Re: Yocto with xtensa
Jack Daniels <onyx22574@...>
Hello Khem, Thank you for the information. Is it about adding support for the xtensa build system (toolchain)? Is it work for heterogeneous SoC (CPU/ARM + DSP/xtensa) as well? Thank you. BR/J
On Thu, May 13, 2021 at 1:07 AM Khem Raj <raj.khem@...> wrote: Hello Jack,
|
|
Re: Yocto Zeus : facing error regarding hostapd
#zeus
Zoran
Hello Rohit,
toggle quoted messageShow quoted text
It is a good find. I also googled for the error, and found this as an explanation: https://www.yoctoproject.org/pipermail/yocto/2019-February/044153.html I included Alex (Kanavin), who created the above mail. Maybe Alex can give more light on the problem? In the meantime, you should explore (by similarities) this pointer in very details: https://github.com/Xilinx/meta-virtualization/issues/4#issuecomment-590532621 Zoran _______
On Thu, May 13, 2021 at 8:25 AM rohit jadhav <rohitbjadhav1@...> wrote:
|
|
Re: Yocto Zeus : facing error regarding hostapd
#zeus
rohit jadhav
Hi Zoran, log.do_rootfs.31340is linked to log.do_rootfs I have checked with ls command, So both files are identical. While surfing I found similar thread but its for different package its as follows : Can you please help out with this for our Package Hostapd ? Thanks and Regards Rohit
On Thu, May 13, 2021 at 10:18 AM Zoran Stojsavljevic <zoran.stojsavljevic@...> wrote: From the log log.do_rootfs.31340 file, there are the following:
|
|
Re: [meta-raspberrypi][PATCH] 99-com.rules: fix error invalid substitution type
Changqing Li
On 5/13/21 11:48 AM, Khem Raj wrote:
[Please note: This e-mail is from an EXTERNAL e-mail address]ok Signed-off-by: Changqing Li <changqing.li@...>
|
|
Re: Yocto Zeus : facing error regarding hostapd
#zeus
Zoran
From the log log.do_rootfs.31340 file, there are the following:
toggle quoted messageShow quoted text
[1] ERROR: Postinstall scriptlets of ['hostapd'] have failed. HOSTAP stands for: HOST Access Point Daemon. I could not conclude too much from: https://en.wikipedia.org/wiki/Hostapd It is kind of a hot spot, as my best understanding is. [2] Details of the failure are in /home/tel/imx_yocto_bsp_Zeus/Yocto_setup/build_imx6ull/tmp/work/imx6ull14x14evk-poky-linux-gnueabi/core-image-minimal/1.0-r0/temp/log.do_rootfs. So, my best guess, looking into log.do_rootfs will tell us much more. Please, attach this one for our review as well. Thank you, Zoran _______
On Wed, May 12, 2021 at 5:29 PM rohit jadhav <rohitbjadhav1@...> wrote:
|
|
Re: [meta-raspberrypi][PATCH] 99-com.rules: fix error invalid substitution type
On 5/12/21 8:42 PM, Changqing Li wrote:
From: Changqing Li <changqing.li@...>Can you create a pull request on github for this please. Signed-off-by: Changqing Li <changqing.li@...>
|
|
[meta-raspberrypi][PATCH] 99-com.rules: fix error invalid substitution type
Changqing Li
From: Changqing Li <changqing.li@...>
fix below error: /etc/udev/rules.d/99-com.rules:10 Invalid value "/bin/sh -c 'ALIASES=/proc/device-tree/aliases; if cmp -s $ALIASES/uart0 $ALIASES/serial0; then echo 0;elif cmp -s $ALIASES/uart0 $ALIASES/serial1; then echo 1; else exit 1; fi'" for PROGRAM (char 58: invalid substitution type) Signed-off-by: Changqing Li <changqing.li@...> --- recipes-core/udev/udev-rules-rpi/99-com.rules | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/recipes-core/udev/udev-rules-rpi/99-com.rules b/recipes-core/udev/udev-rules-rpi/99-com.rules index 6bf019b..ddd1e17 100644 --- a/recipes-core/udev/udev-rules-rpi/99-com.rules +++ b/recipes-core/udev/udev-rules-rpi/99-com.rules @@ -1,8 +1,8 @@ KERNEL=="ttyAMA[01]", PROGRAM="/bin/sh -c '\ ALIASES=/proc/device-tree/aliases; \ - if cmp -s $ALIASES/uart0 $ALIASES/serial0; then \ + if cmp -s $$ALIASES/uart0 $$ALIASES/serial0; then \ echo 0;\ - elif cmp -s $ALIASES/uart0 $ALIASES/serial1; then \ + elif cmp -s $$ALIASES/uart0 $$ALIASES/serial1; then \ echo 1; \ else \ exit 1; \ @@ -11,9 +11,9 @@ KERNEL=="ttyAMA[01]", PROGRAM="/bin/sh -c '\ KERNEL=="ttyS0", PROGRAM="/bin/sh -c '\ ALIASES=/proc/device-tree/aliases; \ - if cmp -s $ALIASES/uart1 $ALIASES/serial0; then \ + if cmp -s $$ALIASES/uart1 $$ALIASES/serial0; then \ echo 0; \ - elif cmp -s $ALIASES/uart1 $ALIASES/serial1; then \ + elif cmp -s $$ALIASES/uart1 $$ALIASES/serial1; then \ echo 1; \ else \ exit 1; \ -- 2.17.1
|
|
[meta-security][PATCH 6/6] packagegroup-core-security: add aide and ossec
Signed-off-by: Armin Kuster <akuster808@...>
--- recipes-core/packagegroup/packagegroup-core-security.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index 54b8297..0bddf64 100644 --- a/recipes-core/packagegroup/packagegroup-core-security.bb +++ b/recipes-core/packagegroup/packagegroup-core-security.bb @@ -70,6 +70,8 @@ SUMMARY_packagegroup-security-ids = "Security Intrusion Detection systems" RDEPENDS_packagegroup-security-ids = " \ samhain-standalone \ ${@bb.utils.contains_any("TUNE_FEATURES", "ppc7400 riscv32 riscv64", "", " suricata",d)} \ + ossec-hids \ + aide \ " SUMMARY_packagegroup-security-mac = "Security Mandatory Access Control systems" -- 2.25.1
|
|
[meta-security][PATCH 5/6] aide: Add another ids
Signed-off-by: Armin Kuster <akuster808@...>
--- recipes-ids/aide/aide/aide.conf | 94 +++++++++++++++++++++++++++++++++ recipes-ids/aide/aide_0.17.3.bb | 41 ++++++++++++++ 2 files changed, 135 insertions(+) create mode 100644 recipes-ids/aide/aide/aide.conf create mode 100644 recipes-ids/aide/aide_0.17.3.bb diff --git a/recipes-ids/aide/aide/aide.conf b/recipes-ids/aide/aide/aide.conf new file mode 100644 index 0000000..2c99e07 --- /dev/null +++ b/recipes-ids/aide/aide/aide.conf @@ -0,0 +1,94 @@ +# Example configuration file for AIDE. + +@@define DBDIR /usr/lib/aide +@@define LOGDIR /usr/lib/aide/logs + +# The location of the database to be read. +database_in=file:@@{DBDIR}/aide.db.gz + +# The location of the database to be written. +#database_out=sql:host:port:database:login_name:passwd:table +#database_out=file:aide.db.new +database_out=file:@@{DBDIR}/aide.db.gz + +# Whether to gzip the output to database +gzip_dbout=yes + +# Default. +log_level=warning + +report_url=file:@@{LOGDIR}/aide.log +report_url=stdout +#report_url=stderr +#NOT IMPLEMENTED report_url=mailto:root@... +#NOT IMPLEMENTED report_url=syslog:LOG_AUTH + +# These are the default rules. +# +#p: permissions +#i: inode: +#n: number of links +#u: user +#g: group +#s: size +#b: block count +#m: mtime +#a: atime +#c: ctime +#S: check for growing size +#acl: Access Control Lists +#selinux SELinux security context +#xattrs: Extended file attributes +#md5: md5 checksum +#sha1: sha1 checksum +#sha256: sha256 checksum +#sha512: sha512 checksum +#rmd160: rmd160 checksum +#tiger: tiger checksum + +#haval: haval checksum (MHASH only) +#gost: gost checksum (MHASH only) +#crc32: crc32 checksum (MHASH only) +#whirlpool: whirlpool checksum (MHASH only) + +FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256 + +#R: p+i+n+u+g+s+m+c+acl+selinux+xattrs+md5 +#L: p+i+n+u+g+acl+selinux+xattrs +#E: Empty group +#>: Growing logfile p+u+g+i+n+S+acl+selinux+xattrs + +# You can create custom rules like this. +# With MHASH... +# ALLXTRAHASHES = sha1+rmd160+sha256+sha512+whirlpool+tiger+haval+gost+crc32 +ALLXTRAHASHES = sha1+rmd160+sha256+sha512+tiger +# Everything but access time (Ie. all changes) +EVERYTHING = R+ALLXTRAHASHES + +# Sane, with multiple hashes +# NORMAL = R+rmd160+sha256+whirlpool +NORMAL = FIPSR+sha512 + +# For directories, don't bother doing hashes +DIR = p+i+n+u+g+acl+selinux+xattrs + +# Access control only +PERMS = p+i+u+g+acl+selinux + +# Logfile are special, in that they often change +LOG = > + +# Just do sha256 and sha512 hashes +LSPP = FIPSR+sha512 + +# Some files get updated automatically, so the inode/ctime/mtime change +# but we want to know when the data inside them changes +DATAONLY = p+n+u+g+s+acl+selinux+xattrs+sha256 + +# Next decide what directories/files you want in the database. + +# Check only permissions, inode, user and group for /etc, but +# cover some important files closely. +/bin NORMAL +/sbin NORMAL +/lib NORMAL diff --git a/recipes-ids/aide/aide_0.17.3.bb b/recipes-ids/aide/aide_0.17.3.bb new file mode 100644 index 0000000..522cd85 --- /dev/null +++ b/recipes-ids/aide/aide_0.17.3.bb @@ -0,0 +1,41 @@ +SUMMARY = "Advanced Intrusion Detection Environment" +HOMEPAGE = "https://aide.github.io" +LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" +LICENSE = "GPL-2.0" + +DEPENDS = "bison-native libpcre" + +SRC_URI = "https://github.com/aide/aide/releases/download/v${PV}/${BPN}-${PV}.tar.gz \ + file://aide.conf" + +SRC_URI[sha256sum] = "a2eb1883cafaad056fbe43ee1e8ae09fd36caa30a0bc8edfea5d47bd67c464f8" + +inherit autotools pkgconfig + +PACKAGECONFIG ??=" mhash zlib e2fsattrs \ + ${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'selinux audit', '', d)} \ + ${@bb.utils.contains('DISTRO_FEATURES', 'xattr', 'xattr', '', d)} \ + " +PACKAGECONFIG[selinux] = "--with-selinux, --without-selinux, libselinux, libselinux" +PACKAGECONFIG[zlib] = "--with-zlib, --without-zlib, zlib, zlib " +PACKAGECONFIG[xattr] = "--with-xattr, --without-xattr, attr, attr" +PACKAGECONFIG[curl] = "--with-curl, --without-curl, curl, libcurl" +PACKAGECONFIG[audit] = "--with-audit, --without-audit," +PACKAGECONFIG[gcrypt] = "--with-gcrypt, --without-gcrypt, libgcrypt, libgcrypt" +PACKAGECONFIG[mhash] = "--with-mhash, --without-mhash, libmhash, libmhash" +PACKAGECONFIG[e2fsattrs] = "--with-e2fsattrs, --without-e2fsattrs, e2fsprogs, e2fsprogs" + +do_install_append () { + install -d ${D}${libdir}/${PN}/logs + install -d ${D}${sysconfdir} + install ${WORKDIR}/aide.conf ${D}${sysconfdir}/ +} + +CONF_FILE = "${sysconfdir}/aide.conf" + +FILES_${PN} += "${libdir}/${PN} ${sysconfdir}/aide.conf" + +pkg_postinst_ontarget_${PN} () { + /usr/bin/aide -i +} +RDPENDS_${PN} = "bison, libpcre" -- 2.25.1
|
|
[meta-security][PATCH 4/6] Apparmor: fix multi config build issue.
Signed-off-by: Armin Kuster <akuster808@...>
--- recipes-mac/AppArmor/apparmor_3.0.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/recipes-mac/AppArmor/apparmor_3.0.bb b/recipes-mac/AppArmor/apparmor_3.0.bb index 015205d..d9c3e4d 100644 --- a/recipes-mac/AppArmor/apparmor_3.0.bb +++ b/recipes-mac/AppArmor/apparmor_3.0.bb @@ -177,8 +177,9 @@ SYSTEMD_AUTO_ENABLE ?= "enable" PACKAGES += "mod-${PN}" -FILES_${PN} += "/lib/apparmor/ /lib/security/ ${sysconfdir}/apparmor ${PYTHON_SITEPACKAGES_DIR}" +FILES_${PN} += "/lib/apparmor/ /lib/security/ ${sysconfdir}/apparmor ${nonarch_libdir}/${PYTHON_DIR}/site-packages" FILES_mod-${PN} = "${libdir}/apache2/modules/*" +FILES_${PN}-dbg += "/lib/security/" DEPENDS_append_libc-musl = " fts " RDEPENDS_${PN}_libc-musl += "musl-utils" -- 2.25.1
|
|
[meta-security][PATCH 3/6] packagegroup-core-security: fix typo for mips
Signed-off-by: Armin Kuster <akuster808@...>
--- recipes-core/packagegroup/packagegroup-core-security.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index 6d2dd7c..54b8297 100644 --- a/recipes-core/packagegroup/packagegroup-core-security.bb +++ b/recipes-core/packagegroup/packagegroup-core-security.bb @@ -79,8 +79,7 @@ RDEPENDS_packagegroup-security-mac = " \ ${@bb.utils.contains("DISTRO_FEATURES", "smack", "smack", "",d)} \ " -RDEPENDS_packagegroup-security-mac_remove_mips64 = "apparmor" -RDEPENDS_packagegroup-security-mac_remove_mips64le = "apparmor" +RDEPENDS_packagegroup-security-mac_remove_mipsarch = "apparmor" RDEPENDS_packagegroup-meta-security-ptest-packages = "\ ptest-runner \ -- 2.25.1
|
|
[meta-security][PATCH 2/6] ibmtpm2tss: update to tip
Signed-off-by: Armin Kuster <akuster808@...>
--- meta-tpm/recipes-tpm2/ibmtpm2tss/ibmtpm2tss_1.6.0.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta-tpm/recipes-tpm2/ibmtpm2tss/ibmtpm2tss_1.6.0.bb b/meta-tpm/recipes-tpm2/ibmtpm2tss/ibmtpm2tss_1.6.0.bb index 4d9b554..ae8974b 100644 --- a/meta-tpm/recipes-tpm2/ibmtpm2tss/ibmtpm2tss_1.6.0.bb +++ b/meta-tpm/recipes-tpm2/ibmtpm2tss/ibmtpm2tss_1.6.0.bb @@ -17,11 +17,13 @@ DEPENDS = "openssl ibmswtpm2" inherit autotools pkgconfig -SRCREV = "3e736f712ba53c8f06e66751f60fae428fd2e20f" +SRCREV = "c4e131e34ec0ed09411aa3bc76f76129ef881573" SRC_URI = " git://git.code.sf.net/p/ibmtpm20tss/tss;nobranch=1 \ file://0001-utils-12-Makefile.am-expand-wildcards-in-prereqs.patch \ " +UPSTREAM_CHECK_COMMITS = "1" + EXTRA_OECONF = "--disable-tpm-1.2" S = "${WORKDIR}/git" -- 2.25.1
|
|
[meta-security][PATCH 1/6] ibmswtpm2: update to 1661
Drop patch now included in updated
Signed-off-by: Armin Kuster <akuster808@...> --- .../ibmswtpm2/files/fix-wrong-cast.patch | 27 ------------------- .../{ibmswtpm2_1637.bb => ibmswtpm2_1661.bb} | 10 +++---- 2 files changed, 4 insertions(+), 33 deletions(-) delete mode 100644 meta-tpm/recipes-tpm2/ibmswtpm2/files/fix-wrong-cast.patch rename meta-tpm/recipes-tpm2/ibmswtpm2/{ibmswtpm2_1637.bb => ibmswtpm2_1661.bb} (69%) diff --git a/meta-tpm/recipes-tpm2/ibmswtpm2/files/fix-wrong-cast.patch b/meta-tpm/recipes-tpm2/ibmswtpm2/files/fix-wrong-cast.patch deleted file mode 100644 index f2938e0..0000000 --- a/meta-tpm/recipes-tpm2/ibmswtpm2/files/fix-wrong-cast.patch +++ /dev/null @@ -1,27 +0,0 @@ -Fix strict aliasing issue of gcc10 - -fixes: - -TpmFail.c: In function 'TpmLogFailure': -TpmFail.c:217:23: error: dereferencing type-punned pointer will break strict-aliasing rules [-Werror=strict-aliasing] - 217 | s_failFunction = *(UINT32 *)&function; /* kgold */ - | ^~~~~~~~~~~~~~~~~~~ -cc1: all warnings being treated as errors - -Upstream-Status: Submitted - -Signed-off-by: Jens Rehsack <sno@...> - -Index: src/TpmFail.c -=================================================================== ---- src.orig/TpmFail.c 2020-09-10 15:43:57.085063875 +0200 -+++ src/TpmFail.c 2020-09-10 15:48:35.563302634 +0200 -@@ -214,7 +214,7 @@ - // On a 64-bit machine, this may truncate the address of the string - // of the function name where the error occurred. - #if FAIL_TRACE -- s_failFunction = *(UINT32 *)&function; /* kgold */ -+ memcpy(&s_failFunction, function, sizeof(uint32_t)); /* kgold */ - s_failLine = line; - #else - s_failFunction = 0; diff --git a/meta-tpm/recipes-tpm2/ibmswtpm2/ibmswtpm2_1637.bb b/meta-tpm/recipes-tpm2/ibmswtpm2/ibmswtpm2_1661.bb similarity index 69% rename from meta-tpm/recipes-tpm2/ibmswtpm2/ibmswtpm2_1637.bb rename to meta-tpm/recipes-tpm2/ibmswtpm2/ibmswtpm2_1661.bb index 301980d..7ea40a8 100644 --- a/meta-tpm/recipes-tpm2/ibmswtpm2/ibmswtpm2_1637.bb +++ b/meta-tpm/recipes-tpm2/ibmswtpm2/ibmswtpm2_1661.bb @@ -17,13 +17,11 @@ DEPENDS = "openssl" SRC_URI = "https://sourceforge.net/projects/ibmswtpm2/files/ibmtpm${PV}.tar.gz \ file://tune-makefile.patch \ - file://fix-wrong-cast.patch \ " -SRC_URI[md5sum] = "43b217d87056e9155633925eb6ef749c" -SRC_URI[sha256sum] = "dd3a4c3f7724243bc9ebcd5c39bbf87b82c696d1c1241cb8e5883534f6e2e327" -SRC_URI[sha1sum] = "ab4b94079e57a86996991e8a2b749ce063e4ad3e" -SRC_URI[sha384sum] = "bbef16a934853ce78cba7ddc766aa9d7ef3cde3430a322b1be772bf3ad4bd6d413ae9c4de21bc1a4879d17dfe2aadc1d" -SRC_URI[sha512sum] = "007aa415cccf19a2bcf789c426727dc4032dcb04cc9d11eedc231d2add708c1134d3d5ee5cfbe7de68307c95fff7a30bd306fbd8d53c198a5ef348440440a6ed" + +SRC_URI[sha256sum] = "55145928ad2b24f34be6a0eacf9fb492e10e0ea919b8428c721fa970e85d6147" + +UPSTREAM_CHECK_REGEX = "libtpm(?P<pver>).tar.gz" S = "${WORKDIR}/src" -- 2.25.1
|
|
[meta-security][v2][PATCH] suricata: 4.1.x add UPSTREAM_CHECK_URI
Signed-off-by: Armin Kuster <akuster808@...>
--- recipes-ids/suricata/suricata_4.1.10.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-ids/suricata/suricata_4.1.10.bb b/recipes-ids/suricata/suricata_4.1.10.bb index 3f7beaa..bf08843 100644 --- a/recipes-ids/suricata/suricata_4.1.10.bb +++ b/recipes-ids/suricata/suricata_4.1.10.bb @@ -12,6 +12,8 @@ SRC_URI += " \ file://run-ptest \ " +UPSTREAM_CHECK_URI = "www.openinfosecfoundation.org/download" + inherit autotools-brokensep pkgconfig python3-dir systemd ptest CFLAGS += "-D_DEFAULT_SOURCE -fcommon" -- 2.25.1
|
|
Re: Yocto with xtensa
Hello Jack,
toggle quoted messageShow quoted text
I think we do not have support for Xtensa architecture working out of box upstream. Although it should be possible to add it with little effort, but no one has spun patches to do so thus far. Thanks -Khem
On Wed, May 12, 2021 at 1:29 PM Jack Daniels <onyx22574@...> wrote:
|
|
Re: FW: Yocto Distro Testing Plan
Richard Purdie
On Wed, 2021-05-12 at 18:48 +0000, Kraft, George wrote:
Could someone point me to a wiki on how yocto testing/QA/conformance is done?The wiki is a bit out of date, sorry. We have been working on documenting our testing in a manual: http://docs.yoctoproject.org/test-manual/index.html Short summary is you can see builds here: https://autobuilder.yoctoproject.org/typhoon/#/ and an example release test report: http://downloads.yoctoproject.org/releases/yocto/yocto-3.3/testreport.txt Cheers, Richard
|
|
Yocto with xtensa
onyx22574@...
Dears, I am looking for a way to include sample code for DSP (xtensa) with Yocto/Linux. what would be the procedure to include such a code and eventually interprocessor communication between xtensa core and CPU under Yocto/Linux? Thank you. BR/J
|
|
Re: [OE-core] [yocto] Yocto Project Status WW18`21
Zoran
We have discussed extending it but we currently only have the fundingReally/echt??? Why? ;) Zoran _______ On Wed, May 5, 2021 at 12:33 AM Richard Purdie <richard.purdie@...> wrote:
|
|
FW: Yocto Distro Testing Plan
Kraft, George <George.Kraft@...>
Could someone point me to a wiki on how yocto testing/QA/conformance is done? The Distro Testing Plan wiki seems outdated, and my inquiry to Jose bounced.
Thanks,
George (gk4)
From: Kraft, George
Sent: Wednesday, May 12, 2021 8:34 AM To: jose.XXXX Subject: Yocto Distro Testing Plan
Jose,
I’ve been reading the Distro Testing Plan, and I tried following the instructions to git clone git.yoctoproject.org/git/yocto-autobuilder, but that repo is empty with just a README. Per the README, when I tried to git clone yocto-autobuilder2 or yocto-autobuilder-helper then the connections timed out for each.
Can you tell me what the state of testing is for Yocto?
Thanks,
Distinguished Member Technical Staff Dell EMC, ISG Embedded Systems Engineering
|
|
Re: Understanding kernel patching in linux-yocto
Diego Santa Cruz
toggle quoted messageShow quoted text
-----Original Message-----For what its worth I am using KMETA_EXTERNAL_BSPS in a BSP definition file in an in-recipe kernel metadata tree (but I guess it could be off recipe too), and that metadata tree includes scc files from yocto-kernel-cache, the trick is to add the nopatch tag when including scc files from yocto-kernel-cache for which do not want or need the patches. With KMETA_EXTERNAL_BSPS was added I switched to that and removed the equivalent of your KERNEL_FEATURES_append = " bsp/rockchip/nanopi-m4-${LINUX_KERNEL_TYPE}.scc" that is kind of confusing and includes things twice. -- Diego Santa Cruz, PhD Technology Architect spinetix.com
|
|