Date   

[meta-security][PATCH] samhain: update to 4.4.2

Armin Kuster
 

refresh a few patches too

Signed-off-by: Armin Kuster <akuster808@...>
---
...-avoid-searching-host-for-postgresql.patch | 15 ++---
.../samhain-configure-add-option-for-ps.patch | 66 +++++++++----------
recipes-ids/samhain/samhain.inc | 13 ++--
3 files changed, 42 insertions(+), 52 deletions(-)

diff --git a/recipes-ids/samhain/files/samhain-avoid-searching-host-for-postgresql.patch b/recipes-ids/samhain/files/samhain-avoid-searching-host-for-postgresql.patch
index 6bf67e0..a84229e 100644
--- a/recipes-ids/samhain/files/samhain-avoid-searching-host-for-postgresql.patch
+++ b/recipes-ids/samhain/files/samhain-avoid-searching-host-for-postgresql.patch
@@ -10,11 +10,11 @@ Signed-off-by: Jackie Huang <jackie.huang@...>
configure.ac | 101 +++--------------------------------------------------------
1 file changed, 5 insertions(+), 96 deletions(-)

-diff --git a/configure.ac b/configure.ac
-index a224c68..f658d53 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -1278,90 +1278,11 @@ AC_ARG_WITH(database,
+Index: samhain-4.4.2/configure.ac
+===================================================================
+--- samhain-4.4.2.orig/configure.ac
++++ samhain-4.4.2/configure.ac
+@@ -1290,90 +1290,11 @@ AC_ARG_WITH(database,
AC_DEFINE(WITH_POSTGRES)
AC_DEFINE(WITH_DATABASE)
#
@@ -110,7 +110,7 @@ index a224c68..f658d53 100644
LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
if test x"$enable_static" = xyes; then
LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lcrypt -lm"
-@@ -1370,18 +1291,6 @@ AC_ARG_WITH(database,
+@@ -1382,18 +1303,6 @@ AC_ARG_WITH(database,
fi
# CFLAGS="$CFLAGS -I${PGSQL_INC_DIR}"
CPPFLAGS="$CPPFLAGS -I${PGSQL_INC_DIR}"
@@ -129,6 +129,3 @@ index a224c68..f658d53 100644
fi
elif test "x${withval}" = "xodbc"; then
AC_MSG_CHECKING(for odbc in /usr /usr/local ODBC_HOME)
---
-2.11.0
-
diff --git a/recipes-ids/samhain/files/samhain-configure-add-option-for-ps.patch b/recipes-ids/samhain/files/samhain-configure-add-option-for-ps.patch
index 8de0735..7e7f86e 100644
--- a/recipes-ids/samhain/files/samhain-configure-add-option-for-ps.patch
+++ b/recipes-ids/samhain/files/samhain-configure-add-option-for-ps.patch
@@ -14,29 +14,14 @@ to avoid host contamination.
Upstream-Status: Inappropriate [cross compile specific]

Signed-off-by: Jackie Huang <jackie.huang@...>
----
- aclocal.m4 | 2 +-
- configure.ac | 60 ++++++++++--------------------------------------------------
- 2 files changed, 11 insertions(+), 51 deletions(-)
+[AK: refactored for 4.4.3]
+Signed-off-by: Armin Kuster <akuster808@...>

-diff --git a/aclocal.m4 b/aclocal.m4
-index a2e59a6..cd20a2f 100644
---- a/aclocal.m4
-+++ b/aclocal.m4
-@@ -409,7 +409,7 @@ x_includes=NONE
- x_libraries=NONE
- DESTDIR=
- SH_ENABLE_OPTS="selinux posix-acl asm ssp db-reload xml-log message-queue login-watch process-check port-check mounts-check logfile-monitor userfiles debug ptrace static network udp nocl stealth micro-stealth install-name identity khide suidcheck base largefile mail external-scripts encrypt srp dnmalloc ipv6 shellexpand suid"
--SH_WITH_OPTS="prelude libprelude-prefix database libwrap cflags libs console altconsole timeserver alttimeserver rnd egd-socket port logserver altlogserver kcheck gpg keyid checksum fp recipient sender trusted tmp-dir config-file log-file pid-file state-dir data-file html-file"
-+SH_WITH_OPTS="prelude libprelude-prefix database libwrap cflags libs console altconsole timeserver alttimeserver rnd egd-socket port logserver altlogserver kcheck gpg keyid checksum fp recipient sender trusted tmp-dir config-file log-file pid-file state-dir data-file html-file ps-path"
-
- # Installation directory options.
- # These are left unexpanded so users can "make install exec_prefix=/foo"
-diff --git a/configure.ac b/configure.ac
-index 5910b1f..8c3e087 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -730,56 +730,16 @@ then
+Index: samhain-4.4.2/configure.ac
+===================================================================
+--- samhain-4.4.2.orig/configure.ac
++++ samhain-4.4.2/configure.ac
+@@ -743,56 +743,16 @@ then
fi
AC_CHECK_HEADERS(gmp.h)

@@ -55,7 +40,16 @@ index 5910b1f..8c3e087 100644
- AC_MSG_ERROR([Cannot find ps in any of /usr/ucb /bin /usr/bin])
-fi
-AC_DEFINE_UNQUOTED([PSPATH], _("$PS"), [Path to ps])
--
++AC_ARG_WITH(ps-path,
++ [ --with-ps-path=PATH set path to ps command ],
++ [
++ if test "x${withval}" != xno; then
++ pspath="${withval}"
++ AC_DEFINE_UNQUOTED([PSPATH], _("${pspath}"), [Path to ps])
++ AC_DEFINE_UNQUOTED([PSARG], _("ax"), [Argument for ps])
++ fi
++ ])
+
-AC_MSG_CHECKING([how to use ps])
-$PS ax >/dev/null 2>&1
-if test $? -eq 0; then
@@ -90,19 +84,19 @@ index 5910b1f..8c3e087 100644
- PSARG="-e"
-fi
-AC_DEFINE_UNQUOTED([PSARG], _("$PSARG"), [Argument for ps])
-+AC_ARG_WITH(ps-path,
-+ [ --with-ps-path=PATH set path to ps command ],
-+ [
-+ if test "x${withval}" != xno; then
-+ pspath="${withval}"
-+ AC_DEFINE_UNQUOTED([PSPATH], _("${pspath}"), [Path to ps])
-+ AC_DEFINE_UNQUOTED([PSARG], _("ax"), [Argument for ps])
-+ fi
-+ ])
-+
AC_MSG_RESULT([$PS $PSARG])

dnl *****************************************
---
-1.9.1
-
+Index: samhain-4.4.2/aclocal.m4
+===================================================================
+--- samhain-4.4.2.orig/aclocal.m4
++++ samhain-4.4.2/aclocal.m4
+@@ -409,7 +409,7 @@ x_includes=NONE
+ x_libraries=NONE
+ DESTDIR=
+ SH_ENABLE_OPTS="selinux posix-acl asm ssp db-reload xml-log message-queue login-watch process-check port-check mounts-check logfile-monitor userfiles debug ptrace static network udp nocl stealth micro-stealth install-name identity khide suidcheck base largefile mail external-scripts encrypt srp dnmalloc ipv6 shellexpand suid"
+-SH_WITH_OPTS="prelude libprelude-prefix database libwrap cflags libs console altconsole timeserver alttimeserver rnd egd-socket port logserver altlogserver signify pubkey-checksum gpg keyid checksum fp recipient sender trusted tmp-dir config-file log-file pid-file state-dir data-file html-file"
++SH_WITH_OPTS="prelude libprelude-prefix database libwrap cflags libs console altconsole timeserver alttimeserver rnd egd-socket port logserver altlogserver kcheck gpg keyid checksum fp recipient sender trusted tmp-dir config-file log-file pid-file state-dir data-file html-file ps-path"
+
+ # Installation directory options.
+ # These are left unexpanded so users can "make install exec_prefix=/foo"
diff --git a/recipes-ids/samhain/samhain.inc b/recipes-ids/samhain/samhain.inc
index b867bbc..3b4aab9 100644
--- a/recipes-ids/samhain/samhain.inc
+++ b/recipes-ids/samhain/samhain.inc
@@ -3,9 +3,12 @@ HOMEPAGE = "http://www.la-samhna.de/samhain/"
LICENSE = "GPLv2"
LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"

-PV = "4.3.3"
+PV = "4.4.2"

-SRC_URI = "http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz \
+SRC_URI = "https://la-samhna.de/archive/samhain_signed-${PV}.tar.gz \
+ file://${INITSCRIPT_NAME}.init \
+ file://${INITSCRIPT_NAME}.default \
+ file://samhain.service \
file://samhain-mips64-aarch64-dnmalloc-hash-fix.patch \
file://samhain-samhainrc.patch \
file://samhain-samhainrc-fix-files-dirs-path.patch \
@@ -15,13 +18,9 @@ SRC_URI = "http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz \
file://samhain-avoid-searching-host-for-postgresql.patch \
file://samhain-add-LDFLAGS-variable-for-samhain_setpwd.patch \
file://fix-build-with-new-version-attr.patch \
- file://${INITSCRIPT_NAME}.init \
- file://${INITSCRIPT_NAME}.default \
- file://samhain.service \
"

-SRC_URI[md5sum] = "7be46ae7d03f53ba21afafd41cff8926"
-SRC_URI[sha256sum] = "33ad4bc3dad4699694553bd9635a6b5827939f965d1f0f05fce0b4e9cdadf21b"
+SRC_URI[sha256sum] = "2bb2750b32646be32517d0b2259402559c72b96979800f6c33774fcdea327fff"

UPSTREAM_CHECK_URI = "https://www.la-samhna.de/samhain/archive.html"
UPSTREAM_CHECK_REGEX = "samhain_signed-(?P<pver>(\d+(\.\d+)+))\.tar"
--
2.17.1


Re: #yocto -zeus #yocto

Monsees, Steven C (US)
 


Thanks, that was my issue... did not read it carefully enough.
Keep in mind zeus is totally different from rock... running down multiple issues, sorry, I appreciate the your time/help, thanks again...

Anything else in that patch valid for potential issues in zeus 3.0.4 ?


Re: #yocto -zeus #yocto

Martin Jansa
 

> I was use using https... that is a typo, sorry...

Then fix your typo and it will work, but I think you didn't read what I wrote carefully enough, see the url in the log you pasted:

You were supposed to change only protocol parameter as it was done in:
https://git.openembedded.org/openembedded-core/commit/?h=c4301758f5a1560965ca5fb69eb1492adf351ed0

not the name of the bitbake fetcher to use (from 'gitsm://' to 'https://')

On Tue, Nov 3, 2020 at 4:46 PM Monsees, Steven C (US) via lists.yoctoproject.org <steven.monsees=baesystems.com@...> wrote:

I was use using https... that is a typo, sorry...

The error is as I describe using https... Note I do not appear to have any other issues downloading packages.
I believe this might be the first time "gitsm" is used in build. Are their any known issues under zeus ?, Might I need to tweak the build env ?

Not sure how to proceed, zeus 3.0.4 is what I amusing... are there any know env dependencies here ?



Yocto Project Status WW44'20

Stephen Jolley
 

Current Dev Position: YP 3.3 M1 development

Next Deadline: 7th December 2020 YP 3.3 M1 build

 

Next Team Meetings:

 

Key Status/Updates:

  • YP 3.2 rc2 is out of QA, approved by the TSC and should be released imminently.
  • Happy 10th Anniversary Yocto Project! Jefro presented a video to celebrate at ELC-E which is available here: https://www.youtube.com/watch?v=nnhD5CRmfOw

He is collecting more video clips, quotes and photos to put on a page on the website so please send them over to him, it was great to see people past and present from the project.

  • The Yocto Project Summit was a success, thanks to everyone who helped organise or participated.
  • Unfortunately, intermittent autobuilder issues continue to occur. You can see the list of failures we’re continuing to see by searching for the “AB-INT” tag in bugzilla: https://bugzilla.yoctoproject.org/buglist.cgi?quicksearch=AB-INT
  • A YP 3.3 planning document has been created for ideas about what may happen in the YP 3.3 release (assuming there are people to work on the items):

https://docs.google.com/document/d/1IHiE0NU0XspDocgxZeLQ_W7o-yr0nVeBjbqImQUtH5A/edit Request edit/suggest access if you want to add to it.

  • YP 3.3 dates for builds, milestones and release have been added below.
  • Development for 3.3 has started and various queued recipe upgrades and other changes have merged to master.

 

Ways to contribute:

 

YP 3.2 Milestone Dates:

  • YP 3.2 M4 should release soon.

 

YP 3.3 Milestone Dates:

  • YP 3.3 M1 build date 2020/12/07
  • YP 3.3 M1 Release date 2020/12/18
  • YP 3.3 M2 build date 2021/01/18
  • YP 3.3 M2 Release date 2021/01/29
  • YP 3.3 M3 build date 2021/03/01
  • YP 3.3 M3 Release date 2021/03/12
  • YP 3.3 M4 build date 2021/04/05
  • YP 3.3 M4 Release date 2021/04/30

 

Planned upcoming dot releases:

  • YP 3.1.4 build date 2020/11/2
  • YP 3.1.4 release date 2020/11/13
  • YP 3.2.1 build date 2020/11/16
  • YP 3.2.1 release date 2020/12/4
  • YP 3.1.5 build date 2021/01/11
  • YP 3.1.5 release date 2021/01/22
  • YP 3.2.2 build date 2021/02/08
  • YP 3.2.2 release date 2021/02/19
  • YP 3.1.6 build date 2021/02/22
  • YP 3.1.6 release date 2021/03/05
  • YP 3.1.7 build date 2021/03/22
  • YP 3.1.7 release date 2021/04/02

 

Tracking Metrics:

 

The Yocto Project’s technical governance is through its Technical Steering Committee, more information is available at:

https://wiki.yoctoproject.org/wiki/TSC

 

The Status reports are now stored on the wiki at: https://wiki.yoctoproject.org/wiki/Weekly_Status

 

[If anyone has suggestions for other information you’d like to see on this weekly status update, let us know!]

 

Thanks,

 

Stephen K. Jolley

Yocto Project Program Manager

(    Cell:                (208) 244-4460

* Email:              sjolley.yp.pm@...

 


Re: #yocto -zeus #yocto

Monsees, Steven C (US)
 

When using ./meta/recipes-core/ovmf/ovmf_git.bb as provided by Yocto I get the following error...


WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Failed to fetch URL gitsm://github.com/tianocore/edk2.git;branch=master;protocol=git, attempting MIRRORS if available
ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure: Fetch command export PSEUDO_DISABLED=1; unset _PYTHON_SYSCONFIGDATA_NAME; export DBUS_SESSION_BUS_ADDRESS="unix:abstract=/tmp/dbus-0IBbgYesFx,guid=89f54cc5924b467e7bbcf2c15fa1469b"; export SSH_AGENT_PID="5204"; export SSH_AUTH_SOCK="/run/user/11588/keyring/ssh"; export PATH="/disk0/scratch/smonsees/yocto/workspace_3/poky/scripts/native-intercept:/disk0/scratch/smonsees/yocto/workspace_3/poky/scripts:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/bin/x86_64-linux:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/sbin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/sbin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/bin:/disk0/scratch/smonsees/yocto/workspace_3/poky/bitbake/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/hosttools"; export HOME="/ede/smonsees"; LANG=C git -c core.fsyncobjectfiles=0 clone --bare --mirror git://github.com/tianocore/edk2.git /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/git2/github.com.tianocore.edk2.git --progress failed with exit code 128, output:
Cloning into bare repository '/disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/git2/github.com.tianocore.edk2.git'...

fatal: unable to connect to github.com:
github.com[0: 140.82.112.4]: errno=Connection timed out


ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure for URL: 'gitsm://github.com/tianocore/edk2.git;branch=master;protocol=git'. Unable to fetch URL from any source.
ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/temp/log.do_fetch.21616
ERROR: Task (virtual:native:/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-core/ovmf/ovmf_git.bb:do_fetch) failed with exit code '1'

 


Re: #yocto -zeus #yocto

Monsees, Steven C (US)
 

I was use using https... that is a typo, sorry...

The error is as I describe using https... Note I do not appear to have any other issues downloading packages.
I believe this might be the first time "gitsm" is used in build. Are their any known issues under zeus ?, Might I need to tweak the build env ?

Not sure how to proceed, zeus 3.0.4 is what I amusing... are there any know env dependencies here ?


Re: #yocto -zeus #yocto

Martin Jansa
 

> Note went and modified ./meta/recipes-core/ovmf/ovmf_git.bb to use "http"...

That is clearly wrong, you shouldn't change the git:// at the beginning of SRC_URI, just the ";protocol=git" to ";protocol=https" parameter later in SRC_URI.

On Tue, Nov 3, 2020 at 3:41 PM Monsees, Steven C (US) via lists.yoctoproject.org <steven.monsees=baesystems.com@...> wrote:


Note went and modified ./meta/recipes-core/ovmf/ovmf_git.bb to use "http"...

When I change to use http I get the following error now, NOTE: I see the same error with new check sum values every time I update checksums and rebuild...

WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Checksum mismatch for local file /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git
Cleaning and trying again.
WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Renaming /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git to /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git_bad-checksum_e5feebc5dc55e02d9d26c3ecce2f696c
WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Checksum failure encountered with download of https://github.com/tianocore/edk2.git;branch=master;protocol=https - will attempt other sources if available
ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure for URL: 'https://github.com/tianocore/edk2.git;branch=master;protocol=https'. Checksum mismatch!
File: '/disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git' has md5 checksum e5feebc5dc55e02d9d26c3ecce2f696c when b285f3c0bc1fc983c4c3eb2d47fc27bc was expected
File: '/disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git' has sha256 checksum df09a56b38195dc68d1a83f31287e38669c165eb637739660216bbc71aa694af when bb9d1df02a645dcd071d2d0540156be96c3c5a616ef93ff9872bd86b3c35e77e was expected
If this change is expected (e.g. you have upgraded to a new version without updating the checksums) then you can use these lines within the recipe:
SRC_URI[md5sum] = "e5feebc5dc55e02d9d26c3ecce2f696c"
SRC_URI[sha256sum] = "df09a56b38195dc68d1a83f31287e38669c165eb637739660216bbc71aa694af"
Otherwise you should retry the download and/or check with upstream to determine if the file has become corrupted or otherwise unexpectedly modified.

ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure for URL: 'https://github.com/tianocore/edk2.git;branch=master;protocol=https'. Unable to fetch URL from any source.
ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/temp/log.do_fetch.19694
ERROR: Task (virtual:native:/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-core/ovmf/ovmf_git.bb:do_fetch) failed with exit code '1'





Re: #yocto -zeus #yocto

Monsees, Steven C (US)
 


Note went and modified ./meta/recipes-core/ovmf/ovmf_git.bb to use "http"...

When I change to use http I get the following error now, NOTE: I see the same error with new check sum values every time I update checksums and rebuild...

WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Checksum mismatch for local file /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git
Cleaning and trying again.
WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Renaming /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git to /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git_bad-checksum_e5feebc5dc55e02d9d26c3ecce2f696c
WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Checksum failure encountered with download of https://github.com/tianocore/edk2.git;branch=master;protocol=https - will attempt other sources if available
ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure for URL: 'https://github.com/tianocore/edk2.git;branch=master;protocol=https'. Checksum mismatch!
File: '/disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git' has md5 checksum e5feebc5dc55e02d9d26c3ecce2f696c when b285f3c0bc1fc983c4c3eb2d47fc27bc was expected
File: '/disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/edk2.git' has sha256 checksum df09a56b38195dc68d1a83f31287e38669c165eb637739660216bbc71aa694af when bb9d1df02a645dcd071d2d0540156be96c3c5a616ef93ff9872bd86b3c35e77e was expected
If this change is expected (e.g. you have upgraded to a new version without updating the checksums) then you can use these lines within the recipe:
SRC_URI[md5sum] = "e5feebc5dc55e02d9d26c3ecce2f696c"
SRC_URI[sha256sum] = "df09a56b38195dc68d1a83f31287e38669c165eb637739660216bbc71aa694af"
Otherwise you should retry the download and/or check with upstream to determine if the file has become corrupted or otherwise unexpectedly modified.

ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure for URL: 'https://github.com/tianocore/edk2.git;branch=master;protocol=https'. Unable to fetch URL from any source.
ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/temp/log.do_fetch.19694
ERROR: Task (virtual:native:/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-core/ovmf/ovmf_git.bb:do_fetch) failed with exit code '1'


Reproducible builds and RPM packages

Anders Montonen
 

Hi,

When going from Zeus to Dunfell, I noticed that all files on the rootfs had timestamps long in the past, which I assume is from reproducible builds now being on by default. While that is a good thing, running “rpm -V” on any installed package now reports that the mtime differs. Is this the intentional behavior?

Regards,
Anders Montonen


Re: Install Yocto image and backup

Richard Weinberger
 

On Tue, Nov 3, 2020 at 10:17 AM JH <jupiter.hce@...> wrote:
The reason we don't update kernel and rootfs because the size of
kernel and rootfs is too large, it is hard to download 60MB image OTA
via 4G CAT M1. If we are going to change to use 4G CAT1 or higher
speed, I'll use either RAUC or SWUpdate, which one is the most popular
for embedded system using uboot and UBFIS?
You don't need a full download.
In the past I've used binary diffs with great success.

So if the update size is your biggest concern, the tradeoff of
computing and applying
the binary diff might be worth it.

--
Thanks,
//richard


Re: Install Yocto image and backup

JH
 

Hi Alexander,

Thanks for your clarification.

If your kernel and rootfs partition is just one UBIFS in a bigger UBI volume,
then no. Single bad blocks affecting the UBIFS partitions would be handled
by the underlying UBI. You should however consider using ubihealthd or
something similar to become aware of badblocks over time and handle them before it's
too late and you can not boot from the rootfs anymore, especially if it is read only and not
touched for writing in normal operation.
Yes, I use one UBIFS for 4 partitions, RO rootfs, RO kernel, RO DTB
and RW application, no write for RO partitions, that should be safe, I
feel relieved.

your device is somehow connected to a network. So what I suggested was having
two rootfs partitions. One is active and the device boots from it (A), and the
other one acts as inactive (B). When you update, write the new rootfs to the
inactive partition and then just switch over and boot B instead. You might add
a third partition for recovery or factory reset. Only the active partition
would be used in the running system and can still be readonly there.
The reason we don't update kernel and rootfs because the size of
kernel and rootfs is too large, it is hard to download 60MB image OTA
via 4G CAT M1. If we are going to change to use 4G CAT1 or higher
speed, I'll use either RAUC or SWUpdate, which one is the most popular
for embedded system using uboot and UBFIS?

Thank you very much.

Kind regards,

- jupiter


Reminder: Yocto Project Technical Team Meeting @ Monthly from 8am on the first Tuesday (PDT)

Stephen Jolley
 

All,

 

Just a reminder we will hold the monthly Yocto Project Technical Meeting at 8am PST tomorrow. (11/3) 

 

Yocto Project Technical Team Meeting: We encourage people attending the meeting to logon and announce themselves on the Yocto Project IRC chancel during the meeting (optional):

Yocto IRC: http://webchat.freenode.net/?channels=#yocto

 

Wiki: https://www.yoctoproject.org/public-virtual-meetings/

 

When            Monthly from 8am to 9am on the first Tuesday Pacific Time

Where           Zoom Meeting: https://zoom.us/j/990892712?pwd=cHU1MjhoM2x6ck81bkcrYjRrcmJsUT09

 

We are tracking the minutes at: https://docs.google.com/document/d/1ly8nyhO14kDNnFcW2QskANXW3ZT7QwKC5wWVDg9dDH4/edit?pli=1 Please request access if you want to assist in editing them.  The world should have view access.

 

Thanks,

 

Stephen K. Jolley

Yocto Project Program Manager

(    Cell:                (208) 244-4460

* Email:              sjolley.yp.pm@...

 


M+ & H bugs with Milestone Movements WW44

Stephen Jolley
 

All,

YP M+ or high bugs which moved to a new milestone in WW44 are listed below:

Priority

Bug ID

Short Description

Changer

Owner

Was

Became

Medium+

5322

Global DNS fallback mechanism not present in poky distro

kai.kang@...

kai.kang@...

3.2 M4

3.3 M1

 

11766

nobody group added by systemd sysusers.d

randy.macleod@...

yi.zhao@...

3.3

3.3 M1

 

 

yi.zhao@...

yi.zhao@...

3.2 M4

3.3

 

11906

rpmbuild: Can not build packages on qemu target

hongxu.jia@...

hongxu.jia@...

3.2 M4

3.3 M3

 

12279

enhance manifest not found warning

kai.kang@...

kai.kang@...

3.2 M4

3.3 M2

 

12342

lib32-core-image-sato -ctestimage failed due to wrong package names

kai.kang@...

kai.kang@...

3.2 M4

3.3 M1

 

12917

Warnings from nightly-multilib builds (build-deps)

kai.kang@...

kai.kang@...

3.2 M4

3.3 M1

 

13508

Meson detects googletest installed on system

randy.macleod@...

hongxu.jia@...

3.3 M4

3.3 M2

 

 

hongxu.jia@...

hongxu.jia@...

3.2 M4

3.3 M4

 

13631

core-image-full-cmdline qemumips systemd boot failure

kai.kang@...

kai.kang@...

3.2 M4

3.3 M2

 

13841

quilt ptest intermittent failure

randy.macleod@...

joe.slater@...

3.3

3.3 M2

 

 

joe.slater@...

joe.slater@...

3.2 M4

3.3

 

14020

environment-setup script in multilib eSDK doesn't work for multilib variant

liezhi.yang@...

liezhi.yang@...

3.2 M4

3.3 M1

Thanks,

 

Stephen K. Jolley

Yocto Project Program Manager

(    Cell:                (208) 244-4460

* Email:              sjolley.yp.pm@...

 


Enhancements/Bugs closed WW44!

Stephen Jolley
 

All,

The below were the owners of enhancements or bugs closed during the last week!

Who

Count

stacy.gaikovaia@...

2

ross@...

2

anuj.mittal@...

1

jay.shen.teoh@...

1

shantanoo_desai@...

1

raj.khem@...

1

steve@...

1

Grand Total

9

Thanks,

 

Stephen K. Jolley

Yocto Project Program Manager

(    Cell:                (208) 244-4460

* Email:              sjolley.yp.pm@...

 


Current high bug count owners for Yocto Project 3.3

Stephen Jolley
 

All,

Below is the list as of top 50 bug owners as of the end of WW44 of who have open medium or higher bugs and enhancements against YP 3.3.   There are 121 possible work days left until the final release candidates for YP 3.3 needs to be released.

Who

Count

richard.purdie@...

31

david.reyna@...

22

ross@...

19

bluelightning@...

19

bruce.ashfield@...

19

JPEWhacker@...

13

sakib.sajal@...

11

timothy.t.orling@...

11

mark.morton@...

11

trevor.gamblin@...

9

akuster808@...

9

kai.kang@...

8

Qi.Chen@...

6

stacy.gaikovaia@...

5

mostthingsweb@...

4

mingli.yu@...

4

rpjday@...

4

randy.macleod@...

4

raj.khem@...

4

idadelm@...

4

chee.yang.lee@...

4

alejandro@...

3

ydirson@...

3

hongxu.jia@...

3

yi.zhao@...

3

jpuhlman@...

2

matthewzmd@...

2

jeanmarie.lemetayer@...

2

saul.wold@...

2

jaewon@...

2

kergoth@...

2

mark.hatle@...

2

michael@...

2

jon.mason@...

2

jbb5044@...

1

joe.slater@...

1

Martin.Jansa@...

1

dl9pf@...

1

liu.ming50@...

1

kexin.hao@...

1

aehs29@...

1

maxime.roussinbelanger@...

1

jason.wessel@...

1

liezhi.yang@...

1

apoorvsangal@...

1

kai.ruhnau@...

1

fede@...

1

anuj.mittal@...

1

ankur.tyagi85@...

1

matt.ranostay@...

1

Grand Total

267

Thanks,

 

Stephen K. Jolley

Yocto Project Program Manager

(    Cell:                (208) 244-4460

* Email:              sjolley.yp.pm@...

 


Yocto Project Newcomer & Unassigned Bugs - Help Needed

Stephen Jolley
 

All,

 

The triage team is starting to try and collect up and classify bugs which a newcomer to the project would be able to work on in a way which means people can find them. They're being listed on the triage page under the appropriate heading:

https://wiki.yoctoproject.org/wiki/Bug_Triage#Newcomer_Bugs  Also please review: https://www.openembedded.org/wiki/How_to_submit_a_patch_to_OpenEmbedded and how to create a bugzilla account at: https://bugzilla.yoctoproject.org/createaccount.cgi

The idea is these bugs should be straight forward for a person to help work on who doesn't have deep experience with the project.  If anyone can help, please take ownership of the bug and send patches!  If anyone needs help/advice there are people on irc who can likely do so, or some of the more experienced contributors will likely be happy to help too.

 

Also, the triage team meets weekly and does its best to handle the bugs reported into the Bugzilla. The number of people attending that meeting has fallen, as have the number of people available to help fix bugs. One of the things we hear users report is they don't know how to help. We (the triage team) are therefore going to start reporting out the currently 325 unassigned or newcomer bugs.

 

We're hoping people may be able to spare some time now and again to help out with these.  Bugs are split into two types, "true bugs" where things don't work as they should and "enhancements" which are features we'd want to add to the system.  There are also roughly four different "priority" classes right now, “3.2”, “3.3, "3.99" and "Future", the more pressing/urgent issues being in "3.2" and then “3.3”.

 

Please review this link and if a bug is something you would be able to help with either take ownership of the bug, or send me (sjolley.yp.pm@...) an e-mail with the bug number you would like and I will assign it to you (please make sure you have a Bugzilla account).  The list is at: https://wiki.yoctoproject.org/wiki/Bug_Triage_Archive#Unassigned_or_Newcomer_Bugs

 

Thanks,

 

Stephen K. Jolley

Yocto Project Program Manager

(    Cell:                (208) 244-4460

* Email:              sjolley.yp.pm@...

 


Re: #yocto -zeus #yocto

Konrad Weihmann <kweihmann@...>
 

"github.com[0: 140.82.114.4]: errno=Connection timed out" indicates either a temporary issue with github (unlikely) or with your network setup.
Already tried a different network path from your dev-machine to the inet? Just to rule out any proxy/MITM instances.

It's also likely that git port is somehow blocked in your setup - try changing "protocol=git" to "protocol=https" in the recipe and check if it is working.
And if have a talk with your IT or internet provider afterwards.

On 02.11.20 21:31, Monsees, Steven C (US) via lists.yoctoproject.org wrote:
github.com[0: 140.82.114.4]: errno=Connection timed out


#yocto -zeus #yocto

Monsees, Steven C (US)
 

 

Attempting to move to zeus…

Build with zeus 3.0.4, using “bitbake –k”, all other downloads for kernel/image were successful…

 

Can someone tell why I am getting the following 4 errors and how best to resolve ?

 

 

Loading cache: 100% |###############################################################################################| Time: 0:00:00

Loaded 3642 entries from dependency cache.

NOTE: Resolving any missing task queue dependencies

 

Build Configuration:

BB_VERSION           = "1.44.0"

BUILD_SYS            = "x86_64-linux"

NATIVELSBSTRING      = "rhel-7.8"

TARGET_SYS           = "x86_64-poky-linux"

MACHINE              = "sbcb-default"

DISTRO               = "limws"

DISTRO_VERSION       = "3.0.4"

TUNE_FEATURES        = "m64 corei7"

TARGET_FPU           = ""

meta                

meta-poky            = "my_yocto_3.0.4:f2eb22a8783f1eecf99bd4042695bab920eed00e"

meta-perl           

meta-python         

meta-filesystems    

meta-networking     

meta-initramfs      

meta-oe              = "zeus:2b5dd1eb81cd08bc065bc76125f2856e9383e98b"

meta-intel           = "zeus:d9942d4c3a710406b051852de7232db03c297f4e"

meta-intel           = "v2019.02:f635a364c55f1fb12519aff54924a0a5b947091e"

 

Initialising tasks: 100% |##########################################################################################| Time: 0:00:03

Sstate summary: Wanted 316 Found 296 Missed 20 Current 1793 (93% match, 99% complete)

NOTE: Executing Tasks

NOTE: Setscene tasks completed

WARNING: ovmf-native-edk2-stable201905-r0 do_fetch: Failed to fetch URL gitsm://github.com/tianocore/edk2.git;branch=master;protocol=git, attempting MIRRORS if available

ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure: Fetch command export PSEUDO_DISABLED=1; unset _PYTHON_SYSCONFIGDATA_NAME; export DBUS_SESSION_BUS_ADDRESS="unix:abstract=/tmp/dbus-3LFubab4k2,guid=5c19cfb5af3a9248c3a7a8bb5f7eedd1"; export SSH_AGENT_PID="22978"; export SSH_AUTH_SOCK="/run/user/11588/keyring/ssh"; export PATH="/disk0/scratch/smonsees/yocto/workspace_3/poky/scripts/native-intercept:/disk0/scratch/smonsees/yocto/workspace_3/poky/scripts:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/bin/x86_64-linux:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/sbin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/usr/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/sbin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/recipe-sysroot-native/bin:/disk0/scratch/smonsees/yocto/workspace_3/poky/bitbake/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/hosttools"; export HOME="/ede/smonsees"; LANG=C git -c core.fsyncobjectfiles=0 clone --bare --mirror git://github.com/tianocore/edk2.git /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/git2/github.com.tianocore.edk2.git --progress failed with exit code 128, output:

Cloning into bare repository '/disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/git2/github.com.tianocore.edk2.git'...

 

fatal: unable to connect to github.com:

github.com[0: 140.82.114.4]: errno=Connection timed out

 

 

ERROR: ovmf-native-edk2-stable201905-r0 do_fetch: Fetcher failure for URL: 'gitsm://github.com/tianocore/edk2.git;branch=master;protocol=git'. Unable to fetch URL from any source.

ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/x86_64-linux/ovmf-native/edk2-stable201905-r0/temp/log.do_fetch.1158

ERROR: Task (virtual:native:/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-core/ovmf/ovmf_git.bb:do_fetch) failed with exit code '1'

WARNING: ovmf-edk2-stable201905-r0 do_fetch: Failed to fetch URL gitsm://github.com/tianocore/edk2.git;branch=master;protocol=git, attempting MIRRORS if available

ERROR: ovmf-edk2-stable201905-r0 do_fetch: Fetcher failure: Fetch command export PSEUDO_DISABLED=1; unset _PYTHON_SYSCONFIGDATA_NAME; export DBUS_SESSION_BUS_ADDRESS="unix:abstract=/tmp/dbus-3LFubab4k2,guid=5c19cfb5af3a9248c3a7a8bb5f7eedd1"; export SSH_AGENT_PID="22978"; export SSH_AUTH_SOCK="/run/user/11588/keyring/ssh"; export PATH="/disk0/scratch/smonsees/yocto/workspace_3/poky/scripts:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/corei7-64-poky-linux/ovmf/edk2-stable201905-r0/recipe-sysroot-native/usr/bin/x86_64-poky-linux:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/corei7-64-poky-linux/ovmf/edk2-stable201905-r0/recipe-sysroot/usr/bin/crossscripts:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/corei7-64-poky-linux/ovmf/edk2-stable201905-r0/recipe-sysroot-native/usr/sbin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/corei7-64-poky-linux/ovmf/edk2-stable201905-r0/recipe-sysroot-native/usr/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/corei7-64-poky-linux/ovmf/edk2-stable201905-r0/recipe-sysroot-native/sbin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/corei7-64-poky-linux/ovmf/edk2-stable201905-r0/recipe-sysroot-native/bin:/disk0/scratch/smonsees/yocto/workspace_3/poky/bitbake/bin:/disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/hosttools"; export HOME="/ede/smonsees"; LANG=C git -c core.fsyncobjectfiles=0 clone --bare --mirror git://github.com/tianocore/edk2.git /disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/git2/github.com.tianocore.edk2.git --progress failed with exit code 128, output:

Cloning into bare repository '/disk0/scratch/smonsees/yocto/workspace_3/downloads/intel/git2/github.com.tianocore.edk2.git'...

 

fatal: unable to connect to github.com:

github.com[0: 140.82.112.3]: errno=Connection timed out

 

 

ERROR: ovmf-edk2-stable201905-r0 do_fetch: Fetcher failure for URL: 'gitsm://github.com/tianocore/edk2.git;branch=master;protocol=git'. Unable to fetch URL from any source.

ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/meta-bae/meta-limws/builds/sbcb-default/tmp/work/corei7-64-poky-linux/ovmf/edk2-stable201905-r0/temp/log.do_fetch.1182

ERROR: Task (/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-core/ovmf/ovmf_git.bb:do_fetch) failed with exit code '1'

NOTE: Tasks Summary: Attempted 5885 tasks of which 5868 didn't need to be rerun and 2 failed.

 

Summary: 2 tasks failed:

  virtual:native:/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-core/ovmf/ovmf_git.bb:do_fetch

  /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-core/ovmf/ovmf_git.bb:do_fetch

Summary: There were 3 WARNING messages shown.

Summary: There were 4 ERROR messages shown, returning a non-zero exit code.

 


Re: QA notification for completed autobuilder build (yocto-3.2.rc2)

Khem Raj
 

On Sun, Nov 1, 2020 at 8:18 PM Sangeeta Jain <sangeeta.jain@...> wrote:

Hello all,

This is the full report for yocto-3.2.rc2:
https://git.yoctoproject.org/cgit/cgit.cgi/yocto-testresults-contrib/tree/?h=intel-yocto-testresults

======= Summary ========
No new defects are found.
No high milestone defects.

Bugs verified:

BUG id:14106 - [QA 3.2 RC1] failure in ptest : glib-2.0.glib/gdatetime.test
Verified Fixed.

Existing bugs observed in this release:

BUG id:14051 - [QA 3.2 M3 RC1] failure in ptest : valgrind.drd and valgrind.helgrind
Updated with 17 ptests passed, 1 ptest still failing
No new failures.


======= Bugs ========
https://bugzilla.yoctoproject.org/show_bug.cgi?id=14106
https://bugzilla.yoctoproject.org/show_bug.cgi?id=14051


This looks good. I am fine with releasing this.

Thanks,
Sangeeta

-----Original Message-----
From: Pokybuild User <pokybuild@...>
Sent: Tuesday, 27 October, 2020 4:15 PM
To: yocto@...
Cc: otavio@...; yi.zhao@...; Sangal, Apoorv
<apoorv.sangal@...>; Yeoh, Ee Peng <ee.peng.yeoh@...>; Chan,
Aaron Chun Yew <aaron.chun.yew.chan@...>;
richard.purdie@...; akuster808@...;
sjolley.yp.pm@...; Jain, Sangeeta <sangeeta.jain@...>
Subject: QA notification for completed autobuilder build (yocto-3.2.rc2)


A build flagged for QA (yocto-3.2.rc2) was completed on the autobuilder and is
available at:


https://autobuilder.yocto.io/pub/releases/yocto-3.2.rc2


Build hash information:

bitbake: fec2b85689bba1d26ad6f376bc11cc29bb27cbe5
meta-arm: 2d3ded053ae0774b9c7254bdc084451438b2150a
meta-gplv2: 6e8e969590a22a729db1ff342de57f2fd5d02d43
meta-intel: 4ee7bc0ab408db7388374e86920ffa378b7b4535
meta-kernel: dbf8bdfa6683404e5071feb47ef6aa347cab1b01
meta-mingw: d2809d7c93bdb46014e1f8b3b0a4f42030078905
oecore: d3114ca369792201a5316c1ede29eb72f0868d35
poky: 5d75168a13d00253460020e536b2a87833ec67d2



This is an automated message from the Yocto Project Autobuilder
Git: git://git.yoctoproject.org/yocto-autobuilder2
Email: richard.purdie@...




Re: #yocto #yocto

Monsees, Steven C (US)
 


Thanks you, that was the issue...