On 1/5/2026 5:36 PM, Andrew Davis wrote:
On 1/5/26 4:23 PM, Ryan Eatmon wrote:
This one may not work. This assumes that you have ti-test intstalled
(which not all images do). And without ti-test in the image, then you
cannot telnet to the board during test.
Why would you need to telnet onto a board to check on test if you are
not testing? If you are testing, then you would have ti-test.
The base image is kept small to do network based tests. They then
install the ti-test package from the NAS. But that assumes that the
test framework could telnet to the board after boot in order to run
commands... That's the scenario I'm thinking of.
The best solution is to update all of the tests to use ssh, but that
still means we are still hardcoding something in the file system to
allow connecting in a bad way.
What if we also combined the above with a variable that we set in the
local.conf during our builds, but is off by default. And that varible
override would make us include the ti-test-required. We could even just
add that setting to the local.conf...
Removing this from images that are not specifically meant for use by our
test automation is 100% intentional. Right now anyone can telnet into,
as root, without a password, all of our images. As much as we love to claim
no one should be using these images as a base for their production image,
absolutly every single customer is anyway. Which means we have a huge
security foot-gun here, and customers *will* end up shipping devices with
this massive security issue.
Andrew
On 1/5/2026 4:19 PM, Andrew Davis wrote:
These are only used (and only ever should be used) in testing images.
Move these out of the base distro images and only into images including
the ti-test packagegroup. Move the recipes themselves also over to
meta-arago-test.
Signed-off-by: Andrew Davis <[email protected]>
---
check_yocto_rules.json | 4 ++--
.../recipes-core/packagegroups/packagegroup-arago-base.bb | 2 --
.../initscript-telnetd/initscript-telnetd.bb | 0
.../initscript-telnetd/initscript-telnetd/telnetd | 0
.../recipes-connectivity/systemd-telnetd/systemd-telnetd.bb | 0
.../systemd-telnetd/systemd-telnetd/telnetd.service | 0
meta-arago-test/recipes-core/packagegroups/ti-test.bb | 2 ++
7 files changed, 4 insertions(+), 4 deletions(-)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb (100%)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd (100%)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb (100%)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service (100%)
diff --git a/check_yocto_rules.json b/check_yocto_rules.json
index 7b3e20db..26275421 100644
--- a/check_yocto_rules.json
+++ b/check_yocto_rules.json
@@ -27,8 +27,6 @@
"PV-1" :{
"skip_files" : [
"meta-arago-distro/recipes-connectivity/bt-enable/bt-enable.bb",
-
"meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb",
-
"meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb",
"meta-arago-distro/recipes-core/arago-gpl-notice/arago-gpl-notice.bb",
"meta-arago-distro/recipes-core/meta/meta-toolchain-arago-tisdk-server.bb",
"meta-arago-distro/recipes-core/meta/meta-toolchain-arago-tisdk.bb",
@@ -38,6 +36,8 @@
"meta-arago-extras/recipes-extended/sysrepo/nw-configurator.bb",
"meta-arago-extras/recipes-multimedia/gst-plugins-ti/gstreamer1.0-plugins-ducati_git.bb",
"meta-arago-extras/recipes-multimedia/gst-plugins-ti/gstreamer1.0-plugins-vpe_git.bb"
+
"meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb",
+
"meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb",
]
}
}
diff --git
a/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb b/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb
index b80697e5..d36b4397 100644
---
a/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb
+++
b/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb
@@ -16,8 +16,6 @@ ARAGO_BASE = "\
mtd-utils \
mtd-utils-ubifs \
curl \
- initscript-telnetd \
- systemd-telnetd \
ethtool \
bash \
opkg-bash-completion \
diff --git
a/meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb b/meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
rename to
meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
diff --git
a/meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd b/meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
rename to
meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
diff --git
a/meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb b/meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb
rename to
meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb
diff --git
a/meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service b/meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
rename to
meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
diff --git a/meta-arago-test/recipes-core/packagegroups/ti-test.bb
b/meta-arago-test/recipes-core/packagegroups/ti-test.bb
index 22957218..ebac81c2 100644
--- a/meta-arago-test/recipes-core/packagegroups/ti-test.bb
+++ b/meta-arago-test/recipes-core/packagegroups/ti-test.bb
@@ -22,6 +22,7 @@ TI_TEST_BASE = "\
hwspinlocktest \
hdparm \
i2c-tools \
+ initscript-telnetd \
iozone3 \
iproute2-tc \
iproute2-devlink \
@@ -57,6 +58,7 @@ TI_TEST_BASE = "\
stress \
stress-ng \
strongswan \
+ systemd-telnetd \
tcpdump \
v4l-utils \
xdp-tools-arago \
--
Ryan Eatmon [email protected]
-----------------------------------------
Texas Instruments, Inc. - LCPD - MGTS
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#16930):
https://lists.yoctoproject.org/g/meta-arago/message/16930
Mute This Topic: https://lists.yoctoproject.org/mt/117096038/21656
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/meta-arago/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
