Commit Graph

894 Commits

Author SHA1 Message Date
Bruce Ashfield
0c328f7b1d go-systemd: explicitly specify branch
The upstream project has removed the master branch in favour of
'main'.

We were relying on the fetcher default of master previously, and
now that master no longer exists, we get a fetch failure.

Adding an explicit branch=main gets things working again.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-05-12 15:06:23 -04:00
Bruce Ashfield
3713719dff lxc: adjust SRC_URI to new location
linuxcontainers.org has moved where downloads can be found, so we
adjust our SRC_URI accordingly.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-12 08:30:42 -05:00
Daniel Dragomir
c1cbfdd395 lxc: Fix postinstall script for read-only rootfs
Ensure postinstall script for lxc-networking package can run at
build time for a read-only rootfs (with sysvinit).

Signed-off-by: Daniel Dragomir <Daniel.Dragomir@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-01-10 23:24:08 -05:00
Armin Kuster
7685c7d415 libvirt: 9 Security fixes plus
Source: libvirt.org
MR: 98352, 99240, 99137, 99245, 99132
Type: Security Fix
Disposition: Backport from https://libvirt.org/git/?p=libvirt.git;a=log;h=refs/heads/v4.7-maint
ChangeID: 95f822542723d4bf910c1b4159e1431d7d46c969
Description:

Update to 4.7 maint tip all bug fixes.
Includes:
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2019-11091
CVE-2019-10132
CVE-2019-10161
CVE-2019-10166
CVE-2019-10167
CVE-2019-10168

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-09-09 13:27:09 -04:00
Armin Kuster
bbc38dc9d6 libvirt: Security fix CVE-2019-3840
Source: https://libvirt.org
MR: 97512
Type: Security Fix
Disposition: Backport from https://libvirt.org/git/?p=libvirt.git;a=commitdiff;h=9ed175fbc2deecfdaeabca7bc77c7e7ae33a3377
ChangeID: 6c662c67dd3cf6e0eba493b7b619db35f2e07d93
Description:

Fixes CVE-2019-3840

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-06-03 16:06:09 -04:00
Christopher Clark
9b568b6ae1 ipxe: Uprev and fix host compiler and linker flags.
Adds patch to fix detection of the "no-pie" vs "nopie" flag, which needs
to be performed for both the host and target compilers; cannot assume
that one works for the other.

Use EXTRA_HOST_CFLAGS and EXTRA_HOST_LDFLAGS variables for passing
the host tool build parameters: BUILD_CFLAGS and BUILD_LDFLAGS.

Drop unneeded 'NO_WERROR=1' from the recipe and rewrap line.

Uprev commit to latest git revision.

Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-18 09:09:30 -04:00
Oleksandr Kravchuk
9e8c0c96b4 lxc: remove perl-module-warnings-register from RDEPENDS
This module is part of the perl package now and is shipped by default.

Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-02-21 03:15:46 +00:00
Mark Asselstine
d051460bac lxc: uprev from 3.0.3 to 3.1.0
Minor updates and fixes. Improved ptest results per below.

    root@cube-essential:/usr/lib64/lxc/ptest# ./run-ptest
    ### Starting LXC ptest ###
    FAIL: lxc-test-api-reboot
    SKIPPED: lxc-test-apparmor
    PASS: lxc-test-attach
    PASS: lxc-test-automount
    PASS: lxc-test-autostart
    PASS: lxc-test-basic
    PASS: lxc-test-cgpath
    PASS: lxc-test-cloneconfig
    PASS: lxc-test-clonetest
    PASS: lxc-test-concurrent
    PASS: lxc-test-config-jump-table
    PASS: lxc-test-console
    PASS: lxc-test-console-log
    PASS: lxc-test-containertests
    PASS: lxc-test-createconfig
    PASS: lxc-test-createtest
    PASS: lxc-test-criu-check-feature
    PASS: lxc-test-destroytest
    PASS: lxc-test-device-add-remove
    PASS: lxc-test-get_item
    PASS: lxc-test-getkeys
    PASS: lxc-test-list
    PASS: lxc-test-locktests
    PASS: lxc-test-lxcpath
    PASS: lxc-test-may-control
    PASS: lxc-test-mount-injection
    PASS: lxc-test-no-new-privs
    PASS: lxc-test-parse-config-file
    PASS: lxc-test-raw-clone
    PASS: lxc-test-reboot
    PASS: lxc-test-rootfs
    PASS: lxc-test-saveconfig
    PASS: lxc-test-share-ns
    PASS: lxc-test-shortlived
    SKIPPED: lxc-test-shutdowntest
    PASS: lxc-test-snapshot
    PASS: lxc-test-startone
    SKIPPED: lxc-test-state-server
    PASS: lxc-test-utils

    Results:
        PASSED = 35
        FAILED = 1
        SKIPPED = 3
        (for details check individual test log in ./logs directory)

    ### LXC ptest complete ###

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2019-02-06 20:59:41 +00:00
Mark Asselstine
f3d9f2d6c5 lxc: uprev from 3.0.2 to 3.0.3
Update to the just released v3.0.3. This release is a collection of
minor changes, bug fixes, logging updates, documentation cleanup, code
cleanup and some new tests.

We have an improved outlook as far as ptests is concerned as well:
    ### Starting LXC ptest ###
    FAIL: lxc-test-api-reboot
    SKIPPED: lxc-test-apparmor
    PASS: lxc-test-attach
    PASS: lxc-test-automount
    FAIL: lxc-test-autostart
    PASS: lxc-test-basic
    PASS: lxc-test-cgpath
    PASS: lxc-test-cloneconfig
    PASS: lxc-test-clonetest
    PASS: lxc-test-concurrent
    PASS: lxc-test-config-jump-table
    PASS: lxc-test-console
    PASS: lxc-test-console-log
    PASS: lxc-test-containertests
    PASS: lxc-test-createconfig
    PASS: lxc-test-createtest
    PASS: lxc-test-criu-check-feature
    PASS: lxc-test-destroytest
    PASS: lxc-test-device-add-remove
    PASS: lxc-test-get_item
    PASS: lxc-test-getkeys
    PASS: lxc-test-list
    PASS: lxc-test-locktests
    PASS: lxc-test-lxcpath
    PASS: lxc-test-may-control
    FAIL: lxc-test-no-new-privs
    PASS: lxc-test-parse-config-file
    PASS: lxc-test-raw-clone
    PASS: lxc-test-reboot
    PASS: lxc-test-rootfs
    PASS: lxc-test-saveconfig
    PASS: lxc-test-share-ns
    PASS: lxc-test-shortlived
    SKIPPED: lxc-test-shutdowntest
    PASS: lxc-test-snapshot
    PASS: lxc-test-startone
    SKIPPED: lxc-test-state-server
    PASS: lxc-test-utils

    Results:
        PASSED = 32
        FAILED = 3
        SKIPPED = 3
    (for details check individual test log in ./logs directory)

    ### LXC ptest complete ###

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
2019-02-06 20:59:17 +00:00
Paul Barker
d56c5abfde netns: Use correct go toolchain
If we don't explicitly set the GO variable as an argument to make then
the native go toolchain is invoked instead of the cross-toolchain we
actually want. This can result in a netns binary which is built for the
wrong architecture.

Signed-off-by: Paul Barker <paul@betafive.co.uk>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2019-01-10 13:10:39 -05:00
Chin Huat Ang
cf352d7493 docker: fix broken init script
Fix numerous docker.init issues such as missing runtime dependency
util-linux-unshare, incomplete handling of start/stop etc. operations
and minor typos.

Signed-off-by: Chin Huat Ang <chin.huat.ang@intel.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-20 16:01:41 -05:00
Bruce Ashfield
b74c0d4ec2 libvmi: add byacc-native to the DEPENDS
libvmi is looking for yacc during configuration, so we must add it to
our DEPENDS as a native tool.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-16 13:51:35 -05:00
Brendan Kerrigan
f226bea108 xen: remove sse tuning flag
Strip out the sse4.2 tuning flag to prevent sse instructions
from being generated in the build, which breaks the hvmloader
on some machine types (specifically core-i7 from meta-intel).

Signed-off-by: Brendan Kerrigan <kerriganb@ainfosec.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-08 14:53:15 -05:00
Dengke Du
ccdf4ef7b8 ceph: fix rbd create operation not supported
When using qemu-img to create rbd based image:

    qemu-img create -f rbd rbd:libvirt-pool/libvirt-image 2G

Output errors:

    qemu-img: rbd:libvirt-pool/libvirt-image: error rbd create: Operation not supported

Accroding to upstream's advice:

    http://lists.ceph.com/pipermail/ceph-users-ceph.com/2018-November/031014.html

This is because the system can't find libcls_rbd.so, this library
was packaged in ceph-dev, we should package it in ceph.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-08 14:53:15 -05:00
Bruce Ashfield
d9c64d8aa0 kata: WIP
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-05 10:22:54 -05:00
Bruce Ashfield
100fb480e7 runc: refresh to tip of tree
docker/k8s and other components have been refreshed to the 18.09 release
tags. So we update runc to keep in sync.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-05 10:22:54 -05:00
Bruce Ashfield
86db36879f docker/docker-ce: uprev to 18.09
Infrastructure changes triggered updated to supporting parts of the
docker stack, so to make sure that everything stays in sync we update
to the 18.09 release.

There were some minor build differences in this update, but in the
end, things are better since we can use some more of the Make infrastructure
versus calling 'go build' directly.

Also, docker-ce and docker are now virtually the same, except for the
moby based docker pulling in the cli and libnetwork repos independently.
There should be virtually no difference between the results, but we still
keep the two variants for flexibility.

We also drop the unused/legacy 'hi.Dockerfile'.

Tested with both kubernetes and docker unit tests.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-05 10:20:54 -05:00
Bruce Ashfield
e53055f5a1 cri-o: update to 1.12 release
Since kubernetes is now on 1.12, we need to sync our cri-o release
to match.

There are some build changes to the utilities, and a patch refresh,
but otherwise, this is very similar to the exiting build of cri-o.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-02 21:21:27 -04:00
Bruce Ashfield
3724664413 cni: update to latest plugins, and skip windows bridge build
Updating the cni plugins to match k8s and cri-o. We also filter out
the windows plugins, since they use a different build infrastructure
than the other variants .. and are not currently needed. This can
be revisted in the future as needed.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-02 21:21:27 -04:00
Bruce Ashfield
2a46d2df06 cri-o: disable ptest build
We aren't running any ptests for cri-o (it is hard to test in
isolation), and the update to go 1.11 has broken the build in the
ptest phase.

For now, we remove the task to get the build running again.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-02 21:21:27 -04:00
Bruce Ashfield
60142aa29a kubernetes: uprev to v1.12 release and fix cross compilation errors
The update to go 1.11 exposed some issues with the cross compilation of
kubernetes. The best way to fix those issues is to uprev to 1.12 and to
inhibit the building of the test modules (which query the host for
infrastructure that is not present).

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-11-02 21:21:27 -04:00
Bruce Ashfield
4bded63c2e hyperstart: refresh/uprev core support
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-31 09:12:42 -04:00
Dengke Du
2519e5b16d ceph: fix Distutils.cmake installation for cross compile
1. Remove the detection for build host and correct the install destination
   for cross compile.
2. Delete the build host information in the results files.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-30 13:41:16 -04:00
Dengke Du
f33c8698fd ceph: upgrade to 13.2.2
1. upgrade to 13.2.2
2. install systemd service files
3. add pybind support

testing steps:
  # ceph -h

outputs:
--------------------------------------------------------------------------
 General usage:
 ==============
usage: ceph [-h] [-c CEPHCONF] [-i INPUT_FILE] [-o OUTPUT_FILE]
            [--id CLIENT_ID] [--name CLIENT_NAME] [--cluster CLUSTER]
            [--admin-daemon ADMIN_SOCKET] [-s] [-w] [--watch-debug]
            [--watch-info] [--watch-sec] [--watch-warn] [--watch-error]
            [--watch-channel {cluster,audit,*}] [--version] [--verbose]
            [--concise] [-f {json,json-pretty,xml,xml-pretty,plain}]
            [--connect-timeout CLUSTER_TIMEOUT] [--block] [--period PERIOD]

Ceph administration tool

optional arguments:
  -h, --help            request mon help
  -c CEPHCONF, --conf CEPHCONF
  ......
--------------------------------------------------------------------------

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-25 06:31:52 -04:00
Mingli Yu
87526423d5 lxc: Upgrade to 3.0.2
* Refresh patch to avoid fuzz warnings
* Update to 3.0.2 as lxc-destroy failed when
  system boot in nfs rootfs in lxc 3.0.1 as below:
  # lxc-destroy -n test9
  lxc-destroy: test9: utils.c: _recursive_rmdir: 149 Failed to delete /var/lib/lxc/test9
  lxc-destroy: test9: lxccontainer.c: container_destroy: 2946 Failed to destroy directory "/var/lib/lxc/test9" for "test9"
  Destroying test9 failed

  Update to 3.0.2 to fix the above issue

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-22 04:41:50 -04:00
Maciej Pijanowski
ce8f6fe106 xen: fix building with BASELIB=lib64
Many "real" (other then genericx86-64) x86-64 target machine configurations
set BASELIB to lib64. For example the intel-corei7-64 or the AMD
machines.

In such case packaging xen-python fails because items are
installed to /usr/lib/, but FILES_xen-python points to package
/usr/lib64/ items. Exposing the DISTUTILS variables from OE build makes
the python installation somewhat similar to what happens in the distutils
class and python items are installed to the /usr/lib64 as expected.

Another issue was that the xen-efi package was picking up too much stuff
from the /usr/lib64 path on such machines. Being more explicit at least
allows to package things correctly.

Signed-off-by: Maciej Pijanowski <maciej.pijanowski@3mdeb.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-22 04:37:01 -04:00
Mark Hatle
2672520983 openvswitch: Make openvswitch a machine_arch package
Openvswitch recipe depends on the kernel source, which is machine specific.
It can then use this machine specific resource to configure and build the
recipe.  This mix causes the hash values of this package to change based on
the machine, so this package must also be a machine_arch package.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-18 11:43:20 -04:00
Kai Kang
7403b5a691 libvirt: remove qemu from PACKAGECONFIG for mips n32 and n64
PACKAGECONFIG 'qemu' causes libvirt depends on package qemu. But qemu
is not compatible with mips n32 and n64. So remove 'qemu' from
PACKAGECONFIG for mips n32 and n64.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-18 11:37:55 -04:00
Sinan Kaya
c9c0d5ef20 lxc: make error report compatible with ptest
ptest puts the test status at the beginning of the test. Follow
the style.

BEGIN: /usr/lib/lxc/ptest
 ### Starting LXC ptest ###
SKIPPED: lxc-test-apparmor
FAIL: lxc-test-attach
PASS: lxc-test-automount
FAIL: lxc-test-autostart
PASS: lxc-test-cgpath
PASS: lxc-test-cloneconfig
PASS: lxc-test-clonetest
PASS: lxc-test-concurrent
FAIL: lxc-test-console
PASS: lxc-test-containertests
PASS: lxc-test-createconfig
FAIL: lxc-test-createtest
FAIL: lxc-test-destroytest
PASS: lxc-test-device-add-remove
PASS: lxc-test-get_item
PASS: lxc-test-getkeys
PASS: lxc-test-list
PASS: lxc-test-locktests
PASS: lxc-test-lxcpath
PASS: lxc-test-may-control
PASS: lxc-test-reboot
PASS: lxc-test-saveconfig
SKIPPED: lxc-test-shutdowntest
PASS: lxc-test-snapshot
PASS: lxc-test-startone
PASS: lxc-test-utils

Results:
    PASSED = 19
    FAILED = 5
    SKIPPED = 2
(for details check individual test log in ./logs directory)

 ### LXC ptest complete ###
END: /usr/lib/lxc/ptest

Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-16 10:25:40 -04:00
Chen Qi
915c43874d libvirt: do not defer postinstall to first boot when not necessary
The postinstall invokes `/etc/init.d/populate-volatile.sh update'.
This is only useful for an on-target package upgrade. For now,
this postinstall in libvirt has already got a check against $D to
tell whether it's running on target or not, we do not need to use
pkg_postinstall_ontarget. Otherwise, we get unnecessary postinstall
deferred to first boot, which is not what we want.

Note that the postinstall was originally written as 'pkg_postinstall_${PN}',
but was incorrectly modified to be 'pkg_postinstall_ontarget_${PN}' by the
following commit.

  """
  commit 1e67a44db7
  Author: He Zhe <zhe.he@windriver.com>
  Date:   Tue Jul 24 05:50:01 2018 -0700

      libvirt: Remove unsupported configure options and fix warning

  [snip]
  """

I think the warning about deferred postinstall was caused by some bbappend
file instead of the main recipe in this layer.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-16 10:25:36 -04:00
Richard Purdie
7224fdf98a ceph: Remove accidentally added patch file
This patch was accidentally added in commit
4be88e8390, remove it.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:59:15 -04:00
Changqing Li
2a9bdedc3b oci-image-tools: fix do package qa warning
1. After security flag PIE is enabled by default, we might met
below QA warning on some arch, like aarch64, fix it by skip
textrel QA check refer commit b689c72a of oe-core

oci-image-tools-0.2.0-dev+gitAUTOINC+4abe1a166f-r0 do_package_qa:
QA Issue: ELF binary 'work/aarch64-poky-linux/oci-image-tools/
0.2.0-dev+gitAUTOINC+4abe1a166f-r0/packages-split/oci-image-tools/
usr/sbin/oci-image-tool' has relocations in .text [textrel]

2. This problem is caused since security_flags.inc is used by default.
   so alternative work around is:
      SECURITY_CFLAGS_pn-oci-image-tools = "${SECURITY_NOPIE_CFLAGS}"
      SECURITY_LDFLAGS_pn-oci-image-tools = ""

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:38:18 -04:00
Changqing Li
f2446873e7 docker: fix do package qa warning
1. After security flag PIE is enabled by default, we might met
below QA warning on some arch, like aarch64, fix it by skip
textrel QA check refer commit b689c72a of oe-core

WARNING: docker-18.03.0+git708b068d3095c6a6be939eb2da78c921d2e945e2-r0
do_package_qa: QA Issue: ELF binary 'work/aarch64-poky-linux/docker/
18.03.0+git708b068d3095c6a6be939eb2da78c921d2e945e2-r0/packages-split/
docker/usr/bin/docker' has relocations in .text [textrel]

2. This problem is caused since security_flags.inc is used by default.
   so alternative work around is:
      SECURITY_CFLAGS_pn-docker = "${SECURITY_NOPIE_CFLAGS}"
      SECURITY_LDFLAGS_pn-docker = ""

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:38:16 -04:00
Changqing Li
0442f2e7b8 docker-distribution: fix do package qa warning [textrel]
1. After security flag PIE is enabled by default, we might met
below QA warning on some arch, like aarch64, fix it by skip
textrel QA check refer commit b689c72a of oe-core

docker-distribution-v2.6.2-r0 do_package_qa: QA Issue: ELF binary
'work/aarch64-poky-linux/docker-distribution/v2.6.2-r0/packages-split/
docker-registry/usr/sbin/registry' has relocations in .text [textrel]

2. This problem is caused since security_flags.inc is used by default.
   so alternative work around is:
      SECURITY_CFLAGS_pn-docker-distribution = "${SECURITY_NOPIE_CFLAGS}"
      SECURITY_LDFLAGS_pn-docker-distribution = ""

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:37:10 -04:00
Changqing Li
bf8fac24ab docker-distribution: fix do package qa warning[ldflags]
when bitbake lib32-docker-distribution, we might met below
warning:

lib32-docker-distribution-v2.6.2-r0 do_package_qa: QA Issue: No GNU_HASH
in the elf binary: 'work/core2-32-wrsmllib32-linux/lib32-docker-distribution
/v2.6.2-r0/packages-split/lib32-docker-registry/usr/sbin/registry' [ldflags]

which caused by "INSANE_SKIP_docker-registry += "ldflags already-stripped"
don't cover case for multilib, so add multilib prefix MLPREFIX
to fix it.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:37:07 -04:00
Changqing Li
5e20120aa7 oci-runtime-tools: fix do package qa warning
1. After security flag PIE is enabled by default, we might met
below QA warning on some arch, like aarch64, fix it by skip
textrel QA check refer commit b689c72a of oe-core

oci-runtime-tools-0.1.0+gitAUTOINC+6e7da8148f-r0 do_package_qa: QA Issue:
ELF binary 'work/aarch64-poky-linux/oci-runtime-tools/0.1.0+gitAUTOINC+6e7
da8148f-r0/packages-split/oci-runtime-tools/usr/sbin/oci-runtime-tool'
has relocations in .text [textrel]

2. This problem is caused since security_flags.inc is used by default.
   so alternative work around is:
      SECURITY_CFLAGS_pn-oci-runtime-tools = "${SECURITY_NOPIE_CFLAGS}"
      SECURITY_LDFLAGS_pn-oci-runtime-tools = ""

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:35:06 -04:00
Chris Patterson
279dbced29 iasl: remove iasl in favor of acpica in openembedded-core
It is out of date, causes compilation errors, and is replacable
with acpica.  This commit removes the iasl recipe as well
as updating references within seabios and xen, even though
acpcica PROVIDES iasl.

Signed-off-by: Chris Patterson <pattersonc@ainfosec.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:17:39 -04:00
Chris Patterson
fd6854231f ipxe: recipe cleanup and uprev to current
- Use OE's cross compiler (was building with host's).
- Uprev to latest git (no releases)
- Update LICENSE file path and checksum
- Remove configure sed and set isolinux bin variable used in Makefile
- Scrub LDFLAGS and use LD
- Add xz depends

Signed-off-by: Chris Patterson <pattersonc@ainfosec.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-11 14:17:39 -04:00
Dengke Du
4be88e8390 ceph: only support x86-64
Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-09 23:25:37 -04:00
Mark Asselstine
f7738717b8 lxcfs: move recipe from meta-overc to here
This recipe was originally written and included in meta-overc as it
was used by the overc framework so we implemented it there to sort out
the kinks. Since this package is not specific to the OverC framework
and people may be interested in including it in their images without
having any interest in the OverC framework we are moving this recipe
here, alongside lxc and other container related recipes.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-10-04 09:31:19 -04:00
Dengke Du
a49ca99d06 ceph: add support for ceph
Ceph is a distributed object, block, and file storage platform,
ceph depends on oath-toolkit, so add the oath-toolkit also.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-30 21:31:21 -04:00
He Zhe
2dc1de2286 kernel: forcedly load nf_conntrack_ipv6 to work around kernel module loading failure
In the v4.18 kernel, there is a problem with the locking and init sequence of
the kernel modules. This would cause nf_conntrack_ipv6 failed to be loaded.

In kernel v4.19, nf_conntrack_ipv6 has been merged to nf_conntrack and the
problematic code has gone. This patch just works around by forcedly loading
nf_conntrack_ipv6.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-30 21:31:16 -04:00
Mark Asselstine
6e3fb05e2a libvirt: backport LXC AB / BA deadlock fix
This fix will most likely be part of libvirt 4.8.0 but since we took
the time to investigate and fix this issue we are including it now to
prevent others from hitting this issue.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-30 21:31:14 -04:00
Mark Asselstine
b3619dec91 libvirt: uprev to v4.7.0
A straight-forward uprev to the latest stable release. As usual basic
runtime sanity tests have been run along with the ptests. The
following is the results of the ptests:

  ====================================
  Testsuite summary for libvirt 4.7.0
  ====================================
  # TOTAL: 120
  # PASS:  117
  # SKIP:  0
  # XFAIL: 0
  # FAIL:  3
  # XPASS: 0
  # ERROR: 0

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-30 21:31:14 -04:00
Bruce Ashfield
e58badbd37 layer: add thud to compatible releases
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-30 21:27:54 -04:00
He Zhe
a092153881 containerd: Disable for all mips machines
containerd does not support mips since it depends on boltdb which does not
support mips.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-25 17:38:12 -04:00
Christopher Clark
55590b65f2 xen: fix build with _FORTIFY_SOURCE, gcc 8.2 and glibc 2.28
Apply upstream-reviewed patch to fix compilation.
Patch reorders header includes to issue a pragma to disable SSE before
including any potentially always_inline functions that would use SSE.

Also modify the recipe to supply compiler flags via the tools variables where
they will get used, necessary as _FORTIFY_SOURCE requires optimization flags to
be supplied.

Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-25 17:38:10 -04:00
Christopher Clark
6f2de77556 seabios: update to 1.11.2 and use github for SRC_URI
Update to version 1.11.2 fixes compile errors encountered with 1.9.1.

Use the official QEMU github mirror of git.qemu.org/seabios as
a stable, maintained, available SRC_URI for seabios releases.

While downloads.seabios.org is documented as the official source,
it has not published tarballs for the most recent releases.

Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-22 23:11:28 -04:00
He Zhe
cea8ca7c9c lxc: Make named avoid listening on lxc network interface
lxc-net wants to take care of DNS itself using dnsmasq, while named in
bind does the same thing on all network interfaces by default and causes
the following error.

dnsmasq: failed to create listening socket for 10.0.3.1: Address already in use
Failed to setup lxc-net.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-11 16:06:11 -04:00
Chen Qi
34355aa5ac layer.conf: recommend meta-webserver as nagios-core depends on apache2
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
2018-09-06 12:45:17 -04:00