summaryrefslogtreecommitdiffstats
path: root/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* ceph: fix CVE-2023-43040Yogita Urade2025-04-092-0/+57
| | | | | | | | | | | | | | | IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-43040 Upstream patch: https://github.com/ceph/ceph/commit/98bfb71cb38899333deb58dd2562037450fd7fa8 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* CVE-2023-37154:Changqing Li2024-12-102-0/+70
| | | | | | | | | | | | check_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with \${IFS}. This has been categorized both as fixed in e8810de, and as intended behavior. Refer: https://nvd.nist.gov/vuln/detail/CVE-2023-37154 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "nagios-plugins: fix CVE-2023-37154"Bruce Ashfield2024-12-101-1/+0
| | | | This reverts commit 460ea78d7f8d5d16799d0b7334b95d8170c9e338.
* nagios-plugins: fix CVE-2023-37154Changqing Li2024-12-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2023-37154: check_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution"x$with_unrestricted_ssh_options" = xyes ; then ++ AC_DEFINE(HAVE_UNRESTRICTED_SSH_OPTIONS,[1],[Allow SSH to use options that run local commands.]) ++fi ++ + AC_ARG_WITH([ipv6], + [AS_HELP_STRING([--with-ipv6], [support IPv6 @<:@default@check>@])], + [], [with_ipv6=check]) +diff --git a/plugins/check_by_ssh.c b/plugins/check_by_ssh.c +index b6f3130..6cc6c7a 100644 +--- a/plugins/check_by_ssh.c ++++ b/plugins/check_by_ssh.c +@@ -27,7 +27,7 @@ + *****************************************************************************/ + + const char *progname = "check_by_ssh"; +-const char *copyright = "2000-2014"; ++const char *copyright = "2000-"; + const char *email = "devel@nagios-plugins.org"; + + #include "common.h" +@@ -299,6 +299,16 @@ process_arguments (int argc, char **argv) + skip_stderr = atoi (optarg); + break; + case 'o': /* Extra options for the ssh command */ ++ ++ /* Don't allow the user to run commands local to the nagios server, unless they decide otherwise at compile time. */ ++#ifndef HAVE_UNRESTRICTED_SSH_OPTIONS ++ if ( strcasestr(optarg, "ProxyCommand") != NULL ++ || strcasestr(optarg, "PermitLocalCommand") != NULL ++ || strcasestr(optarg, "LocalCommand") != NULL) { ++ break; ++ } ++#endif ++ + comm_append("-o"); + comm_append(optarg); + break; +-- +2.23.0 + Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Fix CVE-2024-1441 and CVE-2024-2496Ashish Sharma2024-07-103-0/+157
| | | | | | | | | | Upstream-Status: Backport from [https://launchpad.net/ubuntu/+source/libvirt/8.0.0-1ubuntu7.10] import Ubuntu patches to fix CVE-2024-1441 CVE-2024-2496 Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Backport fix for CVE-2024-2494Ashish Sharma2024-05-282-0/+221
| | | | | | | Upstream-Status: Backport [https://gitlab.com/libvirt/libvirt/-/commit/8a3f8d957507c1f8223fdcf25a3ff885b15557f2] Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* upx: bump to 4.2.2 release - fixes various CVEsFathi Boudra2024-02-221-36/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update upx recipe from 3.96 to 4.2.2 release: * Use the gitsm fetcher to get the source code. * Add a note to keep using the git repository. * Update the homepage. * Drop the build dependencies as they're useless. UPX builds using the vendor subdirectory, statically linking the libraries. Fixes CVEs: * https://www.cve.org/CVERecord?id=CVE-2023-23456 A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a crafted file. * https://www.cve.org/CVERecord?id=CVE-2023-23457 A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service. * https://www.cve.org/CVERecord?id=CVE-2021-46179 Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. * https://www.cve.org/CVERecord?id=CVE-2021-43317 A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf64::elf_lookup() at p_lx_elf.cpp:5404 * https://www.cve.org/CVERecord?id=CVE-2021-43316 A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64(). * https://www.cve.org/CVERecord?id=CVE-2021-43315 A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5349 * https://www.cve.org/CVERecord?id=CVE-2021-43314 A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5368 * https://www.cve.org/CVERecord?id=CVE-2021-43313 A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invert_pt_dynamic at p_lx_elf.cpp:1688. * https://www.cve.org/CVERecord?id=CVE-2021-43312 A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invert_pt_dynamic at p_lx_elf.cpp:5239. * https://www.cve.org/CVERecord?id=CVE-2021-43311 A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5382. * https://www.cve.org/CVERecord?id=CVE-2021-30501 An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file. * https://www.cve.org/CVERecord?id=CVE-2021-30500 Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file. * https://www.cve.org/CVERecord?id=CVE-2021-20285 A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability. * https://www.cve.org/CVERecord?id=CVE-2020-27802 An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. * https://www.cve.org/CVERecord?id=CVE-2020-27801 A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. * https://www.cve.org/CVERecord?id=CVE-2020-27800 A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. * https://www.cve.org/CVERecord?id=CVE-2020-27799 A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file. * https://www.cve.org/CVERecord?id=CVE-2020-27798 An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. * https://www.cve.org/CVERecord?id=CVE-2020-27797 An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. * https://www.cve.org/CVERecord?id=CVE-2020-27796 A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: CVE-2023-2700 Memory leak in virPCIVirtualFunctionList cleanupHitendra Prajapati2023-06-072-0/+55
| | | | | | | Upstream-Status: Backport from https://gitlab.com/libvirt/libvirt/-/commit/6425a311b8ad19d6f9c0b315bf1d722551ea3585 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xtf: chang the old override syntaxXiangyu Chen2023-05-171-1/+1
| | | | | Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* irqbalance: Use built-in irqbalance.service instead of local oneHe Zhe2023-02-153-12/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The local irqbalanced.service was written long before when there wasn't one in upstream. Then upstream created temporary runtime directory /run/irqbalance in its irqbalanced.service, but no one did this for this recipe. Which renders the following error. /usr/sbin/irqbalance[314]: Daemon couldn't be bound to the file-based socket. This patch starts to use upstream irqbalance.service instead and remove the local one. root@qemux86-64:~# systemctl status irqbalanced * irqbalanced.service - irqbalance daemon Loaded: loaded (/lib/systemd/system/irqbalanced.service; enabled; preset: enabled) Active: active (running) since Mon 2022-08-22 10:10:22 UTC; 3s ago Docs: man:irqbalance(1) https://github.com/Irqbalance/irqbalance Main PID: 208 (irqbalance) Tasks: 2 (limit: 263) Memory: 1.4M CGroup: /system.slice/irqbalanced.service `-208 /usr/sbin/irqbalance --foreground Aug 22 10:10:22 qemux86-64 systemd[1]: Started irqbalance daemon. root@qemux86-64:~# ls -l /run/irqbalance/irqbalance208.sock srwxr-xr-x 1 root root 0 Aug 22 10:10 /run/irqbalance/irqbalance208.sock Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* upx: Use git fetcher instead of gitsmJoakim Roubert2022-12-081-2/+11
| | | | | | | | | | | The current upx will trigger the Bitbake Fetcher Error added in Kirkstone 4.0.5 189a6d452e3037c9e94ccdf6af38359fc6058064 commit. This patch replaces gitsm with git and explicitly adds the git submodules with the corresponding commits. Change-Id: I1b1231f06481f7a1e25dc35277d0f1725c7631e0 Signed-off-by: Joakim Roubert <joakimr@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* upx: update to latest devel releaseBruce Ashfield2022-12-082-35/+5
| | | | | | | | | | | | | | | | The upx development branch history has been rebaseed, so we update our SRCREV to match. As part of this update, we can drop our patch as it has now been merged into the project. The cmake structure has changed slightly, so we inherit cmake-native to make it available as part of the Makefile driven build. And finally, the name and location of the binary has changed, so we adapt our install rule to match. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: upgrade v15.2.15 -> v15.2.17sakib.sajal@windriver.com2022-08-201-1/+1
| | | | | | | | Upgrade ceph to latest v15.x. Minor upgrade containing fix for CVE-2022-0670. Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: Fix buffer overflow bug on workdir pathAndrei Gherzan2022-07-152-1/+36
| | | | | Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: install sysvinit initscriptsJeremy Puhlman2022-06-271-0/+5
| | | | | | | The redhat versions work with out modification. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: add rdpends for netifaces and charset-normalizerJeremy Puhlman2022-06-271-0/+2
| | | | | Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: add depend on udev in sysvinit case.Jeremy Puhlman2022-06-271-1/+2
| | | | | | | | Just as with systemd, the build needs the dev manager installed as a dependancy Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Fix class inherit in xen-imageBertrand Marquis2022-05-181-1/+1
| | | | | | | | | | | | | | Remove inherit of qemuboot classes when not build for qemu in xen-image-minimal. When reverted the handling for only adding inherited classes for qemu was kept but the line always inheriting them was kept to. This patch is fixing that so that qemuboot classes are now only added when the image is built for qemu. This fixes commit 27e5ade0abc2660226389b8b62ef07d85f4b8758 Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Fix keeping restartingHe Zhe2022-05-181-3/+2
| | | | | | | | | LIBVIRTD_ARGS has been moved to libvirtd.service since v8.1.0. Move our mode setting accordingly, otherwise libvirt would keep restarting and VMs would be constantly stopped. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: Pin to use gccKhem Raj2022-05-181-2/+4
| | | | | | | | | Use single quote instead of double quotes to help bitabake syntax highlighter do right job Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: Fix build with GCC 12Khem Raj2022-05-181-0/+1
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* seabios: Upgrade to 1.16 releaseKhem Raj2022-05-181-3/+4
| | | | | | | | Pin to use gcc as compiler always Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "qemuboot, xen-image-minimal: enable runqemu for qemuarm Xen images"Bruce Ashfield2022-05-181-2/+2
| | | | | | This reverts commit 1c746a976830ebaf85c7c8c25612bea349b0a7c5. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen/4.16: fix gcc 12 buildBruce Ashfield2022-05-182-0/+434
| | | | | | | | | | | There's no fix in the xen repository to fix gcc 12 issues yet, but there is one in the opensuse infrastructure. We import that change from: https://build.opensuse.org/package/view_file/openSUSE:Factory/xen/gcc12-fixes.patch?expand=1 to at least get things building and allow runtime testing against gcc 12. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen images, qemuboot: configure xenbr0 bridge for runqemu, testimageChristopher Clark2022-05-181-0/+2
| | | | | | | | | | | | | | Networking for Xen guest virtual machines is commonly configured via bridging in the host system between a physical interface and the guest virtual interfaces. To make it easier to test networking and use testimage with Xen guest virtual machines, extend the bbclass that provides network configuration for qemu machines for the Xen images to configure a Xen bridge and put eth0 onto it when QB_XEN_HOST_BRIDGE is set. Signed-off-by: Christopher Clark <christopher.clark@starlab.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* qemuboot, xen-image-minimal: enable runqemu for qemuarm Xen imagesChristopher Clark2022-05-181-1/+5
| | | | | | | | | | | | | | | | | | | | | The Xen hypervisor built for Arm 32-bit targets can be launched with runqemu by providing a u-boot script and configuration for Qemu, which enables interactive testing of Xen images. Add qemuboot-xen-u-boot.bbclass to add a new bitbake task for generating the u-boot script. Since this increases the number of qemuboot-specific classes that are inherited by the xen-image-minimal recipe, change the inherit of all of these to only apply to qemu machines with the qemuall override. Update qemuboot-xen-defaults.bbclass to supply working default parameters for the qemuarm machine needed to boot successfully in testing. Also change all the arch-specific variable overrides into narrower qemu platform overrides instead to avoid unnecessary interactions with other Arm platform machines. Signed-off-by: Christopher Clark <christopher.clark@starlab.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen, xen-tools: add recommendation for Qemu for non-hvm x86Christopher Clark2022-05-092-10/+5
| | | | | | | | | | | | | The Spectre and Meltdown mitigations for Xen run PV guests within HVM virtual machines, so Qemu is no longer only needed for systems configured to run HVM guests. With the split xen hypervisor and tools recipes, the bios dependencies belong in the tools recipe, so move them and replace the hvm PACKAGECONFIG option with the recommendation based on target arch. Signed-off-by: Christopher Clark <christopher.clark@starlab.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: correct xencommons initscript for systemdBruce Ashfield2022-05-091-1/+1
| | | | | | | | | | | | | commit [xen-tools: don't declare xencommons as an initscript for systemd] was wrong in an amazing two ways. It has an extranenous } and it has inverted logic. The result is that xencommons is not being properly declared as an initscript for sysvinit, and hence we don't fully boot. It isn't a problem for most systemd configurations, so we were booting as the initscript wasn't firing. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: use vgabios 0.8aRoss Burton2022-05-021-2/+2
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* vgabios: upgrade to 0.8a and cleanup recipeRoss Burton2022-05-024-70/+55
| | | | | | | | | | | | | | | | | | | Upgrade to 0.8a. License checksum updated as the FSF street address changed. Apply a patch to use the correct host compiler when building biossums, removing the need for a separate biossums-native recipe. Don't hardcode /usr/share, use ${datadir}. Install all found firmware (including the new Banshee BIOS in 0.8a) and the debug files which were not installed but intended to be packaged. Remove redundant PR and S assignments, as these are the default values. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* dev86: fix a build raceRoss Burton2022-05-023-2/+45
| | | | | | | | | | Fix a race in cpp/ where token[12].h are written to a temporary file with the same name. Also update the status of cross.patch. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Add missing space in append to IMAGE_INSTALLBertrand Marquis2022-04-261-2/+2
| | | | | | | | | Add a space before doing an append in IMAGE_INSTALL on x86. This is solving issues happening if someone is using IMAGE_INSTALL in local.conf to add things to the generated image. Signed-off-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Fix error on undefining domain and segfault on libvirt_driver_qemu.soHe Zhe2022-04-262-0/+53
| | | | | | | | | | | | | | | | | Backport a patch to fix segfault when undefining virtual machines. virsh undefine vm rpc-libvirtd[9725]: segfault at 18 ip 00007f8b0a5f17a9 sp 00007f8b3f8cbb60 error 4 in libvirt_driver_qemu.so[7f8b0a56e000+113000] error: Code: a4 01 0f 84 89 03 00 00 4c 89 ff e8 d1 ed f7 ff 85 c0 0f 88 b9 02 00 00 48 8b 45 b8 48 8b b0 80 00 00 00 48 8b 86 b0 02 00 00 <48> 8b 78 18 48 85 ff 0f 84 42 01 00 00 e8 b5 02 f8 ff 48 89 45 c0 Disconnected from qemu:///system due to end of file error: Failed to undefine domain 'vm' error: End of file while reading data: Input/output error Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: don't declare xencommons as an initscript for systemdBruce Ashfield2022-04-211-1/+2
| | | | | | | | | | | | We previously disabled init.d/xencommons when systemd is the init system (to fix duplicate initialization of some resources), but during rootfs install, update-rc.d will look for the script if xencommons is declared as an initscript package. We match the installation and only delcare it as an initscript in a non systemd configuration. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Remove 4.14 recipes and related patchesMichal Orzel2022-04-205-367/+0
| | | | | | | | | | We shall only have recipes for the last two stable releases, thus get rid of the 4.14 recipes and the corresponding patches. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Add recipes for stable Xen 4.16 release and update masterMichal Orzel2022-04-204-6/+44
| | | | | | | | | | | | | | | Add recipes for Xen 4.16 release as, according to the documentation we shall have recipes for the latest stable major version of Xen before the next Yocto release. Bump PREFERED_VERSION to 4.16 as well. Take the opportunity to update SRCREV of xen recipes for master and bump XEN_REL version to 4.17 as this is the current development version. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Bump SRCREV of 4.15 recipes to 4.15.2Michal Orzel2022-04-202-4/+4
| | | | | | | | | | Bump SRCREV version of xen recipes to use the latest 4.15 release which is 4.15.2. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Reviewed-by: Christopher Clark <christopher.w.clark@gmail.com> Reviewed-by: Bertrand Marquis <bertrand.marquis@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: remove unused systemd/sysvinit filesBruce Ashfield2022-04-191-3/+14
| | | | | | | | | | | | | The commit [ xen: only package xencommon systemd components if systemd is enabled] attempted to only package init.d scripts for non-systemd systems (and vice-versa for unit files). But the xen-tools builds installs the files uncondtionally, so we can end up with unpackaged files in some configurations. We can test on the init system and removed the unused versions of the init to avoid both packging and runtime issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvmi: Fix out of box build failure with xen disabledHe Zhe2022-04-132-0/+77
| | | | | | | | | | vbd was added for xen based VMs since bdee00fac9b4 ("Disk reading interface for Xen based VMs and example") and should be built only when xen is enabled, otherwise there would not be necessary xen headers and cause the following failure. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: fix QA packaging issue when multlib is enabledBruce Ashfield2022-04-111-0/+1
| | | | | | | | | | | | | | | | | | The uprev of libvirt introduced a new sysctl file: 60-qemu-postcopy-migration.conf In a standard configuration, the FILES variable of python-libvirt picks up the fiel, but in a multiconfig setup, the definition of ${libdir} changes and the file is missed. Since systcl always looks in /usr/lib, we can't rely only on ${libdir}, so we explicitly add the new .conf file into the packaging. This will allow new additions in the future to be considered as to in which package they belong. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Preeti Sachan <preeti.sachan@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-what: add new recipeRoss Burton2022-04-071-0/+11
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* irqbalance: update to 1.8.0-tipBruce Ashfield2022-03-291-1/+1
| | | | | | | | | | | | Bumping irqbalance to version v1.6.0-154-gb3adb5f, which comprises the following commits: 0f594a6 Separate variable declaration from assignment 9b004c6 Ensure that we get all of a unix message df7b543 Add '\0' to the end of strings to avoid heap buffer overflow f8bdd0e ui/ui.c: always use "%s"-style format for printf()-style functions efab272 Drop CapabilityBoundingSet from irqbalance service Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kvmtool: update to -tipBruce Ashfield2022-03-295-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping kvmtool to latest, which comprises the following commits: faae833 Revert "kvm tools: Filter out CPU vendor string" 1b76b6e Add --no-pvtime command line argument 7d4671e aarch64: Add stolen time support ff69582 aarch64: Populate the vCPU struct before target->init() 95f4796 arm: pci: Generate "msi-parent" property only with a MSI controller c334a68 arm: Use pr_debug() to print memory layout when loading a firmware image 9b681b0 Remove initrd magic check 2108c86 virtio/pci: Signal INTx interrupts as level instead of edge 20b93be x86: Set the correct APIC ID d4d6f15 x86: Fix initialization of irq mptable cdd7d8c riscv: Generate PCI host DT node 721da16 riscv: Handle SBI calls forwarded to user space 7c9aac0 riscv: Generate FDT at runtime for Guest/VM 762224e riscv: Add PLIC device emulation 42bfe44 riscv: Implement Guest/VM VCPU arch functions 867159a riscv: Implement Guest/VM arch functions 2e99678 riscv: Initial skeletal support 5968b5f update_headers: Sync-up ABI headers with Linux-5.16-rc1 642f35b Makefile: Calculate the correct kvmtool version 7a60af0 arm/pci: update interrupt-map only for legacy interrupts 39181fc vfio/pci: Align MSIX Table and PBA size to guest maximum page size b20d6e3 vfio/pci: Print an error when offset is outside of the MSIX table or PBA f93acc0 vfio/pci: Rework MSIX table and PBA physical size allocation 5f44d5d vfio/pci: Rename PBA offset in device descriptor to fd_offset 34bfe5f pci: Fix pci_dev_* print macros 3d3dca0 vfio/pci.c: Remove double include for assert.h e3b0ade arm/gicv2m: Set errno when gicv2_update_routing() fails dc66461 arm64: Be more permissive when parsing the kernel header 5303f09 arm64: Use the default offset when the kernel image magic is not found 5613ae2 Add --nodefaults command line argument a5253f7 builtin-run: Move kernel command line generation to a separate function 39ab3a0 Use kvm->nr_disks instead of kvm->cfg.image_count cce9616 builtin-run: Abstract argument validation into a separate function 638630c builtin-run: Do not attempt to find vmlinux if --firmware 6cbec43 builtin-run: Warn when ignoring initrd because --firmware was specified 6810e75 builtin-run: Treat specifying both --kernel and --firmware as an error 2e7380d virtio/pci: Size the MSI-X bar according to the number of MSI-X bdb86d0 kvmtool: arm64: Configure VM with the minimal required IPA space 066b5c0 kvmtool: arm64: Use the maximum supported IPA size when creating the VM 4250819 kvmtool: Abstract KVM_VM_TYPE into a weak function 25c1dc6 arm/arm64: vfio: Add PCI Express Capability Structure e69b766 arm/arm64: Add PCI Express 1.1 support 6b74f68 arm/fdt.c: Don't generate the node if generator function is NULL 070fb91 Move fdt_irq_fn typedef to fdt.h 415f92c arm: Fail early if KVM_CAP_ARM_PMU_V3 is not supported Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvmi: update to 0.14-tipBruce Ashfield2022-03-291-2/+2
| | | | | | | | Bumping libvmi to version v0.10-1073-g41600b6, which comprises the following commits: 41600b6 Actually define __XS_EVENT_REASON_MAX (#1016) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: uprev to 8.1.0Bruce Ashfield2022-03-256-218/+4
| | | | | | | | | | | | Bumping libvirt to a newer version. We drop our backported patches, update the checksums, change the meson configuration slightly and adjust the location of the systemd manipulations. Along with functionality changes and bugfixes, we pickup newer python components, so we can survive the depreciation of distutils more easily. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: set CXXFLAGS and CFLAGSsakib.sajal@windriver.com2022-03-221-0/+3
| | | | | | | | | | | commit a83623a54a375d3ae9198a135b94379881a2b7a5 was added to oe-core which removes CXXFLAGS and CFLAGS causing compilation for ceph to fail. Set CXXFLAGS and CFLAGS to resolve the issue. Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: only package xencommon systemd components if systemd is enabledBruce Ashfield2022-03-211-6/+6
| | | | | | | | | | We've had reports of both the init.d xencommons and the systemd services attempting to initialize the console, and breaking boot. The systemd initialization really only needs to be enabled when systemd is in DISTRO_FEATURES, and init.d the opposite. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: inherit setuptools3_legacyTim Orling2022-03-111-1/+1
| | | | | | | cloud-init still requires legacy setup.py behavior. Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: Override CC and CPP in make command lineMichal Orzel2022-03-104-10/+12
| | | | | | | | | | | | | | | | After 4.16 release, Xen build system has been changed significantly. When building latest status of Xen it was observed that commit 317c98cb91 broke the hypervisor build on arm32 due to the change in handling Rules.mk that xen.inc modifies to override CC and CPP. In order to fix the issue this patch moves overriding CC and CPP from Rules.mk to make command line by adding them to EXTRA_OEMAKE:arm. Take the opportunity to bump SRCREV of xen_git.bb and xen-tools_git.bb to the current status of master. Signed-off-by: Michal Orzel <michal.orzel@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: backport patch to fix compile errorKai Kang2022-03-102-0/+65
| | | | | | | | | | Backport patch to fix compile error of libvirt: | runtime error: file ../libvirt-7.2.0/docs/page.xsl line 217 element element | xsl:element: The effective name '' is not a valid QName. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 23:24:15 +0000