linux/poky.git/meta/recipes-bsp, branch 2.7_M1

uboot-sign.bbclass: fix signature and deployment

2018-12-08T17:17:01+00:00

Fixed: MACHINE = "beaglebone-yocto" KERNEL_CLASSES += "kernel-fitimage" KERNEL_IMAGETYPE_beaglebone-yocto = "fitImage" UBOOT_MACHINE_beaglebone-yocto = "am335x_boneblack_vboot_config" UBOOT_MKIMAGE_DTCOPTS = "-I dts -O dtb -p 2000" UBOOT_SIGN_KEYDIR = "${TOPDIR}/conf" UBOOT_SIGN_KEYNAME = "dev" UBOOT_SIGN_ENABLE = "1" IMAGE_INSTALL_remove = "kernel-image-zimage" $ cd conf $ openssl genrsa -F4 -out dev.key 2048 $ openssl req -batch -new -x509 -key dev.key -out dev.crt $ cd ../ $ bitbake u-boot linux-yocto $ grep signature tmp/deploy/images/beaglebone-yocto/*.dtb Binary file tmp/deploy/images/beaglebone-yocto/u-boot-beaglebone-yocto-2018.07-r0.dtb matches Binary file tmp/deploy/images/beaglebone-yocto/u-boot-beaglebone-yocto.dtb matches Binary file tmp/deploy/images/beaglebone-yocto/u-boot.dtb matches And there would be no signature info when rebuild from sstate: $ bitbake u-boot linux-yocto -cclean $ bitbake u-boot linux-yocto $ grep signature tmp/deploy/images/beaglebone-yocto/*.dtb No result This s because kernel directly edit ${DEPLOY_DIR_IMAGE}/u-boot.dtb, (Note, it is global ${DEPLOY_DIR_IMAGE}, not recipe's DEPLOYDIR), so that the modified info is not in sstate, and would be lost when rebuild from sstate. There are other problems in previouse code: - The u-boot.dtb is provided by u-boot, but edited by kernel during signing, so it should be deployed by kernel rather than u-boot. - The u-boot.do_concat_dtb directly install files to global ${DEPLOY_DIR_IMAGE}, this is incorrect, the ${DEPLOY_DIR_IMAGE} should be installed by do_deploy. - It seems that it assumes do_deploy depends on do_install according the comments, but they have no relationships: # do_concat_dtb is scheduled _before_ do_install as it overwrite the # u-boot.bin in both DEPLOYDIR and DEPLOY_IMAGE_DIR. - The do_concat_dtb should be run after do_compile, but it doesn't have this dependency. Make u-boot install u-boot.dtb to ${datadir}, kernel copies u-boot.dtb from ${STAGING_DATADIR} to ${B} and deploy it can fix the problem. [YOCTO #12112] Reported-by: Christian Andersen (From OE-Core rev: 493f70cfb177f1d452a13329647a38642bf2b161) Signed-off-by: Robert Yang Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

u-boot-tools: fix compile error

2018-12-08T17:17:01+00:00

It uses sandbox_defconfig to produce u-boot tools. But EFI is only supported by arm and x86, then it fails to run task do_compile on other arches: | include/config_distro_bootcmd.h:267:3: error: #error "sandbox EFI | support is only supported on ARM and x86" Only enable EFI support for u-boot-tools on x86 and arm to fix the issue. (From OE-Core rev: f79039497a6bb8521d5dc076924b6eb2626607c5) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

u-boot: Upgrade 2018.07 -> 2018.11

2018-11-23T23:35:20+00:00

This upgrades U-Boot to 2018.11 release and drop the backported security fixes which are now included upstream. (From OE-Core rev: 04469ab5b7f0446404b4cb55a15595678581ab26) Signed-off-by: Otavio Salvador Signed-off-by: Richard Purdie

u-boot: Add mkenvimage tool

2018-11-23T23:35:19+00:00

This utility is used for creation of images containing usable in run-time U-Boot environment. As of today this utility is added per-board like here [1] for Intel Edison board. [1] http://git.yoctoproject.org/cgit/cgit.cgi/meta-intel-edison/tree/meta-intel-edison-bsp/recipes-bsp/u-boot/u-boot-tools_2014.04.bb Given there're quite some U-Boot tools that we may want to add later this recipe name switch from "u-boot-mkimage" to generic "u-boot-tools" still for compatibility we provide "u-boot-mkimage" with help of PROVIDES as well as proposed "u-boot-mkenvimage". (From OE-Core rev: 314885b16e5d26d27d46a4bfb0d581b27a03b8fe) Signed-off-by: Alexey Brodkin Cc: Richard Purdie Cc: Otavio Salvador Cc: Martin Jansa Cc: Ross Burton Cc: Marek Vasut Signed-off-by: Richard Purdie

v86d: Make cross compilation working on more architectures

2018-11-07T23:08:55+00:00

Since commit 709c603dec19 ("v86d: Accept aarch64 as build host") we support cross compilation on aarch64 host in addition to x86 host. However building on hosts different than two above will fail. Make cross compilation support more generic by checking for TARGET_ARCH in v86d configure script with fallback to `uname -m` when not present in environment and pass TARGET_ARCH explicitly in do_configure(). Cross build for x86 tested on IBM Power 8 machine with RHEL7. Should work on aarch64 and rest too. (From OE-Core rev: 69f7579eb36c00b557225377e1a3cc61b103be23) Signed-off-by: Serhey Popovych Signed-off-by: Richard Purdie

lrzsz: fix CVE-2018-10195

2018-09-11T09:46:17+00:00

"Integer overflow in src/zm.c:zsdata() causes crash in sz and can leak information to receiver." Take a patch from Fedora to resolve CVE-2018-10195. (From OE-Core rev: a7b50fcee9a295de57f743fa3637905992da722e) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

eee-acpi-scripts: remove the recipe

2018-09-10T11:13:05+00:00

Asus EEEPc hardware is well obsolete, upstream repo is now gone. (From OE-Core rev: 2ac9d94a4d9b88d56ac6af1dd4d7f3d383439a12) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

pciutils: 3.6.1 -> 3.6.2

2018-08-23T17:02:23+00:00

(From OE-Core rev: 3347b7e5641646348e06a6f4c603d83c6be867c9) Signed-off-by: Robert Yang Signed-off-by: Richard Purdie

u-boot: patch for CVE-2018-1000205

2018-08-23T06:50:00+00:00

(From OE-Core rev: a8db39548d9985962e4f8764b10856af5226d210) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie

u-boot: Fix inconsistent indentation

2018-08-23T06:50:00+00:00

This removes some extra spaces. (From OE-Core rev: 146ebbc71183e432905b17a127162aba0b464b50) Signed-off-by: Alexander Hedges Signed-off-by: Richard Purdie