[OE-core] [PATCH v5] qemu: Split the qemu package

2023-06-07 Thread Yu, Mingli
From: Mingli Yu Currently all files as below packaged into one package such as qemu-7.2.0-*.rpm. After the qemu package installed on the target, it will take up about 464M which includes not only the one matches the arch of the target but aslo all available built qemu targets which set by

[OE-core][dunfell 11/11] openssh: Move sshdgenkeys.service to sshd.socket

2023-06-07 Thread Steve Sakoman
From: Alex Kiernan sshd.socket launches the templated sshd@.service, so by moving the sshdgenkeys.service to sshd.socket, key generation can start in advance of a connection. Signed-off-by: Alex Kiernan Signed-off-by: Richard Purdie (cherry picked from commit

[OE-core][dunfell 10/11] linux-yocto/5.4: update to v5.4.243

2023-06-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: f53660ec669f Linux 5.4.243 d60f15682a5c drm/amd/display: Fix hang when skipping modeset 93ca0d7b88e8 mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock

[OE-core][dunfell 09/11] linux-yocto/5.4: update to v5.4.242

2023-06-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: ea7862c507ec Linux 5.4.242 d54a9f999ea7 ASN.1: Fix check for strdup() success 2500d7edebfb iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()

[OE-core][dunfell 08/11] linux-yocto/5.4: update to v5.4.241

2023-06-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 58f42ed1cd31 Linux 5.4.241 879593643717 xfs: force log and push AIL to clear pinned inodes when aborting mount c76dd368759a xfs: don't reuse busy extents on extent trim

[OE-core][dunfell 07/11] linux-yocto/5.4: update to v5.4.240

2023-06-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 32bea3bac5ca Linux 5.4.240 4d4cb7663613 gfs2: Always check inode size of inline inodes 928240c36891 firmware: arm_scmi: Fix device node validation for mailbox transport

[OE-core][dunfell 06/11] linux-yocto/5.4: update to v5.4.238

2023-06-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 6849d8c4a61a Linux 5.4.238 eb7716a054a6 HID: uhid: Over-ride the default maximum data buffer value with our own b687ac70e66a HID: core: Provide new max_buffer_size attribute to

[OE-core][dunfell 05/11] go: Security fix CVE-2023-24540

2023-06-07 Thread Steve Sakoman
From: Vijay Anusuri Upstream-Status: Backport [https://github.com/golang/go/commit/ce7bd33345416e6d8cac901792060591cafc2797] Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- meta/recipes-devtools/go/go-1.14.inc | 1 + .../go/go-1.14/CVE-2023-24540.patch | 90

[OE-core][dunfell 04/11] golang: Fix CVE-2023-24539

2023-06-07 Thread Steve Sakoman
From: Ashish Sharma Improper sanitization of CSS values in html/template Signed-off-by: Ashish Sharma Signed-off-by: Steve Sakoman --- meta/recipes-devtools/go/go-1.14.inc | 1 + .../go/go-1.14/CVE-2023-24539.patch | 60 +++ 2 files changed, 61

[OE-core][dunfell 03/11] xserver-xorg: Security fix CVE-2023-0494 and CVE-2023-1393

2023-06-07 Thread Steve Sakoman
From: Vijay Anusuri Upstream-Status: Backport [https://gitlab.freedesktop.org/xorg/xserver/-/commit/0ba6d8c37071131a49790243cdac55392ecf71ec & https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110] Signed-off-by: Vijay Anusuri Signed-off-by: Steve

[OE-core][dunfell 02/11] ghostscript: Fix CVE-2023-28879

2023-06-07 Thread Steve Sakoman
From: Vijay Anusuri Upstream-Status: Backport [https://git.ghostscript.com/?p=ghostpdl.git;h=37ed5022cecd584de868933b5b60da2e995b3179] Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../ghostscript/CVE-2023-28879.patch | 54 +++

[OE-core][dunfell 01/11] ffmpeg: Fix CVE-2022-48434

2023-06-07 Thread Steve Sakoman
From: Nikhil R Add a patch to fix CVE-2022-48434 which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances Link: https://ubuntu.com/security/CVE-2022-48434 Link: https://nvd.nist.gov/vuln/detail/CVE-2022-48434 Signed-off-by: Nikhil R Signed-off-by:

[OE-core][dunfell 00/11] Patch review

2023-06-07 Thread Steve Sakoman
Please review this set of changes for dunfell and have comments back by end of day Friday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/5422 The following changes since commit e4b98a42970574296e0da06842691b9fc1ffc9a1: selftest: skip virgl

[OE-core] [meta-oe][PATCH V3] xz: add ptest support

2023-06-07 Thread duep.f...@fujitsu.com
From: duep Add a ptest for xz - It is taking around 1s to execute with kvm, so added it to PTESTS_FAST - It contains 11 test files: test_bcj_exact_size test_block_header test_check test_filter_flags test_hardware test_index test_index_hash test_lzip_decoder test_memlimit

[OE-core] [PATCH] go: Upgrade 1.20.4 -> 1.20.5

2023-06-07 Thread Sakib Sajal via lists.openembedded.org
Upgrade to latest 1.20.x release: go.git$ git log --oneline go1.20.4..go1.20.5 e827d41c0a (tag: go1.20.5) [release-branch.go1.20] go1.20.5 c0ed873cd8 [release-branch.go1.20] cmd/go: disallow package directories containing newlines 356a419e2f [release-branch.go1.20] cmd/go: enforce flags with

Re: [OE-core] [PATCH v4] qemu: Split the qemu package

2023-06-07 Thread Alexandre Belloni via lists.openembedded.org
Hello, I believe this causes: https://autobuilder.yoctoproject.org/typhoon/#/builders/52/builds/7143/steps/12/logs/stdio ERROR: lib32-qemu-8.0.0-r0 do_package_qa: QA Issue: /usr/bin/qemu-mips contained in package lib32-qemu-user-mips requires /bin/bash, but no providers found in

[OE-core] [PATCH] selftest/reproducible: Allow native/cross reuse in test

2023-06-07 Thread Richard Purdie
We don't compare reproducibility of the native/cross components, only the target ones. With the long build times of rust-native, the test now takes crazy lengths of time so this tweak should allow us to reuse native/cross artefacts from sstate whilst still testing the target output is

Re: [OE-core] [RFC] incorrect parsing of sysusers.d in rootfs generation

2023-06-07 Thread Louis Rannou
Hello again, a python solution could be one below. Also, I found that most of users/groups defined there are redundant as they already exist (such as root). I guess they are defined from base-passwd. I am not sure which recipe (base-passwd or systemd) should have the precedence on this. If

Re: [OE-core] [PATCH] libssh2: Upgrade to v1.11.0

2023-06-07 Thread Alexandre Belloni via lists.openembedded.org
Hello, this doesn't build: https://autobuilder.yoctoproject.org/typhoon/#/builders/107/builds/4674/steps/12/logs/stdio | /usr/src/debug/libssh2/1.11.0-r0/tests/test_auth_keyboard_info_request.c:270: undefined reference to `userauth_keyboard_interactive_decode_info_request' | collect2: error: ld

Re: [OE-Core][PATCH v2 2/2] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Richard Purdie
On Wed, 2023-06-07 at 14:29 +0200, Alexander Kanavin wrote: > On Wed, 7 Jun 2023 at 14:23, Alexis Lothoré > wrote: > > > Then core-image-ptest.bb should append "${libdir}/{MCNAME}/ptest" to > > > that. As that same image recipe installs only a single ptest via > > > IMAGE_INSTALL:append, and the

Re: [OE-core] [PATCH 1/3] image_types: use IMAGE_FILE_MAXSIZE variable for ext2/3/4 image types

2023-06-07 Thread Alexandre Belloni via lists.openembedded.org
This fails on the autobuilders: https://autobuilder.yoctoproject.org/typhoon/#/builders/69/builds/7219/steps/11/logs/stdio https://autobuilder.yoctoproject.org/typhoon/#/builders/120/builds/2859/steps/14/logs/stdio ERROR: core-image-minimal-1.0-r0 do_image_ext4:

Re: [OE-Core][PATCH v2 2/2] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Alexander Kanavin
On Wed, 7 Jun 2023 at 14:23, Alexis Lothoré wrote: > > Then core-image-ptest.bb should append "${libdir}/{MCNAME}/ptest" to > > that. As that same image recipe installs only a single ptest via > > IMAGE_INSTALL:append, and the artifacts are retrieved only if that > > ptest would fail, this would

Re: [OE-Core][PATCH v2 2/2] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Alexis Lothoré via lists . openembedded . org
Hello Alexander, Richard, Thanks for the feedback. Indeed my testing setup is quite minimal, so it may not reflect how many files may be pulled in real cases. On 6/7/23 11:20, Alexander Kanavin wrote: > What might work better without code complications is testimage.bbclass > setting only the

[OE-core][kirkstone][PATCH] curl: Correction for CVE-2023-27536

2023-06-07 Thread Sourav Kumar Pramanik
From: Omkar Patil Correction of backport link inside the patch with correct commit link as below Link: https://github.com/curl/curl/commit/cb49e67303dbafbab1cebf4086e3ec15b7d56ee5 Signed-off-by: Sourav Kumar Pramanik --- meta/recipes-support/curl/curl/CVE-2023-27536.patch | 3 ++- 1 file

Re: [OE-core] Drafting a fetcher for kernelcves

2023-06-07 Thread Ross Burton
> On 6 Jun 2023, at 06:57, Marta Rybczynska wrote: > > Hello all, > I'm drafting a fetcher for kernelcves > (https://github.com/nluedtke/linux_kernel_cves/) and the data conflicts in a > certain way with cve-extra-exclusions.inc. With multiple fetchers we'll need > to have a way to say

Re: [OE-core] [PATCH 0/3] image_types: use IMAGE_FILE_MAXSIZE variable to create fixed partition size

2023-06-07 Thread Alexandre Belloni via lists.openembedded.org
Hello, On 04/06/2023 14:37:52+0200, Charles-Antoine Couret via lists.openembedded.org wrote: > In case of fixed partitionning where the rootfs partition can't exceed an > amount of bytes, there is currently no automatic and no generic way to have > this requirement met in any case. > > Until

[OE-core][mickledore][PATCH 2/2] linux-yocto: move build / debug dependencies to .inc

2023-06-07 Thread Xiangyu Chen
From: Bruce Ashfield When the architecture and debug specific build and runtime dependencies were introduced, they were only applicable to "newer" kernel versions and were enabled in the version specific recipes. These are now common dependencies, so we can avoid the duplication and move them

[OE-core][mickledore][PATCH 1/2] kernel: don't force PAHOLE=false

2023-06-07 Thread Xiangyu Chen
From: Bruce Ashfield If a specific kernel provider or configuration wants to enable BTF and pahole analysis, it isn't currently possible due to the explicit definition to false in the base kernel build arguments. pahole is now detected by the kernel built itself, so unless pahole-native is

Re: [OE-Core][PATCH v2 2/2] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Alexander Kanavin
What might work better without code complications is testimage.bbclass setting only the minimum set (no ptests): +TESTIMAGE_FAILED_QA_ARTIFACTS ??= "\ +${localstatedir}/log \ +${sysconfdir}/version \ +${sysconfdir}/os-release \ " Then core-image-ptest.bb should append

Re: [OE-core] [PATCH] fixup! fix: reproducible builds for initramfs and UKI img

2023-06-07 Thread Richard Purdie
On Wed, 2023-06-07 at 11:00 +0200, Alexander Kanavin wrote: > It's better to resend the whole patchset as v2. I did squash this one into the original patch.  For future reference, I did also tweak the shortlog to mention "image_types:" as the prefix so the area of code changing was clearer and

[OE-core] [PATCH v4] qemu: Split the qemu package

2023-06-07 Thread Yu, Mingli
From: Mingli Yu Currently all files as below packaged into one package such as qemu-7.2.0-*.rpm. After the qemu package installed on the target, it will take up about 464M which includes not only the one matches the arch of the target but aslo all available built qemu targets which set by

Re: [OE-core] [PATCH] fixup! fix: reproducible builds for initramfs and UKI img

2023-06-07 Thread Alexander Kanavin
It's better to resend the whole patchset as v2. Alex On Tue, 6 Jun 2023 at 10:01, Frieder Paape wrote: > > The failure happens because `touch` doesn't create a file if called with the > no-dereference option `-h`. > Removing `-h` from affected touch command. > > Signed-off-by: Frieder Paape >

Re: [OE-Core][PATCH v2 2/2] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Richard Purdie
On Wed, 2023-06-07 at 10:30 +0200, Alexis Lothoré via lists.openembedded.org wrote: > Add a basic artifacts retrievers in testimage class which: > - triggers when at least one runtime test fails but tests execution > encountered no major issue > - reads a list of paths to retrieve from

Re: [OE-core] [PATCH v3] qemu: Split the qemu package

2023-06-07 Thread Richard Purdie
On Wed, 2023-06-07 at 11:09 +0800, Yu, Mingli wrote: > Hi Richard and Bruce, > > On 6/2/23 21:19, Richard Purdie wrote: > > CAUTION: This email comes from a non Wind River email account! > > Do not click links or open attachments unless you recognize the sender and > > know the content is safe.

[OE-Core][PATCH v2 0/2] add failed tests artifacts retriever

2023-06-07 Thread Alexis Lothoré via lists . openembedded . org
This series is a proposal to bring in an "artifact retriever" to ease debugging when some runtime tests fails. This is a follow-up to the initial version ([1]) and its corresponding RFC ([2]), which in turn is a proposal to address general debugging issues like [3] In the proposed form the

[OE-Core][PATCH v2 1/2] oeqa/target/ssh: update options for SCP

2023-06-07 Thread Alexis Lothoré via lists . openembedded . org
By default scp expects files. Passing -r option allows to copy directories too Signed-off-by: Alexis Lothoré --- Changes since v1: - drop legacy scp protocol option --- meta/lib/oeqa/core/target/ssh.py | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git

[OE-Core][PATCH v2 2/2] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Alexis Lothoré via lists . openembedded . org
Add a basic artifacts retrievers in testimage class which: - triggers when at least one runtime test fails but tests execution encountered no major issue - reads a list of paths to retrieve from TESTIMAGE_FAILED_QA_ARTIFACTS - checks for artifacts presence on target - retrieve those files over

Re: [OE-Core][RFC][PATCH 3/3] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Mikko Rapeli
Hi, On Wed, Jun 07, 2023 at 09:36:07AM +0200, Alexis Lothoré wrote: > Hi Mikko, sorry for late reply, and thanks for the additional feedback > > On 6/2/23 15:07, Mikko Rapeli wrote: > > Hi, > > > > These changes are an improvement, but based on my experience in product > > test automation, > >

Re: [OE-Core][RFC][PATCH 3/3] testimage: implement test artifacts retriever for failing tests

2023-06-07 Thread Alexis Lothoré via lists . openembedded . org
Hi Mikko, sorry for late reply, and thanks for the additional feedback On 6/2/23 15:07, Mikko Rapeli wrote: > Hi, > > These changes are an improvement, but based on my experience in product test > automation, > instead of collecting logs after testing is completed, it is better to > capture