summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2018-02-16utils.py: add parallel make helpersJoshua Watt
The code to extract the integer number of parallel build threads and construct a new argument from them has started to be copied in multiple locations, so create two new helper utilities to aid recipes. The first helper (parallel_make()) extracts the integer number of parallel build threads from PARALLEL_MAKE. The second (parallel_make_argument()) does the same and then puts the result back into a format string, optionally clamping it to some maximum value. Additionally, rework the oe-core recipes that were manually doing this to use the new helper utilities. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-16gstreamer: set CVE_PRODUCTRoss Burton
The CVE database stores all GStreamer issues under the catch-all product 'gstreamer', which none of our recipes match. Set CVE_PRODUCT to 'gstreamer' in the core library: this isn't ideal but is far better than not scanning for any. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16classes: don't scan for CVEs in images or packagegroupsRoss Burton
There's no point even looking in the database for these, so unset CVE_PRODUCT. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16db: set correct product and version for CVE matchesRoss Burton
We may ship db 5.3.28, but the CVE database knows this as oracle_berkeley_db 11.2.5.3.28. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16cve-check: short-circuit checking if CVE_PRODUCT isn't setRoss Burton
For some recipes is is meaningless to do a CVE check, for example packagegroups or images. Check that CVE_PRODUCT is set and short-circuit the scan if it isn't. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16cve-check: allow recipes to override their versionRoss Burton
For reasons which I don't understand, the Berkeley DB tarball is version 5.3.28 but in CVE reports the version is 11.2.5.3.28. To handle this allow recipes to override their version as well as their name. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16cve-check: put log in T so it doesn't get deleted by rm_workRoss Burton
This is where the other task logs go, so it's a sensible place to put it. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16distrodata: remove redudant *all tasks now that --runall works correctlyRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16archiver: remove deploy_all_archives task as --runall replaces itRoss Burton
2018-02-16coreutils: fix hostname conflict with other packagesChen Qi
The hostname utility is also provided by busybox and net-tools. So use alternatives mechanism to manage it in coreutils. Make its priority higher than busybox. As hostname is not built by default for coreutils, we make its priority lower than net-tools. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16initramfs-framework: rootfs: add support for LABELRicardo Salveti
The rootfs can also be found via the partition label. Signed-off-by: Ricardo Salveti <ricardo@opensourcefoundries.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16libepoxy: Define MESA_EGL_NO_X11_HEADERS when GLX is disabledKhem Raj
This helps when libepoxy is compiled with egl but glx is disabled it also depends on GL implementation provided eglplatform.h to be using MESA_EGL_NO_X11_HEADERS to exclude X11 headers, e.g. mesa, mali-userland implementations use this define to exclude x11 headers Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16bmap-tools: change SRC_URI to use tarball insteadChang Rebecca Swee Fun
Tarball sources can be checksummed and are faster to download. Added UPSTREAM_CHECK_URI to improve recipe maintenance and to verify upstream version check is still work. Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.chang@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16maintainers.inc: change ownership for bmap-tools and wic-toolsChang Rebecca Swee Fun
Signed-off-by: Chang Rebecca Swee Fun <rebecca.swee.fun.chang@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16python-numpy: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16go: fix upstream version checkAlexander Kanavin
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16puzzles: Fix warnings seen with clang 6.0Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16packagegroup-base: don't force libacpi to be installed in packagegroup-base-acpiRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16packagegroup-core-full-cmdline: remove libraries from the system-services groupRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16qemu: fix CVE-2017-15124Ross Burton
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host. Backport a series of patches from upstream to resolve this. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16pakagegroups: don't pull in sysfsutilsRoss Burton
sysfsutils is unmaintained and generally not needed. Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16iputils: add missing Upstream-Status to patchAlexander Kanavin
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16p11-kit: take source code from official gitAlexander Kanavin
The previous tarball URI seems to be gone. Also, adjust a few things to make it actually build; handling autotools-based projects from git checkouts is always harder than taking them from tarballs :-( Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16epiphany: update to 3.26.5.1Alexander Kanavin
Upstream has replaced autotools with meson, so the recipe has been adjusted accordingly. 0001-bookmarks-Check-for-return-value-of-fread.patch deleted as the file was completely refactored 0001-yelp.m4-drop-the-check-for-itstool.patch replaced with a patch for meson equivalent Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16kernel: Fix QA buildpaths warning for kernel modulesHe Zhe
CFLAGS is unset during kernel_do_compile and thus the default build path substitutions in DEBUG_PREFIX_MAP are missing. To enhance reproducible build for kernel modules, such as lttng-modules and cryptodev-module, this patch appends them, plus substitution of STAGING_KERNEL_DIR, to KERNEL_CC. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16libva-utils: upgrade to 2.0.0Anuj Mittal
Major changes: * Add option '--device <device>' to vainfo * Add vp9enc for VP9 encoding * Add vavpp for video processing * Add FEI gtest cases * Fix segmentation fault in putsurface_wayland * Fix GCC 7.1.1 warnings/errors * Fix libva version printed out by vainfo Updated recipe to point to release tarball instead of git. Also, updated github URLs to point to renamed Intel repository. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16libva: upgrade to 2.0.0Anuj Mittal
libva 2.0 bumps the VA-API version to 1.0.0 and deletes egl and tpi backends. The header files va_egl.h and va_tpi.h are still packaged in -dev to ensure packages that still use them don't fail. Major changes: * Bump VA-API version to 1.0.0 * Add new API for H264 FEI support * Add definition of VA_FOURCC_I420 * Add functions for converting common enums to strings * Deprecate H.264 baseline profile and FMO support * Deprecate packed misc packed header flag * Delete libva-tpi and libva-egl backends * Refine VASliceParameterBufferHEVC, VAEncMiscParameterBuffer * Fix errors in VAConfigAttribValEncROI, VAEncMacroblockParameterBufferH264 * Fix race condition in wayland support * Rename vaMessageCallback to VAMessageCallback * Make logging callbacks library-safe Updated recipe to point to release tarball instead of git. Also, updated the github URLs to point to renamed Intel repository. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16usbutils: Split out lsusb.pyMartin Hundebøll
The pretty-printing "lsusb.py" script shipped by usbutils is currently useless, as it doesn't runtime depend on python, and has unversioned python in the shebang. Avoid adding a python dependency to current configurations with usbutils buy splitting lsusb.py into a usbutils-python package, and make it runtime depend on python3-core. Make the script usable by replacing the shebang with a direct call to ${bindir}/python3. Signed-off-by: Martin Hundebøll <mnhu@prevas.dk> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16maintainers.inc: update ownershipAnuj Mittal
I propose to take over gstreamer stack and x264. Remove libav entry since the recipe was removed from oe-core. Change ownership of libva* since Wei Tee is no longer working on oe-core. Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16ccache: 3.3.4 -> 3.3.5Robert Yang
The LIC_FILES_CHKSUM is changed because of year updated, the contents are the same. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16kbd-ptest: improve reproducibilityHongxu Jia
Remove remaining build host references of ptest's Makefile. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16python-core/python-dev: improve reproducibilityHongxu Jia
- Remove remaining build host references from packaged files. (sync with python3) - Use relative path to recompile _sysconfigdata.py Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16python3: Fix python3-logging dependenciesTomasz Meresiński
python3-logging depends on python3-netserver (logging/config.py:42) Signed-off-by: Tomasz Meresiński<tomasz.meresinski@comarch.pl> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16python3-core: improve reproducibilityHongxu Jia
Since modify _sysconfigdata.py to improve reproducibility, its pyo files should be recompiled. Remove remaining build host references of python3.5m-config Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16apt-native: Add libapt-pkg headersJan Siegmund
Native tools were not able to use the headers of apt-pkg. This patch adds the feature. The headers were added from apt-pkg and apt-inst to the native recipe. The shipped headers match the ones in the Ubuntu package libapt-pkg-dev. Signed-off-by: Jan Siegmund <jsiegmund@arri.de> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16libacpi: update libacpi_fix_for_x32.patch to use libdirRicardo Salveti
Prefix plus base_libdir generates an invalid path when building with usrmerge, so change libacpi_fix_for_x32.patch to use libdir instead as it provides the right path in both cases. Signed-off-by: Ricardo Salveti <ricardo@opensourcefoundries.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-16oe-pkgdata-util: add --long option to list-pkg-files to show sizesRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-15pigz: use maintainer-built tarballsRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-15pigz: pigz is not gzipRoss Burton
Whilst pigz is effectively a parallel gzip, the command line arguments are not the same so pigz isn't a drop-in replacement for gzip. [ YOCTO #12139 ] [ YOCTO #12410 ] Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-15expat: remove old workaround for expat tarballRoss Burton
Back in 2010 the expat 2.0.1 tarball wouldn't unpack correctly with old gzip releases (prior to 1.4). The fix was to explicitly depend on gzip-native to use our binary instead of the host[1]. We don't ship expat 2.0.1 anymore, and even Centos 7 ships gzip 1.5, so this workaround can be removed. [1] oe-core 0ff62b0462f3f64672bd4704de9a192eb1a730d1 Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-15expat: merge bb and incRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com>
2018-02-15elfutils: Use fallthrough attributeJoshua Watt
Patches elfutils to use the fallthrough attribute instead of comments to satisfy the -Wimplicit-fallthrough warning. Using comments is insufficient when compiling remotely with Icecream because the file gets pre-processed locally, removing the comments Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15icecc-toolchain: Disable caret workaroundJoshua Watt
Icecream has a behavior that causes it to recompile files locally if gcc generates any warnings or errors. The reason for this is that GCC tries to re-read the input file in order to display the offending line with a caret below it, which doesn't work in the remote chroot. Default to disabling this this workaround and add -fno-diagnostics-show-caret to the GCC flags so that errors and warnings generated by GCC do not show erroneous results. Users can override this default in the SDK by defining ICECC_CARET_WORKAROUND="1" either before or after sourcing the SDK environment. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15icecc.bbclass: Disable caret workaround by defaultJoshua Watt
Icecream has a behavior that causes it to recompile files locally if gcc generates any warnings or errors. The reason for this is that GCC tries to re-read the input file in order to display the offending line with a caret below it, which doesn't work in the remote chroot. Default to disabling this this workaround and add -fno-diagnostics-show-caret to the GCC flags so that errors and warnings generated by GCC do not show erroneous results. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15icecc.bbclass: Add Icecream support to SDKJoshua Watt
If icecc is inherited, generated SDKs will automatically have optional support for compiling using the Icecream distributed compiler Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15icecc-toolchain: Add SDK icecream setupJoshua Watt
Icecream can now be optionally included in the generated SDK by including nativesdk-icecc-toolchain to TOOLCHAIN_HOST_TASK. When the SDK is installed a post-relocation script will check if icecc exists and if so will generate the toolchain environment. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15toolchain-shar-extract: Add post-relocate scriptsJoshua Watt
Recipes can now install post-relocation scripts which will be run when the SDK is installed. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15icecc-create-env: Allow multiple tool aliasesJoshua Watt
When files are added to the environment, multiple aliases can be given for the file (by calling add_path multiple times with a second argument). All of these names will end up with a symlink to the original file. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15icecc-create-env: Add support for nativesdkJoshua Watt
icecc-create-env can now be built as a nativesdk recipe, allowing the script to be included as part of an SDK Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-15icecc-create-env: Fix executable rpathsJoshua Watt
Executables in the toolchain archive occasionally contain runtime library search paths (RPATH) that use the $ORIGIN placeholder. However, in order for that placeholder to work, /proc must be mounted. When iceccd executes the toolchain in the chroot environment, it doesn't mount /proc, so it is unable to resolve $ORIGIN resulting in a failure to find dynamic libraries. The fix is to replace $ORIGIN in executable RPATH entries with the known chroot executable path. In order for this to work, the actual real path to the executable must be resolved to remove any symlinks, otherwise the calculate $ORIGIN replacement will be wrong. This is done by using "readlink -f", which is an acceptable dependency because Yocto already requires it. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>