Commit Graph

164 Commits

Author SHA1 Message Date
Patrick Vogelaar e18d9b87a8 fix(qemu-coreos-arm64): fix several issues and refactoring
* rework machine conf to only build necessary stuff
* in *.wks file switch from ondisk to use-uuid the solves an issue that during
  boot the user data partition could not be mounted because user data was set
  to mmcblk1 in fstab but actually was sda
* kenrel options were missing for dmcrypt to create secure storage. those are
  now added to all machines using linux-yocto source and use the
  meta-belden-coreos-bsp layer
2024-02-25 20:42:44 +01:00
Patrick Vogelaar d57a9b7a70 refactor(certificates-and-keys-native): renamed recipe
renamed certificates-and-keys-native recipe to cos-certificates-and-keys-native
because bil has already a certificates-and-keys recipe
2024-02-05 18:18:20 +01:00
Patrick Vogelaar 12ba99370a Pull request #156: refactor(trusted-firmware-a): update patches and cleanup
Merge in ICO/coreos from refactor_marvell_trusted_firmware_a to master

* commit 'c7c3793c9e732c568202262c189014b5b8468320':
  refactor(trusted-firmware-a): update patches and cleanup
2024-01-24 19:38:29 +01:00
Patrick Vogelaar c7c3793c9e refactor(trusted-firmware-a): update patches and cleanup
* update patches so now warning shows during build
* remove ssl.patch since it is already applied in the original recipe
2024-01-24 11:58:21 +01:00
Patrick Vogelaar 5b23df1199 feat(certificates-and-keys-native): add developer keys and certificates
The certificates and keys are stored in a repository and taken from there.
It is a neative repository that puts the keys into the sysroot where other
recipes can take them

All the key related scripts where deleted or put in the development-keys
repository.

Basic simplifications where done, there is yet still room for improvement.
2024-01-24 10:33:47 +01:00
Patrick Vogelaar e4fd830aa8 feat(secure-storage): add kernel config fragment for dm_crypt 2024-01-15 22:44:26 +01:00
Patrick Vogelaar ac8f81d4a1 feat(secure-storage): add secure-storage as Coreos base feature
Now secure-storage is present on all CoreOS based images.
2024-01-15 22:44:26 +01:00
Patrick Vogelaar fd2a0835ac feat(secure-storage): add secure-storage base functionality
The secure-storage feature provides a encrypted filesystem to securely store
data in rest. It will be auto-mounted under /usr/local/data/secure-storage.
The loopbackfile will be stored under /usr/local/data/loopdevices.
The keyfile is located under /usr/local/data/.crypto.
2024-01-15 22:44:26 +01:00
Patrick Vogelaar 94c8692f43 feat(userdata): add userdata partition
The userdata partition is mounted under /usr/local/data. It is and will stay
read-write and its purpose is to store userdata like config, secure-storage.
2024-01-15 22:44:26 +01:00
Patrick Vogelaar d37d5515f5 feat: set default time for initial startup
* all creation dates of the files are set to the 01.01. of the current year
* the file /usr/lib/clock-epoch is created. It is used by timedatectl to
  get the initial time and date (creation time of file).
* a sanity check was added to check if the hardcoded timestamp is outdated
2024-01-11 12:21:42 +01:00
Patrick Vogelaar 414496b7cb fix(qemu-coreos-arm64): rework UKI and SWU generation
Aadditional checks are added that make it unnecessary to use overrides for QEMU
2023-12-11 10:27:17 +01:00
Patrick Vogelaar c1eafd4289 fix(qemu-coreos-arm64): change QB_DRIVE_TYPE for hdd to sd 2023-12-11 08:22:36 +01:00
Patrick Vogelaar 5a4fa9e32e feat(qemu-coreos-arm64): add new uefi boot capable qemu machine
This new machine supports UEFI boot and also is capable of doing the complete
update procedure of efibootguard.
2023-12-06 10:36:57 +01:00
Patrick Vogelaar b786afc271 refactor(trusted-firmware-a): switch to meta-arm trusted-firmware-a recipe
When introducing CN913x devices by using the meta-belden-marvell-bsp layer
trusted-firmwarre-a recipe was copied from meta-arm and modified. Now the
original recipe is used from meta-arm and the changes were put into a
bbappend.

Also trusted-firmware-a version changed from 2.3 to 2.6.
2023-12-05 22:36:30 +01:00
Patrick Vogelaar e071b04038 fix(qemuall): fix broken build for qemu machine
The defaul qemu devices have not set efi as MACHINE_CONFIG which causes
the CoreOS build to fail because efi is required.
This change disables CoreOS sepcific features like swupdate for all
qemu MACHINES.
2023-11-21 16:53:36 +01:00
Holger Dihlmann 09ece07958 Pull request #132: feat(0001-refactor-cn913x-defconfig-cleanup.patch_and_cn913x_additions.cfg): remove mac80211, cfg80211 and qrtr from standard Linux kernel config.
Merge in ICO/coreos from feature/up/integration/meta-netmodule-wlan to master

* commit 'ecc4ca19f415616e101b65aca3e4bf137b5ae34c':
  refactor(0001-refactor-cn913x-defconfig-cleanup.patch): patch refactored. defconfig is properly generated using savedefconfig yocto task
  feat(0001-refactor-cn913x-defconfig-cleanup.patch_and_cn913x_additions.cfg): remove mac80211, cfg80211 and qrtr from standard Linux kernel config. Use the counterparts from meta-netmodule-wlan layer.
2023-11-16 14:41:41 +01:00
Dimitry Shapovalov ecc4ca19f4 refactor(0001-refactor-cn913x-defconfig-cleanup.patch): patch refactored. defconfig is properly generated using savedefconfig yocto task 2023-11-16 10:15:07 +01:00
Holger Dihlmann a757360a2d feat(0001-refactor-cn913x-defconfig-cleanup.patch_and_cn913x_additions.cfg): remove mac80211, cfg80211 and qrtr from standard Linux kernel config. Use the counterparts from meta-netmodule-wlan layer. 2023-10-25 10:42:30 +02:00
Patrick Vogelaar ea134d867e Pull request #130: refactor(eagle40-03): rename MACHINE from eagle40_04 to eagle40-03
Merge in ICO/coreos from rename_eagle40_03 to master

* commit '3bf28622c1b2207e752b6e0b9725b4d27fa328a0':
  refactor(eagle40-03): rename MACHINE from eagle40_03 to eagle40-03
2023-10-25 10:34:28 +02:00
Patrick Vogelaar 3bf28622c1 refactor(eagle40-03): rename MACHINE from eagle40_03 to eagle40-03 2023-10-24 15:34:40 +02:00
Samuel Dolt 3eeedd8412 Pull request #129: feat(swupdate): add signature support
Merge in ICO/coreos from feat/signed-swu to master

* commit '27f3b6657a5aedfd76deedee568e480f9117bd47':
  feat(swupdate): add signature support
2023-10-16 14:09:10 +02:00
Patrick Vogelaar 9148fc12da Pull request #127: feat(eagle40_03): integrate EAGLE40-03
Merge in ICO/coreos from add_eagle40_03_board to master

* commit 'c17db5dbd5acc8853ced4e971334674c27e1bee1':
  feat(eagle40_03): integrate EAGLE40-03
2023-10-16 10:00:21 +02:00
Samuel Dolt 27f3b6657a feat(swupdate): add signature support
BREAKING CHANGE: Unsigned .swu file will now be rejected by swupdate
2023-10-16 09:42:59 +02:00
Samuel Dolt 5e0d938b9c feat(vm-x64): add Microsoft Hyper-V suport 2023-10-13 12:04:13 +02:00
Patrick Vogelaar c17db5dbd5 feat(eagle40_03): integrate EAGLE40-03
* add basic config for EAGLE40.03
* purely based on uefi -> no uboot

NOTE: The board only boots so far. No in depth testing has been done yet.
2023-10-13 11:56:51 +02:00
Patrick Vogelaar 8703fd2efd Pull request #126: refactor(partitions.inc): use variable for kernel in wks file
Merge in ICO/coreos from add_variable_for_kernel_in_wks_file to master

* commit 'afa1a784c1637ad2965f93061794f10577e992a2':
  refactor(partitions.inc): use variable for kernel in wks file
2023-10-04 15:13:10 +02:00
Patrick Vogelaar afa1a784c1 refactor(partitions.inc): use variable for kernel in wks file 2023-09-27 22:47:23 +02:00
Uli Stein af33b55ec0 feat(k3s): image that installs the k3s-agent
the changed image is
layers/meta-belden-coreos-demo/recipes-core/image/cores-image-demo-k3s
k3s is a orchestration tool and a slimed down version of kubernetes
k3s agent is a tool to control pods
the commands come a k3s server in a cluster
2023-09-15 11:46:10 +02:00
Uli Stein 77a25e9c7b feat(linux-yocto_5.15): add kernel config for k3s
disable oabi compatibility it to solve seccomp conflict
enable seccomp filter
secccomp filter is needed for k3s to pawn pods
2023-09-15 11:46:10 +02:00
Samuel Dolt 53b2d1e3ee feat(bats): upgrade bats to 1.10
Common library bats-assert, bats-file and bats-support are
now available as well
2023-08-16 14:45:33 +02:00
Samuel Dolt 0d5e631162 feat(belden-coreos): reworked distro settings
Now the distro settings is splitted into two config smaller config
file. PACKAGECONFIG for the system package is set to include a
reduced set of features by default.

Some EFI related feature are now dependant of the EFI DISTRO_
and MACHINE_FEATURES.
2023-08-07 15:32:53 +02:00
Patrick Vogelaar 18d38f9010 fix(u-boot-tools): add uboot-efivar fot FILES
Without this fix the build breaks for -c populate_sdk.
2023-07-26 14:56:28 +02:00
Samuel Dolt 04e0adf97a feat(efibootguard): single image with automatic partition switch
Now a single unified kernel image is built using a new CoreOS
specific functionality added in the efibootguard UKI stub to
automatically insert root=PARTLABEL=rootfs0 (or rootfs1) in the
kernel command line

BREAKING CHANGE: coreos-image-uki.bbclass now only generate a
single kernel image named kernel-${MACHINE}.efi
2023-06-27 14:20:37 +02:00
Samuel Dolt 6bf03fbec2 feat(coreos-installer): add coreos-installer and emmc support
Now coreos-installer can be used with Beaglebone and cn9130-cf-pro
to install CoreOS into the emmc instead of booting only on the
SDCard
2023-06-21 15:32:08 +02:00
Patrick Vogelaar 277a2ef020 Pull request #100: fix(u-boot): revert to u-boot 2019.10 because of several issues with 2023.04
Merge in ICO/coreos from fix_pci_issue_on_cf_pro_eval_board to master

* commit '1d8551459f909b00e0156959a40ac3cbc9773ef5':
  fix(u-boot): revert to u-boot 2019.10 because of several issues with 2023.04
2023-06-20 09:37:56 +02:00
Samuel Dolt e0aa9dd292 Pull request #96: feat(layers): move third party layers to external-layers
Merge in ICO/coreos from feat/extlayers to master

* commit '0d5beff86fd830f8b3eec81afdf51f94132530b6':
  feat(layers): move third party layers to external-layers
2023-06-20 09:32:47 +02:00
Patrick Vogelaar 1d8551459f fix(u-boot): revert to u-boot 2019.10 because of several issues with 2023.04 2023-06-19 14:30:38 +02:00
Patrick Vogelaar cf831c870c fix(linux-netmodule): add CVE_VERSION to recipe that the CVE checkeer can match the kernel version 2023-06-14 23:34:08 +02:00
Patrick Vogelaar b707981c55 fix(swupdate): adjust bbapend to match new swupdate version
* the swupdate version has been updated and therefore caused a regression
  because the bbappend didn't match anymore.
* changed the bbappend to match any swupdate version.
2023-06-14 23:29:28 +02:00
Samuel Dolt 0d5beff86f feat(layers): move third party layers to external-layers
BREAKING CHANGE: bblayers.conf / bblayers.conf.sample of project
using CoreOS should be adapted to use external-layers instead
of layers for each moved layers
2023-06-14 14:39:56 +02:00
Patrick Vogelaar 1a9e19c144 fix(coreos-image-testable): phy firmware not available in coreos-image-testable
Reason was that the actual firmware was just added to the coreos-image-all-feature.
* use MACHINE_ESSENTIALS_EXTRA_RDEPENDS instead of IMAGE_INSTALL and move to machine config
* refined linux-firmware recipe to just have microchip on its own.
2023-06-14 13:16:38 +02:00
Patrick Vogelaar 169c16fc9b fix(3rd-party): automatic update of CoreOS submodules 2023-06-13 19:52:12 +00:00
Dimitry Shapovalov 9a6e6e5823 Pull request #89: Feature/cn913x kernel tune
Merge in ICO/coreos from feature/cn913x_kernel_tune to master

* commit '827748ac7b15eb08e91fc7cf74f04946d9545781':
  refactor(cn9131): remove unnecessary files
  feat(cn913x): defconfig cleanup, solidrun kernel cfg additions, copper and sfp patch
2023-06-13 15:39:02 +02:00
Patrick Vogelaar 1dae191afa fix(cn9131-bldn-mbv): fix IMAGE_INSTALL assignement
Due to the wrong order of assignement bg_printenv and bg_setenv were not available anymore.
2023-06-13 10:53:28 +02:00
Dimitry Shapovalov 827748ac7b refactor(cn9131): remove unnecessary files 2023-06-12 10:31:53 +02:00
Dimitry Shapovalov 6c9137b68a feat(cn913x): defconfig cleanup, solidrun kernel cfg additions, copper and sfp patch 2023-06-12 10:14:24 +02:00
Patrick Vogelaar f262a81a04 Pull request #87: fix(cn9131-bldn-mbv): add phy firmware handling
Merge in ICO/coreos from fix_falcon_phy_firmware to master

* commit 'e003ccb91319299b73eaf8029288e3fde55fc71f':
  fix(cn9131-bldn-mbv): add phy firmware handling
2023-06-07 07:23:26 +02:00
Patrick Vogelaar e003ccb913 fix(cn9131-bldn-mbv): add phy firmware handling 2023-06-01 14:32:46 +02:00
Samuel Dolt 1ecdf10a5b feat(wic): allow to configure the rootfs partition size
The rootfs partition size is now configurable with the
WKS_PART_ROOT_SIZE variable for beaglebone, cn913x and vm-x64
target
2023-05-31 13:46:04 +02:00
Patrick Vogelaar c99f123fae Pull request #85: fix(cn913x-bldn-mbv): fix machine and phy
Merge in ICO/coreos from fix_falcon_machine_name to master

* commit 'e04b6cf215a61288f058970e4ca6031acea8f4a2':
  fix(cn913x-bldn-mbv): fix machine and phy
2023-05-31 11:05:14 +02:00