecationWarning: datetime.datetime.utcfromtimestamp() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.fromtimestamp(timestamp, datetime.UTC) This warning comes from the use of datetime.datetime.utcfromtimestamp() in get_build_time_vars. datetime.UTC seems to be a getter wrapper for datetime.timezone.utc, which is already available on older host distro python versions (I have tested only with python 3.10 provided by Ubuntu 22.04) so, opt to use that instead to prevent a breaking change. Signed-off-by: Stanley Stanton <stanley.stanton@taitcommunications.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: set USERADD_DEPENDS to avoid package_write_rpm failureChen Qi2024-11-121-0/+2
| | | | | | | | | | | | | | | | | | | | When do_package uses state cache and is not re-run but do_package_write_rpm is re-run, then we get the following error: Exception: KeyError: 'getpwuid(): uid not found: 996' This is because libvirt does chown to polkitd in do_install and polkitd is from polkit. Here's an easy way to reproduce this issue: bitbake libvirt -c cleansstate && bitbake libvirt -c package && \ bitbake libvirt -c clean && bitbake libvirt -c package_write_rpm So make use of USERADD_DEPENDS to ensure polkitd exists to fix this issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-cli: use main branchMartin Jansa2024-11-121-1/+1
| | | | | | | * master was renamed to main long time ago Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: upgrade 1.1.12 -> 1.1.14yocto-5.0.5scarthgap-5.0.5Divya Chellam2024-11-021-2/+2
| | | | | | | | | | | Includes fix for CVE-2024-45310 and other bug fixes Changelog: ========== https://github.com/opencontainers/runc/blob/v1.1.14/CHANGELOG.md Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-host-config: Remove centos registryLukasz Czechowski2024-11-021-1/+1
| | | | | | | | | | Update registry list by removing 'registry.centos.org' entry. This registry is no longer available. Decommissioning of the registry was announced in the thread: https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/EHGCQUHLDQ6LI474ZAB7MPRZFJD77P3S/ Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* linux-yocto_virtualization.inc: If using externalsrc adjust dependencyMark Hatle2024-10-101-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using externalsrc, the system will disable a number of tasks such as do_validate_branches, do_unpack and do_patch. The do_kernel_metadata task is configured to run after do_validate_branches do_unpack and before do_patch. Since all of these have been removed, the task will never run. The do_kernel_metadata task is responsible for populating the recipe-sysroot-native/kcfg directory via it's own dependency to yocto-cfg-fragments-native:do_populate_sysroot. Without do_kernel_metadata running, do_kernel_configme will fail to run with errors like: ERROR: linux-xlnx-6.6.40+git-r0 do_kernel_configme: Feature '../recipe-sysroot-native/kcfg/cfg/virtio.scc' not found, this will cause configuration failures. ERROR: linux-xlnx-6.6.40+git-r0 do_kernel_configme: Check the SRC_URI for meta-data repositories or directories that may be missing ERROR: linux-xlnx-6.6.40+git-r0 do_kernel_configme: Set KERNEL_DANGLING_FEATURES_WARN_ONLY to ignore this issue Fix this issue by detecting if we're running with externalsrc, and then adding the task do_kernel_metadata (from the current recipe) as a dependency of do_kernel_configme. To reproduce th original issue: $ . ./oe-initbuild-env $ bitbake linux-yocto -c patch $ cp -r tmp/work-shared/<machine>/kernel-source linux-yocto edit the conf/local.conf adding: DISTRO_FEATURES:append = " virtualization" INHERIT += "externalsrc" EXTERNALSRC:pn-linux-yocto = "${TOPDIR}/linux-yocto" $ rm -rf tmp $ bitbake linux-yocto -c menuconfig Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* device-tree: Rename EXTRA_OVERLAYS to EXTRA_DT_INCLUDE_FILESSandeep Gundlupet Raju2024-10-101-10/+10
| | | | | | | | | Rename EXTRA_OVERLAYS to EXTRA_DT_INCLUDE_FILES as these variables are renamed in https://github.com/Xilinx/meta-xilinx/blob/master/meta-xilinx-core/recipes-bsp/device-tree/device-tree.bb recipe. Signed-off-by: Sandeep Gundlupet Raju <sandeep.gundlupet-raju@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: port xen-tools.inc from masterBruce Ashfield2024-09-271-0/+7
| | | | | | | | | | The cherry-pick of xen-4.19 from master missed the xen-tools.inc file. This results in 9p not being packaged and a QA error during the build. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-colorama: drop recipeBruce Ashfield2024-09-261-14/+0
| | | | | | | We no longer need our own pinned version of this recipe, and it causes us issues with meta-python. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: cherry pick xen 4.19 from masterBruce Ashfield2024-09-254-0/+151
| | | | | | | | | | | Introducing the xen-4.19 release to scarthgap -stable release. Interested users can set their preferred version in their configuration as this is NOT the default in scarthgap. Any fixes must go to master before being considered here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* u-boot-xlnx-scr.bbappend: Fix xen boot script comparisonMark Hatle2024-09-251-1/+1
| | | | | | | | | | | | Some versions of python/bitbake appear to allow 'true' and 'false', but this is incorrect, True and False are the correct boolean variables. Fixes: ERROR: ExpansionError during parsing .../meta-xilinx/meta-xilinx-core/recipes-bsp/u-boot/u-boot-xlnx-scr.bb Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Mark Hatle <mark.hatle@kernel.crashing.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* u-boot-xlnx-scr.bbappend: Enable xen boot script using variableJohn Vicky Vykuntapu2024-09-111-2/+4
| | | | | | | | | | | | | | | Xen related boot script offset was override from meta-virtualization for non xen builds. ERROR: RD image overlaps OS image (OS=0xe00000..0x2610000) Add to include xen boot script only if ENABLE_XEN_UBOOT_SCR variable set from the configuration file and xen enabled in DISTRO_FEATURES to avoid override. Signed-off-by: John Vicky Vykuntapu <johnvicky.vykuntapu@amd.com> Signed-off-by: Mark Hatle <mark.hatle@amd.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-image-minimal: Add missing dependency causing intermittent failuresRichard Purdie2024-08-011-0/+1
| | | | | | | | | | | | | | | "bitbake xen-image-minimal -c do_image_wic" fails with: | ERROR: _exec_cmd: install -m 0644 tmp/deploy/images/qemux86-64/xen-qemux86-64.gz tmp/work/qemux86_64-poky-linux/xen-image-minimal/1.0/tmp-wic/hdd/boot/xen.gz returned '1' instead of 0 | output: install: cannot stat 'tmp/deploy/images/qemux86-64/xen-qemux86-64.gz': No such file or directory | | WARNING: exit code 1 from a shell command. ERROR: Task (/media/build/poky/meta-virtualization/recipes-extended/images/xen-image-minimal.bb:do_image_wic) failed with exit code '1' Add the missing dependency to avoid this. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: Use dup3 for riscv64Mingli Yu2024-07-222-0/+43
| | | | | | | | | Use dup3 instead for riscv64 as there is no dup2 on riscv64 linux to fix the below build failure: vendor/github.com/bugsnag/panicwrap/dup2.go:10:9: undefined: syscall.Dup2 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: Enable support for riscv64Mingli Yu2024-07-221-2/+0
| | | | | | | | | Revert [1] to enable support for riscv64. [1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix meson build issuePawan Badganchi2024-07-221-2/+1
| | | | | | | | | | | | | Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi <badganchipv@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-compose: Switch branch to mainDaniel Schultz2024-07-101-1/+1
| | | | | | | | The podman-compose repository has no stable branch anymore and release 1.0.6 is located on main now. Signed-off-by: Daniel Schultz <d.schultz@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-12-29 07:25:15 +0000