[ptxdist] [PATCH 2/6] linuxptp: version bump 2.0 -> 3.1.1

2021-07-08 Thread Roland Hieber
The old version has been depublished from SourceForge due to CVEs. Signed-off-by: Roland Hieber --- rules/linuxptp.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/linuxptp.make b/rules/linuxptp.make index 7e94cb20dfbd..6415512f1cbc 100644 --- a/rules

[ptxdist] [PATCH 5/6] rsync: use HTTPS URL

2021-07-08 Thread Roland Hieber
Signed-off-by: Roland Hieber --- rules/rsync.make | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/rsync.make b/rules/rsync.make index be507916820a..70fdd751ca0d 100644 --- a/rules/rsync.make +++ b/rules/rsync.make @@ -18,7 +18,7 @@ RSYNC_VERSION := 2.6.9 RSYNC_MD5

[ptxdist] [PATCH 6/6] samba: use HTTPS URL in menu help text

2021-07-08 Thread Roland Hieber
Signed-off-by: Roland Hieber --- rules/samba.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/samba.in b/rules/samba.in index dd952cbe6e80..c01b28c10921 100644 --- a/rules/samba.in +++ b/rules/samba.in @@ -31,7 +31,7 @@ menuconfig SAMBA Windows operating

[ptxdist] [PATCH v2] linuxptp: version bump 2.0 -> 3.1.1

2021-07-08 Thread Roland Hieber
The old version has been depublished from SourceForge due to CVEs. The remaining patch has been applied upstream. Signed-off-by: Roland Hieber --- PATCH v2: - remove old patches - resend only this one patch out-of-series, no changes for the rest of the series PATCH v1: https

Re: [ptxdist] [PATCH v2 6/7] ptxd_lib_imx_hab: fix indentation

2021-07-08 Thread Roland Hieber
On Mon, Jun 28, 2021 at 08:42:13AM +0200, Michael Olbrich wrote: > On Mon, Jun 28, 2021 at 01:11:20AM +0200, Roland Hieber wrote: > > Be uniform with bin/ptxdist, indent with one tab instead of mixed tabs > > and spaces. > > No. Everything is scripts is indented this way:

[ptxdist] [PATCH v3 1/5] ptxd_lib_code_signing: cs_get_ca(): improve error handling

2021-07-08 Thread Roland Hieber
From: Marc Kleine-Budde This patch changes cs_get_ca() to only output the CA if it actually exists, or print an error and return 1 instead. This makes it possible to use make's $(if $(filter-out, ERROR_CA_NOT_YET_SET, ...)) conditional. Co-authored-by: Roland Hieber Signed-off-by: Marc Kleine

[ptxdist] [PATCH v3 2/5] ptxd_lib_code_signing: introduce role groups

2021-07-08 Thread Roland Hieber
mx-habv4-srk" | cs_define_group "${g}" | cs_group_add_roles "${g}" "imx-habv4-srk1" "imx-habv4-srk2" Use the function cs_group_get_roles() to get the roles of a group. In a later patch the function ptxd_make_imx_habv4_gen_table() is converted to make use $(c

[ptxdist] [PATCH v3 3/5] templates/code-signing-provider: set up the 'imx-habv4-srk' role group

2021-07-08 Thread Roland Hieber
-Budde Signed-off-by: Roland Hieber --- PATCH v3: - no changes PATCH v2 (rhi): https://lore.ptxdist.org/ptxdist/20210627231121.28313-3-...@pengutronix.de - split off code signing provider template changes from library and consumer changes (see next patch) to make patches easier to port

[ptxdist] [PATCH v3 4/5] templates/barebox-imx-habv4: use the 'imx-habv4-srk' role group

2021-07-08 Thread Roland Hieber
still work with ptxd_make_imx_habv4_gen_table() if their code signing provider sets up the roles appropriately. Signed-off-by: Marc Kleine-Budde Signed-off-by: Roland Hieber --- PATCH v3: - no changes PATCH v2 (rhi): https://lore.ptxdist.org/ptxdist/20210627231121.28313-4-...@pengutronix.de

Re: [ptxdist] [PATCH v2 1/7] ptxd_lib_code_signing: cs_get_ca(): improve error handling

2021-07-08 Thread Roland Hieber
On Mon, Jun 28, 2021 at 08:38:25AM +0200, Michael Olbrich wrote: > On Mon, Jun 28, 2021 at 01:11:15AM +0200, Roland Hieber wrote: > > From: Marc Kleine-Budde > > > > This patch changes cs_get_ca() to only output the CA if it actually > > exists, or print an error and r

[ptxdist] [PATCH v3 5/5] host-ptx-code-signing-dev: version bump 0.4 -> 0.5

2021-07-08 Thread Roland Hieber
With this version, host-ptx-code-signing-dev sets up the new role groups imx-habv4-srk, imx-habv4-csf and imx-habv4-img. Signed-off-by: Roland Hieber --- PATCH v3: - no changes PATCH v2 (rhi): https://lore.ptxdist.org/ptxdist/20210627231121.28313-5-...@pengutronix.de - new patch in v2

[ptxdist] [PATCH v2 7/7] ptxd_lib_code_signing: fix indentation

2021-06-27 Thread Roland Hieber
Be uniform with bin/ptxdist, indent with one tab instead of mixed tabs and spaces. Signed-off-by: Roland Hieber --- PATCH v2 (rhi): - new patch in v2 - not essential, but slowly start fixing indentation in scripts/lib - git show -w is empty --- scripts/lib/ptxd_lib_code_signing.sh | 278

[ptxdist] [PATCH v2 2/7] ptxd_lib_code_signing: introduce role groups

2021-06-27 Thread Roland Hieber
mx-habv4-srk" | cs_define_group "${g}" | cs_group_add_roles "${g}" "imx-habv4-srk1" "imx-habv4-srk2" Use the function cs_group_get_roles() to get the roles of a group. In a later patch the function ptxd_make_imx_habv4_gen_table() is converted to make use $(c

[ptxdist] [PATCH v2 1/7] ptxd_lib_code_signing: cs_get_ca(): improve error handling

2021-06-27 Thread Roland Hieber
From: Marc Kleine-Budde This patch changes cs_get_ca() to only output the CA if it actually exists, or print an error and return 1 instead. This makes it possible to use make's $(if $(filter-out, ERROR_CA_NOT_YET_SET, ...)) conditional. Co-authored-by: Roland Hieber Signed-off-by: Marc Kleine

[ptxdist] [PATCH v2 3/7] templates/code-signing-provider: set up the 'imx-habv4-srk' role group

2021-06-27 Thread Roland Hieber
-Budde Signed-off-by: Roland Hieber --- PATCH v2 (rhi): - split off code signing provider template changes from library and consumer changes (see next patch) to make patches easier to port to existing code signing providers PATCH v1 (mkl): https://lore.ptxdist.org/ptxdist

[ptxdist] [PATCH v2 4/7] templates/barebox-imx-habv4: use the 'imx-habv4-srk' role group

2021-06-27 Thread Roland Hieber
still work with ptxd_make_imx_habv4_gen_table() if their code signing provider sets up the roles appropriately. Signed-off-by: Marc Kleine-Budde Signed-off-by: Roland Hieber --- PATCH v2 (rhi): - split up code signing provider template changes (see previous patch) from lib and consumer changes

[ptxdist] [PATCH v2 6/7] ptxd_lib_imx_hab: fix indentation

2021-06-27 Thread Roland Hieber
Be uniform with bin/ptxdist, indent with one tab instead of mixed tabs and spaces. Signed-off-by: Roland Hieber --- PATCH v2 (rhi): - new patch in v2 - not essential, but slowly start fixing indentation in scripts/lib - git show -w is empty --- scripts/lib/ptxd_lib_imx_hab.sh | 86

[ptxdist] [PATCH v2 5/7] host-ptx-code-signing-dev: version bump 0.4 -> 0.5

2021-06-27 Thread Roland Hieber
With this version, host-ptx-code-signing-dev sets up the new role groups imx-habv4-srk, imx-habv4-csf and imx-habv4-img. Signed-off-by: Roland Hieber --- PATCH v2 (rhi): - new patch in v2 (feedback from Michael Olbrich) --- rules/host-ptx-code-signing-dev.make | 4 ++-- 1 file changed, 2

[ptxdist] [PATCH] doc: add section about kconfig diffs

2021-04-26 Thread Roland Hieber
Signed-off-by: Roland Hieber --- doc/dev_kconfig_diffs.rst | 79 +++ doc/dev_layers_in_ptxdist.rst | 3 +- doc/dev_manual.rst| 1 + 3 files changed, 82 insertions(+), 1 deletion(-) create mode 100644 doc/dev_kconfig_diffs.rst diff --git a/doc

[ptxdist] [PATCH v2] doc: add section about kconfig diffs

2021-04-27 Thread Roland Hieber
Signed-off-by: Roland Hieber --- v2: also include the referenced SVG --- doc/dev_kconfig_diffs.rst | 79 ++ doc/dev_kconfig_diffs_layer_precedence.svg | 315 + doc/dev_layers_in_ptxdist.rst | 3 +- doc/dev_manual.rst

[ptxdist] [PATCH] doc: advertise lore.ptxdist.org instead of mail-archive.com

2021-04-27 Thread Roland Hieber
, and interoperability with the b4 command line tool. Signed-off-by: Roland Hieber --- doc/getting_help.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/getting_help.rst b/doc/getting_help.rst index 4234494ed628..a4ea4b3bb8b5 100644 --- a/doc/getting_help.rst +++ b/doc

Re: [ptxdist] [PATCH 4/4] host-fakeroot: version bump 1.25.1 -> 1.25.3

2021-05-02 Thread Roland Hieber
SP then. Just bump the timestamp in the snapshot URL: https://snapshot.debian.org/archive/debian/20210123T025406Z/pool/main/f/fakeroot/fakeroot_1.25.3.orig.tar.gz - Roland > HOST_FAKEROOT_SOURCE := $(SRCDIR)/$(HOST_FAKEROOT_TARBALL) > HOST_FAKEROOT_DIR:= $(HOST_BUILDDIR)/$(HOST_FAKEROOT) > HOST_F

Re: [ptxdist] [PATCH 3/4] host-nss: disable array-parameter warning

2021-05-02 Thread Roland Hieber
parameter > > HOST_NSS_MAKE_OPT := \ > all > -- > 2.29.2 > > > ___ > ptxdist mailing list > ptxdist@pengutronix.de > To unsubscribe, send a mail with subject "unsubscribe" to > ptxdist-requ...@pengutronix.de > -- Roland

Re: [ptxdist] OSELAS.toolchain - GCC snapshots gone

2021-05-02 Thread Roland Hieber
d different commits in the > releases/gcc-9 branch, but i was unable to find the same md5 sum given by > OSELAS 2019.09.1) > > Thanks a lot, > Ariel -- Roland Hieber, Pengutronix e.K. | r.hie...@pengutronix.de | Steuerwalder Str. 21 | https://www.pengut

Re: [ptxdist] [PATCH] libusbgx: new package

2021-04-29 Thread Roland Hieber
[USBG_F_UVC] = _f_type_uvc, > + }; > + > + ARRAY_SIZE_SENTINEL(function_types, USBG_FUNCTION_TYPE_MAX); > diff --git a/patches/libusbgx-0.2.0/autogen.sh > b/patches/libusbgx-0.2.0/autogen.sh > new file mode 100755 > index 0..2459647bf > --- /dev/nu

[ptxdist] [PATCH] doc: contributing: add pointers to README.devel and git-send-email.io

2021-02-07 Thread Roland Hieber
Signed-off-by: Roland Hieber --- doc/contributing.rst | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/doc/contributing.rst b/doc/contributing.rst index e51469d92380..818909a9f3ea 100644 --- a/doc/contributing.rst +++ b/doc/contributing.rst @@ -14,12 +14,15 @@ How

Re: [ptxdist] [PATCH] sudo: version bump 1.9.3 -> 1.9.5p2

2021-01-27 Thread Roland Hieber
On Wed, Jan 27, 2021 at 01:04:27AM +0100, Roland Hieber wrote: > Update license MD5 sum, only the copyright date was bumped to 2021. > > Highlights from the changelog [1]: > > * Fixed CVE-2021-23239, a potential information leak in sudoedit that > could be used to test

Re: [ptxdist] [PATCH 5/6] modemmanager: Add license file hashes

2021-03-24 Thread Roland Hieber
On Wed, Mar 24, 2021 at 07:35:39AM +0100, Alexander Dahl wrote: > From: Alexander Dahl > > Signed-off-by: Alexander Dahl > --- > rules/modemmanager.make | 3 +++ > 1 file changed, 3 insertions(+) > > diff --git a/rules/modemmanager.make b/rules/modemmanager.make > index 09b3bc422..397a32850

Re: [ptxdist] [PATCH 3/6] libqmi: Add license file hashes

2021-03-24 Thread Roland Hieber
in src/libqmi-glib/ and src/libqrtr-glib/ carry LGPL-2.0-or-later headers, and the README says that too. I didn't mention this in my previous mail, but I would rather not include COPYING.LIB then, and add a short comment why it isn't in there. - Roland -- Roland Hieber, Pengutronix e.K.

[ptxdist] [PATCH 2/2] dt-utils: version bump 2019.01.0 -> 2021.03.0

2021-03-26 Thread Roland Hieber
Signed-off-by: Roland Hieber --- rules/dt-utils.in | 20 ++-- rules/dt-utils.make | 8 ++-- 2 files changed, 24 insertions(+), 4 deletions(-) diff --git a/rules/dt-utils.in b/rules/dt-utils.in index 7ce0e579c98c..2ac7383f2ab8 100644 --- a/rules/dt-utils.in +++ b/rules/dt

[ptxdist] [PATCH 1/2] dt-utils: add license files

2021-03-26 Thread Roland Hieber
Signed-off-by: Roland Hieber --- rules/dt-utils.make | 3 +++ 1 file changed, 3 insertions(+) diff --git a/rules/dt-utils.make b/rules/dt-utils.make index 776d0dd3f093..ce86738bf614 100644 --- a/rules/dt-utils.make +++ b/rules/dt-utils.make @@ -22,6 +22,9 @@ DT_UTILS_URL := https

Re: [ptxdist] [PATCH 1/2] ptxd_make_vcs_version: add script to determine vcs hash

2021-03-30 Thread Roland Hieber
TXDIST_VCS_VERSION}" ]; then > + PTXDIST_BUILD_VERSION_VCS="unknown" > +fi > + > +export PTXDIST_VCS_VERSION > +} > +export -f ptxd_make_vcs_version > + > +ptxd_make_vcs_version > -- > 2.29.2 > > > ___

Re: [ptxdist] [PATCH v2 5/5] modemmanager: version bump 1.14.8 -> 1.16.2

2021-03-30 Thread Roland Hieber
ky.de>, Alexander Dahl wrote: > Hei hei, > > in this v2 series I removed the libgudev version bump, until that > license issue is clarified. (I suggested to set 'LGPL-2.0-or-later AND > LGPL-2.1-or-later' in IRC, but don't know if that's possible?) I think that variant

Re: [ptxdist] [PATCH v3 1/2] ptxd_make_vcs_version: add script to determine vcs hash

2021-04-04 Thread Roland Hieber
mm, why do you do an additional echo here when git-describe already outputs the thing? - Roland > + > +if [ -z "${PTXDIST_VCS_VERSION}" ]; then > + PTXDIST_VCS_VERSION="unknown" > +fi > + > +export PTXDIST_VCS_VERSION > +} > +export -f ptxd_make_vcs_version > +

[ptxdist] [PATCH] libseccomp: version bump 2.5.0 -> 2.5.1

2021-02-28 Thread Roland Hieber
This includes a fix for compiling on MIPS platforms: <https://github.com/seccomp/libseccomp/issues/274> Signed-off-by: Roland Hieber --- ...1-run-time-use-a-broadly-supported-shell-interpreter.patch | 0 patches/{libseccomp-2.5.0 => libseccomp-2.5.1}/series | 0 rules/libsec

[ptxdist] [PATCH 1/2] doc: dev_code_signing: mention where to select the signing provider

2021-02-28 Thread Roland Hieber
Signed-off-by: Roland Hieber --- doc/dev_code_signing.rst | 1 + 1 file changed, 1 insertion(+) diff --git a/doc/dev_code_signing.rst b/doc/dev_code_signing.rst index d47002e8c380..56ac0e3b3217 100644 --- a/doc/dev_code_signing.rst +++ b/doc/dev_code_signing.rst @@ -49,6 +49,7 @@ material

[ptxdist] [PATCH 2/2] rauc: be more verbose why the check for legacy keyring fails

2021-02-28 Thread Roland Hieber
Instead of relying on users to grep in the PTXdist source code for this line, tell them directly what is checked here. Also fix a typo in the previous-to-last line. Signed-off-by: Roland Hieber --- rules/rauc.make | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/rules

[ptxdist] [PATCH] ptxd_make_world_lint: fail gracefully if 'diffstat' is not installed

2021-03-01 Thread Roland Hieber
Signed-off-by: Roland Hieber --- scripts/lib/ptxd_make_world_lint.sh | 6 ++ 1 file changed, 6 insertions(+) diff --git a/scripts/lib/ptxd_make_world_lint.sh b/scripts/lib/ptxd_make_world_lint.sh index 65fdd3b72e5e..db855adbef25 100644 --- a/scripts/lib/ptxd_make_world_lint.sh +++ b

Re: [ptxdist] [PATCH] /etc/hosts: add local ipv6 definitions

2021-02-26 Thread Roland Hieber
der if this works even if GLOBAL_IPV6 is turned off. Or maybe we should get rid of GLOBAL_IPV6 too? :-) - Roland -- Roland Hieber, Pengutronix e.K. | r.hie...@pengutronix.de | Steuerwalder Str. 21 | https://www.pengutronix.de/ | 31137 Hildesheim, Germany

Re: [ptxdist] [PATCH] chrony: Fix location of config files

2021-04-19 Thread Roland Hieber
s) > > # modify placeholders with data from configuration > @$(call install_replace, chrony, /etc/chrony/chrony.conf, \ > -- > 2.30.2 > > > ___ > ptxdist mailing list > ptxdist@pengutronix.de > To unsubscribe, send

[ptxdist] [PATCH 2/2] ptxdist: package-info: give better error message without parameters

2021-04-11 Thread Roland Hieber
The current output is not very explanatory: $ ptxdist package-info ptxdist: error: please use 'ptxdist' instead of calling make directly. make: *** [.../ptxdist/rules/other/Toplevel.make:55: all] Error 1 Signed-off-by: Roland Hieber --- bin/ptxdist | 5 + 1 file changed, 5

[ptxdist] [PATCH 1/2] ptxdist: drop: give better error message without parameters

2021-04-11 Thread Roland Hieber
The current output is not very explanatory: $ ptxdist drop rm: cannot remove '.../platform-foo/state/': Is a directory dropping Signed-off-by: Roland Hieber --- bin/ptxdist | 5 + 1 file changed, 5 insertions(+) diff --git a/bin/ptxdist b/bin/ptxdist index 248b0473df0f

Re: [ptxdist] PTXCONF_RAUC_COMPATIBLE location

2021-08-23 Thread Roland Hieber
y protected information. Please > inform us if you have received this e-mail by > mistake and delete it in such a case. Each unauthorized reproduction, > disclosure, alteration, distribution and/or publication of this e-mail is > strictly prohibited. > > - For general information o

[ptxdist] [PATCH v2 2/3] rng-tools: version bump v6.5 -> v6.14

2021-08-13 Thread Roland Hieber
The old version of rng-tools didn't use libgcrypt, but linked to it nevertheless; however it moved from libgcrypt to openssl anyway in the new version, and also removed the libsysfs dependency. The patch was applied upstream, but ./configure still needs to be generated. Signed-off-by: Roland

Re: [ptxdist] host-elf-h-compat: Upstream server seems to be unstable

2021-08-16 Thread Roland Hieber
ttps://lore.ptxdist.org/ptxdist/20210805120945.gf21...@pengutronix.de - Roland -- Roland Hieber, Pengutronix e.K. | r.hie...@pengutronix.de | Steuerwalder Str. 21 | https://www.pengutronix.de/ | 31137 Hildesheim, Germany| Phone: +49-5121-206917-0| A

Re: [ptxdist] [PATCH v2 4/5] ptxd_lib_code_signing: provide consumer functions with some environment

2021-09-08 Thread Roland Hieber
On Mon, Aug 09, 2021 at 10:06:07AM +0200, Roland Hieber wrote: > The code signing consumer functions should be able to retrieve some > information about the recipe in which they were called in order to make > additional checks if needed. Refactor the (shell cs_get_*, …) calls into >

Re: [ptxdist] [PATCH v2 5/5] ptxd_lib_code_signing: add key whitelist checks

2021-09-12 Thread Roland Hieber
On Wed, Sep 08, 2021 at 01:43:59PM +0200, Roland Hieber wrote: > On Fri, Sep 03, 2021 at 03:17:13PM +0200, Michael Olbrich wrote: > > On Mon, Aug 09, 2021 at 10:06:08AM +0200, Roland Hieber wrote: > > > diff --git a/rules/pre/030-code-signing-consumers.make > > > b

[ptxdist] [PATCH v3 5/5] ptxd_lib_code_signing: add key whitelist checks

2021-09-12 Thread Roland Hieber
Signed-off-by: Roland Hieber --- PATCH v3: - adapt to cs_get_uri_impl from previous patch. cs_get_uri_unchecked didn't really need to check for pkg_name anyway as it's only called by cs_append_ca_from_uri in the code provider setup path, and the code provider should always be able

[ptxdist] [PATCH v3 2/5] ptxd_lib_code_signing: return success in case of ERROR_CA_NOT_YET_SET

2021-09-12 Thread Roland Hieber
, so return a successful exit code here. Cc: Marc Kleine-Budde Fixes: 235332de090655007e6c (2021-07-15, "ptxd_lib_code_signing: cs_get_ca(): improve error handling") Signed-off-by: Roland Hieber --- PATCH v3: - new in v3 --- scripts/lib/ptxd_lib_code_signing.sh | 6 +- 1 file

[ptxdist] [PATCH v3 4/5] ptxd_lib_code_signing: provide consumer functions with some environment

2021-09-12 Thread Roland Hieber
information can be added later if needed. Refactor the existing consumers in the code base too, and add an error message in case anyone else still uses the old API. Signed-off-by: Roland Hieber --- PATCH v3: - dropped previous "[PATCH v2 3/5] ptxd_lib_code_signing: refactor hard-coded SoftHS

[ptxdist] [PATCH v3 3/5] libptxdist: introduce ptxd_exec_silent_stderr

2021-09-12 Thread Roland Hieber
with 'ptxdist -v', but the messages are still available in the logfile. Signed-off-by: Roland Hieber --- PATCH v3: - no changes in content - dropped previous "[PATCH v2 1/5] ptxd_make_world_common: make the package name available to scripts" to keep the shell command line slim (fee

[ptxdist] [PATCH v3 1/5] kernel: make sure that kbuild can extract keys from the HSM

2021-09-12 Thread Roland Hieber
CODE_SIGNING_ENV provides the config files and the PKCS11 engine for OpenSSL and SoftHSM, which kbuild calls when signing the kernel modules. Fixes: 3ffb3585dd13de9e20d1 (2021-07-23, "kernel: add support for module signing") Signed-off-by: Roland Hieber --- PATCH v3: - new in v

Re: [ptxdist] [PATCH v2 3/5] ptxd_lib_code_signing: refactor hard-coded SoftHSM PIN in PKCS11 URIs

2021-09-08 Thread Roland Hieber
On Fri, Sep 03, 2021 at 02:46:46PM +0200, Michael Olbrich wrote: > On Mon, Aug 09, 2021 at 10:06:06AM +0200, Roland Hieber wrote: > > We'll need this type of function more often later. > > I don't see another user of this function in the rest of the series. Huh yes. I think I u

Re: [ptxdist] [PATCH v2 1/5] ptxd_make_world_common: make the package name available to scripts

2021-09-08 Thread Roland Hieber
On Fri, Sep 03, 2021 at 02:48:53PM +0200, Michael Olbrich wrote: > On Mon, Aug 09, 2021 at 10:06:04AM +0200, Roland Hieber wrote: > > Variables named ${pkg} are already widely used throughout the code base > > for different purposes, so name it ${pkg_name} instead. > > >

Re: [ptxdist] [PATCH v2 4/5] ptxd_lib_code_signing: provide consumer functions with some environment

2021-09-08 Thread Roland Hieber
On Fri, Sep 03, 2021 at 02:54:31PM +0200, Michael Olbrich wrote: > On Mon, Aug 09, 2021 at 10:06:07AM +0200, Roland Hieber wrote: > > The code signing consumer functions should be able to retrieve some > > information about the recipe in which they were called in order to make

Re: [ptxdist] [PATCH v2 5/5] ptxd_lib_code_signing: add key whitelist checks

2021-09-08 Thread Roland Hieber
On Fri, Sep 03, 2021 at 03:17:13PM +0200, Michael Olbrich wrote: > On Mon, Aug 09, 2021 at 10:06:08AM +0200, Roland Hieber wrote: > > Signed-off-by: Roland Hieber > > --- > > PATCH v2: > > - cs_check_whitelisted: make "needle" local variabl

[ptxdist] [PATCH v4] ptxd_lib_code_signing: cs_get_ca(): improve error handling

2021-07-13 Thread Roland Hieber
From: Marc Kleine-Budde This patch changes cs_get_ca() to only output the CA if it actually exists, or print an error and return 1 instead. This makes it possible to use make's $(if $(filter-out, ERROR_CA_NOT_YET_SET, ...)) conditional. Co-authored-by: Roland Hieber Signed-off-by: Marc Kleine

[ptxdist] [PATCH v5] ptxd_lib_code_signing: cs_get_ca(): improve error handling

2021-07-15 Thread Roland Hieber
if the signing provider was not set up yet. If the error message is used as part of a URI, the user can at least get a hint about the fact that an error happened. Co-authored-by: Roland Hieber Signed-off-by: Marc Kleine-Budde Signed-off-by: Roland Hieber --- PATCH v5: - print error if keydir doesn't exist

[ptxdist] [PATCH v2 4/5] ptxd_lib_code_signing: provide consumer functions with some environment

2021-08-09 Thread Roland Hieber
information can be added later if needed. Refactor the existing consumers in the code base too, and add an error message in case anyone else that still uses the old API. Signed-off-by: Roland Hieber --- PATCH v2: - define multiline macros using "define" PATCH v1: https://lore.ptxdist.o

[ptxdist] [PATCH v2 5/5] ptxd_lib_code_signing: add key whitelist checks

2021-08-09 Thread Roland Hieber
Signed-off-by: Roland Hieber --- PATCH v2: - cs_check_whitelisted: make "needle" local variable (feedback by Michael Olbrich) - cs_check_whitelisted: error out with ERROR_KEY_NOT_WHITELISTED also if whitelist does not exist yet (Michael Olbrich) - rename

[ptxdist] [PATCH v2 3/5] ptxd_lib_code_signing: refactor hard-coded SoftHSM PIN in PKCS11 URIs

2021-08-09 Thread Roland Hieber
We'll need this type of function more often later. Signed-off-by: Roland Hieber --- PATCH v2: no changes PATCH v1: https://lore.ptxdist.org/ptxdist/20210804142330.32739-3-...@pengutronix.de --- scripts/lib/ptxd_lib_code_signing.sh | 14 +- 1 file changed, 13 insertions(+), 1

[ptxdist] [PATCH v2 2/5] libptxdist: introduce ptxd_exec_silent_stderr

2021-08-09 Thread Roland Hieber
with 'ptxdist -v', but the messages are still available in the logfile. Signed-off-by: Roland Hieber --- PATCH v2: no changes PATCH v1: https://lore.ptxdist.org/ptxdist/20210804142330.32739-2-...@pengutronix.de --- scripts/libptxdist.sh | 18 ++ 1 file changed, 18 insertions(+) diff

[ptxdist] [PATCH v2 1/5] ptxd_make_world_common: make the package name available to scripts

2021-08-09 Thread Roland Hieber
Variables named ${pkg} are already widely used throughout the code base for different purposes, so name it ${pkg_name} instead. Signed-off-by: Roland Hieber --- Turned out I didn't need it for this series, but I still think it's useful in general. PATCH v2: no changes PATCH v1: https

Re: [ptxdist] [PATCH v2 5/5] ptxd_lib_code_signing: add key whitelist checks

2021-08-09 Thread Roland Hieber
On Mon, Aug 09, 2021 at 10:06:08AM +0200, Roland Hieber wrote: > Signed-off-by: Roland Hieber > --- > PATCH v2: > - cs_check_whitelisted: make "needle" local variable (feedback by >Michael Olbrich) > - cs_check_whitelisted: error out with ERROR_KEY_NOT_WHITEL

[ptxdist] [PATCH 3/3] ptxd_lib_code_signing: let providers clean up their keys

2021-08-09 Thread Roland Hieber
-by: Bastian Stender Signed-off-by: Roland Hieber --- doc/ref_code_signing_helpers.rst | 46 +++ rules/host-ptx-code-signing-dev.make | 6 +++ .../ptxdist-set-keys-hsm.sh | 1 + .../template-code-signing-provider-make | 6 +++ scripts

[ptxdist] [PATCH 2/3] ptxd_lib_code_signing: refactor cs_check_env for SoftHSM workflow

2021-08-09 Thread Roland Hieber
Checking for PKCS11_MODULE_PATH etc. is also useful for the non-SoftHSM workflow, but the other variables are specific to SoftHSM. Split off the SoftHSM checks up into a separate function. Signed-off-by: Roland Hieber --- scripts/lib/ptxd_lib_code_signing.sh | 21 ++--- 1 file

[ptxdist] [PATCH 1/3] ptxd_lib_code_signing: take PKCS#11 PIN from the environment

2021-08-09 Thread Roland Hieber
Signed-off-by: Roland Hieber --- bin/ptxdist | 2 +- doc/dev_code_signing.rst | 12 scripts/lib/ptxd_lib_code_signing.sh | 21 + 3 files changed, 34 insertions(+), 1 deletion(-) diff --git a/bin/ptxdist b/bin/ptxdist index

[ptxdist] [PATCH v2 1/4] ptxd_lib_code_signing: take PKCS#11 PIN from the environment

2021-08-10 Thread Roland Hieber
Signed-off-by: Roland Hieber --- PATCH v2: no changes PATCH v1: https://lore.ptxdist.org/ptxdist/20210809144030.22764-1-...@pengutronix.de --- bin/ptxdist | 2 +- doc/dev_code_signing.rst | 12 scripts/lib/ptxd_lib_code_signing.sh | 21

[ptxdist] [PATCH v2 2/4] ptxd_lib_code_signing: refactor cs_check_env for SoftHSM workflow

2021-08-10 Thread Roland Hieber
Checking for PKCS11_MODULE_PATH etc. is also useful for the non-SoftHSM workflow, but the other variables are specific to SoftHSM. Split off the SoftHSM checks up into a separate function. Signed-off-by: Roland Hieber --- PATCH v2: no changes PATCH v1: https://lore.ptxdist.org/ptxdist

Re: [ptxdist] [PATCH 3/3] ptxd_lib_code_signing: let providers clean up their keys

2021-08-10 Thread Roland Hieber
On Mon, Aug 09, 2021 at 04:40:30PM +0200, Roland Hieber wrote: > Currently, sysroot-host/var/lib/keys/${keyprovider} is left over even > when the provider package is cleaned. To help with this, introduce > cs_clean and cs_clean_softhsm shell functions. The latter needs access > to ${sh

[ptxdist] [PATCH v2 3/4] ptxd_lib_code_signing: let providers clean up their installed files

2021-08-10 Thread Roland Hieber
functions in the clean stage of the providers. Reported-by: Bastian Krause Signed-off-by: Roland Hieber --- PATCH v2: - spell Bastian's last name correctly (sorry!) (feedback from Bastian Krause) - split off and extend cs_init stuff into next patch PATCH v1: https://lore.ptxdist.org/ptxdist

[ptxdist] [PATCH v2 4/4] ptxd_lib_code_signing: enforce cleaning up on init

2021-08-10 Thread Roland Hieber
Similarly to cs_init_softhsm, introduce cs_init for non-SoftHSM use cases. In both cases, clean up any left-over files from previous installations to ensure a clean state, and enforce their use for existing providers. Reported-by: Bastian Krause Signed-off-by: Roland Hieber --- PATCH v2: new

[ptxdist] [PATCH] doc: working with licensing information in packages

2021-08-06 Thread Roland Hieber
Co-authored-by: Felicitas Jung Signed-off-by: Felicitas Jung Signed-off-by: Roland Hieber --- PATCH v4: - remove dangling include to daily_work_licenses.inc (how did that ever work…?) PATCH v3: https://lore.ptxdist.org/ptxdist/20210805091848.2855-1-...@pengutronix.de - rebase to current

[ptxdist] [PATCH 2/2] rng-tools: version bump v6.5 -> v6.14

2021-08-12 Thread Roland Hieber
The old version of rng-tools didn't use libgcrypt, but linked to it nevertheless; however it moved from libgcrypt to openssl anyway in the new version. The patch was applied upstream, but ./configure still needs to be generated. Signed-off-by: Roland Hieber --- .../autogen.sh

[ptxdist] [PATCH 3/2] rng-tools: fix dependency for systemd services and init script

2021-08-12 Thread Roland Hieber
Both call rngd, so it does not make sense to install them without rngd. Furthermore, the systemd unit is useless without systemd itself. Fixes: 88f17567fbef465e9bf2 (2021-06-07, "rng-tools: allow installing rngtest without rngd") Signed-off-by: Roland Hieber --- rules/rng-tools.in

[ptxdist] [PATCH 1/2] rng-tools: pin down license files

2021-08-12 Thread Roland Hieber
Signed-off-by: Roland Hieber --- rules/rng-tools.make | 4 1 file changed, 4 insertions(+) diff --git a/rules/rng-tools.make b/rules/rng-tools.make index 5d8a09cee153..93d1b522588b 100644 --- a/rules/rng-tools.make +++ b/rules/rng-tools.make @@ -17,6 +17,10 @@ RNG_TOOLS_URL

Re: [ptxdist] [PATCH] fscryptctl: new package

2021-08-02 Thread Roland Hieber
On Mon, Aug 02, 2021 at 07:45:26AM +0200, Ahmad Fatoum wrote: > Hi Roland, > > On 28.07.21 11:48, Roland Hieber wrote: > > On Tue, Jul 27, 2021 at 04:05:35PM +0200, Ahmad Fatoum wrote: > >> diff --git a/rules/fscryptctl.make b/rules/fscryptctl.make > >>

[ptxdist] [PATCH v1 2/5] libptxdist: introduce ptxd_exec_silent_stderr

2021-08-04 Thread Roland Hieber
with 'ptxdist -v', but the messages are still available in the logfile. Signed-off-by: Roland Hieber --- scripts/libptxdist.sh | 18 ++ 1 file changed, 18 insertions(+) diff --git a/scripts/libptxdist.sh b/scripts/libptxdist.sh index ee0ba39d3ea3..bb508798cb6f 100644 --- a/scripts

[ptxdist] [PATCH v1 1/5] ptxd_make_world_common: make the package name available to scripts

2021-08-04 Thread Roland Hieber
Variables named ${pkg} are already widely used throughout the code base for different purposes, so name it ${pkg_name} instead. Signed-off-by: Roland Hieber --- Turned out I didn't need it for this series, but I still think it's useful in general. --- rules/post/ptxd_make_world_common.make | 1

[ptxdist] [PATCH v1 5/5] ptxd_lib_code_signing: add key whitelist checks

2021-08-04 Thread Roland Hieber
Signed-off-by: Roland Hieber --- doc/dev_code_signing.rst | 68 +++ platforms/code-signing.in | 22 rules/pre/030-code-signing-consumers.make | 6 ++ scripts/lib/ptxd_lib_code_signing.sh | 52 - 4 files changed

[ptxdist] [PATCH v1 3/5] ptxd_lib_code_signing: refactor hard-coded SoftHSM PIN in PKCS11 URIs

2021-08-04 Thread Roland Hieber
We'll need this type of function more often later. Signed-off-by: Roland Hieber --- scripts/lib/ptxd_lib_code_signing.sh | 14 +- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/scripts/lib/ptxd_lib_code_signing.sh b/scripts/lib/ptxd_lib_code_signing.sh index

[ptxdist] [PATCH v1 4/5] ptxd_lib_code_signing: provide consumer functions with some environment

2021-08-04 Thread Roland Hieber
information can be added later if needed. Refactor the existing consumers in the code base too, and add an error message in case anyone else that still uses the old API. Signed-off-by: Roland Hieber --- doc/dev_code_signing.rst | 2 +- doc/ref_code_signing_helpers.rst

[ptxdist] [PATCH v3] doc: working with licensing information in packages

2021-08-05 Thread Roland Hieber
Co-authored-by: Felicitas Jung Signed-off-by: Felicitas Jung Signed-off-by: Roland Hieber --- PATCH v3: - rebase to current master - rewrite paragraph about always including the copyright statement lines in the checksum (feedback from Michael Olbrich) PATCH v2: https://lore.ptxdist.org

Re: [ptxdist] [PATCH 2/2] gt: add gadget-tool

2021-09-23 Thread Roland Hieber
, 0755, -, /usr/bin/gt) > + @$(call install_copy, gt, 0, 0, 0755, $(GT_PKGDIR)/usr/etc/gt/gt.conf, > /etc/gt/gt.conf) The conf file doesn't need the execute bit, does it? - Roland > + > + @$(call install_finish, gt) > + > + @$(call touch) > + > +# vim: syntax=make > -- > 2.30.2 > > > _

[ptxdist] [PATCH 1/2] gpsd: version bump 3.21 -> 3.23.1

2021-09-29 Thread Roland Hieber
From: Ladislav Michl Signed-off-by: Ladislav Michl --- ladis says on IRC: "Hi there. Mailsetup still broken, so above two fixes... :-)" and provided two pastebin links ...-make-python-files-without-shebang-e.patch | 23 --- patches/gpsd-3.21/series | 7

[ptxdist] [PATCH 2/2] cryptodev: version bump 1.11 -> 1.12

2021-09-29 Thread Roland Hieber
From: Ladislav Michl Fix compilation issues against Linux kernel 5.9 and 5.11 Signed-off-by: Ladislav Michl --- rules/cryptodev.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/cryptodev.make b/rules/cryptodev.make index 42ac15f3c3d4..002cad5d9696 100644 ---

[ptxdist] [PATCH] image-rauc: fix typos and improve clarity of help texts

2021-09-30 Thread Roland Hieber
Signed-off-by: Roland Hieber --- platforms/image-rauc.in | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/platforms/image-rauc.in b/platforms/image-rauc.in index 3fa5dfc8c13a..1c59670925d3 100644 --- a/platforms/image-rauc.in +++ b/platforms/image-rauc.in @@ -8,14

[ptxdist] [PATCH] image-rauc: allow selecting the bundle type (plain or verity)

2021-09-30 Thread Roland Hieber
ported-by: Alexander Dahl Signed-off-by: Roland Hieber --- config/images/rauc.config | 5 - platforms/image-rauc.in | 15 +++ rules/image-rauc.make | 1 + 3 files changed, 20 insertions(+), 1 deletion(-) diff --git a/config/images/rauc.config b/config/images/rauc.config

Re: [ptxdist] [PATCH] fixup! gt: add gadget-tool

2021-09-24 Thread Roland Hieber
On Thu, Sep 23, 2021 at 04:56:54PM +0200, Michael Grzeschik wrote: > --- > rules/gt.make | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) Thanks! Reviewed-by: Roland Hieber > diff --git a/rules/gt.make b/rules/gt.make > index 63fa428ea..80b58c0f8 100644 > --- a/rul

Re: [ptxdist] TF-A FIP format and U-Boot

2021-10-01 Thread Roland Hieber
packages install their files. This is done because in the install stage PTXdist uses the package's build system to install files, which sometimes installs many more files that you maybe don't want in your target. In the targetinstall stage you have to pick them from sysroot-target into the image exp

[ptxdist] [PATCH v2 3/2] rng-tools: fix dependency for init script and systemd unit

2021-10-24 Thread Roland Hieber
Both call rngd, so it does not make sense to install them without rngd. Furthermore, the systemd unit is useless without systemd itself. Fixes: 88f17567fbef465e9bf2 (2021-06-07, "rng-tools: allow installing rngtest without rngd") Signed-off-by: Roland Hieber --- v1 -> v2: * remov

[ptxdist] [PATCH] memstat: move to staging

2021-10-24 Thread Roland Hieber
Signed-off-by: Roland Hieber --- rules/memstat.in | 10 +- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/rules/memstat.in b/rules/memstat.in index 2ebb757b9e56..47ae4836711a 100644 --- a/rules/memstat.in +++ b/rules/memstat.in @@ -1,4 +1,6 @@ -## SECTION=shell_and_console

Re: [ptxdist] [PULL] rules: add license information

2021-12-04 Thread Roland Hieber
On Fri, Jun 05, 2020 at 02:36:32PM +0200, Michael Olbrich wrote: > Hi, > > On Wed, May 27, 2020 at 01:22:04PM +0200, Roland Hieber wrote: > > Felicitas has spent a good amount of time adding missing _LICENSE > > and _LICENSE_FILES variables to (mostly older) package rules.

Re: [ptxdist] [PATCH 2/3] add package for rockchip firmware binaries

2021-12-04 Thread Roland Hieber
On Sun, Dec 05, 2021 at 01:56:45AM +0100, Roland Hieber wrote: > On Fri, Dec 03, 2021 at 05:54:39PM +0100, Michael Riesch wrote: > > Rockchip provides the SDRAM initialization as well as BL31/BL32 > > firmware for their SoCs in binary from. Add a package that downloads >

[ptxdist] [PATCH v2 01/13] argtable2: add license information

2021-12-04 Thread Roland Hieber
Reported-by: Felicitas Jung Signed-off-by: Roland Hieber --- PATCH v2: - redo the review completely, this changes LGPL-2.0-only to -or-later - also add src/argtable2.c PULL v1: https://lore.ptxdist.org/ptxdist/20200527112204.ll7ij44ahllid...@pengutronix.de --- rules/argtable2.make | 4

[ptxdist] [PATCH v2 05/13] libgd: add license information

2021-12-04 Thread Roland Hieber
From: Felicitas Jung Signed-off-by: Felicitas Jung [rhi: use "custom" instead of "unknown"] Reviewed-by: Roland Hieber Signed-off-by: Roland Hieber --- PATCH v2: - use "custom" instead of "unknown", review PULL v1: https://lore.ptxdist.

[ptxdist] [PATCH v2 03/13] frodo: add license information

2021-12-04 Thread Roland Hieber
From: Felicitas Jung Signed-off-by: Felicitas Jung [rhi: use "custom" instead of "unknown"] Reviewed-by: Roland Hieber Signed-off-by: Roland Hieber --- PATCH v2: - use "custom" instead of "unknown", review PULL v1: https://lore.ptxdist.

[ptxdist] [PATCH v2 04/13] hdparm: add license information

2021-12-04 Thread Roland Hieber
From: Felicitas Jung Signed-off-by: Felicitas Jung [rhi: use "custom" instead of "unknown"] Reviewed-by: Roland Hieber Signed-off-by: Roland Hieber --- PATCH v2: - use "custom" instead of "unknown", review PULL v1: https://lore.ptxdist.

[ptxdist] [PATCH v2 02/13] calibrator: add license information

2021-12-04 Thread Roland Hieber
From: Felicitas Jung Signed-off-by: Felicitas Jung [rhi: use "custom" instead of "unknown"] Reviewed-by: Roland Hieber Signed-off-by: Roland Hieber --- PATCH v2: - use "custom" instead of "unknown" PULL v1: https://lore.ptxdist.org/ptxdist/202005

[ptxdist] [PATCH v2 09/13] openntpd: add license information

2021-12-04 Thread Roland Hieber
From: Felicitas Jung Signed-off-by: Felicitas Jung [rhi: use "custom" instead of "unknown"] Reviewed-by: Roland Hieber Signed-off-by: Roland Hieber --- PATCH v2: - use "custom" instead of "unknown" PULL v1: https://lore.ptxdist.org/ptxdist/202005

<    3   4   5   6   7   8   9   10   >