Merge pull request #82 from PelionIoT/dev

2.5.0 release

Dockerfile

@@ -24,8 +24,10 @@ RUN apt-get update \
 		chrpath cpio diffstat file gawk g++ iproute2 iputils-ping less libmagickwand-dev \
 		libmath-prime-util-perl libsdl1.2-dev libssl-dev locales \
 		openjdk-11-jre openssh-client perl-modules python3 python3-requests \
-		make patch repo sudo texinfo vim-tiny wget whiptail libelf-dev git-lfs \
+		make patch repo sudo texinfo vim-tiny wget whiptail libelf-dev git-lfs screen \
 		socket corkscrew curl xz-utils tcl libtinfo5 device-tree-compiler python3-pip python3-dev \
+		tmux libncurses-dev vim zstd liblz4-tool \
+	&& ln -s /usr/bin/python3 /usr/bin/python \
 	&& pip3 --no-cache-dir install jsonFormatter \
 	&& apt-get autoremove -y \
 	&& apt-get clean \

conf/bblayers-base.inc

@@ -10,7 +10,9 @@ BASELAYERS = " \
   ${OEROOT}/layers/meta-openembedded/meta-python \
   ${OEROOT}/layers/meta-virtualization \
   ${OEROOT}/layers/meta-clang \
+  ${OEROOT}/layers/meta-rust \
   ${OEROOT}/layers/meta-updater \
   ${OEROOT}/layers/meta-security \
   ${OEROOT}/layers/meta-security/meta-tpm \
+  ${OEROOT}/layers/meta-security/meta-integrity \
 "

conf/bblayers-bsp.inc

@@ -15,8 +15,10 @@ BSPLAYERS = " \
   ${OEROOT}/layers/meta-intel \
   ${OEROOT}/layers/meta-yocto/meta-yocto-bsp \
   ${OEROOT}/layers/meta-xilinx/meta-xilinx-bsp \
+  ${OEROOT}/layers/meta-xilinx/meta-xilinx-standalone \
   ${OEROOT}/layers/meta-xilinx-tools \
   ${OEROOT}/layers/meta-ti \
   ${OEROOT}/layers/meta-st-stm32mp \
+  ${OEROOT}/layers/meta-tegra \
   ${OEROOT}/layers/meta-lmp/meta-lmp-bsp \
 "

conf/bblayers.conf

@@ -23,7 +23,6 @@ BBLAYERS += " \
              ${OEROOT}/layers/meta-pelion-edge \
              ${OEROOT}/layers/meta-pelion-edge/meta-lmp-support \
              ${OEROOT}/layers/meta-mbed-edge \
-             ${OEROOT}/layers/meta-rust \
              ${OEROOT}/layers/meta-parsec \
              ${OEROOT}/layers/meta-yocto/meta-poky/ \
              ${OEROOT}/layers/meta-pelion-edge/meta-imx8mmsolidrun-support \

conf/keys/opteedev.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

conf/keys/opteedev.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

conf/keys/privkey_modsign.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

conf/keys/ubootdev.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

conf/keys/ubootdev.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

conf/keys/x509.genkey

@@ -0,0 +1,17 @@
+[ req ]
+default_bits = 4096
+distinguished_name = req_distinguished_name
+prompt = no
+string_mask = utf8only
+x509_extensions = myexts
+
+[ req_distinguished_name ]
+#O = Unspecified company
+CN = Default insecure development key 
+#emailAddress = [email protected]
+
+[ myexts ]
+basicConstraints=critical,CA:FALSE
+keyUsage=digitalSignature
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid

conf/keys/x509_modsign.crt

@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----
+MIIFSzCCAzOgAwIBAgIUK6YaoE2ew8+UYrv80P763gszs8YwDQYJKoZIhvcNAQEL
+BQAwLzEtMCsGA1UEAwwkRGVmYXVsdCBpbnNlY3VyZSBrZXkgZnJvbSBGYWN0b3J5
+IElJMCAXDTIxMDYxNzE4MzUyOFoYDzIxMjEwNTI0MTgzNTI4WjAvMS0wKwYDVQQD
+DCREZWZhdWx0IGluc2VjdXJlIGtleSBmcm9tIEZhY3RvcnkgSUkwggIiMA0GCSqG
+SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/t2OAb1ybzW6ehti8ZRp3oJkQNVkdPROI
+AjJ1X8x4X52p4Mv/vnNn5MOHprGFbDzmmU4rV48J8McvR+DomTLKZnPy0ei2n2gK
+nqngEtCl2aU8ETtg/o1n4DXB/fpFNV759E0IFfNo3l0XRMOzCQpHAUwZcRCf/9/P
+i16v2SDCV14CtbfbCeVYGVFvNn889CXDI9oehbpwh37TChJ7viZfKbEZRkVSRo5A
+4lyKI57opOm0FZWQ01HJTEQFN4DzbpUW6FMuKUkZnF34xL+UchUkvZSxnNFzGQKu
+sZsK7/E3sfldczsjkyLNREXuyuFS+29+bnaE/HZokRUrpLPGn8IxlcKAe11WPISY
+Ietnj0plOdz+nLJJ0PJ/qDMHZUGXndbtOXv9a9bR82pEUqeAuzLju1L7t3StcqkG
+r7+XyJfi8Xsy2njD17Z+pi/t/xSNarZU7+nGJz16T+EAjNT3n3GvaB2GCLk52fTK
+NqBUumTj4y72x3S4YRoxiZZLrssMz6hcrhTUnnuHZAa/zj8L/Vlbvy9C+vUesa0Y
+rXKUtxTr/Ob1fGLiJk86brF1aXSA2Oh+dtoqQCwraJAjsQdnsvux28dsBVSKBW7D
+AIA0veSW3fybfD46qk4NaQJR4VoJOA7hZ+OvxhQW6C5Pgheepekt/uwmYg6QKj2P
+FXRo+YhdqwIDAQABo10wWzAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIHgDAdBgNV
+HQ4EFgQUGyMnwLddC8HkkUyBlbvwU2KbirswHwYDVR0jBBgwFoAUGyMnwLddC8Hk
+kUyBlbvwU2KbirswDQYJKoZIhvcNAQELBQADggIBAIgYL/+hSBg64SV79JioM61r
+gjaQbGwe38VdPqECOm897tntOncxtyvCIDdwRgyNNOv6XttSLvC1qwgZmevrBMOa
+vf1Befeqv8ZGmw5BfcTf0mmPi59HtS6rcQBYJOJ2V3zhwnry0o25w8bI7JOaMb0s
+QRXgOsp8fOvK5hVFk5NGVpOtZZ1f3ldwf1Uflx6YE/aFvR+DJh/rpYmOk92+g7kw
+c9gqyaubsrrt8XA7SFeMDCw5JZPz2X8OA0xQguu+zdxtOxQ5BO7qdBaOTub5+Xf/
+UJ9SnB3TbVfxjBQP+rAHYoBHbXsb5eZDtJAYmZQxiGESgsaTgFHtbiS7szSoiUye
+Kwtz03bIaJqZzxqFwSB88vQzhnK7onsdxnPsVR/bGeSck//AhvEQMeF+Nfj3w3RY
+o9PtQAFMhSfTZssDRDepz9O1Jjzai9NeNvz+hIhSHh9CtU53ZKJppmbSkUVG8a8d
+j9qIX4pbUsxldOtiFVwr58S7A6sSFr8M6jl5LZUT51I6g6R3OWUhehA9nfJlJLTN
+S6ZvJYKDwbZa/7SLcc8FWa6V0aJQ0zXE9of2fw9kQTtCx+KvEg60sbu187Rth/Yj
+OLtpLYaj2O/uozE4kBY6O3d2xW7ReAP05ao1ztRFPufiX1AwJzhDr6UPxYJx/UR5
+xaWAt1Hyu/GXHISkkDlo
+-----END CERTIFICATE-----

conf/local.conf

@@ -8,7 +8,7 @@ BBMASK = ""
 # Don't generate the mirror tarball for SCM repos, the snapshot is enough
 BB_GENERATE_MIRROR_TARBALLS = "0"
 
-# Disable build time patch resolution. This would lauch a devshell
+# Disable build time patch resolution. This would launch a devshell
 # and wait for manual intervention. We disable it.
 PATCHRESOLVE = "noop"
 
@@ -55,11 +55,16 @@ PARALLEL_MAKE ?= "-j ${@oe.utils.cpu_count()}"
 # kernel provider.
 PREFERRED_PROVIDER_virtual/kernel ?= "linux-lmp"
 
+# By default LmP kernel is configured to load only signed modules.
+# The default key provided should only be used for development purposes.
+# To create a custom signing key, follow the instructions on kernel documentation.
+MODSIGN_KEY_DIR ?= "${TOPDIR}/conf/keys"
+
 #
 # U-Boot / fitImage signing support
 #
 # Supported key type: RSA 2048
-UBOOT_SIGN_KEYDIR ?= "${TOPDIR}/conf/keys"
+UBOOT_SIGN_KEYDIR ??= "${TOPDIR}/conf/keys"
 UBOOT_SIGN_KEYNAME ?= "dev"
 #UBOOT_SIGN_ENABLE ?= "1"
 
@@ -70,7 +75,7 @@ UBOOT_SIGN_KEYNAME ?= "dev"
 # repository, which should only be used for development purposes. To use a
 # custom signing key just generate a custom RSA 2048 key (PEM format) and
 # set via the OPTEE_TA_SIGN_KEY variable.
-OPTEE_TA_SIGN_KEY ?= "${TOPDIR}/conf/keys/dev.key"
+OPTEE_TA_SIGN_KEY ??= "${TOPDIR}/conf/keys/dev.key"
 
 ACCEPT_FSL_EULA = "1"
 
@@ -88,8 +93,8 @@ ACCEPT_FSL_EULA = "1"
 # Not sure if this is required
 #INHIBIT_SYSROOT_STRIP = "1"
 
-DISTRO_FEATURES = "ipv4 ipv6 ext2 opengl usbhost virtualization k8s wifi"
-GOVERSION = "1.15%"
+#append these features to distro
+DISTRO_FEATURES_append = " ipv4 ipv6 ext2 opengl usbhost virtualization k8s wifi"
 
 #Enables serial console for raspberry pi
 ENABLE_SERIAL_CONSOLE = "1"
@@ -105,4 +110,4 @@ PREFERRED_RPROVIDER_kubelet = "kubelet"
 VOLATILE_LOG_DIR = "no"
 
 # Set default Pelion image name to mfg tool
-MFGTOOL_FLASH_IMAGE = "console-image-lmp"
+MFGTOOL_FLASH_IMAGE = "console-image-lmp"

lmp-base.xml

@@ -5,15 +5,16 @@
 
   <default remote="lmp-mirrors" revision="master" sync-j="4"/>
 
-  <project name="bitbake" revision="0a3bf681530bd63fc0036ca81ef868ab53fde56c"/>
+  <project name="bitbake" revision="731fb52eb03338c0bdb2a2256c22c64c22bcbace"/>
   <project name="lmp-tools" path="tools/lmp-tools" remote="fio">
     <linkfile dest="setup-environment" src="setup-environment"/>
   </project>
-  <project name="meta-lmp" path="layers/meta-lmp" remote="fio" revision="6f40b3f448589dae2b49476f52e736327074ad6c"/>
-  <project name="meta-clang" path="layers/meta-clang" revision="04a1194c78563524659f27941304e564956792b1"/>
-  <project name="meta-openembedded" path="layers/meta-openembedded" revision="945f062ff098dc9c8ba8d22c5eef88adec60730d"/>
-  <project name="meta-security" path="layers/meta-security" revision="3daf99fd138b0eebe864bbe1b9c71241d97c4512"/>
-  <project name="meta-updater" path="layers/meta-updater" revision="070d291c0e79f58f2c23ef43740ea77fe2d952a6"/>
-  <project name="meta-virtualization" path="layers/meta-virtualization" revision="55ccbab52ec77d8cd923e16cad17605b14fd8036"/>
-  <project name="openembedded-core" path="layers/openembedded-core" revision="431dae3ff30b162b8a63344f559601e590f64a54"/>
+  <project name="meta-lmp" path="layers/meta-lmp" remote="fio" revision="23c85c11395dddf1ed975bc30aa3ad76927024d8"/>
+  <project name="meta-clang" path="layers/meta-clang" revision="7ef47d048267cf755c496a3962b34314f6f1f1e1"/>
+  <project name="meta-openembedded" path="layers/meta-openembedded" revision="aaa1c12b2cdea197d420953c8df873e8af5cc507"/>
+  <project name="meta-rust" path="layers/meta-rust" revision="1b59fd45906082c978d0a0a6e4e51a0ea4aa32c7"/>
+  <project name="meta-security" path="layers/meta-security" revision="5050d1267ad41288c903086030594f8702bfa039"/>
+  <project name="meta-updater" path="layers/meta-updater" revision="a0d9835bad4c86416323b1055315fc1fb09bcde5"/>
+  <project name="meta-virtualization" path="layers/meta-virtualization" revision="679a22e1307c490ac357a48eb820ad34af05e724"/>
+  <project name="openembedded-core" path="layers/openembedded-core" revision="9ba6c42c1cc0ffb690126aa93ccb529405473af5"/>
 </manifest>