summaryrefslogtreecommitdiffstats
path: root/meta-oe
Commit message (Collapse)AuthorAgeFilesLines
...
* transmission: Upgrade to 4.0.5Khem Raj2024-05-121-25/+10
| | | | | | | | | | | | | | | License-Update: Copyright Years updated Add missing MIT license,see COPYING file Switch to cmake build system as thats the new and only build system supported. Use gtk4 when selecting gtk knob, it can support gtk3 as well however, its not added as knob, if needed someone should send a patch Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xkbutils: upgrade 1.0.5 -> 1.0.6Trevor Gamblin2024-05-121-2/+2
| | | | | | | | | | | | | | | | | | In particular, make it build with gcc 14. License-Update: Remove "All rights reserved" from copyright line Changelog: 2939632 xkbutils 1.0.6 e2ee9c2 Change sprintf calls to use snprintf instead aa03a3b Remove uSetErrorFile() 5f875c8 xkbwatch: Fix -Wincompatible-pointer-types warning (Issue #2) 6dbcbb5 Remove "All rights reserved" from Oracle copyright notices 56c99e3 gitlab CI: stop requiring Signed-off-by in commits Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xlsfonts: upgrade 1.0.7 -> 1.0.8Trevor Gamblin2024-05-121-1/+1
| | | | | | | | | | | | | | | In particular, make it build with gcc 14. Changelog: d20bea4 xlsfonts 1.0.8 71d8e89 Use reallocarray() if available 2b9d8f5 Fix -Wincompatible-pointer-types warning from gcc (issue #1) e53bf74 gitlab CI: stop requiring Signed-off-by in commits 314d802 man page: emphasize this program is for querying an X server Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp3: Upgrade to 3.5.1 releaseKhem Raj2024-05-121-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: Upgrade to 2.11.7Khem Raj2024-05-122-1/+29
| | | | | | Partially backport a fix to build with gcc-14 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vbxguestdrivers: upgrade 7.0.14 -> 7.0.18Gianfranco Costamagna2024-05-121-1/+1
| | | | | | Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* composefs: add native target supportJose Quaresma2024-05-121-0/+4
| | | | | | | | The next version of ostree v2024.6 will be available soon and optional will require composefs-native. Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* composefs: bump ecef20c1Jose Quaresma2024-05-122-80/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - This is required to add the native target support. - Drop upstream merged patch: 0001-musl-basename-use-portable-implementation-for-basena.patch https://github.com/containers/composefs/pull/273 Changelog: $ git --no-pager log --oneline HEAD...v1.0.3 ecef20c (HEAD -> main, origin/main, origin/HEAD) Merge pull request #276 from wahtari/copy_file_range e78c7a4 Merge pull request #277 from alexlarsson/fix-newline-error 1d82bc1 mkcomposefs: Drop newline from error string 3e38d73 Added copy_file_range for faster file copy. 85a693d Merge pull request #273 from fboudra/musl-basename 31afa13 musl: basename: use portable implementation for basename API 4776580 Merge pull request #275 from eriksjolund/fix-spelling-in-error-message 4a68a42 Merge pull request #269 from wahtari/threading-for-mkcomposefs 7266546 fuse: fix spelling in error message b49499b added threads in mkcomposefs for digest calculation and file copy d144db0 refactored lcfs_load_node_from_file to enable multi-threading in mkcomposefs af69922 Merge pull request #266 from eriksjolund/erofs-add-missing-free 1eecf38 Merge pull request #267 from eriksjolund/mkcomposefs-add-missing-free a880713 mkcomposefs: Add missing free() 456d618 erofs: Add missing free() and lcfs_node_unref() 1179638 Merge pull request #265 from eriksjolund/handle-empty-basedir-option 301b78f Merge pull request #268 from eriksjolund/set-errno-for-unknown-format 09ca740 writer: Set errno for unknown format a96f786 mountcomposefs: Handle empty basedir option fc9a526 Merge pull request #260 from eriksjolund/handle-error-from-build-node 9b85011 Merge pull request #262 from eriksjolund/add-error-check-and-rearrange 2cb505b Merge pull request #263 from eriksjolund/writer-set-errno 9b417be writer: Set errno d5ffbeb Merge pull request #261 from eriksjolund/add-missing-node-unref 9c393a4 Merge pull request #259 from eriksjolund/handle-error-from-node-set-content 396a3b8 mkcomposefs: Handle NULL from lcfs_node_new() 238a94a lib: Set errno in lcfs_node_new() c1181fa erofs: Handle error from lcfs_build_node_from_image() 49288d5 erofs, mkcomposefs: Handle error from lcfs_node_set_content() 4e0b147 lib: Add missing lcfs_node_unref() 9bc76dd Merge pull request #258 from eriksjolund/fix-missing-options d59dd9b mountcomposefs, mkcomposefs: Add missing options to usage information 418f4f7 Merge pull request #255 from cgwalters/mount-minor-tweaks 72c602a Merge pull request #256 from eriksjolund/fix-error-message 770cc36 fuse: Fix filepath argument in error message 465c079 man/mount.composefs: Fix a typo and two markdown lint warnings 8565a8b Merge pull request #254 from edbaunton/edbaunton/man-mkcomposefs-inline b99a978 man mkcomposefs: detail inlining logic 47f6949 Merge pull request #253 from rborn-tx/support-older-linux-headers 453eaef ci: Add build test for Ubuntu Focal 384f306 mount: Allow building when macro LOOP_CONFIGURE is not available f163eba mount: Allow building when macro MOUNT_ATTR_IDMAP is not available 80e99bd Merge pull request #250 from cgwalters/doc-verification f6e8510 README.md: Fix markdownlint warnings 3b7e567 README.md: Drop removed `signed` mount option 091b51f Merge pull request #247 from cgwalters/readlinkat-overflow 232336d Merge pull request #248 from cgwalters/more-analyzer a6904d6 writer: Close mmap leak e9632ca Merge pull request #246 from eriksjolund/handle-null-from-strndup 6b2192b writer: Fix (almost certainly unreachable) overflow bdc2c4c mkcomposefs: Handle NULL from strndup() e63786d Merge pull request #245 from giuseppe/run-distcheck-ci 5d3fe92 tests: do not hardcode number of threads d6e55bf .github: run make distcheck as part of the CI f6bbf54 Merge pull request #244 from alexlarsson/mount-api 4e5883b mount.composefs: Add tryverity option 15bdcd6 lib: Add TRY_VERITY mount option f884f57 mount: Use the new lowerdir+ and datadir+ options bd6ce95 Merge pull request #243 from giuseppe/add-fuzzing 171eae0 mkcompose: fix crash if no target for hardlink 7b1518f mkcomposefs: tree_from_dump does not exit(2) on errors a8ac3d5 mkcomposefs: reject dump without root node 28a9d6b tests: add fuzzing tests for mkcomposefs 932f748 tools: add fuzzing entrypoint for mkcomposefs Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* composefs: refactorJose Quaresma2024-05-121-3/+11
| | | | | | | | | - add recipe DESCRIPTION - remove the PV as it can be taken from the recipe name - specify some EXTRA_OECONF configuration to avoid host contamination Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* composefs: move from meta-filesystems to meta-oe layerJose Quaresma2024-05-122-0/+98
| | | | | | | | We can make this more widely available as we don't depend anymore on fuse3. Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uw-imap: Add a patch to support newer than TLSv1.0Zoltán Böszörményi2024-05-122-0/+30
| | | | | | | | | | | | | | | | | | | | | The patch 0001-Support-OpenSSL-1.1.patch enabled building uw-imap against OpenSSL 1.1.0 or later. However, TLSv1_client_method() and TLSv1_server_method() restricts uw-imap to TLSv1.0. These APIs, along with explicitly versioned APIs like TLSv1_1_*_method() and TLSv1_2_*_method() are deprecated in OpenSSL 1.1.0 or later. The replacements are unversioned API functions: TLS_client_method() and TLS_server_method() which support TLS version autonegotiation. This allows the PHP IMAP extension to work with IMAP servers that enforce TLSv1.2 or higher. Fixes: https://bugs.php.net/bug.php?id=76928 Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: Upgrade to 8.2.18Soumya Sambu2024-05-122-10/+13
| | | | | | | | | | | | Includes fixes for CVE-2024-3096, CVE-2024-2756 and other bugs. Changelog: https://www.php.net/ChangeLog-8.php#8.2.18 Rebase 0001-ext-opcache-config.m4-enable-opcache.patch to new version Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* re2: remove dev dependencies from main packagePeter Marko2024-05-091-4/+1
| | | | | | | | | | | | It's a bad idea to add dev dependencies to main package. It's pulling build dependencies including toolchain items. The dependencies "were needed" because main package contains packageconfig file. This can be fixed by correct packaging. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: Upgrade to 20.13.0 releaseKhem Raj2024-05-093-2/+2
| | | | | | | | | | | nodejs release notes [1] License-Update: Copyright year changed for Unicode License [2] [1] https://nodejs.org/en/blog/release/v20.13.0 [2] https://github.com/nodejs/node/commit/d5a316f5ea3fade3140c2ae35c144b500fb5d758 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* oprofile: Fix file_manip_tests ptestKhem Raj2024-05-092-0/+48
| | | | | | Remove assumptions around absolute paths which used __FILE__ macro Signed-off-by: Khem Raj <raj.khem@gmail.com>
* syslog-ng: ignore incompatible-pointer-types issues with gcc-14Martin Jansa2024-05-091-0/+8
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pcapplusplus: Fix build with gcc14Khem Raj2024-05-093-1/+73
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* librelp: Fix build with gcc-14Khem Raj2024-05-062-0/+38
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdeflate: fix build with -mcpu=cortex-a76+crypto without ↵Martin Jansa2024-05-052-2/+60
| | | | | | | | | | -march=armv8.2-a+crypto * fixes: https://github.com/ebiggers/libdeflate/issues/369 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spdlog=v1.14.1Martin Jansa2024-05-041-1/+1
| | | | | | | | | | | | | | | | Fixed compatibility issue between c++17 and c++11 (#3081). Fixed creating folders under windows when full path with drive letter is given (#3079). Added mdc sample. Note: mdc is not supported in async loggers. * v1.14.0 introduced in: https://git.openembedded.org/meta-openembedded/commit/?id=a40b1fa392d20ebb29e38374d0f7ce1494bb797f causes: undefined reference to `spdlog::get(char const*)' in various consumers, more details in: https://github.com/gabime/spdlog/issues/3081 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs-oe-cache: fix offline install of dependenciesMartin Hundebøll2024-05-031-1/+1
| | | | | | | | | | | | | | | | | | | Apparently, npm has changed its request accept header, so that cache lookup misses. This causes an ENOTCACHED error when doing the offline install in do_compile() from npm.bbclass. Fix it by updating the fake cache entry to match the newest behaviour from npm. Note that npm doesn't agree with itself, as it still uses the previous header value when doing `npm cache add <pkg>`, but the new value when doing `npm install <pkg>`. Bug submitted upstream: https://github.com/npm/cli/issues/7465 Signed-off-by: Martin Hundebøll <martin@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fwupd: fix uefi capsule update build errorMikko Rapeli2024-05-031-1/+1
| | | | | | | | | | | | plugin_uefi_capsule_splash does not provide "enabled" or "disabled" options but only basic bool "true" and "false". Fixes do_configure() failure with PACKAGECONFIG:append = " plugin_tpm plugin_uefi_pk plugin_uefi_capsule ": | ../fwupd-1.9.18/meson.build:1:0: ERROR: Value disabled is not boolean (true or false). Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uutils-coreutils: upgrade 0.0.25 -> 0.0.26Etienne Cordonnier2024-05-022-41/+67
| | | | | | | See https://github.com/uutils/coreutils/releases/tag/0.0.26 Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uftrace: upgrade 0.15.2 -> 0.16Wang Mingyu2024-05-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - build: Add -mno-sse to fix i386 build - build: Fix build failure on RHEL 7 - mcount: Fix a compiler warning on PAGE_SIZE - fix: #1858 by changing the wrong logic in update_dbg_info - ci: Fix ci warning on GitHub Acitons - slide: Add tensorflow and keras tracing example - python: Fix GC isn't working correctly. - replay: Support a new argument format for octal values - build: Fix compiler warnings - Fix Python SyntaxWarning on invalid escape sequence in the tests scripts - utils: Lower the debug level after dwfl_module_getdwarf - wrap: Do not print "dlopen is called for '(null)'" - Support standard deviation(STDDEV) in report output - dwarf: Close file descriptors in setup_dwarf_info() Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spdlog: upgrade 1.13.0 -> 1.14.0Wang Mingyu2024-05-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== -Updated bundled fmt to version 10.2.1. -Mapped Diagnostic Context (MDC) support -MDC is a simple map of key->string values stored in thread local storage whose content will be printed by the loggers. -spdlog::mdc::put("mdc_key_1", "mdc_value_1"); -spdlog::info("Hello, {}", "World!"); // => [2024-04-26 02:08:05.040] [info] [mdc_key_1:mdc_value_1] Hello, World! -Add milliseconds support to stopwatch -Add std::string_view overloads for logger accessor -Make async_logger::flush() synchronous - wait for the flush operation to complete before returning -Use _stat() on Windows to be more UTF8 friendly -Add details about how compile time macros work -Fix typos found by codespell -Expose the flusher thread object to user in order to allow setting of thread name and thread affinity when needed -Fix the problem of compilation failure under MINGW -Add missing include in circular_q.h -Don't remove previous defaullt logger from registry in set_default_logger. -Remove the legacy AnalyzeTemporaryDtors option from .clang-tidy. -Updated INSTALL.md has to better reflect compiler info -Fixed README.md example Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ser2net: upgrade 4.6.1 -> 4.6.2Wang Mingyu2024-05-021-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* qcbor: upgrade 1.2 -> 1.3Wang Mingyu2024-05-021-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Update the LICENSE file from README.md to LICENSE Changelog: ========== - Floating-point conversion between half, single and double-precision for subnormal values and NaN payloads is completed. These are relatively obscure unused parts of IEEE754 floats. - QCBOREncode_GetErrorState() can now be called after QCBOREncode_Finish() and it will always return the correct error. - User-defined error codes are now supported. The error state can be set with the new function QCBORDecode_SetError(). - Fixed a rare condition where QCBORDecode_ VGetNext() would not set the Item.uDataType to QCBOR_TYPE_NONE on error. - Function naming changed to better avoid name collision. This includes internal functions. This is to compensate for C not having name spaces like C++. - Documentation correctly describes mixing of traversal cursor used by GetNext with fetch by label in entered maps - Some increase in test coverage - A bunch of "TODO:" items were addressed. Most result in no change to the code, just changes to documentation and test coverage. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmxml: upgrade 3.3.1 -> 4.0.3Wang Mingyu2024-05-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ -Now default the DSOFLAGS value to LDFLAGS in the configure script -Now install the man page as "mxml4" to allow parallel installation of Mini-XML 4.x and 3.x -Added MXML_ALLOC_SIZE define to control the allocation increment for attributes and indices -Fixed mxmlSetDeclarationf implementation -Fixed an issue with GNU make and parallel builds -Fixed missing "docdir" definition in makefile -Fixed missing CPPFLAGS, OPTIM, and WARNINGS in CFLAGS in makefile. -Fixed configure script issues. -Now require C99 support -Now install as "libmxml4" to support installing both Mini-XML 3.x and 4.x at the same time (use --disable-libmxml4-prefix configure option to disable) -Added mxmlLoadIO and mxmlSaveIO functions to load and save XML via callbacks -Added new MXML_TYPE_CDATA, MXML_TYPE_COMMENT, MXML_TYPE_DECLARATION, and MXML_TYPE_DIRECTIVE node types -Added mxmlLoadFilename and mxmlSaveFilename functions -Added AFL fuzzing support -Added mxmlOptions APIs to replace the long list of callbacks and options for each of the load and save functions -Added string copy/free callbacks to support alternate memory management of strings. -Renamed mxml_type_t enumerations to MXML_TYPE_xxx -Updated APIs to use bool type instead of an int representing a boolean value. -Updated the SAX callback to return a bool value to control processing -Updated the load and save callbacks to include a context pointer -Fixed some warnings -Fixed real number support in non-English locales -Updated the autoconf config.guess and config.sub scripts to support cross compilation for newer platforms Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iniparser: upgrade 4.1 -> 4.2Wang Mingyu2024-05-022-52/+3
| | | | | | | | | | License-Update: Copyright year updated to 2024. CVE-2023-33461.patch removed since it's included in 4.2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* serial: Fix empty package and use shared lib instead of static lib.magicWenli2024-04-302-0/+47
| | | | | | see also: https://docs.yoctoproject.org/pipermail/yocto/2015-January/022921.html Signed-off-by: Khem Raj <raj.khem@gmail.com>
* renderdoc: remove vim-native DEPENDSRoss Burton2024-04-301-1/+1
| | | | | | | | | This need for this was removed in 2016[1] [1] https://github.com/baldurk/renderdoc/commit/fff93a4bcc036f8288fd31dcdd1209fea36b9b58 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* procmail: Update status for CVE-1999-0475Ninette Adhikari2024-04-291-0/+2
| | | | | | | | Current version 3.22 is not affected by the issue. Affected versions: Up to (excl.) 3.2.1 Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* st: Update status for CVE-2017-16224Ninette Adhikari2024-04-291-0/+2
| | | | | | | | | | The recipe used in the meta-openembedded is a different st package compared to the one which has the CVE issue. Package used in meta-embedded: https://st.suckless.org/ Package with CVE issue: https://www.npmjs.com/package/st No action required. Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* reproducibility: move repro excludes from AB config.json to meta-oeYoann Congal2024-04-291-0/+107
| | | | | | | | | | | | | | For now, the known non-reproducible packages list is stored inside the autobuilder config.json file. This is not ideal. Let's move this list into each layers of meta-openembedded. These lists can be used with, in local.conf: include conf/include/non-repro-meta-oe.inc OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES = "${KNOWN_NON_REPRO_META_OE}" Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Acked-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fwupd: Upgrade to 1.9.18 releaseKhem Raj2024-04-292-87/+46
| | | | | | Drop patch which is already upstreamed in this release Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: upgrade 20.11.1 -> 20.12.2Archana Polampalli2024-04-293-2/+2
| | | | | | | | | | | | | | | | | | License-Update: Copyright year updated zlib version updated GN files License update https://github.com/nodejs/node/commit/b5bc597871ca701bab750c46d31ed626decd7f89 https://github.com/nodejs/node/commit/c8233912e9fd7464898b549d6762130722bf0bf4 Changelog: https://github.com/nodejs/node/releases/tag/v20.12.2 https://github.com/nodejs/node/releases/tag/v20.12.1 https://github.com/nodejs/node/releases/tag/v20.12.0 Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chore(sdbus-c++): upgrade to 2.0.0 releaseStanislav Angelovic2024-04-282-6/+6
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layers: Add styhead to compatible release seriesKhem Raj2024-04-281-1/+1
| | | | | | styhead is codename for upcoming 5.1 release Signed-off-by: Khem Raj <raj.khem@gmail.com>
* soci: update build optionsPeter Marko2024-04-231-9/+8
| | | | | | | | | | | | | | | * make it possible to configure build without boost * build tests only when requested * disable build of IBM proprietary DB2 which does not have recipe (this creates some cmake warnings if enabled without dependency) * EXTRA_OECONF is empty with cmake build * remove SOCI_LIBDIR which was removed in upgrade to v4.0.2 * use WITH_* instedad of SOCI_* as SOCI defines still search for dependencies unnecessarily and WITH define automatically enables SOCI define, too Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add class for appending dm-verity hash data to block device imagesJan Luebbe2024-04-231-0/+137
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add support to generate a dm-verity image and the parameters required to assemble the corresponding table for the device-mapper driver. The latter will be stored in the file ${DEPLOY_DIR_IMAGE}/<IMAGE_LINK_NAME>.verity-params. Note that in the resulting image the hash tree data is appended to the contents of the original image without an explicit superblock to keep things simple and compact. The above mentioned parameter file can be sourced by a shell to finally create the desired blockdevice via "dmsetup" (found in meta-oe's recipe "libdevmapper"), e.g. . <IMAGE_LINK_NAME>.verity-params dmsetup create <dm_dev_name> --readonly --table "0 $VERITY_DATA_SECTORS verity \ 1 <dev> <hash_dev> \ $VERITY_DATA_BLOCK_SIZE $VERITY_HASH_BLOCK_SIZE \ $VERITY_DATA_BLOCKS $VERITY_DATA_BLOCKS \ $VERITY_HASH_ALGORITHM $VERITY_ROOT_HASH $VERITY_SALT \ 1 ignore_zero_blocks" As the hash tree data is found at the end of the image, <dev> and <hash_dev> should be the same blockdevice in the command shown above while <dm_dev_name> is the name of the to be created dm-verity-device. The root hash is calculated using a salt to make attacks more difficult. Thus, please grant each image recipe its own salt which could be generated e.g. via dd if=/dev/random bs=1k count=1 | sha256sum and assign it to the parameter VERITY_SALT. Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Rouven Czerwinski <r.czerwinski@pengutronix.de> Signed-off-by: Marco Felsch <m.felsch@pengutronix.de> Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sanlock: upgrade 3.9.1 -> 3.9.2Wang Mingyu2024-04-232-35/+2
| | | | | | | | 0001-include-libgen.h-for-basename.patch removed since it's included in 3.9.2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pycups: upgrade 2.0.1 -> 2.0.4Wang Mingyu2024-04-231-1/+1
| | | | | | | | Changelog: removes install_requires from setup.py, which is used for generating OS requirements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mpich: upgrade 4.2.0 -> 4.2.1Wang Mingyu2024-04-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changelog: ============= -Disable flat_namespace to build libmpifort on macOS by default -Prefix warning messages with "MPICH" -Add --disable-doc configure option -Fix support for building MPICH Fortran support with Xcode 15 on macOS -Fix bug in MPI_WIN_SHARED_QUERY when window is not shared -Fix bug in ch4/ofi gpu pipelining -Fixes for Intel GPU support -Fix memory leak in ch4/shm collectives -Fix bug in MPI_COMM_SPLIT with intercommunicators and non-zero root -Fix bug in DAOS ROMIO driver -Fix bug in cycling error code array -Return an error if there is failure to create a datatype in mpi_f08 module for noncontiguous user data -Return an error when shared memory segment creation fails Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gensio: upgrade 2.8.3 -> 2.8.4Wang Mingyu2024-04-231-1/+1
| | | | | | | | | | | Changelog: ========== -github: Don't run oomtest9 and oomtest11 on windows -sound: Fix a possible multiply overflow -gtlsshd: Don't use alloc_sprintf() to duplicate a string Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* asio: upgrade 1.28.0 -> 1.30.2Wang Mingyu2024-04-232-36/+3
| | | | | | | | | | License-Update: Copyright year updated to 2024. 0001-Add-the-pkgconfigdir-location.patch included in 1.30.2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ydotool: Do not package systemd unit files on non-systemd distrosKhem Raj2024-04-201-0/+6
| | | | | | | | | | | | Fixes ERROR: ydotool-1.0.4+git-r0 do_package: QA Issue: ydotool: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/systemd /usr/lib/systemd/user /usr/lib/systemd/user/ydotoold.service Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sdbus-c++: Fix build and upgrade to latest gitKhem Raj2024-04-193-20/+11
| | | | | | Fix ptest run while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* yajl: set correct homepageRoss Burton2024-04-191-1/+1
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xmlsec1: upgrade 1.3.3 -> 1.3.4Wang Mingyu2024-04-171-1/+1
| | | | | | | | | | | | Changelog: ============ -(xmlsec-openssl) Support cert dates before unix epoch start. -(xmlsec-openssl) Fix build for LibreSSL or BoringSSL. -(xmlsec-nss) Ensure NSS algorithms are initialized. -Several other small fixes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webkitgtk3: upgrade 2.44.0 -> 2.44.1Wang Mingyu2024-04-172-38/+1
| | | | | | | | | | | | | | | | | 2922af379dc70b4b1a63b01d67179eb431f03ac4.patch removed since it's included in 2.44.1 Changelog: ========== - Fix handling of lifetime of web view child dialogs in GTK4. - Do not schedule layer flushes when drawing area size is empty. - Fix videos with alpha when using the DMA-BUF sink. - Fix the build with USE_GBM=OFF. - Fix the build in 32bit platforms - Fix several crashes and rendering issues. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>