Add command line parameter to create Busybox containers
with OpenSSH support. As a prerequisite, OpenSSH needs
to be installed on the host system.
Signed-off-by: Bogdan Purcareata <bogdan.purcareata@freescale.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Some of recipes produce errors if the distro has enabled usage of
security_flags.inc file. Fix those errors (and QA warnings) by providing
an additional include file that is require'd from conf/layer.conf.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
In yocto builds, preprocessing of binaries can happen after the install
phase. Some of these can modify the size/sha1sum of the binaries.
e.g. A new .gnu_debuglink can happen
docker will not start because of these modifications. Docker initially
does a sha1sum of dockerinit to identify the dockerinit that it was built
with, this is done for security and for compatibility reasons. Since
this checking is disabled, we should rely on rpm tests for validation
of the binary instead.
Signed-off-by: Amy Fong <amy.fong@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
If lxc is built not in the source dir, upstart files will fail to be
installed, because of Makefile error.
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Fix the following warning by passing correct option to configure script:
WARNING: QA Issue: libvirt: configure was passed unrecognised options:
--with-capnp [unknown-configure-option]
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
To generate a proper systemd.service file we should use lxc's builtin
configuration option for the initscript type. To support both sysvinit
and systemd, we trigger off the DISTRO var and enable the proper init
system accordingly.
When properly configured, lxc will create helper scripts and install
the service file, so we can delete the explicit copy of the service
file and let the default rules trigger and install what is needed.
The helper files installed by lxc require a lsb function that is not
commonly available in the 'functions' library: "action". To ensure that
the helper scripts operate, we create a local action() routine with
the expected semantics.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
libvirt wants to use pcap-config to locate the exisence and location
of libpcap. oe-core stubs this script and replaces it with pkg-config,
which can lead to the host pcap-config triggering and either breaking
the build or introducing host contamination.
To fix this issue, we patch configure to use 'pkg-config libcap' to
locate the correct libraries.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Upgrade criu from version from 1.2 to 1.4.
criu is the only user of protobuf and only supported on x86 and arm,
so limit protobuf support on x86 and arm too.
Signed-off-by: Nam Ninh <nam.ninh@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
The ccache on some hosts will cause the golang-cross package to fail
with the error:
| cmd/fix
| cmd/yacc
| runtime/cgo
| go build runtime/cgo: no buildable Go source files in /proj/bitbake_build/tmp/work/x86_64-wrs-linux/golang-cross/1.3-r0/go/src/pkg/runtime/cgo
| WARNING: /proj/bitbake_build/tmp/work/x86_64-wrs-linux/golang-cross/1.3-r0/temp/do_compile/run.do_compile.14152:1 exit 1 from
| sh -x ./make.bash
| ERROR: Function failed: do_compile
Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
The following is the type of error you see when CCACHE is enabled.
| ---> Making bundle: dynbinary (in bundles/1.5.0-dev/dynbinary)
| go build runtime/cgo: no buildable Go source files in /opt/proj/tmp/sysroots/x86_64-linux/usr/lib/x86_64-wrs-linux/go/src/pkg/runtime/cgo
| WARNING: /opt/proj/tmp/work/core2-64-wrs-linux/docker/1.5.0+git2243e32cbbf1c9809c262a7376d34ca43a7a36dc-r0/temp/do_compile/run.do_compile.19967:1 exit 1 from
| DOCKER_GITCOMMIT="2243e32cbbf1c9809c262a7376d34ca43a7a36dc" ./hack/make.sh dynbinary
| ERROR: Function failed: do_compile (log file is located at /opt/proj/tmp/work/core2-64-wrs-linux/docker/1.5.0+git2243e32cbbf1c9809c262a7376d34ca43a7a36dc-r0/temp/do_compile/log.do_compile.19967)
Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
meta-networking requires meta-python so reflect this in the layer
README.
Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Work around an issue with python 2.7 not always having SSLv3 available
by allowing v2 or v3 certificates.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
To ensure that meta-virt versions are chosen over meta-oe equivalents we
bump the priority to 8.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
In some circumstances where the build tree differs from the source,
libvirt's compile will try to create the symlink for cpu_map.xml before
creating the directory $(abs_builddir)/cpu.
Add a test to create this directory if it hasn't already been created.
Signed-off-by: Amy Fong <amy.fong@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Docker's build process will clone missing dependencies which
circumvents the bitbake fetcher. This is a bad thing in many ways, for
example this will not respect BB_NO_NETWORK and DL_DIR settings. To
work around this we are able to provide recipes for each of the
missing dependencies.
The dependencies are all in GO and are required to be added to the
sysroot such that the docker build can find them via GOPATH at build
time. The docker recipe was updated to add these new packages as
dependencies and the explicit clone of go-cli was removed.
After these change we are able to complete the build with networking
disabled after completing a fetchall. Docker functionality was tested
on an image built with these changes and it functions as it did
before.
Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Amy Fong <amy.fong@windriver.com>
These are a set of dependencies required to build and run docker and
docker-registry which had previously existed in
meta-cloud-services. By moving these from meta-cloud-services to
meta-virtualization we can build and use docker without needing to
include meta-cloud-services. Since meta-cloud-services depends on
meta-virtualization these recipes will still be available for use with
packages/images in meta-cloud-services.
There is a concern that meta-cloud-services contains many python
packages as there exists tight dependency for specific package
versions, this move does not prevent this tight binding from
continuing using various mechanisms made available to layers.
Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Amy Fong <amy.fong@windriver.com>
This package is derived from meta-golang:
https://github.com/digitallumens/meta-golang.git
commit 3fa6c8af6b4762de2f4e6740e327a5a71c29e6e1
In the meta-golang version, golang depends on a gcc-cross that causes
conflicts with our toolchain. So the golang-cross recipe was extracted
and then the following changes were made to work in wrlinux:
- our TARGET_ARCH is x86-64, golang-cross wants amd64
- in the former recipe, compile fails because it can't find header files
and libraries because --sysroot is dropped. So I redefined the target
cc and target cxx as cc and cxx at the start of the compile rule since
cc gets redefined in there somewhere.
Signed-off-by: Amy Fong <amy.fong@windriver.com>
Update the LXC recipe with the upstream-applied version of the patch.
Signed-off-by: Bogdan Purcareata <bogdan.purcareata@freescale.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
XEN_TARGET_ARCH, when expanded, would emit a bb.error(). Referencing
XEN_TARGET_ARCH in PACKAGECONFIG resulted in its expansion at the up front
parse time, rather than at compile time, so non-xen-supported-archs like
powerpc would see parse time errors, resulting in non-zero bitbake exit codes.
Naturally this isn't ideal, so instead have the mapping function return
'INVALID' in the unsupported case, and in anonymous python, raise SkipPackage
if the mapped architecture is invalid, so it's seen as unbuildable in that
case.
Signed-off-by: Christopher Larson <kergoth@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Add the necessary bits to enable seccomp support for LXC running on PPC
architectures. libseccomp added support for PPC [1], yet to be applied to
Yocto/meta-security.
[1] https://github.com/seccomp/libseccomp/tree/working-ppc64
Signed-off-by: Bogdan Purcareata <bogdan.purcareata@freescale.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Some package formats explicitly track which files are configuration files
so that they are not overwritten on updates. Explicitly list the
configuration files.
Signed-off by: Rob Woolley <rob.woolley@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Busybox powered containers rely on a different signal for reboot - SIGTERM,
rather than the default SIGINT.
Apply the upstream support adding the infrastructure for defining a custom
reboot signal for a container, and default this signal to SIGTERM for Busybox
containers. The original patches have been applied on the upstream master LXC
branch, and required a minor backport.
Signed-off-by: Bogdan Purcareata <bogdan.purcareata@freescale.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
This is the old 2.7.2 version and it will be found when the
2.7.9 version goes looking for the patch of the same name,
causing do_patch() to fail.
Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
It is questionable if we need this at all anymore (we probably don't),
but for now, there's no reason to not match the versions.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Fix the following QA warning:
WARNING: QA Issue: openvswitch requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Like the previous versions of OVS, we rely on the virtual/kernel provider
to build the appropriate modules. Passing the --with-linux and --with-linux-source
breaks builds when the split source/build/build-artifacts are not as
expected (and modules are attempted to be built from the wrong directory).
To fix this, we simply don't enable those options, and all is well.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
- use EXTRA_OEMAKE for passing along make flags
- drop PARALLEL_MAKE="" override which is not required.
Signed-off-by: Chris Patterson <cjp256@gmail.com>
* The 'hvm' PACKAGECONFIG (which is valid for x86 targets, and default
enabled for x86-64 targets) enables building the hvmloader with
in-built seabios, ipxe and vgabios firmware
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
* Add a patch which enables -mfpmath=387 which prevents the warning,
which is treated as an error
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
* Refactor volatiles so that it generates sysvinit/populate-volatiles as
well as tmpfiles.d configs
* Add systemd PACKAGECONFIG for enabling systemd support
* Setup SYSTEMD_SERVICE variables
* Add FILES values for systemd .service/.mount/etc files
* sed patterns to the 4.5.0 recipe to fix some issues with the source
around qemu-system-i386 and libsystemd-daemon
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
* Added configure step to fix handling of the CC, AS, etc. variables
within the xen build scripts.
* Add configure options for handling of system config directories for
cross building
* Use the qemu provided by oe instead of the xen built version for
consistency as well as to remove the need to have two seperate flows
for building qemu
* Disable building of SeaBIOS
* Removed no longer needed patches
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
* Conditionally add packages to the image depending on whether the
machine supports the respective feature
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
* Remove version specific sed pattern
* Add 'xen' as an output product instead of just 'xen.gz' as some
architectures do not generate the 'xen.gz'
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
* The xen-base specifies features that are specific to x86 targets,
these components include xen-libblktap, xen-flask, xen-hvmloader and
xen-xenpaging
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
* Setup the XEN_TARGET_ARCH and XEN_COMPILE_ARCH based on the running
environments TARGET_ARCH and BUILD_ARCH
Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
The dpdk recipes are not commonly available, so we shouldn't have
dpdk in the PACKAGECONFIG by default.
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
