Re: [yocto] [meta-raspberrypi][PATCH V3] wic: support to set /root size and add extra partition

2019-11-14 Thread Hongxu Jia
On 11/14/19 8:40 PM, Paul Barker wrote: On Thu, 14 Nov 2019, at 07:33, Hongxu Jia wrote: - Support to add extra partition, such as add swap partition to workaround memory limitation - Support to set /root size Signed-off-by: Hongxu Jia If you want to make changes like this in a distro

[yocto] [meta-raspberrypi][PATCH V3] wic: support to set /root size and add extra partition

2019-11-13 Thread Hongxu Jia
- Support to add extra partition, such as add swap partition to workaround memory limitation - Support to set /root size Signed-off-by: Hongxu Jia --- conf/machine/include/rpi-base.inc | 11 ++- ...age-raspberrypi.wks => sdimage-raspberrypi.wks.in} | 3 ++-

[yocto] [meta-raspberrypi][PATCH V2] wic: support to set /root size and add extra partition

2019-11-13 Thread Hongxu Jia
- Support to add extra partition, such as add swap partition to workaround memory limitation - Support to set /root size Signed-off-by: Hongxu Jia --- conf/machine/include/rpi-base.inc | 11 ++- ...age-raspberrypi.wks => sdimage-raspberrypi.wks.in} | 3 ++-

Re: [yocto] [meta-raspberrypi][PATCH] wic: add swap partition and set /root and /swap size

2019-11-13 Thread Hongxu Jia
On 11/14/19 2:30 PM, Khem Raj wrote: On Thu, 2019-11-14 at 06:04 +, Hongxu Jia wrote: - Add swap partition to workaround memory limitation - Support to set /root and /swap size, 4G /root and 1G /swap by default Signed-off-by: Hongxu Jia --- conf/machine/include/rpi-base.inc

[yocto] [meta-raspberrypi][PATCH] wic: add swap partition and set /root and /swap size

2019-11-13 Thread Hongxu Jia
- Add swap partition to workaround memory limitation - Support to set /root and /swap size, 4G /root and 1G /swap by default Signed-off-by: Hongxu Jia --- conf/machine/include/rpi-base.inc | 5 - wic/{sdimage-raspberrypi.wks => sdimage-raspberrypi.wks.in}

[yocto] [meta-openssl102][PATCH V2] conf/layer.conf: Add zeus to LAYERSERIES_COMPAT

2019-10-20 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- conf/layer.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index f1df15d..6e62f62 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -10,8 +10,9 @@ BBFILE_PRIORITY_meta-openssl-one-zero-two = &q

[yocto] [meta-openssl102][PATCH 2/2] conf/layer.conf: workaround No bb files matched BBFILE_PATTERN_meta-openssl-one-zero-two warning

2019-10-20 Thread Hongxu Jia
No bb but bbappend in meta-openssl102 Signed-off-by: Hongxu Jia --- conf/layer.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/conf/layer.conf b/conf/layer.conf index 6e62f62..be6b8a4 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -6,6 +6,7 @@ BBFILES += "${LAYERDIR}/re

[yocto] [meta-openssl102][PATCH 1/2] conf/layer.conf: Add zeus to LAYERSERIES_COMPAT

2019-10-20 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- conf/layer.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index f1df15d..6e62f62 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -10,8 +10,9 @@ BBFILE_PRIORITY_meta-openssl-one-zero-two = &q

Re: [yocto] [meta-openssl102-fips][PATCH 3/3] nss: conditionally enable fips

2019-10-12 Thread Hongxu Jia
and nss, but while kernel enable fips "pass boot params `fips=1"', nss fips is enabled and trigger the issue, It seems all of them are part of fips system, fips includes kernel and userspace, and fips 140-2 is also part of it //Hongxu --Mark On 10/12/19 3:17 AM, Hongxu Jia w

[yocto] [meta-openssl102-fips][PATCH 3/3] nss: conditionally enable fips

2019-10-12 Thread Hongxu Jia
CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot. $rpm -h |error: Failed to initialize NSS library ... Signed-off-by: Hongxu Jia --- .../nss/nss/0001-conditionally-enable-fips.patch | 93 ++ recipes-support/nss/nss_3.%.bbappend | 4 + recipes

[yocto] [meta-openssl102-fips][PATCH 2/3] openssh_fips.inc: remove rng-tools from sshd RRECOMMENDS

2019-10-12 Thread Hongxu Jia
While kernel enable fips, the rng-tools takes a high cpu performance which Operation not permitted ... Oct 12 06:08:23 qemux86-64 rngd[122]: RNDADDENTROPY failed: Operation not permitted ... Signed-off-by: Hongxu Jia --- recipes-connectivity/openssh/openssh_fips.inc | 2 ++ 1 file changed, 2

[yocto] [meta-openssl102-fips][PATCH 1/3] fix typo: openssl-fips -> openssl-fips-dev

2019-10-12 Thread Hongxu Jia
The working fips package is openssl-fips-dev rather than openssl-fips. Signed-off-by: Hongxu Jia --- README.build | 2 +- templates/feature/openssl-fips/image.inc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.build b/README.build index

[yocto] [PATCH] fix typo: openssl-fips -> openssl-fips-dev

2019-10-11 Thread Hongxu Jia
The working fips package is openssl-fips-dev rather than openssl-fips. Signed-off-by: Hongxu Jia --- README.build | 2 +- templates/feature/openssl-fips/image.inc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.build b/README.build index

[yocto] [meta-openssl102-fips][PATCH] README.build/image.inc: add missing openssl-fips to image

2019-10-09 Thread Hongxu Jia
For Yocto and WRLinux, openssl fips works only if installing package openssl-fips Signed-off-by: Hongxu Jia --- README.build | 1 + templates/feature/openssl-fips/image.inc | 1 + 2 files changed, 2 insertions(+) create mode 100644 templates/feature/openssl-fips

[yocto] [meta-openssl102-fips][PATCH V3 4/16] classes/image-enable-fips.bbclass: enable user space fips mode in image

2019-09-25 Thread Hongxu Jia
generation activity. Signed-off-by: Hongxu Jia --- classes/image-enable-fips.bbclass | 5 + conf/layer.conf | 2 ++ 2 files changed, 7 insertions(+) create mode 100644 classes/image-enable-fips.bbclass diff --git a/classes/image-enable-fips.bbclass b/classes/image-enable

Re: [yocto] Review request V2 0/16: [meta-openssl102-fips] Enable FIPS mode in Kernel and OpenSSH

2019-09-25 Thread Hongxu Jia
On 9/25/19 10:33 PM, Mark Hatle wrote: On 9/25/19 2:23 AM, Hongxu Jia wrote: Changed in V1: - Follow Mark H's suggestions Hi Mark, Once openssh enables FIPS mode, openssh ptest will fail (mess of failure). It seems the test case of upstream openssh does not consider FIPS mode support. I

[yocto] [meta-openssl102-fips][PATCH 15/16] README.openssh_cavstest: add CAVS tests for FIPS validation

2019-09-25 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- README.openssh_cavstest | 28 1 file changed, 28 insertions(+) create mode 100644 README.openssh_cavstest diff --git a/README.openssh_cavstest b/README.openssh_cavstest new file mode 100644 index 000..5d69ee5 --- /dev/null +++ b

[yocto] [meta-openssl102-fips][PATCH 16/16] README.enable_fips: openssh ptest failed in fips mode

2019-09-25 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- README.enable_fips | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.enable_fips b/README.enable_fips index 8016346..676698b 100644 --- a/README.enable_fips +++ b/README.enable_fips @@ -54,3 +54,6 @@ FIPS mode initialized - ssh-keygen # ssh-keygen

[yocto] [meta-openssl102-fips][PATCH 12/16] rng-tools: fix rngd failed in fips mode

2019-09-25 Thread Hongxu Jia
ips-test.html Signed-off-by: Hongxu Jia --- recipes-support/rng-tools/rng-tools/default | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-support/rng-tools/rng-tools/default b/recipes-support/rng-tools/rng-tools/default index b9f8e03..1ae6b33 100644 --- a/recipes-support/

[yocto] [meta-openssl102-fips][PATCH 11/16] rng-tools bbappend: port a copy of default from oe-core

2019-09-25 Thread Hongxu Jia
Port it at the following commit in oe-core http://cgit.openembedded.org/openembedded-core/commit/?id=16ced1a253c74c01ca414db2f1a010c083213b91 Signed-off-by: Hongxu Jia --- recipes-support/rng-tools/rng-tools/default | 1 + recipes-support/rng-tools/rng-tools_6.%.bbappend | 4 recipes

[yocto] [meta-openssl102-fips][PATCH 13/16] README.enable_fips: add steps to turn system (kernel and user space) into FIPS mode

2019-09-25 Thread Hongxu Jia
/com.ibm.linux.z.lgdd/lgdd_r_fipsparm.html https://support.oracle.com/knowledge/Oracle%20Linux%20and%20Virtualization/2323738_1.html Signed-off-by: Hongxu Jia --- README.enable_fips | 56 ++ 1 file changed, 56 insertions(+) create mode 100644

[yocto] [meta-openssl102-fips][PATCH V2 14/16] openssh: add CAVS tests for FIPS validation

2019-09-25 Thread Hongxu Jia
(as of commit 0ca1614ae221578b6b57c61d18fda6cc970a19ce) Signed-off-by: Hongxu Jia --- .../openssh/openssh-6.6p1-ctr-cavstest.patch | 289 + .../openssh/openssh/openssh-6.7p1-kdf-cavs.patch | 654 + recipes-connectivity/openssh/openssh_fips.inc | 9 + 3 files

[yocto] [meta-openssl102-fips][PATCH 8/16] openssh: conditional enable fips mode

2019-09-25 Thread Hongxu Jia
Enable fips mode according to the existence of "/etc/system-fips" Signed-off-by: Hongxu Jia --- .../0001-conditional-enable-fips-mode.patch| 63 ++ recipes-connectivity/openssh/openssh_fips.inc | 1 + 2 files changed, 64 insertions(+) create m

[yocto] [meta-openssl102-fips][PATCH 10/16] openssh/sshd_check_keys: don't generate ED25519 host keys in FIPS mode

2019-09-25 Thread Hongxu Jia
ystem-fips"), don't generate ED25519 host keys in FIPS mode Refers Fedora: https://src.fedoraproject.org/rpms/openssh/c/00c7b7543973f237b79ee87ca697c08b71954d35 https://src.fedoraproject.org/rpms/openssh/c/3b7c8620a1df976c1c09553c1c7b99ce492d290b Signed-off-by: Hongxu Jia --- recipes-co

[yocto] [meta-openssl102-fips][PATCH V2 9/16] openssh: port a copy of sshd_check_keys from oe-core

2019-09-25 Thread Hongxu Jia
Port it at the following commit in oe-core http://cgit.openembedded.org/openembedded-core/commit/?id=2303d795ae96f1a60caf145a0ddf100e89c4b5b0 Signed-off-by: Hongxu Jia --- .../openssh/openssh/sshd_check_keys| 78 ++ 1 file changed, 78 insertions(+) create

[yocto] [meta-openssl102-fips][PATCH V2 5/16] openssh: add generation of HMAC checksums in pkg_postinst

2019-09-25 Thread Hongxu Jia
Refer https://src.fedoraproject.org/rpms/openssh/c/13fa787ecc35d6c9eea9e64c1f42f49e2ee978ce (See __spec_install_post in openssh.spec for detail) Signed-off-by: Hongxu Jia --- recipes-connectivity/openssh/openssh_fips.inc | 34 +++ 1 file changed, 34 insertions(+) diff

[yocto] [meta-openssl102-fips][PATCH 7/16] kernel: workaround alg self-tests failure in fips mode

2019-09-25 Thread Hongxu Jia
RNG for fips to workaround alg self-tests failure, after applying the fix: ... [0.306633] DRBG: Continuing without Jitter RNG [0.310550] alg: self-tests for ecdh-generic (ecdh) passed ... Refer: https://lore.kernel.org/patchwork/patch/568693/ Signed-off-by: Hongxu Jia --- .../0001-fips

[yocto] [meta-openssl102-fips][PATCH 6/16] add kernel fips mode support

2019-09-25 Thread Hongxu Jia
/lkddb/web-lkddb/CRYPTO_FIPS.html [3] https://mta.openssl.org/pipermail/openssl-users/2017-May/005840.html Signed-off-by: Hongxu Jia --- classes/fips_kernel.bbclass| 4 conf/layer.conf| 4 recipes-kernel/linux/files/crypto_fips.cfg | 3

[yocto] [meta-openssl102-fips][PATCH V2 2/16] openssh_8.%.bbappend: support fips 140-2

2019-09-25 Thread Hongxu Jia
Port openssh-7.7p1-fips.patch from Fedora https://src.fedoraproject.org/rpms/openssh.git (as of commit 0ca1614ae221578b6b57c61d18fda6cc970a19ce) Signed-off-by: Hongxu Jia --- .../openssh/openssh/0001-openssh-8.0p1-fips.patch | 529 + recipes-connectivity/openssh/openssh_8

[yocto] [meta-openssl102-fips][PATCH V2 1/16] fipscheck: add 1.5.0

2019-09-25 Thread Hongxu Jia
Port it from fedora: https://src.fedoraproject.org/rpms/fipscheck (as of commit 7e44bec705fb2b3263734f30a05c2245738cf01a) It is required by openssh fips. Signed-off-by: Hongxu Jia --- .../0001-compat-fip-with-openssl-1.0.2.patch | 34 ++ recipes-support/fipscheck

[yocto] Review request V2 0/16: [meta-openssl102-fips] Enable FIPS mode in Kernel and OpenSSH

2019-09-25 Thread Hongxu Jia
support So I do not add additional cavs test to the ptest, just add a note to README.enable_fips //Hongxu == Comments (indicate scope for each "y" above) == * Git logs [meta-openssl102-fips] commit 38849c1c52ae04eb2a3931624cd2d1446ab389d6 Author: Hongxu Jia Date: Wed Sep 25 15:

[yocto] [meta-openssl102-fips][PATCH V2 4/16] classes/image-enable-fips.bbclass: enable user space fips mode in image

2019-09-25 Thread Hongxu Jia
generation activity. Signed-off-by: Hongxu Jia --- classes/image-enable-fips.bbclass | 5 + conf/layer.conf | 2 ++ 2 files changed, 7 insertions(+) create mode 100644 classes/image-enable-fips.bbclass diff --git a/classes/image-enable-fips.bbclass b/classes/image-enable

[yocto] [meta-openssl102-fips][PATCH V2 3/16] fipscheck: add generation of the checksums in pkg_postinst

2019-09-25 Thread Hongxu Jia
Refer https://pagure.io/fipscheck/c/489bc3ab3f73707e12b6c2644d80af5ff6fbbf70 (* fipscheck.spec.in: Add generation of the checksums in __spec_install_post.) Signed-off-by: Hongxu Jia --- recipes-support/fipscheck/fipscheck_1.5.0.bb | 22 ++ 1 file changed, 22 insertions

Re: [yocto] [meta-anaconda][PATCH 1/1] initramfs-module-setup-live: call udev settle before umounting /run/media/*

2019-09-23 Thread Hongxu Jia
Merged //Hongxu On 9/23/19 2:41 PM, Ovidiu Panait wrote: This fixes a race conditition which leaves devices mounted, causing the following anaconda installation failure: File "/usr/lib64/python3.5/site-packages/gi/overrides/BlockDev.py", line 963, in wrapped raise transform[1](msg) File

[yocto] [meta-openssl102-fips][PATCH 14/15] openssh: add CAVS tests for FIPS validation

2019-09-22 Thread Hongxu Jia
-off-by: Hongxu Jia --- .../openssh/openssh-6.6p1-ctr-cavstest.patch | 289 + .../openssh/openssh/openssh-6.7p1-kdf-cavs.patch | 654 + recipes-connectivity/openssh/openssh_fips.inc | 9 + 3 files changed, 952 insertions(+) create mode 100644 recipes

[yocto] [meta-openssl102-fips][PATCH 15/15] README.openssh_cavstest: add CAVS tests for FIPS validation

2019-09-22 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- README.openssh_cavstest | 28 1 file changed, 28 insertions(+) create mode 100644 README.openssh_cavstest diff --git a/README.openssh_cavstest b/README.openssh_cavstest new file mode 100644 index 000..5d69ee5 --- /dev/null +++ b

[yocto] [meta-openssl102-fips][PATCH 13/15] README.enable_fips: add steps to turn system (kernel and user space) into FIPS mode

2019-09-22 Thread Hongxu Jia
/com.ibm.linux.z.lgdd/lgdd_r_fipsparm.html https://support.oracle.com/knowledge/Oracle%20Linux%20and%20Virtualization/2323738_1.html Signed-off-by: Hongxu Jia --- README.enable_fips | 56 ++ 1 file changed, 56 insertions(+) create mode 100644

[yocto] [meta-openssl102-fips][PATCH 12/15] rng-tools: fix rngd failed in fips mode

2019-09-22 Thread Hongxu Jia
ips-test.html Signed-off-by: Hongxu Jia --- recipes-support/rng-tools/rng-tools/default | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-support/rng-tools/rng-tools/default b/recipes-support/rng-tools/rng-tools/default index b9f8e03..1ae6b33 100644 --- a/recipes-support/

[yocto] [meta-openssl102-fips][PATCH 9/15] openssh: port sshd_check_keys from oe-core

2019-09-22 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- .../openssh/openssh/sshd_check_keys| 78 ++ 1 file changed, 78 insertions(+) create mode 100644 recipes-connectivity/openssh/openssh/sshd_check_keys diff --git a/recipes-connectivity/openssh/openssh/sshd_check_keys b/recipes

[yocto] [meta-openssl102-fips][PATCH 11/15] rng-tools append: port default from oe-core

2019-09-22 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- recipes-support/rng-tools/rng-tools/default | 1 + recipes-support/rng-tools/rng-tools_6.%.bbappend | 4 recipes-support/rng-tools/rng-tools_fips.inc | 2 ++ 3 files changed, 7 insertions(+) create mode 100644 recipes-support/rng-tools/rng-tools

[yocto] [meta-openssl102-fips][PATCH 10/15] openssh/sshd_check_keys: don't generate ED25519 host keys in FIPS mode

2019-09-22 Thread Hongxu Jia
ystem-fips"), don't generate ED25519 host keys in FIPS mode Refers Fedora: https://src.fedoraproject.org/rpms/openssh/c/00c7b7543973f237b79ee87ca697c08b71954d35 https://src.fedoraproject.org/rpms/openssh/c/3b7c8620a1df976c1c09553c1c7b99ce492d290b Signed-off-by: Hongxu Jia --- recipes-co

[yocto] [meta-openssl102-fips][PATCH 6/15] kernel: enable fips mode

2019-09-22 Thread Hongxu Jia
/lkddb/web-lkddb/CRYPTO_FIPS.html [3] https://mta.openssl.org/pipermail/openssl-users/2017-May/005840.html Signed-off-by: Hongxu Jia --- classes/fips_kernel.bbclass| 4 conf/layer.conf| 4 recipes-kernel/linux/files/crypto_fips.cfg | 3

[yocto] [meta-openssl102-fips][PATCH 8/15] openssh: conditional enable fips mode

2019-09-22 Thread Hongxu Jia
Enable fips mode according to the existence of "/etc/system-fips" Signed-off-by: Hongxu Jia --- .../0001-conditional-enable-fips-mode.patch| 63 ++ recipes-connectivity/openssh/openssh_fips.inc | 1 + 2 files changed, 64 insertions(+) create m

[yocto] [meta-openssl102-fips][PATCH 7/15] kernel: workaround alg self-tests failure in fips mode

2019-09-22 Thread Hongxu Jia
RNG for fips to workaround alg self-tests failure, after applying the fix: ... [0.306633] DRBG: Continuing without Jitter RNG [0.310550] alg: self-tests for ecdh-generic (ecdh) passed ... Refer: https://lore.kernel.org/patchwork/patch/568693/ Signed-off-by: Hongxu Jia --- .../0001-fips

[yocto] [meta-openssl102-fips][PATCH 3/15] fipscheck: add generation of the checksums in pkg_postinst

2019-09-22 Thread Hongxu Jia
Refer https://pagure.io/fipscheck/c/489bc3ab3f73707e12b6c2644d80af5ff6fbbf70 Signed-off-by: Hongxu Jia --- recipes-connectivity/openssh/fipscheck_1.5.0.bb | 18 ++ 1 file changed, 18 insertions(+) diff --git a/recipes-connectivity/openssh/fipscheck_1.5.0.bb b/recipes

[yocto] [meta-openssl102-fips][PATCH 5/15] openssh: add generation of HMAC checksums in pkg_postinst

2019-09-22 Thread Hongxu Jia
Refer https://src.fedoraproject.org/rpms/openssh/c/d93958db19129e0f4615865eab22fb36e1f4fb8a Signed-off-by: Hongxu Jia --- recipes-connectivity/openssh/openssh_fips.inc | 26 ++ 1 file changed, 26 insertions(+) diff --git a/recipes-connectivity/openssh/openssh_fips.inc

[yocto] [meta-openssl102-fips][PATCH 4/15] fipscheck: enable fipscheck on target

2019-09-22 Thread Hongxu Jia
Refer Fedora/RedHat's way https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/6.5_technical_notes/dracut Signed-off-by: Hongxu Jia --- recipes-connectivity/openssh/fipscheck_1.5.0.bb | 4 1 file changed, 4 insertions(+) diff --git a/recipes-connectivity/openssh

[yocto] Review request 0/15: [meta-openssl102-fips] Enable FIPS mode in Kernel and OpenSSH

2019-09-22 Thread Hongxu Jia
Hi Mark, I apply a kernel patch to workaround alg self-tests failure, which the test is too early and Jitter RNG is not ready at that time. The latter alg: self-tests for jitterentropy_rng is passed, so I think the `Continuing without Jitter RNG' workaround is OK == Testing == * Commands

[yocto] [meta-openssl102-fips][PATCH 2/15] openssh_8.%.bbappend: support fips 140-2

2019-09-22 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- .../openssh/openssh/0001-openssh-8.0p1-fips.patch | 528 + recipes-connectivity/openssh/openssh_8.%.bbappend | 4 + recipes-connectivity/openssh/openssh_fips.inc | 8 + 3 files changed, 540 insertions(+) create mode 100644 recipes

[yocto] [meta-openssl102-fips][PATCH 1/15] fipscheck: add 1.5.0

2019-09-22 Thread Hongxu Jia
Port it from fedora: https://src.fedoraproject.org/rpms/fipscheck It is required by openssh fips. Signed-off-by: Hongxu Jia --- .../0001-compat-fip-with-openssl-1.0.2.patch | 34 ++ recipes-connectivity/openssh/fipscheck_1.5.0.bb| 30 +++ templates

[yocto] [meta-openssl102-fips][PATCH] README.build: add steps to include openssl102

2019-09-17 Thread Hongxu Jia
The openssl fips only works with old openssl(<=1.0.2), update steps to clarify it for Yocto and Wind River Linux Signed-off-by: Hongxu Jia --- README.build | 8 +--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/README.build b/README.build index bc8fcf3..3da03da 100

[yocto] [meta-openssl102-fips][PATCH 2/2] README.build: add FAQ to support fips on arm/aarch64/x86

2019-09-16 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- README.build | 36 1 file changed, 36 insertions(+) diff --git a/README.build b/README.build index 9735028..bc8fcf3 100644 --- a/README.build +++ b/README.build @@ -245,3 +245,39 @@ Note this sample command is functionally

[yocto] [meta-openssl102-fips][PATCH 1/2] README.build: update steps for communtiy

2019-09-16 Thread Hongxu Jia
Since the layer is now published via the Yocto Project and git.yoctoproject.org, we should update steps in README.build Signed-off-by: Hongxu Jia --- README.build | 21 - 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/README.build b/README.build index df3f4e4

Re: [yocto] [PATCH 1/3] intel-media-driver: check for "opengl" feature

2019-07-29 Thread Hongxu Jia
On 7/29/19 9:12 AM, Mittal, Anuj wrote: Hi Hongxu I have merged these changes but could you send these to meta-intel list in future please? OK, I got it //Hongxu On Wed, 2019-07-24 at 18:11 +0800, Hongxu Jia wrote: Since comit [a78c420 libva: check for "opengl" feature] applied

[yocto] [PATCH V2 3/3] intel-graphics-compiler: skip it if clang is not ready

2019-07-25 Thread Hongxu Jia
Since intel-graphics-compiler depends on clang, skip it if clang is not ready Issue: LIN1019-1846 (LOCAL REV: NOT UPSTREAM) -- Sent to Yocto on 20190724 Signed-off-by: Hongxu Jia --- recipes-opencl/igc/intel-graphics-compiler_1.0.6.bb | 8 1 file changed, 8 insertions(+) diff --git

[yocto] [PATCH 1/3] intel-media-driver: check for "opengl" feature

2019-07-24 Thread Hongxu Jia
Since comit [a78c420 libva: check for "opengl" feature] applied in oe-core, and intel-media-driver depends on libva, it should check for "opengl" feature too. Signed-off-by: Hongxu Jia --- recipes-multimedia/libva/intel-media-driver_19.2.0.bb | 3 +++ 1 file changed, 3 inser

[yocto] [meta-intel][PATCH 3/3] intel-graphics-compiler: skip it if clang is not ready

2019-07-24 Thread Hongxu Jia
Since intel-graphics-compiler depends on clang, skip it if clang is not ready Signed-off-by: Hongxu Jia --- recipes-opencl/igc/intel-graphics-compiler_1.0.6.bb | 8 1 file changed, 8 insertions(+) diff --git a/recipes-opencl/igc/intel-graphics-compiler_1.0.6.bb b/recipes-opencl/igc

[yocto] [meta-intel][PATCH 2/3] intel-mediasdk: check for "opengl" feature

2019-07-24 Thread Hongxu Jia
Since comit [a78c420 libva: check for "opengl" feature] applied in oe-core, and intel-mediasdk depends on libva, it should check for "opengl" feature too. Signed-off-by: Hongxu Jia --- recipes-multimedia/mediasdk/intel-mediasdk_19.2.0.bb | 3 +++ 1 file changed, 3 inser

[yocto] [meta-cgl][PATCH] resource-agents: improve reproducibility

2019-06-04 Thread Hongxu Jia
6:: ${TEST:=/buildarea1/hjia/ wrlinux-1019/build_master-wr_qemux86-64_2019053109/build/tmp-glibc/hosttools/test} Set grep/test path rather than using hosttools which refers commit in oe-core [f6e7a3b libtool: Don't hardcode grep paths] Signed-off-by: Hongxu Jia --- .../recipes-cgl/cluster-resou

[yocto] [meta-selinux][PATCH] setools: do not use unstable github archive tarballs

2019-05-27 Thread Hongxu Jia
Since commit [21f84fc insane: add sanity checks to SRC_URI] applied in oe-core, do not use unstable github archive tarballs Signed-off-by: Hongxu Jia --- recipes-security/setools/setools_4.1.1.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/recipes-security/setools

[yocto] [meta-cgl][PATCH 2/2] pacemaker: do not use unstable github archive tarballs

2019-05-27 Thread Hongxu Jia
Since commit [21f84fc insane: add sanity checks to SRC_URI] applied in oe-core, do not use unstable github archive tarballs Signed-off-by: Hongxu Jia --- meta-cgl-common/recipes-cgl/pacemaker/pacemaker_1.1.19.bb | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/meta-cgl

[yocto] [meta-cgl][PATCH 1/2] crmsh: do not use unstable github archive tarballs

2019-05-27 Thread Hongxu Jia
Since commit [21f84fc insane: add sanity checks to SRC_URI] applied in oe-core, do not use unstable github archive tarballs Signed-off-by: Hongxu Jia --- meta-cgl-common/recipes-cgl/crmsh/crmsh_3.0.3.bb | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/meta-cgl-common

[linux-yocto] [linux_yocto_v5.0/standard/preempt-rt/base][PATCH] genirq: Prevent use-after-free and work list corruption on rt

2019-05-18 Thread Hongxu Jia
Since commit [70a44a0 genirq: Prevent use-after-free and work list corruption] applied, the patch makes it work on rt Signed-off-by: Hongxu Jia --- kernel/irq/manage.c | 4 1 file changed, 4 insertions(+) diff --git a/kernel/irq/manage.c b/kernel/irq/manage.c index f72bd3a..143f87b 100644

Re: [yocto] Review request 0/13: Contribute meta-tensorflow to Yocto

2019-02-23 Thread Hongxu Jia
On 2019/2/24 上午1:04, Khem Raj wrote: On Sat, Feb 23, 2019 at 7:29 AM Richard Purdie wrote: On Fri, 2019-02-22 at 20:49 +, Manjukumar Harthikote Matha wrote: You might be interested in the yocto layers for tensorflow, tensorflow-lite and caffe2 on github here [1]. I'm not part of the team

Re: [yocto] Review request 0/13: Contribute meta-tensorflow to Yocto

2019-02-23 Thread Hongxu Jia
On 2019/2/23 下午11:29, Richard Purdie wrote: Please don't do the meta-openembedded part! OK, I can't agree more, for tensorflow, if we move it to meta-openembedded/meta-ai, we have to move the depending layer `meta-java' to meta-openembedded  but it has been already as a standalone layer

Re: [yocto] Review request 0/13: Contribute meta-tensorflow to Yocto

2019-02-22 Thread Hongxu Jia
On 2019/2/23 上午4:49, Manjukumar Harthikote Matha wrote: Hi Hongxu, -Original Message- From: yocto-boun...@yoctoproject.org [mailto:yocto-boun...@yoctoproject.org] On Behalf Of Stephen Lawrence Sent: Friday, February 22, 2019 8:52 AM To: Hongxu Jia ; richard.pur...@linuxfoundation.org

Re: [yocto] Review request 0/13: Contribute meta-tensorflow to Yocto

2019-02-22 Thread Hongxu Jia
On 2019/2/23 上午12:51, Stephen Lawrence wrote: Good work. You might be interested in the yocto layers for tensorflow, tensorflow-lite and caffe2 on github here [1]. I'm not part of the team that developed that work but I forwarded your announcement to them. Perhaps there is the opportunity for

[yocto] [meta-tensorflow][PATCH 13/13] add README

2019-02-21 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- README | 170 + 1 file changed, 170 insertions(+) create mode 100644 README diff --git a/README b/README new file mode 100644 index 000..3da4e76 --- /dev/null +++ b/README @@ -0,0 +1,170

[yocto] [meta-tensorflow][PATCH 11/13] tensorflow: support musl

2019-02-21 Thread Hongxu Jia
or directory Signed-off-by: Hongxu Jia --- .../tensorflow/files/0001-support-musl.patch | 49 ++ recipes-framework/tensorflow/tensorflow_1.13.0.bb | 1 + 2 files changed, 50 insertions(+) create mode 100644 recipes-framework/tensorflow/files/0001-support-musl.patch

[yocto] [meta-tensorflow][PATCH 10/13] tensorflow: fix gcc internal compile error on qemuarm64

2019-02-21 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- ...x-gcc-internal-compile-error-on-qemuarm64.patch | 64 ++ recipes-framework/tensorflow/tensorflow_1.13.0.bb | 1 + 2 files changed, 65 insertions(+) create mode 100644 recipes-framework/tensorflow/files/0001-fix-gcc-internal-compile-error

[yocto] [meta-tensorflow][PATCH 09/13] tensorflow: add version 1.13.0

2019-02-21 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- ...octo-toolchain-to-support-cross-compiling.patch | 108 +++ recipes-framework/tensorflow/tensorflow_1.13.0.bb | 154 + 2 files changed, 262 insertions(+) create mode 100644 recipes-framework/tensorflow/files/0001-add-yocto

[yocto] [meta-tensorflow][PATCH 05/13] tensorflow-native: add Python 3.7 compatibility

2019-02-21 Thread Hongxu Jia
SyntaxError around async keyword on Python 3.7 Signed-off-by: Hongxu Jia --- ...xError-around-async-keyword-on-Python-3.7.patch | 116 + .../tensorflow/tensorflow-native_1.13.0.bb | 1 + 2 files changed, 117 insertions(+) create mode 100644 recipes-framework

[yocto] [meta-tensorflow][PATCH 12/13] build tensorflow-native and tensorflow in order

2019-02-21 Thread Hongxu Jia
Add tensorflow-native to tensorflow's DEPENDS, actually tensorflow does not require tensorflow-native, but to avoid do_compile at the same time. Bazel build system does not support parallel build very well (very slowly). Signed-off-by: Hongxu Jia --- recipes-framework/tensorflow

[yocto] [meta-tensorflow][PATCH 08/13] tensorboard: add version 1.12.2

2019-02-21 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- .../tensorboard/0001-customize-for-Yocto.patch | 128 + recipes-framework/tensorflow/tensorboard_1.12.2.bb | 62 ++ 2 files changed, 190 insertions(+) create mode 100644 recipes-framework/tensorflow/tensorboard/0001-customize

[yocto] [meta-tensorflow][PATCH 06/13] tensorflow-estimator: add version 1.13

2019-02-21 Thread Hongxu Jia
The build steps refers README of https://github.com/tensorflow/estimator Signed-off-by: Hongxu Jia --- .../tensorflow/tensorflow-estimator_1.13.bb| 50 ++ 1 file changed, 50 insertions(+) create mode 100644 recipes-framework/tensorflow/tensorflow-estimator_1.13.bb

[yocto] [meta-tensorflow][PATCH 01/13] initial

2019-02-21 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- conf/layer.conf | 23 +++ 1 file changed, 23 insertions(+) create mode 100644 conf/layer.conf diff --git a/conf/layer.conf b/conf/layer.conf new file mode 100644 index 000..352c2bc --- /dev/null +++ b/conf/layer.conf @@ -0,0 +1,23 @@ +# We

[yocto] [meta-tensorflow][PATCH 02/13] bazel-native: add version 0.21.0

2019-02-21 Thread Hongxu Jia
It is the build system of tensorflow. The build steps refers: https://docs.bazel.build/versions/master/install-compile-source.html Signed-off-by: Hongxu Jia --- recipes-devtools/bazel/bazel-native_0.21.0.bb | 33 +++ 1 file changed, 33 insertions(+) create mode 100644

[yocto] [meta-tensorflow][PATCH 04/13] tensorflow-native: add version 1.13.0

2019-02-21 Thread Hongxu Jia
It is required by tensorflow-estimator. Signed-off-by: Hongxu Jia --- .../tensorflow/tensorflow-native_1.13.0.bb | 60 ++ 1 file changed, 60 insertions(+) create mode 100644 recipes-framework/tensorflow/tensorflow-native_1.13.0.bb diff --git a/recipes-framework

[yocto] [meta-tensorflow][PATCH 07/13] Customize Yocto toolchain for cross compiling

2019-02-21 Thread Hongxu Jia
The idea comes from upstream arm compiler which `Build from source for the Raspberry Pi' $ ls /third_party/toolchains/cpus/arm/ arm_compiler_configure.bzl BUILD CROSSTOOL.tpl https://www.tensorflow.org/install/source_rpi Signed-off-by: Hongxu Jia --- recipes-framework/tensorflow/files/BUILD

[yocto] [meta-tensorflow][PATCH 03/13] create classes/bazel.bbclass

2019-02-21 Thread Hongxu Jia
Inherit the bbclass to use bazel to build tensorflow-native, tensorflow, tensorboard and tensorflow-estimator. Signed-off-by: Hongxu Jia --- classes/bazel.bbclass | 80 +++ 1 file changed, 80 insertions(+) create mode 100644 classes/bazel.bbclass

[yocto] Review request 0/13: Contribute meta-tensorflow to Yocto

2019-02-21 Thread Hongxu Jia
, and apply for creating a layer named `meta-tensorflow' on Yocto. For test convenient, there is a fork on github: https://github.com/hongxu-jia/meta-tensorflow BTW, I have contributed other 11 fundamental recipes to meta-openembedded and all of them have been merged to master branch. Please

Re: [linux-yocto] [linux-yocto/linux-yocto-dev 4.18][PATCH] perf arm64: Fix generate system call table failed with /tmp mounted with noexec

2018-10-18 Thread Hongxu Jia
submitted the fix to upstream mailing list linux-perf-us...@vger.kernel.org //Hongxu Bruce On 10/18/18 5:12 AM, Hongxu Jia wrote: Which /tmp mounted with noexec, generate system call table failed. [snip] |perf-1.0/tools/perf/arch/arm64/entry/syscalls//mksyscalltbl: /tmp/create-table-6VGPSt

[linux-yocto] [linux-yocto/linux-yocto-dev 4.18][PATCH] perf arm64: Fix generate system call table failed with /tmp mounted with noexec

2018-10-18 Thread Hongxu Jia
: 2b5882435606 ("perf arm64: Generate system call table from asm/unistd.h") Signed-off-by: Hongxu Jia --- tools/perf/arch/arm64/entry/syscalls/mksyscalltbl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/perf/arch/arm64/entry/syscalls/mksyscalltbl b/tools/perf/arch/a

[yocto] [meta-cgl][PATCH 1/2] cluster-glue: support multiple dbg packages

2018-10-12 Thread Hongxu Jia
Signed-off-by: Hongxu Jia --- meta-cgl-common/recipes-cgl/cluster-glue/cluster-glue_1.0.12.bb | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/meta-cgl-common/recipes-cgl/cluster-glue/cluster-glue_1.0.12.bb b/meta-cgl-common/recipes-cgl/cluster-glue/cluster-glue_1.0.12

[yocto] [meta-cgl][PATCH 2/2] resource-agents: support multiple dbg packages

2018-10-12 Thread Hongxu Jia
. Signed-off-by: Hongxu Jia --- .../recipes-cgl/cluster-resource-agents/resource-agents_4.0.1.bb | 8 +--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/meta-cgl-common/recipes-cgl/cluster-resource-agents/resource-agents_4.0.1.bb b/meta-cgl-common/recipes-cgl/cluster-resource

[yocto] [meta-selinux][PATCH] layer.conf: update LAYERSERIES_COMPAT `sumo' -> `thud'

2018-10-08 Thread Hongxu Jia
Since `9ec5a8a layer.conf: Drop sumo from LAYERSERIES_CORENAMES' and `9867924 layer.conf: Add thud to LAYERSERIES_CORENAMES' applied in oe-core, update LAYERSERIES_COMPAT `sumo' -> `thud' Signed-off-by: Hongxu Jia --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) d

[yocto] [meta-cgl][PATCH] layer.conf: update LAYERSERIES_COMPAT `sumo' -> `thud'

2018-10-08 Thread Hongxu Jia
Since `9ec5a8a layer.conf: Drop sumo from LAYERSERIES_CORENAMES' and `9867924 layer.conf: Add thud to LAYERSERIES_CORENAMES' applied in oe-core, update LAYERSERIES_COMPAT `sumo' -> `thud' Signed-off-by: Hongxu Jia --- meta-cgl-common/conf/layer.conf | 2 +- 1 file changed, 1 insertion(+)

Re: [yocto] Any Linux/Yocto Image Installer (for target system)

2018-08-27 Thread Hongxu Jia
On 2018年07月07日 05:52, Raymond Yeung wrote: Is there any installer that I could download along with the .hddimg (or .iso) image to the RAM, invoke the installer, so we could have a bootable image installed on a SSD? Sorry for replying late There is a target installer meta-anaconda in

[linux-yocto] [kernel-cache][PATCH] mti-malta32: enable CONFIG_HIGHMEM for qemumips to support up to 2GiB RAM

2017-12-05 Thread Hongxu Jia
. For mips, the `High Memory Support' only makes sense for the 32-bit kernel. Signed-off-by: Hongxu Jia <hongxu@windriver.com> --- bsp/mti-malta32/mti-malta32-common.cfg | 1 + 1 file changed, 1 insertion(+) diff --git a/bsp/mti-malta32/mti-malta32-common.cfg b/bsp/mti-malta32/mti-m

Re: [yocto] Contribute meta-installer to yocto

2017-11-27 Thread Hongxu Jia
On 2017年11月28日 01:20, Mark Hatle wrote: On 11/21/17 3:24 PM, Burton, Ross wrote: On 21 November 2017 at 08:55, Hongxu Jia <hongxu@windriver.com <mailto:hongxu@windriver.com>> wrote: If yocto is interested in this layer and will accept it, I could send pull request

Re: [yocto] [oe] [PATCH 00/15] create meta-installer layer

2017-11-25 Thread Hongxu Jia
On 2017年11月25日 03:34, akuster808 wrote: These are sitting in the meta-openembedded patch queue. Did I miss the reject request? - armin I marked them as `rejected' in OE's patch work, I have applied to submit meta-anaconda to yocto as a standalone repository. //Hongxu --

Re: [yocto] [oe] [PATCH 00/15] create meta-installer layer

2017-11-23 Thread Hongxu Jia
On 2017年11月24日 09:55, Hongxu Jia wrote: On 2017年11月24日 08:35, Khem Raj wrote: On Thu, Nov 23, 2017 at 4:15 AM Burton, Ross <ross.bur...@intel.com <mailto:ross.bur...@intel.com>> wrote:     I honestly don't see why this has to belong in meta-openembedded     and can't live in

Re: [yocto] [oe] [PATCH 00/15] create meta-installer layer

2017-11-23 Thread Hongxu Jia
end pull request for review or directly push the repo contents to it once it's created. If the latter one, should I send my ssh pub key to you privately? //Hongxu Ross On 23 November 2017 at 12:09, Hongxu Jia <hongxu@windriver.com <mailto:hongxu@windriver.com>&

Re: [yocto] Contribute meta-installer to yocto

2017-11-22 Thread Hongxu Jia
On 2017年11月22日 23:41, Khem Raj wrote: If yocto is interested in this layer and will accept it, I could send pull request or some one directly fetch from above github master branch. This is a very good work. Thanks for contributing it. We should definitely put it under meta-openembedded

Re: [yocto] Contribute meta-installer to yocto

2017-11-21 Thread Hongxu Jia
On 2017年11月22日 11:20, Paul Eggleton wrote: Hi Hongxu, On Wednesday, 22 November 2017 3:56:31 PM NZDT Hongxu Jia wrote: On 2017年11月22日 06:28, Paul Eggleton wrote: On Wednesday, 22 November 2017 10:24:59 AM NZDT Burton, Ross wrote: On 21 November 2017 at 08:55, Hongxu Jia <hon

Re: [yocto] Contribute meta-installer to yocto

2017-11-21 Thread Hongxu Jia
On 2017年11月22日 06:28, Paul Eggleton wrote: On Wednesday, 22 November 2017 10:24:59 AM NZDT Burton, Ross wrote: On 21 November 2017 at 08:55, Hongxu Jia <hongxu@windriver.com> wrote: If yocto is interested in this layer and will accept it, I could send pull request or some one di

Re: [linux-yocto] Contribute meta-installer to yocto

2017-11-21 Thread Hongxu Jia
On 2017年11月21日 16:30, Paul Gortmaker wrote: On 2017-11-21 12:41 AM, Hongxu Jia wrote: Hi all, Wind River has maintained meta-installer for several years, and now we want to contribute it to yocto community. This layer provides an installation program based on OE platform. The installation

Re: [linux-yocto] [linux-yocto-4.12][PATCH 1/1] ide:ide-cd: fix kernel panic resulting from missing scsi_req_init

2017-11-02 Thread Hongxu Jia
On 2017年11月02日 01:54, Bruce Ashfield wrote: Fixes: 82ed4db499b8 ("block: split scsi_request out of struct request") Upstream-Status: Submitted [linux-bl...@vger.kernel.org] I'll drop this during merge, but do you have a link to the mailing list archive for this ?

Re: [linux-yocto] [linux-yocto-4.12][PATCH 1/1] ide:ide-cd: fix kernel panic resulting from missing scsi_req_init

2017-11-01 Thread Hongxu Jia
, Bruce Ashfield wrote: On 2017-10-31 10:01 PM, Hongxu Jia wrote: Since we split the scsi_request out of struct request, while the standard prep_rq_fn builds 10 byte cmds, it missed to invoke scsi_req_init() to initialize certain fields of a scsi_request structure (.__cmd[], .cmd, .cmd_len

[linux-yocto] [linux-yocto-4.12][PATCH 1/1] ide:ide-cd: fix kernel panic resulting from missing scsi_req_init

2017-10-31 Thread Hongxu Jia
... [8.770906] RIP: ide_cdrom_prep_fn+0x63/0x180 RSP: 92aec018bae8 [8.772329] ---[ end trace 6408481e551a85c9 ]--- ... Fixes: 82ed4db499b8 ("block: split scsi_request out of struct request") Upstream-Status: Submitted [linux-bl...@vger.kernel.org] Signed-off-by: Hongxu J

  1   2   >