summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* python3-docker-compose: update to 1.25.5Ricardo Salveti2020-05-051-2/+2
| | | | | | | | | | | | | | Main change is support for the compose format version 3.8. Relevant git changes between versions: - 41d229eb Fix v3.8 schema support for binaries - 15bb3eeb add warning when max_replicas_per_node limits scale - 5d34f12f set min engine version needed for v38 schema support - 82873d2b update api version for 3.8 - fe832661 Add v3.8 schema support Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* busybox_vmsep.inc: busybox changes for runx supportSai Hari Chandana Kalluri2020-05-021-0/+1
| | | | | | | | | | | | | Runx needs busybox static binary that contains symlinks to mount. However, in zeus, busybox by default uses BUSYBOX_SPLIT_SUID = 1. With the variable set, busybox binary gets split into two busybox.suid and busybox.nosuid busybox.suid contains links to mount while runx recipes pulls in busybox.nosuid. When vmsep is enabled, set BUSYBOX_SPLIT_SUID = 0 so that an unstripped busybox binary is generated which contains all the required links including mount. Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Update python3.5 reference to latest python versionSai Hari Chandana Kalluri2020-05-021-2/+2
| | | | | | | | Python3.5 is no longer supported, update references to latest python version using variables from python3-dir bbclass Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-nrpe: Fix CVE-2020-6581sakib.sajal@windriver.com2020-05-022-0/+31
| | | | | | | Backport fix for CVE-2020-6581 Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: backport CVE fixessakib.sajal@windriver.com2020-05-026-0/+455
| | | | | | | | Fix CVE-2020-1759 and CVE-2020-1760 PR for fix: https://github.com/ceph/ceph/pull/34482 Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runx: change xen-xl to xen-tools-xlBruce Ashfield2020-05-021-1/+1
| | | | | | | The package name for xen-xl has changed, so we need to update the runx rdepends .. or we are unbuildable. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-hypervisor: Check for the right image in uncompressed deployCorey Minyard2020-04-261-1/+1
| | | | | | | | | The deploy for the uncompressed image was checking if a .gz file exists, it should instead check for a straight xen file. Signed-off-by: Corey Minyard <cminyard@mvista.com> Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Upgrade to 4.0.2Mingli Yu2020-04-261-2/+2
| | | | | Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* vmsep: add virtfs to qemu PACKAGECONFIGBruce Ashfield2020-04-161-0/+2
| | | | | | | When doing vm separation, we need virtfs (and its dependencies) for proper ontarget operation of qemu. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-nrpe: uprev v3.2.1 => v4.0.2sakib.sajal@windriver.com2020-04-151-3/+6
| | | | | Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-docker: Upgrade 4.1.0 to 4.2.0Leon Anavi2020-04-142-2/+2
| | | | | | | Upgrade python3-docker to version 4.2.0. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* python3-websocket-client: Upgrade 0.44.0 to 0.57.0Leon Anavi2020-04-142-3/+3
| | | | | | | Upgrade websocket_client from 0.44.0 to 0.57.0. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: correct the LIC_FILES_CHKSUM and LICENSE fieldsYanfei Xu2020-04-141-2/+5
| | | | | | | | | License changes from lxc3.2.1 to lxc4.0.1: 1.File COPYING is renamed to LICENSE.LGPL2.1 2.Add a new file LICENSE.GPL2 Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: fix host library paths were usedhongxu2020-04-142-0/+99
| | | | | | | | | | | | | | | | | | | ... |ERROR: ceph-15.2.0-r0 do_package_qa: QA Issue: ceph: The compile log indicates that host include and/or library paths were used. | Please check the log 'tmp-glibc/work/corei7-64-wrs-linux/ ceph/15.2.0-r0/temp/log.do_compile' for more information. [compile-host-path] |ERROR: ceph-15.2.0-r0 do_package_qa: QA Issue: ceph: The install log indicates that host include and/or library paths were used. | Please check the log 'tmp-glibc/work/corei7-64-wrs-linux/ ceph/15.2.0-r0/temp/log.do_install' for more information. [install-host-path] ... While python setup, test var-LIBPL contains recipe-sysrooot prefix, add it back if lost Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: fix installed-vs-shipped QA issuehongxu2020-04-141-0/+2
| | | | | | | | | | | | ... |ERROR: ceph-15.2.0-r0 do_package: QA Issue: ceph: Files/directories were installed but not shipped in any package: | /lib/systemd/system/ceph-immutable-object-cache@.service | /lib/systemd/system/ceph-immutable-object-cache.target ... Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: refresh patches to remove fuzzBruce Ashfield2020-04-149-27/+28
| | | | | | | The recent uprev of lxc left some fuzz in a patches. devtool refresh cleans this up, and no runtime issues have been detected. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: uprev from 3.2.1 to 4.0.1Yanfei Xu2020-04-135-639/+3
| | | | | | | | Update to the just released 4.0.1. And drop some patches contained in this released. Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-build_git.bb: go-build: set GO_PARALLEL_BUILD to default valueChandana kalluri2020-04-081-0/+1
| | | | | | | | | | | | Set GO_PARALLEL_BUILD to default to prevent the following error: failed to create new OS thread (have 13 already; errno=11) runtime: may need to increase max user processes (ulimit -u) fatal error: newosproc Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-build: Set up dependencies and GOPATH before do_compileChandana kalluri2020-04-081-0/+6
| | | | | | | | | | | | | | | go-build recipe depends on runc source and during compilation tries to run the command: go get github.com/opencontainers/runc. This is incorrect as a source fetch shouldn't occur during compilation. Also, even after a fetch occurs during compilation, the go build path GOPATH points to the incorrect path hence the runc source is never found. Fetch the opencontainers/runc source and create links in the correct GOPATH before compilation for a successful build. Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: uprev ceph from 14.2.7 to 15.2.0sakib.sajal@windriver.com2020-04-085-214/+29
| | | | | | | | | | | | | | | ceph uprev to v15.2.0 Refreshed oe-specific patch: ceph/0001-ceph-fix-build-errors-for-cross-compile.patch Removed merged patches: ceph/0001-common-rgw-workaround-for-boost-1.72.patch ceph/0001-rgw-add-executor-type-for-basic_waitable_timers.patch ceph/0001-rgw-beast-handle_connection-takes-io_context.patch Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Add setuid permission to virt-login-shellHe Zhe2020-04-051-0/+3
| | | | | | | | virt-login-shell asks for setuid permission as follow. "virt-login-shell: must be run as setuid root" Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Workaround mips assembler crash on targethongxu2020-04-011-0/+5
| | | | | | | | | | | | | | | | | | | While enabling multilib on qemumips64, lib32 assembler ends up crashing on target sometimes due to branch out of range, therefore using -O2 for now [snip] |../../libvirt-6.1.0/tests/qemuxml2argvtest.c: In function 'mymain': |../../libvirt-6.1.0/tests/qemuxml2argvtest.c:608:1: note: variable tracking size limit exceeded with '-fvar-tracking-assignments', retrying without | 608 | mymain(void) | | ^~~~~~ |/tmp/ccXJSwZR.s: Assembler messages: |/tmp/ccXJSwZR.s:43943: Error: branch out of range [snip] Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* sysvinit-inittab_xen: Using getty wrapper to minimize console messagesJaewon Lee2020-03-303-1/+19
| | | | | | | | | | | | | Previously the following message was printed on the console every 5 minutes: INIT: Id "X0" respawning too fast: disabled for 5 minutes Installing and using a getty-wrapper that will check for the hypervisor (hvc0) device and if not present, will call sleep Signed-off-by: Jaewon Lee <jaewon.lee@xilinx.com> Signed-off-by: Mark Hatle <mark.hatle@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf/layer: update compatibilityBruce Ashfield2020-03-241-1/+1
| | | | | | Add dunfell, drop warrior/thud. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-build: drop distro_features_checkDaniel Dragomir2020-03-181-1/+1
| | | | | | | | Replace distro_features_check bbclass which is deprecated, with features_check bbclass. Signed-off-by: Daniel Dragomir <Daniel.Dragomir@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runx: drop distro_features_checkMing Liu2020-03-151-2/+1
| | | | | | | distro_features_check bbclass is deprecated, inherit features_check instead. Signed-off-by: Ming Liu <ming.liu@toradex.com>
* runx: Clean up recipe by removing go integrationSai Hari Chandana Kalluri2020-03-151-54/+5
| | | | | | | | | Remove the placeholder code for go console integration. Pin the recipe to use the latest commit and copy additional scripts needed at runtime. Inlcude socat, daemonize and gobuild as required dependencies. Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* go-build_git.bb: go-build recipe to manage go build dependencies for runXSai Hari Chandana Kalluri2020-03-151-0/+43
| | | | | | | | go-build_git recipe manages go build dependencies for runX. This is used to support a console access for runX. Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* qemu-package-split.inc: Include bash as RDEPENDS for qemu-supportSai Hari Chandana Kalluri2020-03-151-1/+1
| | | | | | | | | | Include bash as RDEPENDS for qemu-support to prevent the following do_package_qa error: do_package_qa: QA Issue: /usr/bin/qemu-mips contained in package qemu-support requires /bin/bash, but no providers found in RDEPENDS_qemu-support? [file-rdeps] Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* rename libxcrypt.bbappend to libxcrypt_%.bbappendSai Hari Chandana Kalluri2020-03-151-0/+0
| | | | | | | | Rename bbappend file so that bitbake finds the right recipe. Else during parse time, a dangling bbappend warning is generated. Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: update to v19.03.8Bruce Ashfield2020-03-151-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to 19.03.8 to pickup bugfixes and security changes. The following commits comprise the chnage: moby: aa6a9891b0 vendor: add local copy of archive/tar 0d4f412ecd dockerfile: update vndr to 85886e1a libnetwork: c7bae399 Merge pull request #2525 from trapier/bump_19.03/cleanup-vfp-during-network-removal 8c407f52 Cleanup VFP during overlay network removal bd5c6080 Merge pull request #2520 from SamWhited/19.03_backport_dns_update 74b17410 Bump the DNS library and revendor cli: eb310fca Merge pull request #2373 from tiborvass/19.03-bump-grpc-1.23.1 0e40b919 vendor: bump google.golang.org/grpc v1.23.1 a51e9e63 vendor: update grpc to v1.23.0 Testing has been performed across x86-64/arm64 via cli and through higher level frameworks. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.8Bruce Ashfield2020-03-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to 19.03.8 to pickup bugfixes and security changes. The following commits comprise this update: docker: afacb8b7f0 Bump Version to 19.03.8 f0867e5a51 Merge component 'engine' from git@github.com:docker/engine 19.03 07428504dc vendor: add local copy of archive/tar 618fcb5466 dockerfile: update vndr to 85886e1a 7141c199a2 Merge pull request #644 from tiborvass/bump-19.03.7 3cf22484bf Bump Version to 19.03.7 70aa6b7044 Merge component 'cli' from git@github.com:docker/cli 19.03 43289e30e1 Merge pull request #2373 from tiborvass/19.03-bump-grpc-1.23.1 2887460cc7 vendor: bump google.golang.org/grpc v1.23.1 09986ab5ca vendor: update grpc to v1.23.0 e126c63873 Merge component 'engine' from git@github.com:docker/engine 19.03 8d208698a3 Merge pull request #40604 from thaJeztah/19.03_backport_mis_unlock f096143c86 Merge pull request #40476 from cpuguy83/19.03_fix_exec_id_client 1aa048bde4 Merge pull request #40461 from AkihiroSuda/cherrypick-40243-1903 d3d2e44a59 daemon/cluster: add a missing Unlock 2de3fd06af Merge pull request #40566 from thaJeztah/19.03_backport_bump_grpc f0e27e52c1 Merge component 'cli' from git@github.com:docker/cli 19.03 6c810a4023 Merge pull request #40586 from thaJeztah/19.03_revert_jenkinsfile_pin_older_windows 65550b7564 Merge pull request #2352 from thaJeztah/19.03_backport_add_daemon_redirect 118ddd9ac0 docs: add redirect for old location of daemon reference baa53b1dcc Merge pull request #2344 from thaJeztah/19.03_backport_builder_prune_flags 29ef942a84 Revert "Jenkinsfile: temporarily pin windows image to 10.0.17763.973" 7b2f8d7926 Use certs.d from XDG_CONFIG_HOME when in rootless mode 169aca7c55 Merge pull request #40575 from thaJeztah/19.03_backport_unify_apis 2f8f8550c8 docs: add API versions v1.25 - v1.29, v1.38 - v1.40 56a7c6cd63 Merge pull request #40477 from cpuguy83/19.03_40446_check_other_mounts 7167b9b338 Merge pull request #40547 from thaJeztah/19.03_backport_update_selinux_v1.3.1 e631d419ad Merge pull request #40560 from thaJeztah/19.03_backport_33434_api_doc_base64url ec69262a25 Merge pull request #40557 from thaJeztah/19.03_bump_buildkit_v0.6.4 84340bb84b Merge pull request #40555 from fuweid/cp1903-40137 2c8b487132 bump google.golang.org/grpc v1.23.1 b029f9629f Fixes #33434 - API docs to specify using base64url c86ab2bc0e vendor: update buildkit v0.6.4 c17e991798 daemon: add grpc.WithBlock option d9f362f57b Merge pull request #40549 from cpuguy83/19.03_stats_use_cond_var 4acaa303f2 Merge pull request #40551 from thaJeztah/19.03_backport_jenkinsfile_pin_older_windows 3336316a08 Jenkinsfile: temporarily pin windows image to 10.0.17763.973 bfb975ac72 Use condition variable to wake stats collector. 9b30897146 Merge pull request #40490 from thaJeztah/19.03_backport_swagger_document_constraints 0c7625e047 Merge pull request #40540 from thaJeztah/19.03_update_containerd_1.2.13 2175a93304 Merge pull request #40533 from thaJeztah/19.03_update_golang_1.12.17 dac6fed0eb vendor: update opencontainers/selinux v1.3.1 5321005e4e Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 d97f4c303b Merge pull request #432 from thaJeztah/19.03_backport_bump_golang_1.12.17 e08e107ddc Merge component 'cli' from git@github.com:docker/cli 19.03 058ac7dc90 Merge pull request #2342 from thaJeztah/19.03_backport_bump_golang_1.12.17 c68e88f348 update containerd runtime v1.2.13 84d75db7ac Fix builder prune -a/--all flag description 29db22eecc unused-for is a deprecated synonym 6da959331a Merge pull request #40462 from AkihiroSuda/cherrypick-40210-1903 2f76c46e36 Update Golang 1.12.17 f49613c3ae Update Golang 1.12.17 afa2b687e0 Update Golang 1.12.17 499e12df0c Exec inspect field should be "ID" not "ExecID" d4c418d850 swagger: document "node.platform.(arch|os)" constraints 789f1ad281 Merge pull request #40460 from AkihiroSuda/cherrypick-40406-1903 dcd9e43a90 Check tmpfs mounts before create anon volume c3a1bdbbdb overlay[2]: rm fs checks 7f44c538ef Fix/improve overlay support check a5c9db1fa1 overlay: move supportsMultipleLowerDir to utils 806947ebfa Use fewer modprobes ec2e4c6eca dockerd-rootless.sh: remove confusing code comment libnetwork: c7bae399 Merge pull request #2525 from trapier/bump_19.03/cleanup-vfp-during-network-removal 8c407f52 Cleanup VFP during overlay network removal bd5c6080 Merge pull request #2520 from SamWhited/19.03_backport_dns_update 74b17410 Bump the DNS library and revendor Testing has been performed across x86-64/arm64 via cli and through frameworks such as cri-o and kubernetes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: prevent go from downloading stuff in the backgroundMark Asselstine2020-03-131-23/+9
| | | | | | | | | | | | | | | | | | | | | | | | | While testing the cni uprev by building in a container with network=none the following error was found: go: github.com/Microsoft/go-winio@v0.4.11: Get https://proxy.golang.org/github.com/%21microsoft/go-winio/@v/v0.4.11.mod: dial tcp: lookup proxy.golang.org on 128.224.144.130:53: dial udp 128.224.144.130:53: connect: network is unreachable After some digging through the go documentation it was found that the '-mod=vendor' is required for 'go build' to use shipped vendor modules when building modules. This can be confirmed by look at the 'build_linux.sh' script which is found in the plugins repo. By using '-mod=vendor' and also ensuring things are properly placed in the GOPATH (ie $B) we can avoid having to create many of the links we had been previously. We also put all the build artifacts into $B to avoid mixing source and build. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cni: 1.7.0 to 1.7.1 (and plugins 0.8.2 to 0.8.5)Mark Asselstine2020-03-131-3/+4
| | | | | | | | | | | | | | Both uprev's are listed as 'minor' in the upstream release notes. Neither introduces an uprev in spec. This fixes issues we observed while testing the forthcoming cri-o uprev. NOTE: this commit should only be used with the follow-on commit [cni: prevent go from downloading stuff in the background] otherwise you will end up with files not owned by you which will prevent the recipe being properly cleaned. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: uprev from 1.15 to 1.17Mark Asselstine2020-03-132-64/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Uprev to the latest release of cri-o to pick up some fixes and CVEs. Makefile updates along with updates to the go.bbclass allow us to remove most of the do_compile() tweaks that were in place. To test that these removals are sane builds were done for x86_64 and arm64 in docker containers with network=none, no issues were found. Quite a few runtime tests were done as well since we are stepping up 2 releases, and we also just uprev'd 'cni' and wanted to validate its runtime as well. Once the system is started and cri-o is given time to start you can use the new 'crio-status info' command to retrieve the runtime status of cri-o: root@qemux86-64:~# crio-status info cgroup driver: cgroupfs storage driver: storage root: /var/lib/containers/storage default GID mappings (format <container>:<host>:<size>): 0:0:4294967295 default UID mappings (format <container>:<host>:<size>): 0:0:4294967295 Additionally 'crictl' was installed (the recipe will be submitted shortly) and the cri-o Tutorial found here was run (https://github.com/cri-o/cri-o/blob/master/tutorials/crictl.md) In order to run the tutorial /etc/cni/net.d/99-loopback.conf and /etc/containers/policy.json were taken from ./contrib/cni/99-loopback.conf and ./contrib/policy.json in the cri-o src repo. The sandbox_config.json and container_redis.json were taken from https://github.com/cri-o/cri-o/blob/master/test/testdata (note: using core-image-minimal with systemd enabled I had to remove "cpu_period": 10000 and "cpu_quota": 20000 to get the tutorial to work). We are not able to use the loopback networking to telnet to the redis container, but we can use other techniques to validate that it is running. root@qemux86-64:~# /usr/lib/go/src/import/_output/crictl --runtime-endpoint unix:///var/run/crio/crio.sock ps CONTAINER IMAGE CREATED STATE NAME ATTEMPT POD ID 72718714360ef quay.io/crio/redis:alpine 47 seconds ago Running podsandbox1-redis 0 38b97e5a7bb99 root@qemux86-64:~# /usr/lib/go/src/import/_output/crictl --runtime-endpoint unix:///var/run/crio/crio.sock exec -i 72718714360ef cat /etc/issue Welcome to Alpine Linux 3.7 Kernel \r on an \m (\l) The CRIO_BUILD_CROSS approach was no longer valid and was dropped. There is most likely some other cleanup we can do but this gets us to a good state on the latest release. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: reproducible build compiler flagsChristopher Clark2020-03-131-6/+6
| | | | | | | | | | | | The change to the method of passing compiler flags into the Xen build system in 6b697676 omitted passing the compiler flags for improving build reproducibility, so this commit returns them and includes a change to use the -ffile-prefix-map compiler option to remove host filesystem artefacts instead of the prior method of redefining the __FILE__ builtin macro. Signed-off-by: Christopher Clark <christopher.w.clark@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: add system service for podmanStefan Agner2020-03-131-0/+8
| | | | | | | | Add system service for podman which starts a podman instance allow to access the new HTTP based API (apiv2). Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: bump to the latest version 1.8.1Stefan Agner2020-03-131-2/+2
| | | | | | | | Bump to the newest podman release 1.8.1. Many new networking features and a new HTTP API has been added since 1.6.1. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: bump to version 2.0.11Stefan Agner2020-03-131-1/+1
| | | | | | | Bump to latest version 2.0.11 of conmon. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* qemu: change packaging when vmsep is enabledBruce Ashfield2020-03-112-0/+46
| | | | | | | | | | | | | | When hosts are using VM separation features, they need qemu on the target to launch guests (and for other purposes) .. but they do not want *all* of the build qemu targets. To allow a more fine grained installation off qemu components, this patch splits packaging into: - qemu-<arch> - qemu-support - qemu-keymaps Signed-off-by: Bruce Ashfield <bruce.ashfield@xilinx.com>
* libxycrypt: build static libraries if 'vmsep' is in distro_featuresBruce Ashfield2020-03-111-0/+4
| | | | | | | | If vmsep is a distro feature, we need to allow the static libraries to be built (so we remove --diable-static). Without this, busybox cannot be statically built and we can't (easily) use it as part of an initrd. Signed-off-by: Bruce Ashfield <bruce.ashfield@xilinx.com>
* busybox: vmsep distro feature modificationsBruce Ashfield2020-03-113-0/+14
| | | | | | | | | | | If "vmsep" is in distro features, we need to configure busybox as a static build. This allows for it to be used as party of an initrd. We also ensure that the installer support is added to busybox, so it can be installed to the initrd via: busybox --install Signed-off-by: Bruce Ashfield <bruce.ashfield@xilinx.com>
* runx: introduce xen OCI container recipeBruce Ashfield2020-03-113-0/+282
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is the initial version of the runX OCI wrapper to allow Xen based virtual machines to be launched and managed as containers via an OCI interface. In this first version, runx consists of the following components: - runX binary/wrapper (/usr/bin/) - state control wrappers (/usr/share/runX) - runx kernel - initrd Once built and installed these allow the launching of Xen virtual machines in an OCI compliant manner. Dependencies of this recipe include: - kernel: must be a specific version, currently 4.15. This is done as a nested build and not as a multiconfig (by design). - static target busybox: used for the initrd - initrd: constructed from the kernel + busybox The configuration of the system to build the dependencies in the right mode for use in runX is controlled via the DISTRO_FEATURE "vmsep". If this feature is missing, and runx is bitbaked, an error is thrown. Installing the "runx" package to a rootfs will install all the required support components (and dependencies). Signed-off-by: Bruce Ashfield <bruce.ashfield@xilinx.com>
* libvirt: uprev to v6.1.0Bruce Ashfield2020-03-0811-172/+134
| | | | | | | | | | | | | | | | | | | | | | | | | | Updating libvirt to the next major release series. With this, brings some changes to the build: - add python3-docutils-native to DEPENDS, since it is needed for doc building - remove a reference to libgnu.la from the Makefiles, since it is not needed or provided in the build dependencies - remove obselete packageconfig options: xenapi and phyp - add an explicit do_compile rule (versus the autotools bbclass variant), so we can create some directories before compilation starts - add ${B}/src to the PKG_CONFIG_PATH to the libvirt.pc file can be found during build, as it is queried by libvirt-python - with the ability to find the libvirt.pc file, we can also drop the manipulations for libvirt_api_xml_path, as it is returned from pkg-config queries. - clear PKG_CONFIG_SYSROOT_DIR during libvirt-python builds, since the libvirt.pc file already provides cflags/includes that are contained to the build/src directory structure. And finally, existing patches are refreshed to remove fuzz. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-python2: add the same COMPATIBLE_HOST restriction as xen-toolsMartin Jansa2020-03-031-0/+3
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: fix COMPATIBLE_HOST restriction for i686Martin Jansa2020-03-031-1/+1
| | | | | | | | * let TARGET_VENDOR to be set to something else than the default: meta/conf/bitbake.conf:TARGET_VENDOR = "-oe" like other architectures use Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: fix buildMartin Jansa2020-03-032-0/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * apply similar patch to what was applied to docker-ce in: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/recipes-containers/docker?id=e7787cb01be91d3798594687a475d5b085f29ede it's very similar, but needs to be separate .patch file, because the path to make/.binary is different in docker-ce and docker-moby. since the recent upgrade: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=f770151b3ff0938bea4972abdd1ee7f6cbc3a074 docker-moby needs the same change or fails like this: | ERROR: Execution of 'work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754' failed with exit code 2: | | Package devmapper was not found in the pkg-config search path. | Perhaps you should add the directory containing `devmapper.pc' | to the PKG_CONFIG_PATH environment variable | No package 'devmapper' found | Removing bundles/ | | ---> Making bundle: dynbinary (in bundles/dynbinary) | Building: bundles/dynbinary-daemon/dockerd-19.03.6 | GOOS="linux" GOARCH="arm" GOARM="7" | # runtime/cgo | exec: "arm-linux-gnueabihf-gcc": executable file not found in $PATH | WARNING: work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754:1 exit 2 from 'VERSION="19.03.6" DOCKER_GITCOMMIT="${SRCREV_docker}" ./hack/make.sh dynbinary' | ERROR: Task (meta-virtualization/recipes-containers/docker/docker-moby.bb:do_compile) failed with exit code '1' Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: fix DOCKER_GITCOMMITMartin Jansa2020-03-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * SRCREV_docker isn't defined in docker-moby recipes at all so it passes unexpanded ${SRCREV_docker} as noticed in error log: | ERROR: Execution of 'work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754' failed with exit code 2: | | Package devmapper was not found in the pkg-config search path. | Perhaps you should add the directory containing `devmapper.pc' | to the PKG_CONFIG_PATH environment variable | No package 'devmapper' found | Removing bundles/ | | ---> Making bundle: dynbinary (in bundles/dynbinary) | Building: bundles/dynbinary-daemon/dockerd-19.03.6 | GOOS="linux" GOARCH="arm" GOARM="7" | # runtime/cgo | exec: "arm-linux-gnueabihf-gcc": executable file not found in $PATH | WARNING: work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754:1 exit 2 from 'VERSION="19.03.6" DOCKER_GITCOMMIT="${SRCREV_docker}" ./hack/make.sh dynbinary' | ERROR: Task (meta-virtualization/recipes-containers/docker/docker-moby.bb:do_compile) failed with exit code '1' this build issue is somehow caused by recent upgrade: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=f770151b3ff0938bea4972abdd1ee7f6cbc3a074 and this build error is not fixed by this change, but see 2nd to last line which shows DOCKER_GITCOMMIT="${SRCREV_docker}" Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* hyperstart: refresh ↵Martin Jansa2020-03-031-23/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-container.c-Fix-compiler-errors-that-gcc-8.1.0-repor.patch to apply cleanly ERROR: hyperstart-v0.2+gitAUTOINC+15bb718ad3-r0 do_patch: Fuzz detected: Applying patch 0001-container.c-Fix-compiler-errors-that-gcc-8.1.0-repor.patch patching file src/container.c Hunk #2 succeeded at 118 with fuzz 1 (offset 17 lines). Hunk #3 succeeded at 148 (offset 18 lines). Hunk #4 succeeded at 158 (offset 18 lines). Hunk #5 succeeded at 167 with fuzz 1 (offset 18 lines). Hunk #6 succeeded at 197 (offset 20 lines). Hunk #7 succeeded at 222 (offset 20 lines). Hunk #8 succeeded at 240 (offset 20 lines). Hunk #9 succeeded at 277 (offset 20 lines). Hunk #10 succeeded at 285 (offset 20 lines). Hunk #11 succeeded at 325 (offset 27 lines). Hunk #12 succeeded at 583 (offset 30 lines). Hunk #13 succeeded at 646 (offset 30 lines). Hunk #14 succeeded at 664 (offset 30 lines). Hunk #15 succeeded at 749 (offset 30 lines). Hunk #16 succeeded at 769 (offset 30 lines). Hunk #17 succeeded at 778 (offset 30 lines). The context lines in the patches can be updated with devtool: devtool modify hyperstart devtool finish --force-patch-refresh hyperstart <layer_path> Don't forget to review changes done by devtool! ERROR: hyperstart-v0.2+gitAUTOINC+15bb718ad3-r0 do_patch: QA Issue: Patch log indicates that patches do not apply cleanly. [patch-fuzz] Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: drop 5.2 bbappendBruce Ashfield2020-03-031-4/+0
| | | | | | | 5.2 has been removed from core, so we drop the 5.2 bbappend to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>