Re: [OE-core] [PATCH] eudev: create static-nodes in init script

2022-05-19 Thread Alex Kiernan
; install -d ${D}${sysconfdir}/init.d > install -m 0755 ${WORKDIR}/init ${D}${sysconfdir}/init.d/udev > sed -i s%@UDEVD@%${base_sbindir}/udevd% ${D}${sysconfdir}/init.d/udev > + sed -i s%@KMOD@%${base_sbindir}/kmod% ${D}${sysconfdir}/init.d/udev > >

Re: [OE-core] [PATCH] cve-check: Fix report generation

2022-05-17 Thread Alex Kiernan
Tested-by: Alex Kiernan On Tue, May 17, 2022 at 8:55 AM Ernst Sjöstrand wrote: > > Reviewed-by: Ernst Sjöstrand > > Den tis 17 maj 2022 kl 08:01 skrev Marta Rybczynska : >> >> The addition of summary output caused two issues: error when building >> an image

[OE-Core][PATCH 3/3] eudev: Use PACKAGE_BEFORE_PN/${PN}

2022-05-16 Thread Alex Kiernan
Use PACKAGE_BEFORE_PN for packages which need to capture files early, switch to idiomatic ${PN} for additional packages. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-core/udev/eudev_3.2.11.bb | 13 ++--- 1 file changed, 6 insertions(+), 7 deletions(-) diff

[OE-Core][PATCH 1/3] eudev: Convert dependencies to PACKAGECONFIG

2022-05-16 Thread Alex Kiernan
GObject support was dropped in 252150e181c5 ("src/gudev: remove Gobject libudev support."), but some gir support appears to still exist. Fill out PACKAGECONFIG options. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-core/udev/eudev_3.2.11.bb | 9 ++-

[OE-Core][PATCH 2/3] eudev: Cleanup redundant configuration

2022-05-16 Thread Alex Kiernan
hid2hci moved to bluez4 in 2011. The FILES changes for ${PN} and ${PN}-dev only added existing defaults into the set. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-core/udev/eudev_3.2.11.bb | 9 + 1 file changed, 1 insertion(+), 8 deletions(-) diff --git

[OE-Core][PATCH] cve-check: Fix rootfs CVE generation

2022-05-16 Thread Alex Kiernan
se ''}" Exception: NameError: name 'json_summary_name' is not defined Fixes: f2987891d315 ("cve-check: add JSON format to summary output") Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/classes/cve-check.bbclass | 6 +++--- 1 file changed, 3 insertions(+), 3 deleti

Re: [OE-core] [PATCH] eudev: create static nodes from modules

2022-05-16 Thread Alex Kiernan
On Mon, May 16, 2022 at 9:07 AM Alex Kiernan via lists.openembedded.org wrote: > > Untested, but if its useful (I suspect cut & paste will have broken spaces): > > diff --git a/meta/recipes-core/udev/eudev/init > b/meta/recipes-core/udev/eudev/init > index c60dbbf6d51

Re: [OE-core] [PATCH] eudev: create static nodes from modules

2022-05-16 Thread Alex Kiernan
@ -51,6 +83,8 @@ case "$1" in # make_extra_nodes kill_udevd > "/dev/null" 2>&1 +make_static_nodes + # trigger the sorted events [ -e /proc/sys/kernel/hotplug ] && printf '\0\n' >/proc/sys/kernel/hotplug @UDEVD@ -d On Mon, May 16,

Re: [OE-core] [PATCH] eudev: create static nodes from modules

2022-05-15 Thread Alex Kiernan
On Fri, May 13, 2022 at 2:42 AM Li, Changqing wrote: > > > > > From: richard.pur...@linuxfoundation.org > Sent: Thursday, May 12, 2022 6:33 PM > To: Alex Kiernan ; Li, Changqing > > Cc: Patches and discussions about the oe-core layer

Re: [OE-core] [PATCH] eudev: create static nodes from modules

2022-05-12 Thread Alex Kiernan
in a > sane state */ > + if (arg_daemonize) { > +-- > +2.25.1 > + > diff --git a/meta/recipes-core/udev/eudev_3.2.11.bb > b/meta/recipes-core/udev/eudev_3.2.11.bb > index 841039f6d7..deb6c90a82 100644 > --- a/meta/recipes-core/udev/eudev_3.2.11.bb >

[OE-Core][PATCH 3/4] pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE

2022-05-07 Thread Alex Kiernan
The CVE product name for PyPI packages is (usually) the same as the PyPI package name (and not our recipe name), so use that as the default. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/classes/pypi.bbclass | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/classes

[OE-Core][PATCH 4/4] openssh: Add openssh-sftp-server to openssh RDEPENDS

2022-05-07 Thread Alex Kiernan
OpenSSH 9.0 uses sftp by default as the transport for scp, add in sftp-server so that this works as expected for users, rather than being left with a confusing "scp: Connection closed" message. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-connectivi

[OE-Core][PATCH 2/4] eudev: Add PACKAGECONFIG for manpages & selinux

2022-05-07 Thread Alex Kiernan
Drop DEPENDS on libxslt-native which is unused as the tarball includes the manpages and the build process never invokes the script which regenerates them (make.sh) Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-core/udev/eudev_3.2.11.bb | 11 +++ 1 file

[OE-Core][PATCH 1/4] eudev: Upgrade 3.2.10 -> 3.2.11

2022-05-07 Thread Alex Kiernan
upstream. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- ...-rules-remove-firmware-loading-rules.patch | 28 -- ...ve-userspace-firmware-loading-suppor.patch | 364 -- .../udev/{eudev_3.2.10.bb => eudev_3.2.11.bb} | 12 +- 3 files changed, 6 insertions(+),

Re: [OE-Core][PATCH 1/4] eudev: Upgrade 3.2.10 -> 3.2.11

2022-05-07 Thread Alex Kiernan
Will do. On Sat, May 7, 2022 at 8:33 AM Alexander Kanavin wrote: > > Thanks, can you check that 'devtool latest-version eudev' works > please? And fix UPSTREAM_CHECK_URI accordingly. > > Alex > > On Sat, 7 May 2022 at 08:45, Alex Kiernan wrote: > > > > T

[OE-Core][PATCH 4/4] openssh: Add openssh-sftp-server to openssh RDEPENDS

2022-05-07 Thread Alex Kiernan
OpenSSH 9.0 uses sftp by default as the transport for scp, add in sftp-server so that this works as expected for users, rather than being left with a confusing "scp: Connection closed" message. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-connectivi

[OE-Core][PATCH 3/4] pypi.bbclass: Set CVE_PRODUCT to PYPI_PACKAGE

2022-05-07 Thread Alex Kiernan
The CVE product name for PyPI packages is (usually) the same as the PyPI package name (and not our recipe name), so use that as the default. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/classes/pypi.bbclass | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/classes

[OE-Core][PATCH 2/4] eudev: Add PACKAGECONFIG for manpages & selinux

2022-05-07 Thread Alex Kiernan
Drop DEPENDS on libxslt-native which is unused as the tarball includes the manpages and the build process never invokes the script which regenerates them (make.sh) Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-core/udev/eudev_3.2.11.bb | 10 +++--- 1 file changed

[OE-Core][PATCH 1/4] eudev: Upgrade 3.2.10 -> 3.2.11

2022-05-07 Thread Alex Kiernan
upstream. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- ...-rules-remove-firmware-loading-rules.patch | 28 -- ...ve-userspace-firmware-loading-suppor.patch | 364 -- .../udev/{eudev_3.2.10.bb => eudev_3.2.11.bb} | 9 +- 3 files changed, 3 insertions(+),

[OE-Core][PATCH] eudev: Remove unused files

2022-04-28 Thread Alex Kiernan
These files appear to have been first commented out from do_install in 14cba802f2dd ("udev: Add 141") and then removed completely in 54daad852fc3 ("udev: remove commented code from init script (no code changes)"). Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --

Re: [OE-core] [PATCH] rust: update 1.59.0 -> 1.60.0

2022-04-26 Thread Alex Kiernan
ailable: 1.60.0 > When I was cherry-picking this back for thud (don't ask) it looked like the the version bump in tcmode-default.inc was missing. -- Alex Kiernan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164867): https://lists.openembedded.or

[OE-core][PATCH 2/2] wpa-supplicant: Package shared library into wpa-supplicant-lib

2022-04-22 Thread Alex Kiernan
When CONFIG_BUILD_WPA_CLIENT_SO is enabled, package the library into wpa-supplicant-lib. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- .../wpa-supplicant/wpa-supplicant_2.10.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/recipes

[OE-core][PATCH 1/2] wpa-supplicant: Install wpa_passphrase when not disabled

2022-04-22 Thread Alex Kiernan
As part of fixing CONFIG_NO_WPA_PASSPHRASE, whilst wpa_passphrase gets built, its not installed during `make install`. Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- ...all-wpa_passphrase-when-not-disabled.patch | 33 +++ .../wpa-supplicant/wpa-supplicant_2.10.bb

Re: [OE-core] [meta-oe][PATCH 7/8] wpa-supplicant: Simplify build/install flow

2022-04-21 Thread Alex Kiernan
On Thu, Apr 21, 2022 at 9:20 AM Köry Maincent wrote: > > Hello Alex, > > On Tue, 12 Apr 2022 14:03:14 +0100 > "Alex Kiernan" wrote: > > > The build/install steps for wpa-supplicant support CFLAGS and an install > > target, so use these rather

[OE-core] CVE-2022-24765 (Uncontrolled search for the Git directory in Git)

2022-04-13 Thread Alex Kiernan
;) to fail as the check for crossing uid boundaries is triggered and your .git directory isn't found. -- Alex Kiernan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164325): https://lists.openembedded.org/g/openembedded-core/message/164325 Mute This To

Re: [OE-core] [meta-oe][PATCH] kernel: Delete unused KERNEL_LOCALVERSION variable

2022-04-13 Thread Alex Kiernan
On Wed, Apr 13, 2022 at 10:29 AM Luca Ceresoli wrote: > > Hello Alex, > > Il giorno Tue, 12 Apr 2022 14:08:18 +0100 > "Alex Kiernan" ha scritto: > > > This has been unused since: > > > > commit fb61dc1430f81ae2ee59766ffab8404fd79ff1b1 > > A

[OE-core] [meta-oe][PATCH] kernel: Delete unused KERNEL_LOCALVERSION variable

2022-04-12 Thread Alex Kiernan
Signed-off-by: Alex Kiernan --- meta/classes/kernel.bbclass | 2 -- 1 file changed, 2 deletions(-) diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass index 7ca847f0a341..cd900edd5cb6 100644 --- a/meta/classes/kernel.bbclass +++ b/meta/classes/kernel.bbclass @@ -221,8 +221,6

[OE-core] [meta-oe][PATCH 8/8] wpa-supplicant: Package dynamic modules

2022-04-12 Thread Alex Kiernan
If CONFIG_DYNAMIC_EAP_METHODS and some modules are set to `dyn` ensure these are packaged as part of the build. Signed-off-by: Alex Kiernan --- .../wpa-supplicant/wpa-supplicant_2.10.bb | 22 ++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/meta/recipes

[OE-core] [meta-oe][PATCH 6/8] wpa-supplicant: Use upstream defconfig

2022-04-12 Thread Alex Kiernan
The copy of defconfig we were carrying was from 2014 and very out of date; drop it and use the upstream version with appropriate edits for our PACKAGECONFIG. Switch PACKAGECONFIG to using a default (?=) rather than weak default (??=) as per current recommendation. Signed-off-by: Alex Kiernan

[OE-core] [meta-oe][PATCH 7/8] wpa-supplicant: Simplify build/install flow

2022-04-12 Thread Alex Kiernan
-by: Alex Kiernan --- .../wpa-supplicant/wpa-supplicant_2.10.bb | 14 +++--- 1 file changed, 3 insertions(+), 11 deletions(-) diff --git a/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.10.bb b/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.10.bb index

[OE-core] [meta-oe][PATCH 5/8] wpa-supplicant: Build static library if not DISABLE_STATIC

2022-04-12 Thread Alex Kiernan
Build the static library if the configuration indicates we should. Signed-off-by: Alex Kiernan --- .../wpa-supplicant/wpa-supplicant_2.10.bb | 11 +++ 1 file changed, 11 insertions(+) diff --git a/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.10.bb b/meta

[OE-core] [meta-oe][PATCH 4/8] wpa-supplicant: Backport libwpa/clean build fixes

2022-04-12 Thread Alex Kiernan
Enabling CONFIG_BUILD_WPA_CLIENT_SO or CONFIG_NO_WPA_PASSPHRASE do nothing in the released 2.10 wpa-supplicant; backport the fixes for this. Also backport the fixes for `make clean` when `wpa_passphrase` is built. Signed-off-by: Alex Kiernan --- ...options-for-libwpa_client.so-and-wpa.patch

[OE-core] [meta-oe][PATCH 3/8] wpa-supplicant: Use PACKAGE_BEFORE_PN/${PN}

2022-04-12 Thread Alex Kiernan
Use PACKAGE_BEFORE_PN for packages which need to capture files early, switch to idiomatic ${PN} for additional packages. Signed-off-by: Alex Kiernan --- .../wpa-supplicant/wpa-supplicant_2.10.bb | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/meta

[OE-core] [meta-oe][PATCH 2/8] wpa-supplicant: Avoid changing directory in do_install

2022-04-12 Thread Alex Kiernan
Changing directory leads to anyone coming later needing to be explicit in their directory usage as the working directory is no longer ${B}. Signed-off-by: Alex Kiernan --- .../recipes-connectivity/wpa-supplicant/wpa-supplicant_2.10.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions

[OE-core] [meta-oe][PATCH 1/8] wpa-supplicant: Reorder/group following style guide

2022-04-12 Thread Alex Kiernan
Signed-off-by: Alex Kiernan --- .../wpa-supplicant/wpa-supplicant_2.10.bb | 41 ++- 1 file changed, 22 insertions(+), 19 deletions(-) diff --git a/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.10.bb b/meta/recipes-connectivity/wpa-supplicant/wpa-supplicant_2.10

Re: [OE-core] [PATCH] rust: fix arm64 link failures when building rust apps

2021-12-17 Thread Alex Kiernan
)); > > + > > +-// FIXME: Move outline-atomics to target definition when earliest > > supported LLVM is 12. > > +-if get_version() >= (12, 0, 0) > > +- && sess.target.llvm_target.contains("aarch64-unknown-linux") > > +-&&

Re: [OE-core] Not able to install chrony on zeus

2021-12-04 Thread Alex Kiernan
On Sat, Dec 4, 2021 at 9:15 AM mohammed aqdam wrote: > > Any help on getting ntp_4.2.8p13-r0 or resolving this dependency would be > very appreciated. > Thanks in advance. > Removing the RCONFLICTS from chrony might be sufficient. -- Alex Kiernan -=-=-=-=-=-=-=-=-=-=-=- Lin

[OE-Core][PATCH 6/7] systemd: Upgrade v246 -> v246.1

2020-08-20 Thread Alex Kiernan
that changing Storage= does not move existing data 2bbd33e476ac core: reset bus error before reuse b81504a3c76b nspawn: Fix incorrect usage of putenv cb263973acf8 man: fix typo in systemd.service 73b432e7ef21 network: fix DHCPv6 Prefix Delegation example after option rename Signed-off-by: Alex

[OE-Core][PATCH 7/7] systemd: Upgrade v246.1 -> v246.2

2020-08-20 Thread Alex Kiernan
-by: Alex Kiernan --- meta/recipes-core/systemd/systemd.inc | 2 +- .../recipes-core/systemd/{systemd_246.1.bb => systemd_246.2.bb} | 0 2 files changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-core/systemd/{systemd_246.1.bb => systemd_246.2.bb} (100%) diff

[OE-Core][PATCH 3/7] nfs-utils: Drop StandardError=syslog from systemd unit

2020-08-20 Thread Alex Kiernan
With systemd v246 the syslog target now generates a warning (and has been deprecated for some time). Drop the target and allow the default to take effect. Signed-off-by: Alex Kiernan --- meta/recipes-connectivity/nfs-utils/nfs-utils/nfs-server.service | 1 - 1 file changed, 1 deletion(-) diff

[OE-Core][PATCH 2/7] systemd: Fix path to modules-load.d et al

2020-08-20 Thread Alex Kiernan
emd/issues/16773 Signed-off-by: Alex Kiernan --- ...0001-Use-PREFIX-ROOTPREFIX-correctly.patch | 81 +++ meta/recipes-core/systemd/systemd_246.bb | 1 + 2 files changed, 82 insertions(+) create mode 100644 meta/recipes-core/systemd/systemd/0001-Use-PREFIX-ROOTPREFIX-corre

[OE-Core][PATCH 1/7] systemd: Move musl patches to SRC_URI_MUSL

2020-08-20 Thread Alex Kiernan
Supplemental musl patches for v246 were erroneously added to SRC_URI, move them to SRC_URI_MUSL. Fixes: 470c58ba4586 ("systemd: Upgrade v245.6 -> v246") Signed-off-by: Alex Kiernan --- meta/recipes-core/systemd/systemd_246.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 delet

[OE-Core][PATCH 5/7] volatile-binds: Drop StandardOutput=syslog from systemd unit

2020-08-20 Thread Alex Kiernan
With systemd v246 the syslog target now generates a warning (and has been deprecated for some time). Drop the target and allow the default to take effect. Signed-off-by: Alex Kiernan --- meta/recipes-core/volatile-binds/files/volatile-binds.service.in | 1 - 1 file changed, 1 deletion(-) diff

[OE-Core][PATCH 4/7] openssh: Drop StandardError=syslog from systemd unit

2020-08-20 Thread Alex Kiernan
With systemd v246 the syslog target now generates a warning (and has been deprecated for some time). Drop the target and allow the default to take effect. Signed-off-by: Alex Kiernan --- meta/recipes-connectivity/openssh/openssh/sshd@.service | 1 - 1 file changed, 1 deletion(-) diff --git

Re: [OE-Core][PATCH] systemd: upgrade v245.6 -> v246

2020-08-18 Thread Alex Kiernan
On Sun, Aug 9, 2020 at 3:24 PM Khem Raj wrote: > > > > On Sun, Aug 9, 2020 at 4:04 AM Alex Kiernan wrote: >> >> On Sun, Aug 9, 2020 at 11:35 AM Alex Kiernan via >> lists.openembedded.org >> wrote: >> > >> > On Sun, Aug 9, 2020 at 7:22 AM Khe

Re: [OE-Core][PATCH] systemd: upgrade v245.6 -> v246

2020-08-09 Thread Alex Kiernan
On Sun, Aug 9, 2020 at 11:35 AM Alex Kiernan via lists.openembedded.org wrote: > > On Sun, Aug 9, 2020 at 7:22 AM Khem Raj wrote: > > > > Hi Alex > > > > I am seeing a packaging failure for iwd > > > > http://errors.yoctoproject.org/Errors/Details/4596

Re: [OE-Core][PATCH] systemd: upgrade v245.6 -> v246

2020-08-09 Thread Alex Kiernan
have easily fixed it in iwd by adding the additional configure > option but it seems that systemd recipe should rather be fixed to use > proper value for ROOTPREFIX > Presumably this is building with usrmerge? > Can you take care of this via a followup to systemd in oe-core ? > Wil

Re: [OE-Core][PATCH] u-boot: Upgrade 2020.04 -> 2020.07

2020-07-10 Thread Alex Kiernan
On Fri, Jul 10, 2020 at 4:46 PM Quentin Schulz wrote: > > Hi Alex, > > On Fri, Jul 10, 2020 at 03:28:44PM +, Alex Kiernan wrote: > > Signed-off-by: Alex Kiernan > > --- > > > > meta/recipes-bsp/u-boot/u-boot-common.inc | 2 +- >

[OE-Core][PATCH] u-boot: Upgrade 2020.04 -> 2020.07

2020-07-10 Thread Alex Kiernan
Signed-off-by: Alex Kiernan --- meta/recipes-bsp/u-boot/u-boot-common.inc | 2 +- .../u-boot/{u-boot-tools_2020.04.bb => u-boot-tools_2020.07.bb} | 0 .../recipes-bsp/u-boot/{u-boot_2020.04.bb => u-boot_2020.07.bb} | 0 3 files changed, 1 insertion(+), 1 de

Re: [OE-core] [PATCH v2] rootfs-post: remove trailing blanks from tasks

2020-07-09 Thread Alex Kiernan
/rootfsdebugfiles.bbclass > @@ -28,7 +28,7 @@ > ROOTFS_DEBUG_FILES ?= "" > ROOTFS_DEBUG_FILES[doc] = "Lists additional files or directories to be > installed with 'cp -a' in the format 'source1 target1;source2 target2;...'" > > -ROOTFS_POSTPROCESS_COMM

Re: [OE-Core][PATCH v2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-07-03 Thread Alex Kiernan
intermittent nature. > > I don't know how to fix this. No, I can't think of anything off the top of my head either. I keep coming back to AB configuration, which you can't rely on outside of that environment. > I'm going to batch together the fixes we > have and sen

Re: [OE-Core][PATCH v2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-06-23 Thread Alex Kiernan
On Tue, Jun 23, 2020 at 9:20 AM Richard Purdie wrote: > > On Mon, 2020-06-22 at 20:46 +0100, Richard Purdie via lists.openembedded.org > wrote: > > On Mon, 2020-06-22 at 19:53 +0100, Alex Kiernan wrote: > > > On Mon, Jun 22, 2020 at 6:34 PM Richard Purdie > > >

Re: [OE-Core][PATCH v2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-06-22 Thread Alex Kiernan
On Mon, Jun 22, 2020 at 6:34 PM Richard Purdie wrote: > > On Mon, 2020-06-22 at 11:57 +0100, Alex Kiernan wrote: > > Generate output for each contaminated path so it's visible in the main > > log file, then enable rootfs_check_host_user_contaminated by default. > > > &g

Re: [OE-core] [OE-Core][PATCH 2/2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-06-22 Thread Alex Kiernan
On Sun, Jun 21, 2020 at 5:00 PM Richard Purdie wrote: > > On Sun, 2020-06-21 at 16:24 +0100, Alex Kiernan wrote: > > Hi Richard > > > > On Sat, Jun 20, 2020 at 1:45 PM Richard Purdie > > wrote: > > > On Tue, 2020-06-09 at 16:08 +0100, Alex Kiernan wrote:

[OE-Core][PATCH v2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-06-22 Thread Alex Kiernan
Generate output for each contaminated path so it's visible in the main log file, then enable rootfs_check_host_user_contaminated by default. Signed-off-by: Alex Kiernan --- Changes in v2: - expose each contaminated path in the main log meta/classes/rootfs-postcommands.bbclass | 9 - 1

Re: [OE-core] [OE-Core][PATCH 2/2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-06-21 Thread Alex Kiernan
Hi Richard On Sat, Jun 20, 2020 at 1:45 PM Richard Purdie wrote: > > On Tue, 2020-06-09 at 16:08 +0100, Alex Kiernan wrote: > > On Thu, May 21, 2020 at 3:14 PM Alex Kiernan via > > lists.openembedded.org > > > > wrote: > > > Hi Ross > > > &

Re: [OE-Core][PATCH] recipetool: Fix list concatenation when using edit

2020-06-12 Thread Alex Kiernan
On Fri, Jun 12, 2020 at 2:38 PM Alex Kiernan via lists.openembedded.org wrote: > > If there are multiple appends, ensure we concatenate compatible things: > > Traceback (most recent call last): > File "/home/akiernan/poky/scripts/recipetool", line 111, in >

[OE-Core][PATCH] recipetool: Fix list concatenation when using edit

2020-06-12 Thread Alex Kiernan
(args) File "/home/akiernan/poky/scripts/lib/recipetool/edit.py", line 38, in edit return scriptutils.run_editor([recipe_path] + appends, logger) TypeError: can only concatenate list (not "tuple") to list Signed-off-by: Alex Kiernan --- scripts/lib/recipetool/edit.py |

Re: [OE-core] [OE-Core][PATCH 2/2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-06-09 Thread Alex Kiernan
On Thu, May 21, 2020 at 3:14 PM Alex Kiernan via lists.openembedded.org wrote: > > Hi Ross > > On Thu, Jan 2, 2020 at 11:20 PM Ross Burton wrote: > > > > On 19/12/2019 22:17, Alex Kiernan wrote: > > > Enable rootfs_check_host_user_contaminated by default >

[OE-Core][PATCH] systemd: upgrade v245.5 -> v245.6

2020-06-02 Thread Alex Kiernan
x typo in an unused function and add comment Signed-off-by: Alex Kiernan --- .../{systemd-boot_245.5.bb => systemd-boot_245.6.bb} | 0 .../{systemd-conf_245.5.bb => systemd-conf_245.6.bb} | 0 meta/recipes-core/systemd/systemd.inc | 2 +- ...mt-Don-t-install-d

[OE-Core][PATCH] openssh: Upgrade 8.2p1 -> 8.3p1

2020-05-30 Thread Alex Kiernan
Signed-off-by: Alex Kiernan --- .../openssh/{openssh_8.2p1.bb => openssh_8.3p1.bb} | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) rename meta/recipes-connectivity/openssh/{openssh_8.2p1.bb => openssh_8.3p1.bb} (98%) diff --git a/meta/recipes-connectivity/o

Re: [OE-core] [OE-Core][PATCH 2/2] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-05-21 Thread Alex Kiernan
Hi Ross On Thu, Jan 2, 2020 at 11:20 PM Ross Burton wrote: > > On 19/12/2019 22:17, Alex Kiernan wrote: > > Enable rootfs_check_host_user_contaminated by default > > Useful check! > > WARNING: Paths in the rootfs are owned by the same user or group as the > user runni

Re: [OE-Core][PATCH 1/6] openssh: Move sshdgenkeys.service to sshd.socket

2020-04-25 Thread Alex Kiernan
On Sat, Apr 25, 2020 at 2:43 AM Khem Raj wrote: > > > > On 4/23/20 10:14 AM, Andre McCurdy wrote: > > On Thu, Apr 23, 2020 at 1:30 AM Alex Kiernan wrote: > >> On Wed, Apr 22, 2020 at 7:48 PM Andre McCurdy wrote: > >>> On Wed, Apr 22, 202

[OE-Core][PATCH] u-boot: Upgrade 2020.01 -> 2020.04

2020-04-25 Thread Alex Kiernan
Signed-off-by: Alex Kiernan --- meta/recipes-bsp/u-boot/u-boot-common.inc | 2 +- .../u-boot/{u-boot-tools_2020.01.bb => u-boot-tools_2020.04.bb} | 0 .../recipes-bsp/u-boot/{u-boot_2020.01.bb => u-boot_2020.04.bb} | 0 3 files changed, 1 insertion(+), 1 de

[OE-Core][PATCH v2 6/6] systemd: upgrade v244.3 -> v245.5

2020-04-23 Thread Alex Kiernan
Refresh patches for v245.5, enable userdb by default. Update musl patches for additional missing stdlib headers. Add musl patch to avoid gshadow. Commits: c5e346905952 network: fix static assertion on IPPROTO_MAX range a71980e03037 resolved: tone down comment in

[OE-Core][PATCH v2 1/6] openssh: Move sshdgenkeys.service to sshd.socket

2020-04-23 Thread Alex Kiernan
sshd.socket launches the templated sshd@.service, so by moving the sshdgenkeys.service to sshd.socket, key generation can start in advance of a connection. Signed-off-by: Alex Kiernan --- Changes in v2: None meta/recipes-connectivity/openssh/openssh/sshd.socket | 1 + meta/recipes

[OE-Core][PATCH v2 3/6] rng-tools: Restrict rngd.service

2020-04-23 Thread Alex Kiernan
Whilst rngd has to run as root, we can significantly constrain its permissions (network is only required if nistbeacon is enabled). Signed-off-by: Alex Kiernan --- Changes in v2: - fix network access .../rng-tools/rng-tools/rngd.service | 19 +++ .../rng-tools/rng

[OE-Core][PATCH v2 5/6] systemd: Drop RDEPEND on systemd-compat-units when sysvinit is disabled

2020-04-23 Thread Alex Kiernan
When sysvinit is disabled we have no init script support, so systemd-compat-units serves no purpose. Signed-off-by: Alex Kiernan --- Changes in v2: None meta/recipes-core/systemd/systemd_244.3.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-core/systemd

[OE-Core][PATCH v2 2/6] rngd-tools: Install as part of sysinit.target

2020-04-23 Thread Alex Kiernan
rngd.service has a constraint of Before=sysinit.target, installing as part of multi-user.target is an odd choice as unless it's pulled in by a different dependency, an other target would not start it. Signed-off-by: Alex Kiernan --- Changes in v2: None meta/recipes-support/rng-tools/rng-tools

[OE-Core][PATCH v2 4/6] run-postinsts: Set RemainAfterExit on systemd unit

2020-04-23 Thread Alex Kiernan
. Setting RemainAfterExit ensures that the unit remains active and is not gratuitously restarted, unless done so explicitly using systemctl restart. Signed-off-by: Alex Kiernan --- Changes in v2: None .../run-postinsts/run-postinsts/run-postinsts.service | 2 +- 1 file changed, 1

[OE-Core][PATCH v2] rng-tools: Restrict rngd.service

2020-04-23 Thread Alex Kiernan
Whilst rngd has to run as root, we can significantly constrain its permissions (network is only required if nistbeacon is enabled). Signed-off-by: Alex Kiernan --- Changes in v2: - fix network access .../rng-tools/rng-tools/rngd.service | 19 +++ .../rng-tools/rng

Re: [OE-Core][PATCH 3/6] rng-tools: Restrict rngd.service

2020-04-23 Thread Alex Kiernan
On Wed, Apr 22, 2020 at 2:52 PM Alex Kiernan via lists.openembedded.org wrote: > > Whilst rngd has to run as root, we can significantly constrain its > permissions (AF_INET AF_INET6 are only required if nistbeacon is > enabled). > > Signed-off-by: Alex Kiernan > --- > &g

Re: [OE-Core][PATCH 1/6] openssh: Move sshdgenkeys.service to sshd.socket

2020-04-23 Thread Alex Kiernan
On Wed, Apr 22, 2020 at 7:48 PM Andre McCurdy wrote: > > On Wed, Apr 22, 2020 at 6:52 AM Alex Kiernan wrote: > > > > sshd.socket launches the templated sshd@.service, so by moving the > > sshdgenkeys.service to sshd.socket, key generation can start in adv

[OE-Core][PATCH 4/6] run-postinsts: Set RemainAfterExit on systemd unit

2020-04-22 Thread Alex Kiernan
. Setting RemainAfterExit ensures that the unit remains active and is not gratuitously restarted, unless done so explicitly using systemctl restart. Signed-off-by: Alex Kiernan --- .../run-postinsts/run-postinsts/run-postinsts.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion

[OE-Core][PATCH 5/6] systemd: Drop RDEPEND on systemd-compat-units when sysvinit is disabled

2020-04-22 Thread Alex Kiernan
When sysvinit is disabled we have no init script support, so systemd-compat-units serves no purpose. Signed-off-by: Alex Kiernan --- meta/recipes-core/systemd/systemd_244.3.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-core/systemd/systemd_244.3.bb b

[OE-Core][PATCH 6/6] systemd: upgrade v244.3 -> v245.5

2020-04-22 Thread Alex Kiernan
Refresh patches for v245.5, enable userdb by default. Update musl patches for additional missing stdlib headers. Add musl patch to avoid gshadow. Commits: c5e346905952 network: fix static assertion on IPPROTO_MAX range a71980e03037 resolved: tone down comment in

[OE-Core][PATCH 2/6] rngd-tools: Install as part of sysinit.target

2020-04-22 Thread Alex Kiernan
rngd.service has a constraint of Before=sysinit.target, installing as part of multi-user.target is an odd choice as unless it's pulled in by a different dependency, an other target would not start it. Signed-off-by: Alex Kiernan --- meta/recipes-support/rng-tools/rng-tools/rngd.service | 2

[OE-Core][PATCH 3/6] rng-tools: Restrict rngd.service

2020-04-22 Thread Alex Kiernan
Whilst rngd has to run as root, we can significantly constrain its permissions (AF_INET AF_INET6 are only required if nistbeacon is enabled). Signed-off-by: Alex Kiernan --- .../rng-tools/rng-tools/rngd.service | 19 +++ 1 file changed, 19 insertions(+) diff --git

[OE-Core][PATCH 1/6] openssh: Move sshdgenkeys.service to sshd.socket

2020-04-22 Thread Alex Kiernan
sshd.socket launches the templated sshd@.service, so by moving the sshdgenkeys.service to sshd.socket, key generation can start in advance of a connection. Signed-off-by: Alex Kiernan --- meta/recipes-connectivity/openssh/openssh/sshd.socket | 1 + meta/recipes-connectivity/openssh/openssh

Re: [OE-core] Creation of /etc/machine-id

2020-04-17 Thread Alex Kiernan
444b63e614baea33c044851a5859f6d1e69729 > [2] > https://git.openembedded.org/openembedded-core/commit/?id=c5fb399f5894c16cf8eeadd507dc38c29b0fd657 > -- Alex Kiernan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#137268): htt

Re: [OE-core] [PATCH] systemd: Package systemd-hwdb-update.service into udev

2020-04-06 Thread Alex Kiernan
rdep, therefore move the service unit file into udev package > instead, this decouples the hard runtime dependency and restores the bad > recommendations expectations > > Signed-off-by: Khem Raj > Cc: Alex Kiernan > Cc: Otavio Salvador Tested-by: Alex Kiernan -- Alex Kiernan -

Re: [OE-core] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-04-03 Thread Alex Kiernan
bbclass?h=master#n306 > The method is there, but nothing pulls it into the image in poky. I'd check your other layers. -- Alex Kiernan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#136976): https://lists.openembedded.org/g/openembedded-core/messag

Re: [OE-core] rootfs-postcommands: Enable rootfs_check_host_user_contaminated

2020-04-02 Thread Alex Kiernan
.uuid > > Any update on the patch? > If you've not pulled in the rootfs_check_host_user_contaminated check (and it's not in master) then you shouldn't see this. Is it coming in through another layer? -- Alex Kiernan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this g

Re: [OE-Core][RFC PATCH v3 06/13] systemd: Add PACKAGECONFIG for sysvinit

2020-03-31 Thread Alex Kiernan
On Tue, Mar 31, 2020 at 1:28 PM Alex Kiernan via Lists.Openembedded.Org wrote: > > Hi Otavio > > On Sat, Mar 28, 2020 at 5:17 PM Otavio Salvador > wrote: > > > > Hello Alex, > > > > On Fri, Mar 27, 2020 at 2:25 PM Alex Kiernan wrote: > > > >

Re: [OE-Core][RFC PATCH v3 06/13] systemd: Add PACKAGECONFIG for sysvinit

2020-03-31 Thread Alex Kiernan
Hi Otavio On Sat, Mar 28, 2020 at 5:17 PM Otavio Salvador wrote: > > Hello Alex, > > On Fri, Mar 27, 2020 at 2:25 PM Alex Kiernan wrote: > > > > Add sysvinit PACKAGECONFIG which disables all sysvinit handling in > > systemd if it isn't present. > > > >

Re: [OE-Core][RFC PATCH v3 06/13] systemd: Add PACKAGECONFIG for sysvinit

2020-03-29 Thread Alex Kiernan
On Sat, Mar 28, 2020 at 5:17 PM Otavio Salvador wrote: > > Hello Alex, > > On Fri, Mar 27, 2020 at 2:25 PM Alex Kiernan wrote: > > > > Add sysvinit PACKAGECONFIG which disables all sysvinit handling in > > systemd if it isn't present. > > > > Conso

[OE-Core][RFC PATCH v3 13/13] systemd: upgrade v244.3 -> v245.3

2020-03-27 Thread Alex Kiernan
Refresh patches for v245.3, enable userdb by default. Update musl patches for additional missing stdlib headers. Add musl patch to avoid gshadow. Commits: 0f5047b7d393 network: DHCP lease load SIP copy paste error 98a349465291 davfs is a network file system 9b52ce58de50 units: Don't mount

[OE-Core][RFC PATCH v3 11/13] psplash: Set RemainAfterExit on systemd units

2020-03-27 Thread Alex Kiernan
the unit. Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta/recipes-core/psplash/files/psplash-start.service | 1 + meta/recipes-core/psplash/files/psplash-systemd.service | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git

[OE-Core][RFC PATCH v3 01/13] systemd: Use PACKAGE_BEFORE_PN, not =+

2020-03-27 Thread Alex Kiernan
By using PACKAGE_BEFORE_PN rather than =+ it's clearer how we expect the package ordering to work. It also avoids the possibilty that dev/dbg/etc. artefacts attempt to package as part of these packages. Signed-off-by: Alex Kiernan --- Changes in v3: None Changes in v2: - new (use

[OE-Core][RFC PATCH v3 12/13] oeqa/runtime/cases: Disable and stop systemd-timesyncd

2020-03-27 Thread Alex Kiernan
Stopping systemd-timesyncd doesn't prevent it being restarted by a different transaction within systemd. Disable the service instead during the date test to ensure it can't be restarted. Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta

[OE-Core][RFC PATCH v3 00/13] Systemd 245 and related updates

2020-03-27 Thread Alex Kiernan
- update to systemd 245.3 Changes in v2: - new (use PACKAGE_BEFORE_PN) - new (s/nonarch_base_libdir/rootlibexecdir/) - sysvinit: moved update-rc.d RDEPENDS to PACKAGECONFIG - move systemd 245 upgrade to last in series - update to systemd 245.2 Alex Kiernan (13): systemd: Use PACKAGE_BEFORE_PN

[OE-Core][RFC PATCH v3 07/13] systemd: Remove X11 related files when disabled

2020-03-27 Thread Alex Kiernan
When X11 isn't in DISTRO_FEATURES, remove X11 related files. Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta/recipes-core/systemd/systemd_244.3.bb | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-core/systemd

[OE-Core][RFC PATCH v3 04/13] systemd: Reinstate systemd-hwdb-update.service

2020-03-27 Thread Alex Kiernan
/hwdb.bin was not met `- ConditionDirectoryNotEmpty=|/etc/udev/hwdb.d was not met Docs: man:hwdb(7) man:systemd-hwdb(8) Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta/recipes-core/systemd/systemd_244.3.bb

[OE-Core][RFC PATCH v3 10/13] systemd: Enable acl based on DISTRO_FEATURES

2020-03-27 Thread Alex Kiernan
Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta/recipes-core/systemd/systemd_244.3.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta/recipes-core/systemd/systemd_244.3.bb b/meta/recipes-core/systemd

[OE-Core][RFC PATCH v3 02/13] systemd: Package udev rules explicitly

2020-03-27 Thread Alex Kiernan
udev is packaged before systemd so any wildcard inclusions in FILES will override later specifics. List all udev rules explicitly so that the systemd specific rules, packaged alongside systemd, appear in the correct package. Signed-off-by: Alex Kiernan --- Changes in v3: None Changes in v2

[OE-Core][RFC PATCH v3 03/13] systemd: Replace nonarch_base_libdir with rootlibexecdir

2020-03-27 Thread Alex Kiernan
Use rootlibexecdir consistently rather than nonarch_base_libdir for udev rules. Signed-off-by: Alex Kiernan --- Changes in v3: None Changes in v2: - new (s/nonarch_base_libdir/rootlibexecdir/) meta/recipes-core/systemd/systemd_244.3.bb | 10 +- 1 file changed, 5 insertions(+), 5

[OE-Core][RFC PATCH v3 06/13] systemd: Add PACKAGECONFIG for sysvinit

2020-03-27 Thread Alex Kiernan
Add sysvinit PACKAGECONFIG which disables all sysvinit handling in systemd if it isn't present. Consolidate sysvinit handling so that when it's disabled we exclude all sysvinit features. Signed-off-by: Alex Kiernan --- Changes in v3: - sysvinit: remove binding to DISTRO_FEATURES Changes in v2

[OE-Core][RFC PATCH v3 05/13] systemd: Add sch-fq-codel to RRECOMMENDS

2020-03-27 Thread Alex Kiernan
systemd sets net.core.default_qdisc = fq_codel, include kernel-module-sch-fq-codel in RRECOMMENDS to satify this Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta/recipes-core/systemd/systemd_244.3.bb | 2 +- 1 file changed, 1 insertion

[OE-Core][RFC PATCH v3 09/13] systemd: Enable audit based on DISTRO_FEATURES

2020-03-27 Thread Alex Kiernan
Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta/recipes-core/systemd/systemd_244.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/systemd/systemd_244.3.bb b/meta/recipes-core/systemd

[OE-Core][RFC PATCH v3 08/13] systemd: Enable smack based on DISTRO_FEATURES

2020-03-27 Thread Alex Kiernan
Signed-off-by: Alex Kiernan Acked-by: Otavio Salvador --- Changes in v3: None Changes in v2: None meta/recipes-core/systemd/systemd_244.3.bb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/meta/recipes-core/systemd/systemd_244.3.bb b/meta/recipes-core/systemd

<    1   2   3   4   5   6   7   >