summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
* build-sysroots: Ensure dependency chains are minimalRichard Purdie2023-08-221-0/+4
| | | | | | | | | | | | | We need to ensure this recipe doesn't have dependencies on others. The SPDX classes/tasks introduce dependenies quilt-native and patch-native which can introduce races on files in the sysroots. Avoid the races by removing the tasks we don't need. [YOCTO #15186] (From OE-Core rev: a5dc278b077edba8f4099f0f6dfb97e97f680320) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cross-localedef-native: fix build on hosts with older glibcMartin Jansa2023-08-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Older glibc on host might be missing __glibc_has_attribute added in glibc-2.34 with: https://sourceware.org/git/?p=glibc.git;a=blobdiff;f=misc/sys/cdefs.h;h=8e244a77cf6271f09cbd26d18b1e07b1d1641404;hp=57ca262bdfb642bf4a945645532f2319ec1ff437;hb=c8ba52ab3350c334d6e34b1439a4c0c1431351f3;hpb=7dd416491e080456fc7742d884c520526509413e Fixes: In file included from ../git/localedef/include/programs/xmalloc.h:21, from glibc/locale/programs/localedef.h:124, from glibc/locale/programs/localedef.c:36: ../git/localedef/include/sys/cdefs.h:85:51: error: missing binary operator before token "(" 85 | #if __GNUC_PREREQ (4, 3) || __glibc_has_attribute (__cold__) | ^ Only commit included: e0eca29 cdefs.h: define __glibc_has_attribute (From OE-Core rev: 62c464bb4e3ebb6b50864ede7b352651b2c81e3c) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-sysroots: Add SUMMARY fieldKhem Raj2023-08-211-1/+2
| | | | | | | | | | Fixes build QA warning about [missing-metadata] (From OE-Core rev: 4f4c7130f11c069ab18c374dcbfb1276ef37be60) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: improve cross file generationRoss Burton2023-08-211-4/+3
| | | | | | | | | | | | | | The meson.cross generated by the class already has c and objcopy entries, so these can be removed. Pass the --cross-file option in MESON_CROSS_FILE to ensure the ordering is always correct. (From OE-Core rev: 302551de19edb1eb7333a6d1d5fdddacdbb9c349) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: use MESON_TARGETRoss Burton2023-08-161-4/+2
| | | | | | | | | Instead of re-implementing do_compile, use MESON_TARGET. (From OE-Core rev: d37c0f3449e1a20e3acc490150fa4c7c6ea46bd1) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc-tests: Add missing libgcc runtime dependencyKhem Raj2023-08-161-1/+1
| | | | | | | | | Some tests e.g. tst-y2039-time64 from glibc 2.38+ needs it. (From OE-Core rev: d41e6b8c9ff1d42fd6211fd2c24f666cac188f79) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Fix SVE detection on aarch64Khem Raj2023-08-162-0/+58
| | | | | | | (From OE-Core rev: 10e1ae119e8087598947dd45c163d5fe6569839d) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Drop --enable-tunablesKhem Raj2023-08-161-1/+0
| | | | | | | | | | | Its removed and is implicit default in 2.38+ [1] [1] https://mail.gnu.org/archive/html/info-gnu/2023-07/msg00010.html (From OE-Core rev: e2af021f5b918c619396eecb20fa30a71cf5e776) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Enable fortify sources by defaultsKhem Raj2023-08-161-0/+1
| | | | | | | (From OE-Core rev: f71d9d87e638ebeea5be1a64ad98a9460ee3d1f2) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Upgrade to 2.38 releaseKhem Raj2023-08-1631-128/+110
| | | | | | | | | Announcement - https://mail.gnu.org/archive/html/info-gnu/2023-07/msg00010.html (From OE-Core rev: 16aff29593d7991d7ae953d5fb526a897c5a7268) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: Fix build on muslKhem Raj2023-08-151-0/+2
| | | | | | | | | | | | systemd efi.h defines wchar_t from compiler provided __WCHAR_TYPE__ therefore we do not want it to come from alltypes.h in musl case which otherwise will end up with conflicting definitions of wchar_t, defining __DEFINED_wchar_t ensures that alltypes.h does not provide it (From OE-Core rev: 7b84fe344a2067b63d0c222fbc68d5916fa7903f) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: fix efi dependencyJose Quaresma2023-08-141-1/+1
| | | | | | | | | | | | | | | | | | | | Last version of systemd dpends now on pyelftools to build the efi support but the required tool is the native ones and not the target. The systemd-boot has the corrected dependencie so fix this in the main recipe. | Program python3 (jinja2) found: YES (/build/tmp-lmp/work/corei7-64-lmp-linux/systemd/1_254-r0/recipe-sysroot-native/usr/bin/python3-native/python3) modules: jinja2 | Checking if "32bit build possible" : links: NO | Program python3 (elftools) found: NO | | ../git/meson.build:2147:8: ERROR: Problem encountered: EFI bootloader support requires pyelftools. | | A full log can be found at /build/tmp-lmp/work/corei7-64-lmp-linux/systemd/1_254-r0/build/meson-logs/meson-log.txt (From OE-Core rev: 69d37620a7a0626eaee1c0b37057be2ac2687290) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: add usrmerge to REQUIRED_DISTRO_FEATURESLuca Boccassi2023-08-115-4/+14
| | | | | | | | | | | | | Support for unmerged-usr is deprecated upstream, taints the system and has been removed for v255 (next release). Enforce building merged-usr images when using systemd. This allows one release cycle where it can be tested for any remaining issue, and can still be overridden, before it stops working completely. (From OE-Core rev: 802e853eeddf16d73db1900546cc5f045d1fb7ed) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: add a packageconfig to support colored logsMarkus Volk2023-08-091-0/+1
| | | | | | | | | | | journald uses less to display logs. less.busybox can do the job, but it rips out support for color/highlighting. (From OE-Core rev: 2e9b41b23695bb3517ad33ccb02ae19ca30326c6) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd-boot: Ensure EFI_LD is also passed to compiler driverKhem Raj2023-08-091-0/+1
| | | | | | | | | | | Where compiler driver is used for linking ensure bfd linker is used as well so its consistent when called directly or via compiler (From OE-Core rev: d497362d52bd934101e7d7a49eeee0fffb0f4f46) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: fix efi stubsJose Quaresma2023-08-092-0/+71
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before the patch: | $ objdump -h deploy/images/intel-corei7-64/linuxx64.efi.stub | objdump: deploy/images/intel-corei7-64/linuxx64.efi.stub (.reloc): section flag STYP_GROUP (0x4) ignored | objdump: deploy/images/intel-corei7-64/linuxx64.efi.stub (.reloc): section flag STYP_GROUP (0x4) ignored | objdump: deploy/images/intel-corei7-64/linuxx64.efi.stub: file format not recognized After the patch: | $objdump -h deploy/images/intel-corei7-64/linuxx64.efi.stub | | deploy/images/intel-corei7-64/linuxx64.efi.stub: file format pei-x86-64 | | Sections: | Idx Name Size VMA LMA File off Algn | 0 .text 0000f99f 000000014df91000 000000014df91000 00000400 2**4 | CONTENTS, ALLOC, LOAD, READONLY, CODE | 1 .rodata 00002c40 000000014dfa1000 000000014dfa1000 0000fe00 2**2 | CONTENTS, ALLOC, LOAD, READONLY, DATA | 2 .data 000002d8 000000014dfa4000 000000014dfa4000 00012c00 2**4 | CONTENTS, ALLOC, LOAD, DATA | 3 .sdmagic 00000032 000000014dfa5000 000000014dfa5000 00013000 2**2 | CONTENTS, ALLOC, LOAD, READONLY, DATA | 4 .reloc 00000080 000000014dfa6000 000000014dfa6000 00013200 2**2 | CONTENTS, ALLOC, LOAD, READONLY, DATA (From OE-Core rev: 2d4a5305c8b7a5fb15086a86dfdc64630c686602) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust-hello-world: Drop recipeFrederic Martinsons2023-08-091-3/+0
| | | | | | | | | | we now have more rust/cargo recipes and tests that cover various use cases so this is no longer needed. (From OE-Core rev: 8baaf94d200f5355791ecd980727698b1ab0e539) Signed-off-by: Frederic Martinsons <frederic.martinsons@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-files: bump PR because conf files are now sortedAlexandre Belloni2023-08-091-1/+1
| | | | | | | (From OE-Core rev: 5da3a7a5654ce36bba664c5ccdd5d3fba27a4647) Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: depend on util-linux's swapon/offRoss Burton2023-08-091-1/+1
| | | | | | | | | | systemd brings up swap partitions with swapon --fixpgsz, which busybox's implementation doesn't support. (From OE-Core rev: c7b39bb6319f21c6df6c2d25086f82154efdf5f6) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: set correct paths for kdb binariesRoss Burton2023-08-091-2/+2
| | | | | | | | | | | The kbd binaries (loadkeys and setfont) are installed to bindir, not base_bindir. Fixes: 94ccc7acc4a871f5bb7ab8e135e70b5519eff6ad (From OE-Core rev: 458fdd085beb14572e5a1ed0f94861cf10648725) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Upgrade to tip of trunkKhem Raj2023-08-041-2/+4
| | | | | | | | | | | | | | | | | | | Brings following changes * 83b858f8 fix rejection of dns responses with pointers past 512 byte offset * a4ecaf89 dns stub resolver: increase buffer size to handle chained CNAMEs * 40834f6c printf core: fix gratuitous integer formatting buffer size * 3a23cd06 all printf variants: fix argument type handling for %c and %lc * fa4a8abd fix public clone function to be safe and usable by applications * 0c277ff1 fix broken thread list unlocking after fork * 4653b987 mbrtowc: Fix wrong return value when n > UINT_MAX * b90841e2 configure: replace -Os with equivalent based on -O2 (From OE-Core rev: b6abcd4f01aec24393bce68a9806d94702c0d387) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Make 254 work on muslKhem Raj2023-08-043-0/+91
| | | | | | | | (From OE-Core rev: 2a7dc1deaa7514c8257d828ee84da70185fc3eda) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Point to target binary paths for loadkeys and setfontKhem Raj2023-08-041-2/+6
| | | | | | | | | | | | | | | | | | | | | | | with newer systemd, if not specified, these paths are searched on build host /usr dir log.do_configure.2373278:Program /usr/sbin/loadkeys found: YES (/usr/sbin/loadkeys) log.do_configure.2373278:Program /usr/sbin/setfont found: YES (/usr/sbin/setfont) and if build host happens to have kbd installed then it uses those locations, this would work fine if the assumption between OE distro and host distro matches but fail otherwise e.g. on archlinux these binaries are in /usr/sbin but in OE they are in ${base_bindir} This results in qemux86-64 systemd-vconsole-setup[211]: /usr/sbin/loadkeys failed with exit status 1. (From OE-Core rev: 94ccc7acc4a871f5bb7ab8e135e70b5519eff6ad) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: update to v254Luca Boccassi2023-08-0424-931/+334
| | | | | | | | | | | | | | | - Drop dependency on gnu-efi, add dependency on pyelftools for EFI builds - Refresh patches - Ship new files and directories - Use meson target to build sd-boot instead of filenames - Change libpam recipe to set ANY_OF_DISTRO_FEATURES = "pam systemd" to let logind pull in pam-plugin-umask (From OE-Core rev: 95ed1fa4ff74a77deade51ad73b2f8963ff81548) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: upgrade 2.38.1 -> 2.39.1Alexander Kanavin2023-08-016-100/+13
| | | | | | | | | | | License-update: added bsd-2-clause https://github.com/util-linux/util-linux/commit/faeb1b64b36ededd1a0b62555cad65f002d47ac6 (From OE-Core rev: 30b6031be6c9b7870f618391dd492834615b0aed) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ncurses: fix CVE-2023-29491Chen Qi2023-08-012-0/+463
| | | | | | | | | | Backport patch to fix CVE-2023-29491. (From OE-Core rev: f1c95ae70f7aac574daf5b935a02bbba0d6f8a16) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-extended-tarball: install the full set of gconv modulesAlexander Kanavin2023-07-301-10/+2
| | | | | | | | | | | | | The specific set was written to ensure vim builds reproducibly; this is however prone to silent regressions (if vim adds more usage of iconv with different encodings). Installing the full set also matches what standard desktop distributions do, and thus meets expectations of upstream projects in general. (From OE-Core rev: 2685c497c14bc325500053e551d97e8cbda97252) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* uninative-tarball: install the full set of gconv modulesAlexander Kanavin2023-07-301-9/+1
| | | | | | | | | | | | | | | | msgfmt from gettext-native 0.22 is using iconv() to convert data to utf-8 from arbitrary source encodings (previous versions of gettext did not do this conversion): https://git.savannah.gnu.org/gitweb/?p=gettext.git;a=commit;h=5412a4f79929004cb6db15d545e07dc953330e8d As this is happening at build time, and the source encodings are specified by upstream projects in translation files, we need the full set to cover all of them. (From OE-Core rev: 8a23d9f499c7784379822ef69f4812a562a90887) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc-locale: use stricter matching for metapackages' runtime dependenciesAlexander Kanavin2023-07-301-4/+4
| | | | | | | | | | | | | | | | | | This resolves two issues: 1. metapackages were depending on themselves (except -binaries which wouldn't match against 'glibc-binary'). 2. for the nativesdk variant, due to a non-empty dependency list at parsing time caused by issue 1, map_depends_variable() from meta/lib/oe/classextend.py was forcibly setting PACKAGES to the initial parse-time value (e.g. missing the dynamically created packages). This meant that three out of four nativesdk- metapackages were entireyly missing the dependencies on the respective dynamic package sets. (From OE-Core rev: a90fd3afe9184aa1870b34a826e3ba0563477d4b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: upgrade 253.3 -> 253.7Alexander Kanavin2023-07-303-1/+1
| | | | | | | | (From OE-Core rev: f346b1995dc3e3fc3bf27f3aaada8e0d2ee6853f) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kbd: upgrade 2.6.0 -> 2.6.1Alexander Kanavin2023-07-301-1/+1
| | | | | | | | (From OE-Core rev: 6a403f2bd9bd6d916ef08a31514a8c4bb5efc318) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gettext-minimal-native: obtain the needed files directly from gettext source ↵Alexander Kanavin2023-07-3016-4525/+33
| | | | | | | | | | | | | | | | | tarball None of the files are generated, and so there is no need to carry them in oe-core (which greatly complicates gettext version updates, for one thing). Let's simply copy them over directly from the tarball; as the set of installed .m4 files can and does change over time, obtain them with a python scriptlet from Makefile.am where they are listed. (From OE-Core rev: d06cfaadb6d4bd93982f82ad8b93b89e9bceea16) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta: add missing summaries for image recipesAlexander Kanavin2023-07-303-1/+3
| | | | | | | | (From OE-Core rev: ff6f67f8fa6a5601a4203000ed039252aea1ef93) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* autoconf: Upgrade to 2.72cRichard Purdie2023-07-302-0/+51
| | | | | | | | | | | | | | | | | | | | | | | | | 2.72c is a prerelease version of autoconf 2.73. It contains largefile and y2038 64 bit time_t improvements for 32 bit architectures. Rather than work on the older codebase, this brings us to work with the recent autoconf upstream with the 64 bit changes. It is unclear when upstream will release 2.73 but it is easier for us to be aligned now we've done the bulk of the work needed to update. Upstream added several patches which fixed several common failures OE builds ran into (backported in the next commit). In general testing has otherwise been good for us. There is an unfortunate gnulib largefile.m4 bug. This change patches various software to workaround it, next time they update new versions of the gnulib code will be pulled in which address the issue with the official fix. There are also a couple of ordering related fixes for apr and libarchive. (From OE-Core rev: bb74a03e927b4867d885ad3539b097f0e7ed108c) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* udev: eudev: Revert add group to sgxAlex Kiernan2023-07-292-5/+2
| | | | | | | | | The sgx group is part of base-passwd now. (From OE-Core rev: d443fad3687c4dd2d7b4107079e0d297d03e94d6) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-passwd: Add the sgx groupAlex Kiernan2023-07-292-0/+31
| | | | | | | | | | | | | To avoid errors from eudev/udev we need an sgx group, but if we add it via groupadd that causes shadow login to be brought into an image, which causes images which have CONFIG_MULTIUSER unset to fail with `setgid: Function not implemented` as shadow's login doesn't implement the heuristics which busybox has to handle this kernel configuration. (From OE-Core rev: a1c81ac4a869cc57394071ace2ca086eb8ac47a4) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revision4.3_M2Richard Purdie2023-07-261-1/+1
| | | | | | (From OE-Core rev: 6ac110c8954e5fdb71d5495e3eebc1ca3958dc19) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc/check-test-wrapper: don't emit warnings from sshAnuj Mittal2023-07-261-1/+1
| | | | | | | | | | | | | Dont fill up the test log with ssh warning about having added the host to list of known hosts. Also helps fix a test case failure where stderr log was being compared to a known value. (From OE-Core rev: 63b31ff7e54a171c4c02fca2e6b07aec64a410af) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* eudev: Add group sgx to eudev packageAlex Kiernan2023-07-211-1/+4
| | | | | | | | | | | | | | | Fix startup warning: udevd[171]: specified group 'sgx' unknown This mirrors the change in bab455cd9b1b ("systemd: add group sgx to udev package") for systemd-udev. (From OE-Core rev: 0e2bc425a6094a5816c9f4e73993baf27c9a51f5) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-214-17/+11
| | | | | | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version (From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Reviewed-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: upgrade 2.76.3 -> 2.76.4Wang Mingyu2023-07-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============= * Fix build failure on Android with 'statx()' support (#3039) * Bugs fixed: - #3003 glib-compile-schemas failed on directory name with no Latin symbols - #3039 Build failure due to statx fields with NDK r25.c - !3447 Backport !3446 "glib-compile-resources: Fix non-ASCII arg parsing on Windows" to glib-2-76 - !3479 Backport !3473 "glib: reset errno to 0 when futex() returns EAGAIN" to glib-2-76 - !3480 Backport !3468 "Avoid stack overflow in gspawn on macOS" to glib-2-76 - !3492 Backport !3482 "glocalfileinfo: Fix incorrect use of struct statx.st_mtimensec on Android" to glib-2-76 * Translation updates: - English (United Kingdom) - Portuguese (Brazil) - Slovak (From OE-Core rev: 2b8a98d1f7456882db92be1c709aea0bf868a344) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc-testsuite: Fix network restrictions causing test failuresRichard Purdie2023-07-201-0/+1
| | | | | | | | | | | | The check target for the glibc testsuite uses networking to access a QEMU in system mode. This was resulting in large numbers of test failures for the x86 targets that use it. Enable network access to resolve this. (From OE-Core rev: 088e022f80e57ca345838bf57df9abad3d8b9313) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to master head revisionRichard Purdie2023-07-191-1/+1
| | | | | | (From OE-Core rev: 8bb047ad3bd93fcf655eeec53e6d1de1e7747140) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: add alternative links for ipcs,ipcrmBenjamin Bouvier2023-07-141-0/+2
| | | | | | | | | | | | | | | | | | | | | | When enabling ipcs and ipcrm configuration into busybox, both tools are built and then deployed during do_rootfs. These operation lead to below issue (similar behavior happens for ipcs): do_rootfs: Postinstall scriptlets of ['busybox'] have failed. If the intention is to defer them to first boot, then please place them into pkg_postinst_ontarget:${PN} (). update-alternatives: Error: not linking .../build/tmp/work/board-poky-linux/board-image/1.0-r0/rootfs/usr/bin/ipcrm to /bin/busybox since .../build/tmp/work/board-poky-linux/board-image/1.0-r0/rootfs/usr/bin/ipcrm exists and is not a link Binaries enter in conflict with same named util-linux utilities during do_rootfs step. Adding ALTERNATIVE_LINK_NAME for both tools fix the issue. (From OE-Core rev: e4d60408b869c9cc2ccff794d4e271d993ec8a97) Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxcrypt: upgrade 4.4.35 -> 4.4.36Wang Mingyu2023-07-143-1/+1
| | | | | | | | | | | Changelog: * Fix left over bits failing with Perl v5.38.0 (issue #173). (From OE-Core rev: f77b5039b9c31fc20594b02ff165131d0c7fcb39) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3: parallelize ptests, add test_cppext dependenciesTrevor Gamblin2023-07-141-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is based on a previous patch from Alex Kanavin (thanks Alex), but it retains our use of sed to parse the test output into a usable form. The intent was to use the test module's --junit-xml feature and parse the resulting log instead of using sed, but various errors were encountered when testing this method, so that will need further investigation before we can consider adopting it. Two missing ptest dependencies on python3-cgitb and python3-zipapp were already merged in a previous patch, so only gcc, g++, and binutils were left to add as ptest RDEPENDS. ptest output and runtime with this change: == Tests result: SUCCESS == 405 tests OK. 29 tests skipped: test_asdl_parser test_check_c_globals test_clinic test_curses test_devpoll test_gdb test_idle test_ioctl test_kqueue test_launcher test_msilib test_ossaudiodev test_readline test_smtpnet test_socketserver test_startfile test_tcl test_tix test_tk test_ttk_guionly test_ttk_textonly test_turtle test_urllib2net test_urllibnet test_winconsoleio test_winreg test_winsound test_xmlrpc_net test_zipfile64 Total duration: 5 min 3 sec [YOCTO #13298] (From OE-Core rev: 50a719d3002a4119e8b2be43aec8fe01aa0c2a40) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-nvd2-native: actually use API keysRoss Burton2023-07-131-11/+12
| | | | | | | | | | | | | There were vestigal remains of API key support which could be removed, but as using an API key - in theory - gives the user larger rate limits it's probably wise to expose it. If the user has an API key, then set NVDCVE_API_KEY. (From OE-Core rev: a542de684282bfec79f24ae2f1a2027ffde319d8) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-nvd2-native: log a little moreRoss Burton2023-07-131-5/+7
| | | | | | | | | | | Add a note of what range we're fetching, and use bb.note() instead of debug() as messages about retrying shouldn't really be considered debug logging. (From OE-Core rev: b64a869b9c5e1d504f1011da16b5c5ff721afbf0) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-nvd2-native: increase retry countPeter Marko2023-07-131-1/+1
| | | | | | | | | | | | | | | Current 503 errors seem to last several seconds. In most cases there are two errors and third request succeeds. However sometimes the outage takes more than time needed for two retries and third one also fails. Extend retry count from 3 to 5 to improve the probablity that the fetcher succeeds. (From OE-Core rev: f4d118af2360cff7f234102fd5e4b65a6f4146a6) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-nvd2-native: retry all errors and sleep between retriesPeter Marko2023-07-131-7/+4
| | | | | | | | | | | | | | | | | | Last couple days it is not possible to update NVD DB as servers are returning lot of errors. Mostly "HTTP Error 503: Service Unavailable" is observed but sporadially also some others. Retrying helps in most cases, so extend retries to all errors. Additionally add sleep which is recommended by NVD between requests. These retries are already implemented between successful requests, but giving servers time between failed ones is important, too. (From OE-Core rev: 88dad8f198baa80af5ab576498f4df6ed639d551) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>