Commit Graph

1052 Commits

Author SHA1 Message Date
Chen Qi
dd68c2e44c openvswitch: install ovs-systemd-reload
Install ovs-systemd-reload as openvswitch.service uses it.

  openvswitch.service:ExecReload=/usr/share/openvswitch/scripts/ovs-systemd-reload

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-30 00:29:15 -04:00
Chen Qi
e87e6fdcbc ceph: remove fuse related services as WITH_FUSE is OFF
We have WITH_FUSE to set to OFF. We should not install any ceph-fuse
units as they are using ceph-fuse.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-30 00:28:36 -04:00
Zang Ruochen
a822d7630b python-pyyaml: upgrade 3.11 -> 5.1.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-25 22:22:44 -04:00
Chen Qi
6d6b2e1cb8 lxc.cfg: set CONFIG_VXLAN=m for running in virtual machine
The vxlan module is needed if user or some software is trying
to configure network when the image is running in virtual machine.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-18 22:28:11 -04:00
Chen Qi
0ca391c1c2 runc: add PACKAGECONFIG to allow building as static or not
Add a new PACKAGECONFIG, static, which when enabled will build
runc as static. Default to enable it.

We need this because we should allow users to build runc as not
static so that when docker's cgroup driver is set to systemd,
we don't get error.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:03:01 -04:00
Chen Qi
7de3818804 kubernetes: clean up environment settings in do_compile
There are unnessary and incorrect settings like GOOS and GOROOT.
There are also redundant settings like GOPATH, CGO_CFLAGS, etc,
whose latter setting will cover the previous one.

So clean all these up.

Also, remove the comment which suggests settings GOVERSION to "1.10%",
as it's no longer valid for current OE.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:03:01 -04:00
Yuan Chao
b19add379e lxc: upgrade 3.1.0 -> 3.2.1
Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:02:31 -04:00
Yuan Chao
940b899bc0 criu: upgrade 3.11 -> 3.12
Refresh patch: 0001-criu-Fix-toolchain-hardcode.patch

Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:02:31 -04:00
Yuan Chao
3e3ab10faa irqbalance: upgrade 1.5.0 -> 1.6.0
Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:02:31 -04:00
Chen Qi
b538e06ba9 cni: build more plugins
Also build plugins under ipam. Other distros default to contain
these plugins.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:02:31 -04:00
Chen Qi
9267ddff1a cni: fix problem about cross compilation
When setting up k8s, the following error appeared, failing
to setup coredns pod.

  NetworkPlugin cni failed to set up pod "coredns-5f7fc64c95-4nnfq_kube-system" network: fork/exec /opt/cni/bin/loopback: no such file or directory

This is because the binary, /opt/cni/bin/loopback, has wrong interpreter.

So fix do_compile to use ${GO} instead of go to fix this problem.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:02:31 -04:00
Chen Qi
4eca42bc3b cni: remove unnecessary GO settings
These settings are either in go.bbclass or duplicate, thus
removing them.

Keep only CGO_ENABLED and GOPATH to easier manipulation while
upgrading cni.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 11:02:31 -04:00
Mingli Yu
a12a6d922e cri-o: skip it when depends not found
cri-o depends on ostree, libselinux and libseccomp
and we should check if the layer which provides these
recipes exist or not before go on.

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12 10:49:04 -04:00
Changqing Li
91c23e6a9c nagios-core/nagios-nrpe: use update-alternatives for /var/nagios
fix below error:
Error: Transaction check error:
  file /var/nagios from install of nagios-core-4.4.3-r0.core2_64 conflicts with file from package nagios-nrpe-daemon-3.2.1-r0.core2_64

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-06 23:13:58 -04:00
Chen Qi
7acb70c53f .gitignore: ignore .patch files in top dir of meta-virtualization
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-06 23:10:04 -04:00
He Zhe
fc129dccd3 libvirt: Remove numactl from PACKAGECONFIG for arm
b5b5def ("libvirt: add hook support") introduces a wrong check against KARCH
which is not defined.

This patch use TARGET_ARCH overrides to remove numactl from PACKAGECONFIG for
32-bit arm arches.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-31 22:15:23 -04:00
Chen Qi
4f870fa755 kubernetes: set COMPATIBLE_HOST
Currently kubernetes does not build for qemux86, qemumips, qemumips64,
qemuppc. So set COMPATIBLE_HOST to make this clear. Otherwise we get
build failure when trying to build like below.

  fatal error: bits/long-double-64.h: No such file or directory

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-31 22:15:22 -04:00
Anoop Karollil
a23a7d6dca docker: Define override-able BUILD_TAGS
DOCKER_BUILDTAGS has tags that exclude btrfs and devicemapper graph
drivers. To enable either, the tags have to be removed, but this isn't
easily possible as DOCKER_BUILDTAGS can't be overridden via a
bbappend.

Define a BUILD_TAGS variable in the docker recipe that is set with the
exclude tags, and use it for setting DOCKER_BUILDTAGS.  This makes it
possible for downstream to tweak BUILD_TAGS/DOCKER_BUILD_TAGS via a
bbappend.

Signed-off-by: Anoop Karollil <anoop.karollil@ge.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-30 22:08:26 -04:00
Mingli Yu
822bedbaf6 meta-virtualization: add layer depends on selinux
Since cri-o of meta-virtualization depends on
libselinux which comes from selinux, add missing
layer depends back.

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-25 22:37:30 -04:00
He Zhe
1bd526d9fe libvirt: Do not change /var/lib/libvirt/qemu for mips and mips64 in do_install
qemu does not support mips and mips64 and thus /var/lib/libvirt/qemu is not
generated. Do not change it.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-25 14:25:59 -04:00
Hongxu Jia
f73eb0b2c9 docker: improve hardcoded CC for cross compile
Since commit applied in moby [61a3285 Support cross-compile for arm]
it hardcoded var-CC to support cross-compile for arm

Correct it with "${parameter:-word}" format, it is helpful for user
define toolchains

(Use Default Values.  If parameter is unset or null, the expansion of
word is substituted.  Otherwise, the value of parameter is substituted.)

61a3285864

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-22 11:36:16 -04:00
Bruce Ashfield
95b848f219 containers/go/build: don't override global package strip flags
When the go-lang container recipes were first created there were issues
with strip and the resulting binaries. As such, strip was inhibited for
the various packages.

This variable is now set in the default classes, and tests show that
strip works on the binaries (saving up to 2M on disk for some binaries)
with no runtime issues found.

So we drop our explicit set of the inhibit and let the build proceed
by the defaults.

If issues are found, we can re-enable the setting or bbappends can
turn it back on for builds showing issues.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-22 14:48:07 +00:00
He Zhe
37a554a249 libvirt: libvirtd: Facilitate using tls connection mode
tls is the default network connection mode of libvirtd upstream, though we use
tcp mode as default.

tls requires necessary keys and certificates of certificate authority, server
and client to be properly generated and deployed. Otherwise servers and clients
cannot be connected.

This patch,
 - integrates sample keys and certificats of certificate authority, server and
   client for users to be able to use tls mode out of box.
 - sets default server IP address to 127.0.0.1 for users to use local client out
   of box.
 - integrates certtool and provides gnutls-help.py for users to generate keys
   and certificates on targets in their own ways.
 - adds a PACKAGECONFIG option "gnutls" to control all of the above integration
   but disables it to keep the same default behavior as before.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-16 19:41:05 +00:00
Mingli Yu
990d6d8d2b libvirt: Only add polkit to PACKAGECONFIG if polkit is in DISTRO_FEATURES
At first, the polkit support is always enabled in
PACKAGECONFIG and since Feb 27 2014, use x11
DISTRO_FEATURES to control the polkit support
with below commit.
=========================================================
commit ce991a62d5
Author: Jonas Eriksson <jonas.eriksson@enea.com>
Date:   Thu Feb 27 17:10:09 2014 +0100

    libvirt: Disable polkit driver when there is no x11

    To avoid having the default build of libvirt depend on virtual/x11
    through polkit and consolekit, check for x11 in DISTRO_FEATURES before
    enabling the polkit support in the default PKG_CONFIG.

    Signed-off-by: Jonas Eriksson <jonas.eriksson@enea.com>
    Acked-by: Bruce Ashfield <bruce.ashfield@windriver.com>
    Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>

 diff --git a/recipes-extended/libvirt/libvirt_1.2.1.bb b/recipes-extended/libvirt/libvirt_1.2.1.bb
 index 5365b8d..4c9cf36 100644
 --- a/recipes-extended/libvirt/libvirt_1.2.1.bb
 +++ b/recipes-extended/libvirt/libvirt_1.2.1.bb
 @@ -109,10 +109,11 @@ INITSCRIPT_PARAMS_${PN}-libvirtd = "defaults 72"
  #PACKAGECONFIG ??= "xen libxl xen-inotify test remote libvirtd"

  # full config
 -PACKAGECONFIG ??= "qemu yajl uml openvz vmware vbox esx iproute2 polkit lxc test \
 +PACKAGECONFIG ??= "qemu yajl uml openvz vmware vbox esx iproute2 lxc test \
                    remote macvtap libvirtd netcf udev python ebtables \
                    ${@base_contains('DISTRO_FEATURES', 'selinux', 'selinux', '', d)} \
                    ${@base_contains('DISTRO_FEATURES', 'xen', 'xen libxl xen-inotify', '', d)} \
 +                   ${@base_contains('DISTRO_FEATURES', 'x11', 'polkit', '', d)} \
                   "
=========================================================

After below commits to add polkit as a required distro feature
in meta-oe, we should unify altogether to enable polkit if
polkit distro feature is set.
97a1a55 polkit: add polkit as a required distro
feature c049e02 polkit: inherit distro_features_check

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-16 19:40:49 +00:00
Bruce Ashfield
cd3767f0b0 libvirt: uprev to 5.5.x
Upgrading to 5.5.x for libvirt.

One pach refresh is required, but otherwise, build and runtime behaviour
is identical to 5.3.x.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
a0cb3c7aae k8s: update to 1.16+
Upgrading kubernetes to the 1.16 series. This is currently in alpha,
but will be released before the feature freeze.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
e6eb8e839b k8s: update CNI to 0.7.x
Updating the CNI and plugins to 0.7.x series.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
7525f30194 cri-o: update to 1.15
Updating to the 1.15 release.

With this update there are significant new build constraints and
dependencies. As such, the cross binaries are now being be built
by default, with the old (non-cross) build being kept around as
an optional way to build the components.

There are still issues with the non-cross build, so it will
require more work in the future.

We also document the requirement for selinux and seccomp in the
README as dependencies if you build cri-o.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
2ffb3332c4 containerd: update to 0.2.7
Updating to the latest containerd 0.2.x release. No build changes
were required, and runtime behaviour is the same.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
7394c154a9 containers: update oci-systemd-hook to 0.2.0
Updating to the latest oci-systemd-hook version. We also refresh the
patches, specifically the selinux patch, for the updated context.

The additional cgroups mount patch needed to be tweaks for new
required parameters, but is otherwise unchanged.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
cf875d9ee9 containers/runtime-spec: update to v1.01
Updating the reference spec to v1.01. No functional or runtime changes
are expected from this.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
edd2454de4 docker-ce: update to v19.03-rc
Updating the docker community edition to the 19.03 series.

The build changes are minor (mainly cleanup), but otherwise, we
are changing branches and setting new SRCREVs.

The LICENSE checksum tweak is due to copyright year changes in
the files.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
1702ce6e80 docker/moby: update to v19.03-rc
updating the full community build (moby) of the docker engine, cli
and networking components to the 19.03 release series.

The changes are minimal, versioning, branch selection, but otherwise
everything in the build is the same as the previous versions.

The SRCREVs are selected through an audit of moby and docker-ce to
synchronize the build points for the various components.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
0a2af19893 oci-image-tools: refresh to tip of master
Updating the oci-image-tools to the tip of the master branch. This gets
us official integrations of some backported patches (along with other
associated minor fixes).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
df0abf0293 oci-image-spec: uprev to v1.0.1
Updating the reference/source package of the oci-image-spec to v1.0.1.

We also cleanup the install rule to be a bit simpler (by using
--parents), and remove the .tool directory (which is new to this
version), since it won't be package by default (and hence throws a
QA error) and we don't need the .tool/* files.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Bruce Ashfield
c8338c5568 runc: update to -rc8
Updating both the pure opencontainers runc and the docker opencontainers
variants to -rc8.

We track the tip of master for opencontainers and for docker we match
the -ce and moby -rc8 commit hashes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12 14:50:34 +00:00
Changqing Li
c6e7bf94de docker-distribution: remove docker-distribution-ptest dependencies
after commit https://git.openembedded.org/openembedded-core/
commit/meta/classes/ptest.bbclass?id=b47194b57d94260b4e6438c5bf74914027f0b520
package ${PN}-ptest will depend on ${PN} by default,
but for docker-distribution, ${PN} is empty package, remove it from dependency
to avoid image do rootfs failure since nothing provides error.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-03 08:47:12 -04:00
Stefan Agner
eaba9b3acc docker: make docker-init a runtime dependency by default
If docker run --init is used docker expects docker-init to be
present, if not Docker fails to start the container with the
following error:
  docker: Error response from daemon: exec: "docker-init": executable file not found in $PATH.

However, docker-init does not get deployed by default since commit
d19fda3743 ("docker: consolidate common depends/options"). Readd
docker-init through a PACKAGECONFIG RDEPENDS to make sure it gets
deployed by default again.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-03 08:47:08 -04:00
Cevat Bostancioglu
a7da69d1fa singularity: openssl cert configs path fixed.
openssl recipe moves ssl-1.1 directory as ssl , singularity recipe cannot find ssl-1.1 path.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-03 08:38:39 -04:00
Joe Slater
ee9a745a73 irqbalance: use git repo for source
Avoid src-uri-bad qa warning when getting source from github.com/../archive.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-06-27 23:31:23 -04:00
Cevat Bostancioglu
9cb299d384 kvmtool: Werror Disabled Patch
Couple of compile time warnings(sizeof-pointer-memaccess, format-truncation) turned into errors before with Werror command, this patch disables this feature.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-06-25 00:11:58 -04:00
He Zhe
bff274db99 kernel: Add conditional inclusion of linux-yocto_virtualization.inc for rt kernel
This is the same as other kernel bbappend.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-06-17 23:58:09 -04:00
Changqing Li
39443a1f93 nagios-nrpe: fix systemd service start failed
Jun 06 01:44:51 qemux86 systemd[1]: Started Nagios nrpe plugin.
Jun 06 01:44:51 qemux86 nrpe[1263]: Starting up daemon
Jun 06 01:44:51 qemux86 nrpe[1263]: Cannot write to pidfile '/var/nagios/nrpe.pid' - check your privileges.
Jun 06 01:44:51 qemux86 systemd[1]: nagios-nrpe.service: Main process exited, code=exited, status=2/INVALIDARGUMENT
Jun 06 01:44:51 qemux86 systemd[1]: nagios-nrpe.service: Failed with result 'exit-code'

In configuration file /etc/nagios/nrpe.cfg, the pidfile is under /var/nagios.

fix by stop rm the /var/nagios, and include it into daemon packages

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-06-10 09:55:27 -04:00
Dengke Du
1f26faec8a criu: fix dump error on Intel Apollo Lake SOC
Fix dump error when executing: criu dump -D checkpoint -t pid
-------------------------------------------------
Error (criu/arch/x86/crtools.c:362): x86: Corruption in XFEATURE_YMM area (expected 64 but 0 obtained)
Error (criu/cr-dump.c:1280): Can't infect (pid: 2874) with parasite
Error (criu/cr-dump.c:1732): Dumping FAILED.
-------------------------------------------------
Backport upstream patch on criu-dev branch to fix this:
[5a52e34655]

Signed-off-by: Dengke Du <dengke.du@windriver.com>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-29 23:57:22 -04:00
Christopher Clark
a7e7310b68 xen: update packaging for pkgconfig files in libdir
Xen commit a0f98145 changed the installation directory for pkgconfig
files, so update recipe to include the .pc files at their new location.

Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-21 10:42:14 -04:00
Dengke Du
8e634ac487 libvirt: upgrade to 5.3.0
1. remove the uml configure option because new version libvirt drop it
2. rebase three patches for new source codes

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-10 16:42:06 -04:00
Chen Qi
3c80794f80 nagios-core: add CVE_PRODUCT
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-10 16:41:52 -04:00
Chen Qi
2c6f451aa2 ceph: set CVE_PRODUCT
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-06 15:47:02 -04:00
Paul Barker
0fc82d3d0b netns: Upgrade to v0.5.3
Drop obsolete patches and forward-port the remaining required patch. We
also need to fix up permissions after the build so that we can clean the
build directory without errors if needed.

Signed-off-by: Paul Barker <paul@betafive.co.uk>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-01 15:39:29 -04:00
Christopher Clark
3038a912be xen: make the dev86-native dependency specific to x86-64 target
Remove the requirement for x86 tools when building for ARM platforms.

Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-04-18 09:33:24 -04:00