GitLab

cip-core-image-security.bb: append security packages to existing 'IMAGE_PREINSTALL'

See merge request !1

Signed-off-by: venkata pyla <venkata.pyla@toshiba-tsip.com>

Signed-off-by: Kazuhiro Hayashi <kazuhiro3.hayashi@toshiba.co.jp>

This reverts commit 7a8153fe.

This experimental branch is assumed not to be associated with CIP GitLab
Signed-off-by: Kazuhiro Hayashi <kazuhiro3.hayashi@toshiba.co.jp>

Signed-off-by: Kazuhiro Hayashi <kazuhiro3.hayashi@toshiba.co.jp>

Quirin Gylstorff authored Jan 08, 2020 and Jan Kiszka committed Feb 17, 2020

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Commit 37ff166a

 only checked standard kernels, but we are building
-rt in CI. Add more wildcards to catch that case as well.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

The path structure has changed, multiple times by now in fact.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Jan 09, 2020 and Jan Kiszka committed Jan 13, 2020

Add a dependency between targz_image and wic_image to avoid
an error during the generation of the targz image as wic modifies
the rootfs.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Jan 09, 2020 and Jan Kiszka committed Jan 13, 2020

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Jan 09, 2020 and Jan Kiszka committed Jan 13, 2020

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Jan 09, 2020 and Jan Kiszka committed Jan 13, 2020

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Jan 09, 2020 and Jan Kiszka committed Jan 13, 2020

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Jan 09, 2020 and Jan Kiszka committed Jan 13, 2020

To avoid the duplication of the linux cip kernel configuration
add the option USE_CIP_KERNEL_CONFIG. If this option is set to 1
the KERNEL_DEFCONFIG from the cip project is used. The KERNEL_DEFCONFIG
is contains the explicit path to the defconfig in
gitlab.com/cip-project/cip-kernel-config.git.

SRCREV_cip-kernel-config sets the commit sha for checkout.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
[Jan: reformatted style of linux-cip-common.inc]
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Nov 07, 2019 and Jan Kiszka committed Nov 21, 2019

Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Nov 07, 2019 and Jan Kiszka committed Nov 21, 2019

The hihope-rzg2m is a ARM64 reference platform for the CIP project.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Nov 07, 2019 and Jan Kiszka committed Nov 21, 2019

The Linaro Automated Validation Architecture (LAVA) uses tarballs
as root file-systems to modify the file-system during the deployment.
Add a new bbclass to build tarballs and wic images at the same time to
feed the build output of isar-cip-core directly into LAVA tests.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Quirin Gylstorff authored Nov 07, 2019 and Jan Kiszka committed Nov 21, 2019

Add fix for manifest generation to avoid errors during build.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Stretch can still be selected via opt-stetch.yml.

Naturally, the addition of buster to the bbb installation for picking
u-boot from that source has to become distro-dependent.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Rename our distro to cip-core-stretch so that we can also add -buster
later on.

The pattern for those cip-core-<release>.conf files is that they
should pull the debian conf file and define the kernel version.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Adjusting it to latest Isar interface.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Due to special image naming for that target, we also need to adjust the
deployment to s3. Hopefully, this can be reverted again in the future.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Now truly fix them.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Those changed with the latest Isar update.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Daniel Sangorrin authored Jun 04, 2019 and Jan Kiszka committed Jun 19, 2019

This patch adds support for the iwg20m board to isar-cip-core.

- Kernel version notes

This board is only supported by the 4.4 kernel. For that
reason, the preferred version is set to 4.4 and the user
doesn't need to specify :opt-4.4.yml. To be precise, the
kernel 4.19 also works but Renesas is only committed to
support 4.4.

- U-boot notes

The u-boot version shipped with the board is rather
old (2013.01) and comes without distro boot support.
We could try building it with CONFIG_CMD_SOURCE to use
a boot.scr script. However, the build gave several
errors probably caused by incompatibilities with
modern compilers. Additionally, u-boot resides
on an SPI device and any failures while updating
it will brick the board. For all these reasons,
this patch relies on the u-boot shipped with the
board completely. The user needs to setup some
additional u-boot environment variables as described
in doc/README_iwg20m.md

- Kernel configuration notes

The configuration is based on the kernel's
shmobile_defconfig. Then it adds some
configuration bits for booting on an SDCard with
EXT4, booting from a ramdisk, and running Systemd.

- Bmap notes

The document doc/README_iwg20m.md uses bmaptool to
flash the image onto an SDCard.
Signed-off-by: Daniel Sangorrin <daniel.sangorrin@toshiba.co.jp>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

In particular, this includes bmap support. It also gently pushes us to
include sshd-regen-keys for target-specific keys.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Daniel Sangorrin authored Jun 04, 2019 and Jan Kiszka committed Jun 04, 2019

Add kas-docker to .gitignore so it does not show in git status
Signed-off-by: Daniel Sangorrin <daniel.sangorrin@toshiba.co.jp>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

Daniel Sangorrin authored Jun 03, 2019 and Jan Kiszka committed Jun 03, 2019

To revert to version 4.4 users need to add :opt-4.4.yaml to
the kas command line.
Signed-off-by: Daniel Sangorrin <daniel.sangorrin@toshiba.co.jp>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>

This allows to use them in automated testing.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>