[meta-security][PATCH 1/4] libseccomp: fix ptest failures.
Fixes:
BusyBox v1.32.0 () multi-call binary. Usage: dd [if=FILE] [of=FILE] [bs=N] [count=N] [skip=N] Don't use Busybox dd, not compatable. Use coreutils Signed-off-by: Armin Kuster <akuster808@gmail.com> --- recipes-security/libseccomp/libseccomp_2.5.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/libseccomp/libseccomp_2.5.0.bb b/recipes-security/libseccomp/libseccomp_2.5.0.bb index 35365d5..0cf2d70 100644 --- a/recipes-security/libseccomp/libseccomp_2.5.0.bb +++ b/recipes-security/libseccomp/libseccomp_2.5.0.bb @@ -45,4 +45,4 @@ do_install_ptest() { FILES_${PN} = "${bindir} ${libdir}/${BPN}.so*" FILES_${PN}-dbg += "${libdir}/${PN}/tests/.debug/* ${libdir}/${PN}/tools/.debug" -RDEPENDS_${PN}-ptest = "bash" +RDEPENDS_${PN}-ptest = "coreutils bash" -- 2.17.1
|
|
Re: [meta-security][zeus][PATCH 1/1] clamav: add INSTALL_CLAMAV_CVD flag to do_install
Charlie Davies
Hi Armin,
A reminder that this patch is waiting to be signed off. Many Thanks, Charlie
|
|
Monsees, Steven C (US)
Thanks...
toggle quoted messageShow quoted text
Yesterday I decided to go with ntpq/ntpdate/and a ntpstat script which does some basic stats through ntpd/ntpq/ntpdate and Chrony. We will see how it goes might be enough... Steve
-----Original Message-----
From: Khem Raj [mailto:raj.khem@gmail.com] Sent: Wednesday, September 30, 2020 1:15 AM To: Monsees, Steven C (US) <steven.monsees@baesystems.com> Cc: yocto@lists.yoctoproject.org Subject: Re: [yocto] #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image *** WARNING *** EXTERNAL EMAIL -- This message originates from outside our organization. what all functionality are you looking for. E.g. there is date utility and hwclock utility which can help you manipulate system time. you could also look into ntpd and/or chrony for Network time setting etc. On Tue, Sep 29, 2020 at 11:05 AM Monsees, Steven C (US) via lists.yoctoproject.org <steven.monsees=baesystems.com@lists.yoctoproject.org> wrote:
|
|
Warrior uninative
Anders Montonen
Hi,
The checksum of <https://downloads.yoctoproject.org/releases/uninative/2.7/x86_64-nativesdk-libc.tar.xz> doesn’t match what’s specified in yocto-uninative.inc. The actual checksum seems to match an older commit, so at least there’s nothing untowards going on. I realize that the Warrior branch is officially EOL, but I still think this should be fixed. Regards, Anders Montonen
|
|
development package in rootfs
Marek Belisko
Hi,
I'm facing some strange issue that after my image rebuild I see in do_rootfs log that the -dev package of some go application is installed. Which is not what I want and I'm not sure how it get to rootfs because I don't have explicitly set -dev package. Any ideas how to debug it? I'm using rocko poky release. Thanks and BR, marek -- as simple and primitive as possible ------------------------------------------------- Marek Belisko - OPEN-NANDRA Freelance Developer Ruska Nova Ves 219 | Presov, 08005 Slovak Republic Tel: +421 915 052 184 skype: marekwhite twitter: #opennandra web: http://open-nandra.com
|
|
Zoran
Is there documentation on how to set this up ?Please, try this: https://github.com/ZoranStojsavljevic/bbb-yocto/blob/master/bbb-releases/bbb-dunfell/local.conf This is the systemd addendum in my BBB Dunfell local.conf : ## Add systemd service DISTRO_FEATURES_BACKFILL_CONSIDERED += "sysvinit" VIRTUAL-RUNTIME_init_manager = "systemd" VIRTUAL-RUNTIME_dev_manager = "systemd" VIRTUAL-RUNTIME_initscripts = "" With systemd added, you'll inherit timedatectl tool. Best Regards, Zoran _______ On Tue, Sep 29, 2020 at 5:57 PM Monsees, Steven C (US) via lists.yoctoproject.org <steven.monsees=baesystems.com@lists.yoctoproject.org> wrote:
|
|
Kernel panic after failing to load libssl.so.1.0.0
#kernel
aravind.chittapur@...
I have patched busybox httpd with open ssl APIs to support https. I have patched Makefile.flags to include opessl library as below.
------------------------------------- --- busybox-1.23.2/Makefile.flags 2020-05-25 13:52:54.424147022 +0200
+++ busybox-1.23.2/Makefile_edit.flags 2020-05-25 14:18:23.328520511 +0200
@@ -126,6 +126,10 @@
LDLIBS += m
endif
+# Openssl Library
+#LDLIBS += openssl
+LDLIBS += m ssl
+
ifeq ($(CONFIG_PAM),y)
# libpam uses libpthread, so for static builds busybox must be linked to
# libpthread. On some platforms that requires an explicit -lpthread, so -------------------------------------------------------- I am able to rebake busybox without any errors. I tested the https functionality by pushing the busybox binary using adb to the /data/ folder. When I flash the firmware image to the board, while booting the kernel I get the following error. "/bin/sh: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory" After this Kernel panic happens. libssl.so.1.0.0 is present in /usr/lib. I don't why it fails to load. I need help in resolving this problem. Thanks, Aravind
|
|
what all functionality are you looking for. E.g. there is date utility
toggle quoted messageShow quoted text
and hwclock utility which can help you manipulate system time. you could also look into ntpd and/or chrony for Network time setting etc. On Tue, Sep 29, 2020 at 11:05 AM Monsees, Steven C (US) via lists.yoctoproject.org <steven.monsees=baesystems.com@lists.yoctoproject.org> wrote:
|
|
OpenEmbedded Happy Hour September 30 9pm/2100 UTC
Denys Dmytriyenko
Just a reminder about our upcoming OpenEmbedded Happy Hour on September 30 for
Oceania/Asia timezones @ 2100/9pm UTC (5pm EDT): https://www.openembedded.org/wiki/Calendar https://www.timeanddate.com/worldclock/fixedtime.html?msg=OpenEmbedded+Happy+Hour+September+30&iso=20200930T21 -- Denys
|
|
[PATCH yocto-autobuilder-helper] config.json: QAMAIL_CC => qa-build-notification
Tim Orling
From: Tim Orling <timothy.t.orling@linux.intel.com>
Replace the hard-coded individual email addresses with the mailing list created for this purpose: qa-build-notification@lists.yoctoproject.org Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> --- config.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config.json b/config.json index 9d66d48..d65c0f4 100644 --- a/config.json +++ b/config.json @@ -16,7 +16,7 @@ "TRASH_DIR" : "${BASE_HOMEDIR}/git/trash", "QAMAIL_TO" : "yocto@lists.yoctoproject.org", - "QAMAIL_CC" : "otavio@ossystems.com.br, yi.zhao@windriver.com, apoorv.sangal@intel.com, ee.peng.yeoh@intel.com, aaron.chun.yew.chan@intel.com, richard.purdie@linuxfoundation.org, akuster808@gmail.com, sjolley.yp.pm@gmail.com, sangeeta.jain@intel.com", + "QAMAIL_CC" : "qa-build-notification@lists.yoctoproject.org", "WEBPUBLISH_DIR" : "${BASE_SHAREDDIR}/", "WEBPUBLISH_URL" : "https://autobuilder.yocto.io/";, -- 2.25.0
|
|
Yocto Technical Team Minutes, Engineering Sync, for September 29, 2020
Trevor Woerner
Yocto Technical Team Minutes, Engineering Sync, for September 29, 2020
archive: https://docs.google.com/document/d/1ly8nyhO14kDNnFcW2QskANXW3ZT7QwKC5wWVDg9dDH4/edit == disclaimer == Best efforts are made to ensure the below is accurate and valid. However, errors sometimes happen. If any errors or omissions are found, please feel free to reply to this email with any corrections. == attendees == Trevor Woerner, Stephen Jolly, Saul Wold, Armin Kuster, Richard Purdie, Bruce Ashfield, Jon Mason, Michael Halstead, David Reyna, Jeremy Puhlman, Jan-Simon Möller, Ross Burton, Paul Barker, Scott Murray, Tim Orling, Steve Sakoman, Randy MacLeod, <phone-in>, Alejandro H == notes == - M3-rc2 through QA, release for later this week - 3.1.3 in QA, release Thur or Fri this week - more AB issues resolved, but many remain - --x corruption in pseudo, probably undetected in many cases == general == RP: 2 of 5 bugs fixed against M3-rc1, so we’re ready to move on RP: the pseudo issue explains strange bugs we’ve seen over the years Randy: any solutions? RP: seems worrying, Peter thinks it should abort. with the aborts it only gets through 2-3 tasks before aborting PaulB: can we do something when non-pseudo tries to touch these paths? RP: pseudo assumes it has 100% access to the entire system, but there are things we change outside pseudo (which are fine), so we need a patch to tell pseudo to restrict what it can see, but the ignore-list isn’t complete. e.g. pseudo and qemu don’t get along so we stop pseudo to run qemu, qemu then touches files that pseudo controls, but we can’t tell which files were touched RP: despite all the changes we’ve made, we’re still seeing timeout issues on the AB ScottM: could we scan a set of directories RP: we could do an integrity check, the problem is deciding when to do it. there are a number of tasks that run in parallel, so the trick is figuring out when to do the integrity check. ScottM: how amenable is that to someone helping without deep knowledge of pseudo? RP: once it’s down to analysing individual changes, we should be fine ScottM: do we need a failed build to work on? RP: no, with the aborts in place the issues crop up quickly J-SM: could the abort patch be made available conditionally so people can dig in? RP: possibly. the build dies very quickly with the patch, so if we can get to a certain point before failing then others can jump in PaulB: other distros use fakeroot, is it worth looking elsewhere for ideas? RP: we use pseudo because fakeroot had massive issues that didn’t map well to what we’re doing (not sure if these have all been addressed) e.g. if you open a shell and do the whole build sequentially in that one shell, then fakeroot will work fine. but with us we use different tasks, in parallel, etc which fakeroot doesn’t support RP: these issues tend to only appear because of the heavy heavy load of the build servers, these most likely won’t affect people doing “normal” builds on mostly not-overloaded systems. i.e. the inodes are re-used very quickly on our AB infrastructure RP: i have some patches in master-next which i’ll push later this week. but it raises the question about what to do regarding -stable J-SM: i suggest doing the same, make the patch optionally available RP: i’ll try to get it working somewhat so others can jump in more easily Randy: things generally look good RP: i think this bug’s been here a long time, but was exacerbated by recipe-specific sysroots, these generate a *tonne* of database entries RP: the only way people might have noticed this in the past is if someone did a binary compare Randy: right, but nobody’s complained about /bin/ls not having --x (for example) Jeremy: i’m guessing the issue has been around since 2.4 (Rocko). we have been seeing issues where random executables would be missing --x PaulB: we have to make sure to not attribute this issue to too many bugs PaulB: Randy and i emailed the maintainers of meta-rust to bring rust support in during the next development cycle. looks good so far Randy: i have a patch PaulB: and the patch adds the fetcher into bitbake TW: OE happy hour tomorrow TW: there was a discussion re default values, any resolution? RP: nobody liked any of the suggestions well enough, so it faded PaulB: inclusive language: add to contribution guidelines? the contributing guideline only appears in the wiki, should we have something at the top-level of the repository? RP: go for it, anything to help new users
|
|
[meta-virtualization] How to enable libvirt to work with XEN on a custom board.
#yocto
#meta-virtualization
daparrag@...
Dear all,
In the past days I was looking for some documentation that allows me to enable libvirt to work with xen. In my current implementation I managed to run XEN on DOM0 but unluckly I am having problems to make it works with libvirt. I had followed all the recommendations listed on http://git.yoctoproject.org/cgit.cgi/meta-virtualization/tree/README but nothing works for me. when I added libvirt in my packages I got the same error discribed on : https://www.yoctoproject.org/pipermail/meta-virtualization/2016-March/001835.html any Idea of how can I enable libvirt to work with xen? do you have some .bbappend that works out of the box? Please let me know. Configuration: YOCTO version => rocko
|
|
Re: [yocto-builds] relocate_sdk.py is failing when installing yocto3.1.2 SDK
Ansurivijay Ramana <ansurivijay.r@...>
Classification: HCL Internal Hi Randi,
I’m using poky distro.
DISTRO ?= "poky"
Using Ubuntu 16.04 LTS machine. Python version available in ubuntu machine is
/usr/bin/python3 --version Python 3.5.2
Python version available in distro is 3.8.2
tmp/work/core2-32-poky-linux/python3/3.8.2-r0/
Thanks & Regards, Vijay
From: Randy MacLeod <randy.macleod@...>
Sent: Thursday, September 17, 2020 9:40 PM To: Ansurivijay Ramana <ansurivijay.r@...>; Yocto discussion list <yocto@...> Subject: Re: [yocto-builds] relocate_sdk.py is failing when installing yocto3.1.2 SDK
[CAUTION: This Email is from outside the Organization. Unless you trust the sender, Don’t click links or open attachments as it may be a Phishing email, which can steal your Information and compromise your Computer.] Hi Vijay,
I have redirected this thread to the main yocto list. The yocto-builds list is for automated build outputs rather than discussions.
What distro are you using? What version of python3 is provided by that distro? On Ubu-20.04, fyi: $ grep python3 /.../oe-core.git/scripts/relocate_sdk.py $ python3 --version
../Randy
On 2020-09-17 9:49 a.m., Ansurivijay Ramana wrote:
-- # Randy MacLeod # Wind River Linux
|
|
Monsees, Steven C (US)
Currently not using system as our default init system (investigating why but this might not be an option). Is there any other utility I might use under Yocto to get similar data as that produced by timedatectl ? Thanks, Steve
|
|
Monsees, Steven C (US)
Is there documentation on how to set this up ?
toggle quoted messageShow quoted text
-----Original Message-----
From: yocto@lists.yoctoproject.org [mailto:yocto@lists.yoctoproject.org] On Behalf Of Quentin Schulz Sent: Tuesday, September 29, 2020 11:53 AM To: Monsees, Steven C (US) <steven.monsees@baesystems.com> Cc: yocto@lists.yoctoproject.org Subject: Re: [yocto] #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image *** WARNING *** EXTERNAL EMAIL -- This message originates from outside our organization. Hi Steve, On Tue, Sep 29, 2020 at 08:45:56AM -0700, Monsees, Steven C (US) via lists.yoctoproject.org wrote: I currently have "ntpq" building and installing correctly...It comes with systemd. Use it as your init system and then you'll have the command. Quentin
|
|
Quentin Schulz
Hi Steve,
On Tue, Sep 29, 2020 at 08:45:56AM -0700, Monsees, Steven C (US) via lists.yoctoproject.org wrote: I currently have "ntpq" building and installing correctly...It comes with systemd. Use it as your init system and then you'll have the command. Quentin
|
|
Monsees, Steven C (US)
but have yet to figure out how to get the command built and transferred to the kernel image.
|
|
Yocto Project Status WW39'20
Stephen Jolley
Current Dev Position: YP 3.2 M4 Next Deadline: YP 3.2 M4 Feature Freeze - Now
Next Team Meetings:
Key Status/Updates:
Help with any of these would be much appreciated, unfortunately it is proving hard to find anyone interested in helping figure these out and they significantly hamper our testing.
Ways to contribute:
YP 3.2 Milestone Dates:
Planned upcoming dot releases:
Tracking Metrics:
The Yocto Project’s technical governance is through its Technical Steering Committee, more information is available at: https://wiki.yoctoproject.org/wiki/TSC
The Status reports are now stored on the wiki at: https://wiki.yoctoproject.org/wiki/Weekly_Status
[If anyone has suggestions for other information you’d like to see on this weekly status update, let us know!]
Thanks,
Stephen K. Jolley Yocto Project Program Manager ( Cell: (208) 244-4460 * Email: sjolley.yp.pm@...
|
|
Re: [meta-security][master][dunfell][PATCH] gitignore added
On 9/22/20 11:25 PM, Adrian Freihofer wrote:
After running testimage there are some python left overs atmerged thanks ---
|
|
[meta-security][PATCH] packagegroup-core-security: add opendnssec to pkg grp
Signed-off-by: Armin Kuster <akuster808@gmail.com>
--- recipes-core/packagegroup/packagegroup-core-security.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index c69e3b3..789f4ea 100644 --- a/recipes-core/packagegroup/packagegroup-core-security.bb +++ b/recipes-core/packagegroup/packagegroup-core-security.bb @@ -38,6 +38,7 @@ RDEPENDS_packagegroup-security-utils = "\ python3-scapy \ softhsm \ libest \ + opendnssec \ ${@bb.utils.contains_any("TUNE_FEATURES", "riscv32 ", "", " libseccomp",d)} \ ${@bb.utils.contains("DISTRO_FEATURES", "pam", "sssd google-authenticator-libpam", "",d)} \ ${@bb.utils.contains("DISTRO_FEATURES", "pax", "pax-utils packctl", "",d)} \ -- 2.17.1
|
|