summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2021-02-26bluez5: upgrade 5.55 -> 5.56Wang Mingyu
-License-Update: remove the description of license from src/main.c Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26asciidoc: Switch to using the main branchPeter Kjellerstedt
Upstream has renamed the "master" branch to "main". Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26maintainers: add entries libssh2 libgit2Richard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26libgit2: pull in updates from meta-oeRandy MacLeod
d62613046 libgit2: update to 1.1.0 ce47a064d libgit2: upgrade 1.0.0 -> 1.0.1 7d137c5b2 libgit2: Enable pcre2 regexp backend 14894a4c4 libgit2: Update to v1.0.0 7b39ea059 libgit2: Upgrade to 0.28.4 da358cf1f libgit2: Don't pass parameters with their default values to cmake bcd89f7cd libgit2: Upgrade 0.27.9 -> 0.28.3 87c9da253 libgit2: Upgrade 0.27.8 -> 0.27.9 Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26libssh2: pull in additional commits from meta-oeRandy MacLeod
b24ef04ae libssh2: Fix build with autoconf 2.70+ d7aa71734 libssh2: enhance ptest b3e9b51c9 libssh2: fix ptest f5df715e2 libssh2: enable ptest c1d1697c5 libssh2: add nativesdk support 3a6cbf246 libssh2: Security Advisory - libssh2 - CVE-2019-17498 40ea4c939 libssh2: upgrade 1.8.2 -> 1.9.0 5a7e65cbf libssh2: Clarify BSD license variant Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26Add libgit2, libssh2 from meta-oe for rustRandy MacLeod
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26sstatesig.py: show an error instead of warning when sstate manifest isn't foundMartin Jansa
* not sure if there are some valid use-cases for missing manifest, but recently I'm seeing increasing number of build failures where something from native recipe is missing (seen it with pseudo, autoconf, nodejs recently) and the only indication that something is wrong (before showing sometimes misleading error like: recipe-sysroot-native/usr/bin/node: No such file or directory is this warning: NOTE: Running task 7844 of 12431 (/meta-oe/meta-oe/recipes-devtools/nodejs/nodejs_12.20.2.bb:do_prepare_recipe_sysroot) NOTE: recipe nodejs-12.20.2-r0: task do_prepare_recipe_sysroot: Started WARNING: nodejs-12.20.2-r0 do_prepare_recipe_sysroot: Manifest /BUILD/sstate-control/manifest-x86_64_ubuntu-18.04-nodejs-native.populate_sysroot not found in x86_64 x86_64_ubuntu-18.04 (variant '')? NOTE: Running task 7845 of 12431 (/meta-oe/meta-oe/recipes-devtools/nodejs/nodejs_12.20.2.bb:do_unpack) NOTE: recipe nodejs-12.20.2-r0: task do_unpack: Started WARNING: nodejs-12.20.2-r0 do_prepare_recipe_sysroot: Manifest /BUILD/sstate-control/manifest-x86_64_ubuntu-18.04-nodejs-native.populate_sysroot not found in x86_64 x86_64_ubuntu-18.04 (variant '')? NOTE: recipe nodejs-12.20.2-r0: task do_prepare_recipe_sysroot: Succeeded if I rebuild that native dependency, then it gets fixed and I don't see these failures in clean builds (as without sstate and with empty TMPDIR), only in incremental builds * but if there isn't valid reason for missing manifest file, then I think it would be better to error early (or even bb.fatal()) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26wpa-supplicant: fix CVE-2021-0326Stefan Ghinea
In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9 Android ID: A-172937525 References: https://nvd.nist.gov/vuln/detail/CVE-2021-0326 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e<links_for_CVE_patches> Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26oe-selftests: add rpm to reproducible build selftestJan-Simon Möller
rpm packaging has shown good numbers wrt reproducible builds as well when testing core-image-minimal locally: Reproducibility summary for rpm: same=4671 different=0 missing=0 total=4671 Thus enable it in the autobuilder to be more widely tested. (From OE-Core rev: 84d3a90557444d8cd83d780b1c3f2b278ab07af2) Signed-off-by: Jan-Simon Möller <jsmoeller@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26reproduce: Fix exclusion list for rpmRichard Purdie
rpm uses "XXX-VERSION" compared to deb/ipk which use "XXX_VERSION" which breaks the go package exclusion. Work around with both go_ and go- for now. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26fonts: Bump HASHEQUIV_HASH_VERSION after rpmdeps changeRichard Purdie
After the rpmdeps change, the output didn't change in the correct case and hence hashes were cross-linked. We bump the hashequiv version to avoid problems from this. Also bump PR to force a rebuild. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26package/package_rpm: Disable font_provides configuration for reproducibiltyRichard Purdie
The host may or may not have fc-cache which is used for find provides information by rpmdeps. This lead to non-deterministic build output. Disable the font provides code so we have deterministic builds, we have nothing using/relying on it at this point. Need to disable this in both the rpmdeps code and in package_rpm itself although the latter shouldn't be being used. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26go-helloworld: Turn into a go module enabled buildKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26go: Enable CGO and pie buildmode on rv64Khem Raj
go1.16 has added CGO support for riscv64 arch Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26go: Upgrade compiler to 1.16 major releaseKhem Raj
Revert a CC/CXX check [1] which wont work with OE settings Forward port needed patches forward Details releaase notes are here [2] [1] https://go-review.googlesource.com/c/go/+/228517/ [2] https://golang.org/doc/go1.16 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26goarch: Use softfloat instead of 387 for 386 goarchKhem Raj
387 has been removed from go 1.16 see [1] [1] https://github.com/golang/go/issues/40255 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26selftest: Replace building dep tool with direnvKhem Raj
dep tool is now deprecated and its replaced with go modules so using this as sample for testing is also getting arcane. Replace it with another project direnv[1] which is quite active and uptodate [1] https://github.com/direnv/direnv Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-24diffoscope: Ensure rpm is configured correctlyRichard Purdie
diffoscope was failing as rpm wasn't configured correctly. Fix this. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-24selftest/reproducible: Remove exclusions for recipes which now reproduceRichard Purdie
git, libproxy, libcap-ng(-python), babeltrace2, rsync and groff have their reproducibility issues fixed, remove from the exclusion list. Also fix whitespace. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-24bitbake.conf: Introduce FAKEROOTLOGS variable used by bitbake to print ↵Tomasz Dziendzielski
pseudo.log Bitbake depends on this variable while looking for pseudo.log file in case of fakeroot task failure. Signed-off-by: Tomasz Dziendzielski <tomasz.dziendzielski@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-24diffoscope: Add python3-rpm as dependencyJoshua Watt
The python3-rpm package is required for diffoscope to diff RPM packages Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-24reproducible: Improve SOURCE_DATE_EPOCH_FALLBACK handlingRichard Purdie
Ensure the fallback value if used is written to the SDE file and hence stored in sstate, reducing any confusion within the code over '0' values. Bump the HASHEQUIV_VERSION since we've had a ton of trouble with ensuring this rolls out correctly on the autobuilder so others may too, take a clean slate for it. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-24reproducible_builds: SOURCE_DATE_EPOCH should not be 0Jan-Simon Möller
A SOURCE_DATE_EPOCH of 0 might be misinterpreted by namely rpm as no SDE. e.g.: char *srcdate = getenv(SOURCE_DATE_EPOCH); if (srcdate && rpmExpandNumeric(%{?clamp_mtime_to_source_date_epoch})) Solve this by: - providing a SOURCE_DATE_EPOCH_FALLBACK variable != 0 - changing defaults to use it - using SOURCE_DATE_EPOCH_FALLBACK also when reading 0 out of sstate-cache Signed-off-by: Jan-Simon Möller <jsmoeller@linuxfoundation.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23babeltrace2: Fix reproducibilityRichard Purdie
babeltrace2-ptest was referencing the host's python version in it's makefiles. Whilst this could be fixed, its easier to correct the python version being found to the target one which works much more effectively and solves the issue. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23diffoscope: Ensure the correct magic file is usedRichard Purdie
diffoscope uses libmagic and it was searching in file-native's sysroot for the magic file. Wrap it and set MAGIC in the environment to ensure the file is found correctly and avoid build failures. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23report-error.bbclass: Add layer and bitbake version info to error reportMilan Shah
Instead of just providing local.conf info, add layer names and their revisions with bitbake version information into error report makes it easier to understand and reproduce failed build. [YOCTO #9700] Signed-off-by: Milan Shah <mshah@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23kernel-fitimage: Don't use unit addresses on FITKlaus Heinrich Kiwi
Das U-Boot 2021.4-rc1 has the following commit: commit 3f04db891a353f4b127ed57279279f851c6b4917 Author: Simon Glass <sjg@chromium.org> Date: Mon Feb 15 17:08:12 2021 -0700 image: Check for unit addresses in FITs Using unit addresses in a FIT is a security risk. Add a check for this and disallow it. CVE-2021-27138 Adjust the kernel-fitimage.bbclass accordingly to not use unit addresses. This changte is required before we can bump U-Boot to 2021.4. Signed-off-by: Klaus Heinrich Kiwi <klaus@linux.vnet.ibm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23grub: shuffle packaging for aarch64 buildsRoss Burton
Even in grub-efi platforms we need to build grub for the the common tools. On x86 this isn't a problem because grub builds legacy boot and grub-efi builds EFI, but on aarch64 there is no legacy boot supported by grub. To ensure that the common tools are built the grub recipe also builds EFI binaries, but this now means that grub and grub-efi ship the same binaries. oe-core 933286 fixed this conflict by deleting the binaries from grub-efi and putting the aarch64 modules into grub-common (relying on dependencies to pull grub-common in). This seems backwards: grub-efi no longer contains the binaries and they're in different packages on arm or x86. Also, SDK generation is broken as the grub package itself is now empty as the binaries are in grub-common. Resolve all of these issues by reversing the logic: grub-efi is the package which holds the EFI binaries on all platforms. grub only builds for EFI on aarch64 as a way to build the common binaries, so delete them in that recipe to avoid conflicts. And finally as the grub recipe is empty on aarch64 but needed by dependencies, set ALLOW_EMPTY. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23python3: Fix python interpreter line length for nativesdkMingli Yu
Make sure the python interpreter is "#!/usr/bin/env python3" for nativesdk to avoid the shebang path exceeding the limit when install the sdk under the directory with long path. Before: $ cd ${target_sdk_dir} $ vi ./sysroots/x86_64-oesdk-linux/usr/bin/2to3 #!${target_sdk_dir}/sysroots/${SDK_SYS}/usr/bin/python3.9 [snip] After: $ cd ${target_sdk_dir} $ vi ./sysroots/x86_64-oesdk-linux/usr/bin/2to3 #!/usr/bin/env python3 [snip] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23screen: fix CVE-2021-26937Scott Murray
Apply patch from Debian to fix CVE-2021-26937. Signed-off-by: Scott Murray <scott.murray@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23conf/machine-sdk: Add ppc64le SDK machineJoel Stanley
Previously SDKMACHINE would default to x86_64. Commit 539cd4a5fbb9 ("bitbake.conf: default SDKMACHINE to the build host architecture") changed it to default to the build machine, causing the build to fail on a ppc64le host. Reported-by: Andrew Geissler <geissonator@yahoo.com> Link: https://www.mail-archive.com/yocto@lists.yoctoproject.org/msg04364.html Signed-off-by: Joel Stanley <joel@jms.id.au> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23libpcre: Drop old/stale patchRichard Purdie
According to my tests this incorrect symbols resolution at runtime no longer happens. Ubuntu is still carrying the patch but also probably doesn't need to, they are also on a much older version. It sounds like there was once a linkage bug somewhere which has likely been resolved since. Drop the patch as it doesn't seem needed anymore. If it were a real issue it should be submitted upstream too, the status is incorrect. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23ca-certificates: Clean up two patches and submit upstreamRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23libevdev: Update patch status to backportRichard Purdie
The patch was submitted and merged upstream. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23libcap-ng: Replace python patch with a better fixRichard Purdie
By using the python3targetconfig class we can drop the existing python patch and the extra make parameters. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23libcap-ng: Fix python bindings determinism issueRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23rsync: Fix group name determinism issueRichard Purdie
configure falls back to inspecting the host#s /etc/group for the nobody/nogroup naming. Pass the correct value to configure to ensure host differences don't sneak in. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23rsync: Fix a file sorting determinism issueRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23libproxy: Avoid /etc/sysconfig determinism issueRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23tune-power9: Enable qemu-usermodeKhem Raj
With latest qemu it works ok Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23glibc: Build for power9 cpu when using powerpc64le tunesKhem Raj
This makes sure that we can compile glibc for powerp9 based machines irrespective of endianness or bitness Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23bitbake.conf: Do not use lib64 for baselib on musl/ppc64Khem Raj
musl is configured to use /lib and /usr/lib for ppc64 unlike glibc where it is expected to have libs in /lib64 and /usr/lib64 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23goarch.bbclass: Fix ppc64le detectionKhem Raj
ppc64le should go above ppc64 in checks otherwise it gets subsumed wrongly with ppc64 check Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23musl: Install /lib directoryKhem Raj
loader is installed into /lib and ${base_libdir} may not be always pointing to /lib, while here we want to create the directory where ldso will reside Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23linuxloader: Deal with little-endian ppc64 ldso nameKhem Raj
On ppc64le 'le' should be appended to ldso name Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23runqemu: Add new option to disable vga emulationKhem Raj
When using nographic, explicitly disabling vga is needed some cases since some qemu firmware (OpenFirmware ) defaults to std vga, and when vga is enabled then it disables output to serial and redirects that to vga which is by design, hwoever we expect the console output to go to serial when using nographic, therefore its important to disable vga with nographic especially on qemu based ppc platforms Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23systemd: Fix importd requirements commentVivien Didelot
The comment above the importd config states curl, which does not exist in PACKAGECONFIG. Adding it results in the following error (and then misleading compilation failures): WARNING: systemd-1_244.5-r0 do_configure: QA Issue: systemd: invalid PACKAGECONFIG: curl [invalid-packageconfig] Support for curl is currently enabled through journal-upload: PACKAGECONFIG[journal-upload] = "-Dlibcurl=true,-Dlibcurl=false,curl" While it might be more appropriate to deprecate "journal-upload" in favor of a "curl" PACKAGECONFIG entry, simply fix the importd comment for now by stating upload-journal instead of curl. Signed-off-by: Vivien Didelot <vdidelot@pbsc.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23python3-magic: upgrade 0.4.18 -> 0.4.20Richard Purdie
License changed as there was additional copyright information added but the underlying license did not change. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23apt: Upgrade 1.8.2.1 -> 1.8.2.2Richard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23python3-pycryptodome/pycryptodomex: upgrade 3.9.9 -> 3.10.1Richard Purdie
The license file dropped the APL-2 pieces but this wasn't in LICENSE in the first place, no code seemed to refer to it so no change was needed. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>