aboutsummaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
AgeCommit message (Collapse)Author
2017-07-30Revert "core-image-minimal-initramfs: use initramfs-framework by default"Richard Purdie
This reverts commit 28fc6ba761ed4a47efa7c43e7f7dff5e2fe72b5e since it causes runqemu.RunqemuTests.test_boot_machine_iso and runqemu.RunqemuTests.test_boot_deploy_hddimg to fail in oe-selftest.
2017-07-27core-image-minimal-initramfs: use initramfs-framework by defaultuninative-1.7Ng, Wei Tee
Use the initramfs-framework for initialization by default due to the modularity and expansibility. [YOCTO #10987] Signed-off-by: Ng, Wei Tee <wei.tee.ng@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-27initramfs-framework: include install-efi module in recipe for installationNg, Wei Tee
Utilized the existing init-install-efi.sh script and renamed it to install-efi.sh to manage the installation process of images in initramfs-framework model. This script will be executed when "install" option is being chosen in the grub menu and install the image on the target platform. A new install-efi module is being added in the recipe to handle the installation process using initramfs-framework. [YOCTO #10989] Signed-off-by: Ng, Wei Tee <wei.tee.ng@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-27initramfs-framework: module to support boot live imageNg, Wei Tee
setup-live module is a new module being introduced to integrate the functionality of init-live.sh into new scriptlet named setup-live in order to support the live boot image. The udev-extraconf rdepends is being added to perform automounting. It gets to run before the rootfs and finish module. The setup-live scriplet include the changes for: - Create a conditional loop for the bootparam_root variable. If it is not set, then it will boot from ROOT_IMAGE. Else, it will boot normally which is not from removable media. - Gives a standard path to the original boot disk mount which can be used to. While /media/sda is a good guess, it isn't always right, nor is it a good assumption that only one boot disk is in the system. - The current rootfs module has no support for rootfs images, currently it only support for rootfs partitions for wic image. Therefore, there is a need to assign the rootfs image for live image. [YOCTO #11701] Signed-off-by: Ng, Wei Tee <wei.tee.ng@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-27dbus/dbus-test: upgrade to 1.10.20Chen Qi
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-27eudev: update to 3.2.2Alexander Kanavin
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-27wic-tools: add dependency to e2fsprogs-nativeEd Bartosh
Added e2fsprogs-native to the list of dependencies for wic-tools as all fs-related utilities have to be in this list. Signed-off-by: Ed Bartosh <ed.bartosh@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-25buildtools-tarball: drop deltask package/packagedataMing Liu
They are redundant since nopackages are being inherited. Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-25uninative-tarball: drop deltask package/packagedataMing Liu
They are redundant since nopackages are being inherited. Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-25package-index: inherit nopackagesMing Liu
Drop deltask do_package* syntax, inheriting nopackages instead. Signed-off-by: Ming Liu <peter.x.liu@external.atlascopco.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-25wic-tools: ensure pseudo is availablePaul Eggleton
wic will attempt to use pseudo from the wic-tools sysroot to run, but it was only sure to be in there if do_install had executed - which is not the case if it had been restored from sstate, in which case it failed horribly as seen when running the wic.Wic.test_fs_types and test_mkfs_extraopts tests on the Yocto Project autobuilder recently. Add an explicit dependency on pseudo-native to ensure it's always there. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-24ovmf-shell-image.bb: simplify dependenciesPatrick Ohly
The image consists only of the EFI system partition, therefore we can avoid depending on the default wic tools. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24glibc-common.inc: set CVE_PRODUCT to glibcMikko Rapeli
All recipes which include this .inc map to glibc NVD component. Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24glib.inc: set CVE_PRODUCT to glibMikko Rapeli
NVD uses product glib and vendor gnome for CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2016-6855 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24glibc-package.inc: add support for armeb of multilibzhengrq
Add support for armeb of multilib. Signed-off-by: zhengrq <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-24glibc: fix upstream-status tag in a patchRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-21initscripts: start bootmisc.sh at 36 instead of 55David Vincent
bootmisc.sh is responsible for setting the system date to a sane default. Currently, it is the last script to be run from the rcS runlevel. Problem is that the files created before appear to have been created on 1/1/1970. Most notably, /var/log/dmesg created in dmesg.sh cannot be properly rotated with logrotate which does not consider it a valid date and stops processing. There is no blocker on moving this script right before populating volatiles because it just requires the local and virtual filesystems to be mounted to work. Signed-off-by: David Vincent <freesilicon@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-21systemd: workaround login failure on qemumips64 when 'pam' is enabledChen Qi
Append " -fno-tree-switch-conversion -fno-tree-tail-merge" to FULL_OPTIMIZATION to workaround login problem on qemumips64. Otherwise, user cannot login onto the target even username and password are provided. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-19systemd: refuse to load units with errors (CVE-2017-1000082)Ross Burton
If a unit has a statement such as User=0day where the username exists but is strictly speaking invalid, the unit will be started as the root user instead. Backport a patch from upstream to mitigate this by refusing to start units such as this. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-17dropbear: reduce local pending patchesDengke Du
Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-17base-files: ignore "mesg n" error messagesPatrick Ohly
When using "su - myuser" to change from root to a non-privileged user, "mesg n" from the default .profile fails with "mesg: error: tty device is not owned by group `tty' or "mesg: cannot open /dev/ttyS0: Permission denied", depending on whether mesg comes from busybox or util-linux. This does not happen during a normal login because permissions on /dev/tty* get changed while doing that, something that isn't possible with plain "su -". As the error can't be avoided and failures of mesg probably aren't particularly important, now error messages get dumped to /dev/null. [YOCTO #11127] Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-17util-linux: fix "su -" and package su separatelyPatrick Ohly
"su -" == "su --login" was broken because it uses /etc/pam.d/su-l and lacking that, falls back to /etc/pam.d/other which denies the operation. The fix is to symlink "su-l" to the normal "su" pam config file. Because "su" usually comes from "shadow" and has been broken like this without anyone noticing, it probably is not used much and thus should be packaged separately so that it can be installed only when really needed. For backwards compatibility, "util-linux" still pulls it in. It is a bit strange that DISTRO_FEATURES are getting checked when deciding whether the packages should be defined. It is not wrong, the packages will be simply empty and thus probably not created when the distro feature is on and the package config is off. Perhaps there is a reason, so this is kept unchanged. The symlink however only gets created when su.util-linux really gets built. [YOCTO #11126] Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-17wic-tools: don't create wic-tools.envEd Bartosh
wic-tools.env was uses only when wic is run from bitbake. As wic doesn't use wic-tools anymore in this mode there is no need for this file. Signed-off-by: Ed Bartosh <ed.bartosh@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-11musl: Update to latest on masterKhem Raj
Bring in following changes * fix missing volatile qualifier on lock in __get_locale * remove ineffective compiler assist from printf * fix undefined behavior in ptrace * unify the use of FUTEX_PRIVATE * fix undefined behavior in free * reapply va_arg hacks removal to wprintf * remove useless declarations in string.h * allow specifying argv[0] when invoking a program via ldso command * fix regression in dlopen promotion from RTLD_LOCAL to RTLD_GLOBAL * ldso: avoid spurious & possible erroneous work for libs with no deps * powerpc64: add single-instruction math functions * fix clang CFLAGS checks and silence unused argument warnings * s390x: add single-instruction math functions * fix arm run-time abi string functions * fix regression in getspnam[_r] error code for insufficient buffer size * fix omission of microblaze user.h definitions * fix iconv conversions for iso88592-iso885916 * handle errors from localtime_r in ctime_r * set errno when getpw*_r, getgr*_r, and getspnam_r fail * handle localtime errors in ctime * handle mremap failure in realloc of mmap-serviced allocations * getdate: correctly specify error number * catopen: set errno to EOPNOTSUPP * fix glob failure to match plain "/" to root directory * use hard-coded sh4a atomic opcodes to avoid linker errors on sh Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-11glibc: Enable obsoleted nslKhem Raj
libnsl has been obsoleted in 2.26 and will be removed in future until them we enable it Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-11glibc: Drop obsoleted bits/string.h from multilibbingKhem Raj
glibc 2.26 has dropped bits/string.h Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-11glibc: Upgrade to 2.25.90Khem Raj
Eventually it will be released as 2.26 final Signed-off-by: Khem Raj <raj.khem@gmail.com>
2017-07-08ovmf: Fix build with toolchain defaulting to PIEKhem Raj
GCC44_IA32_X64_DLINK_COMMON and GCC49_IA32_X64_DLINK_COMMON variables add to final linker flags that ovmf build forms on its own, so trying to inject it from environment will not work. Here we add option to disable pie during linking, which should have been accompanied with correcponding gcc/cflags. Fixes | /mnt/a/oe/build/tmp/work/i586-bec-linux/ovmf/git-r0/git/Build/OvmfIa32/RELEASE_GCC5/IA32/OvmfPkg/AcpiTables/AcpiTables/OUTPUT/./Facs.dll: Bad definition for symbol '<unknown>'@0 or unsupported symbol type. For example, absolute and undefined symbols are not supported. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2017-07-06systemd: changes to support merged /usrAmarnath Valluri
- Enable/disable the split-usr support in systemd based on 'usrmerge' DISTRO_FEATURE. - Modify rootprefix to point to ${root_prefix}, rather than ${base_prefix}. - And fixed firmware path to use ${nonarch_base_libdir} instead of hard-coded '/lib', because when 'usrmege' distro feature enabled this path would be '/usr/lib'. Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-07-06systemd: Do not use xlocale.hKhem Raj
glibc specific header which has been removed from glibc 2.26+ Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-07-06expat: upgrade to 2.2.1Dengke Du
The COPYING file in expat has the following changes: 2001-20016 to 2001-2017 Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-28gettext: relocate msgfmt utility for all recipesAlexander Kanavin
Now that epiphany needs a working msgfmt as well, let's do this trick where it should be. Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
2017-06-27meta: Add/fix missing Upstream-Status to patchesRichard Purdie
This adds or fixes the Upstream-Status for all remaining patches missing it in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-27meta: Fix malformed Upstream-Status tagsRoss Burton
Fix a variety of spelling and format mistakes to improve the ease of reading the tags programatically. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-23zlib: Pass pre-calculate uname enable re-entrant flagsKhem Raj
Fix ptest generation Signed-off-by: Khem Raj <raj.khem@gmail.com>
2017-06-23libxml2: Revert "Add an XML_PARSE_NOXXE flag to block all entities loading ↵Andrej Valek
even local" The new flag doesn't work and the change even broke the XML_PARSE_NONET option. Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
2017-06-23libxml2: Fix CVE-2017-0663Andrej Valek
Fix type confusion in xmlValidateOneNamespace Comment out code that casts xmlNsPtr to xmlAttrPtr. ID types on namespace declarations make no practical sense anyway. Fixes bug 780228 CVE: CVE-2017-0663 Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
2017-06-23libxml2: Fix CVE-2017-5969Andrej Valek
Fix NULL pointer deref in xmlDumpElementContent Can only be triggered in recovery mode. Fixes bug 758422 CVE: CVE-2017-5969 Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
2017-06-23libxml2: Fix CVE-2017-9049 and CVE-2017-9050Andrej Valek
Fix handling of parameter-entity references There were two bugs where parameter-entity references could lead to an unexpected change of the input buffer in xmlParseNameComplex and xmlDictLookup being called with an invalid pointer. Fixes bug 781205 and bug 781361 CVE: CVE-2017-9049 CVE-2017-9050 Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
2017-06-23libxml2: Fix CVE-2017-9047 and CVE-2017-9048Andrej Valek
xmlSnprintfElementContent failed to correctly check the available buffer space in two locations. Fixes bug 781333 and bug 781701 CVE: CVE-2017-9047 CVE-2017-9048 Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
2017-06-23libxml2: Avoid reparsing and simplify control flow in xmlParseStartTag2Andrej Valek
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
2017-06-23libxml2: Disable LeakSanitizer when running API testsAndrej Valek
Makefile.am: Disable LeakSanitizer when running API tests The autogenerated API tests leak memory. Upstream-Status: Backported - [https://git.gnome.org/browse/libxml2/commit/?id=ac9a4560ee85b18811ff8ab7791ddfff7b144b0a] Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
2017-06-23util-linux: upgrade to 2.30Denys Dmytriyenko
Drop uuid-test-error-api.patch as it's been fixed upstream differently: https://github.com/karelzak/util-linux/commit/b770b487004778f4425639c7ed1bb6ca22d157bf Drop ptest for tailf, as it got deprecated and removed: https://github.com/karelzak/util-linux/commit/70ca1a77721b41f2355eeb00d4e55e13dba3e313 Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-16meta: Remove further uclibc remnants (inc. patches and site files)Richard Purdie
Some of these are clearly dead, e.g. one binutils patch reverts the effects of the earlier one. This also removes the uclibc site files. We now have mechanisms to allow these to be extended from another layer should someone ever wish to do that. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-16meta: Drop remnants of uclibc supportRichard Purdie
uclibc support was removed a while ago and musl works much better. Start to remove the various overrides and patches related to uclibc which are no longer needed. uclibc support in a layer would still be possible. I have strong reasons to believe nobody is still using uclibc since patches are missing and I doubt the metadata even parses anymore. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-16ovmf: fix secureboot PACKAGECONFIG + OpenSSL updatePatrick Ohly
The recent ovmf update broke secureboot because upstream changed the way how openssl gets compiled into ovmf. It's now integrated directly into the ovmf build process, without having to patch it first. In addition, more recent OpenSSL releases are supported. 1.1.0e was explicitly mentioned in the ovmf commits and because the current 1.1.0f only has minor build enhancements, 1.1.0e is used here. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14systemd: enable resolved and networkdMaxin B. John
Enable systemd-resolved and systemd-networkd by default. Make it co-exist with connman and Fix associated problems in read-only rootfs. Fixes [YOCTO #11331] Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-14ovmf: Update to latestKhem Raj
Fix build with gcc7 clang can not compile it therefore mark it gcc only recipe Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2017-06-14busybox: changes to support merged /usrAmarnath Valluri
Most of the shell scripts refer to /bin/sh inside the script. When 'usrmege' feature is enabled, this path would be /usr/bin/sh. Hence, to satisfy build dependency add '/bin/sh' to it's providers list. Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-06-12libxml2: Make ptest run the Python tests if Python support is enabledPeter Kjellerstedt
Since we go through the trouble of copying the Python tests, we may as well actually run them... This also avoids the following QA issue: ERROR: libxml2-2.9.4-r0 do_package_qa: QA Issue: /usr/lib/libxml2/ptest/python/tests/push.py contained in package libxml2-ptest requires /usr/bin/python, but no providers found in RDEPENDS_libxml2-ptest? [file-rdeps] Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>