summaryrefslogtreecommitdiff
path: root/meta-google/conf/distro
AgeCommit message (Collapse)AuthorFilesLines
2025-05-15slp: remove from default imagesAndrew Geissler1-1/+0
slpd-lite[1] is a home grown application within OpenBMC that does not appear to get much use. There are other more full function options like Avahi or LLDP now. The slpd-lite daemon provides an unauthenticated network interface which was the result of a fairly severe PSIRT last year[2]. Given the above, this application should not be included by default when building OpenBMC. Tested: - Confirmed slpd application and service no longer in a Romulus image [1]: https://github.com/openbmc/slpd-lite [2]: https://github.com/openbmc/slpd-lite/security/advisories/GHSA-wmgv-jffg-v3xr Change-Id: Ifd67651cb00a411bf12f0330c4b4fab626953361 Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
2024-12-20meta-google: fix VIRTUAL_RUNTIME for bmc and bios updatePatrick Williams1-1/+1
GBS fails in Jenkins with the following error: ``` inplace-gbmc-update.bb: QA Issue: RPROVIDES is set to virtual/bmc-update but the substring 'virtual/' holds no meaning in this context. It only works for build time dependencies, not runtime ones. It is suggested to use 'VIRTUAL-RUNTIME_' variables instead. [virtual-slash] ``` Fix all usages of `RPROVIDES = "virtual/.*"` in meta-google and related systems. There are some remaining `PREFERRED_PROVIDER.* = "virtual/.*"` config settings that probably aren't doing what the author(s) expected but since those aren't being complained about I'll leave them be for now. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Change-Id: Ie74c8190c9380c10ffc362fb4d8d728df3c33fba
2024-12-20treewide: remove deprecated VOLATILE_LOG_DIRPatrick Williams1-1/+1
Upstream removed VOLATILE_LOG_DIR and replaced it with FILESYSTEM_PERMS_TABLES. Remove the VOLATILE_LOG_DIR and adjust the FILESYSTEM_PERMS_TABLES as necessary for the same effect as before. Since "FILESYSTEM_PERMS_TABLES:remove" would override any append behavior, we cannot simply use that because it would prevent anyone using the phosphor-base include from making `/var/log` volatile. By default we do want to make `/var/log` volatile, but some configs do not (ex. "gbmc"). To deal with this, add a new variable PHOSPHOR_VOLATILE_VARLOG, which when set to "1" enables the volatile `/var/log` setting. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Change-Id: I86f4a87ccbbff88f99662119516acd2bfb58b140
2024-06-11meta-google: gbmc: Add IGPS_MACHINE for 7xxWilliam A. Kennington III1-1/+3
We generally use the eval board config for our 7xx platforms as it has the sane defaults we usually depend on. Change-Id: Ie136d7a83f39da66ade8b80814d8dcbbaefbc5ef Signed-off-by: William A. Kennington III <wak@google.com>
2024-05-30meta-google: Set VOLATILE_LOG_DIR to yesVivekanand Veeracholan1-0/+3
The previous default behavior of /var/log directory being volatile is removed in https://gerrit.openbmc.org/c/openbmc/openbmc/+/69959. Set this to old behavior for Google machines. Change-Id: I19b321ae5112434db68252d9bc40d646292fd970 Signed-off-by: Vivekanand Veeracholan <vveerach@google.com>
2024-04-03meta-google: Add local GBMC_CONFIGWilly Tu1-2/+4
The local override is meant to be used for local testing over and not to automated builds that may be used for releases. Set the default config to local now. Tested: ``` bitbake obmc-phosphor-image -e // Got the OVERRIDES to have both local the dev OVERRIDES=":gbmc:local::dev:" ``` Change-Id: I9315fdea220483c6b2e0c873e2b31a1454470d5a Signed-off-by: Willy Tu <wltu@google.com>
2023-11-09meta-google: Purge all avahi supportWilliam A. Kennington III1-0/+1
We never used this and we never intend to pick it back up. Change-Id: Iaa23d6b9d87129eca8e76d67b8173941342ea2e9 Signed-off-by: William A. Kennington III <wak@google.com>
2023-10-11meta-google: opt out of webuiPatrick Williams1-0/+1
Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Change-Id: I515d5f732b02038b20a8ae45afc8b8d93d5d278d
2023-08-16meta-google: Ignore configuring meta-tpm layerVlad Sytchenko1-0/+3
Follow advice described in meta-tpm README to avoid warnings on each bitbake invocation saying that the layer is not configured. Change-Id: Ic7578ce4fe558bcae5204bb42b30f2247eff1c54 Signed-off-by: Vlad Sytchenko <vsytch@google.com>
2023-07-21meta-google: Remove python3-core from nftablesWilly Tu1-0/+3
python3-core is taking a lot of space causing the image to be too large in some systems. Remove the python package config to remove the dependencies. This is not done in bbappend because it didn't work when testing it out. Tested: Built with gbs and it doesn't have python3-core when tested with ``` INHERIT += "buildhistory" BUILDHISTORY_COMMIT = "1" ``` to get the package sizes. Change-Id: I5040cfb46ad618d622855891a462d53a887433fd Signed-off-by: Willy Tu <wltu@google.com>
2023-04-18meta-google: remove required npcm8xx-tip-fw versionAnthony1-1/+0
npcm8xx-tip-fw already specifies per-IGPS_MACHINE configuration in https://github.com/openbmc/openbmc/blob/4b8284784129e050c556b372e7116f884a168e8c/meta-nuvoton/recipes-bsp/images/npcm8xx-tip-fw_0.5.6.0.4.5.bb#L3 Change-Id: I635dfb6c2ed769d0f098e6ab2443dceaca79b789 Signed-off-by: Anthony <anthonyhkf@google.com>
2023-02-10meta-google: distro: override EXTENDED_VERSIONBenjamin Fair1-0/+1
This variable is set by default based on the latest tag, but this doesn't work in Google's environment. Set it to be the same as DISTRO_VERSION instead, which is based on a version variable passed in from the environment. Tested: Built for kudo and examined os-release Signed-off-by: Benjamin Fair <benjaminfair@google.com> Change-Id: Ib9acabae57ed69f4d32f0256f8425923039f4a8a
2022-12-19meta-nuvoton: npcm8xx-tip-fw: update to GOOGLE2 releaseBenjamin Fair1-1/+1
Changelog: - Add flag CERBERUS_SECURE_BOOT_ONLY. No udpate, recovery and logging. Change-Id: Id242eca001cadd7e6a0ed116300baa87f56a0ddb Signed-off-by: Benjamin Fair <benjaminfair@google.com>
2022-12-19meta-nuvoton: npcm8xx-igps: update to 03.08.00Benjamin Fair1-1/+1
Also remove Google-specific version since it has been merged into the mainline branch. Changelog: IGPS 03.08.00 - Dec 15th 2022 ============== - TIP_FW: 0.5.0 L0 0.3.9 L1 - Code cleanup for production. - bug fix key selection during recovery. - Add DME+RIOT data export to PCI MBOX. - align BMC and TIP that both will use PLL2 and not CLKREF. - Bug fix: don't save previous INTCR2 for reset indication. - Bug fix: update flow using wrong KMT. - TIP_FW: 0.5.0 L0 0.3.9 L1 GOOGLE3 - aligned to the above release. - split SFDP - enable flag CERBERUS_SECURE_BOOT_ONLY - uboot https://github.com/Nuvoton-Israel/u-boot/releases/tag/v2021.04-npcm8xx-20221215 - OpTee: https://github.com/Nuvoton-Israel/optee_os/releases/tag/npcm845x_3.18.0_v1.0 - linux offset 4MB. - Update scripts to sign in yocto build (signatures only). Signed-off-by: Benjamin Fair <benjaminfair@google.com> Change-Id: I396a8e05bc6aa53fd6c7062ed342ce1f26b7e2fb
2022-10-25meta-google: gbmc.conf: require versions of npcm8xx boot imagesBenjamin Fair1-0/+3
These specific versions are needed to boot on Google hardware, so override the defaults. Signed-off-by: Benjamin Fair <benjaminfair@google.com> Change-Id: I200ed7e281868b6bb2ba08129fc122b55d754848
2022-03-29meta-google: Enable patch fuzz to be error instead of warningWilly Tu1-0/+3
Change-Id: I71d6114928ae63c7a98deb723a25bb7e82e1bf13 Signed-off-by: Willy Tu <wltu@google.com>
2022-03-08meta-google: distro: Enable google dbus schemasWilliam A. Kennington III1-0/+2
Change-Id: Ic59f61a4bc3562e7f9bb0204f701e13d3c1a203f Signed-off-by: William A. Kennington III <wak@google.com>
2021-11-17meta-google: distro: Relax FIT_HASH_ALGWilliam A. Kennington III1-0/+3
u-boot hashing does not confer any additional security in gBMC (we don't sign the kernel and hashes live with the image). We can use a much faster, but bus verifying algorithm instead. Ideally this would be xxhash, but our u-boot is currently too old. Change-Id: I796a4ed2db380eb86a9acbeae1f8a5e56cc8cb62 Signed-off-by: William A. Kennington III <wak@google.com>
2021-08-18meta-google: Disable u-boot shell for Google prod buildsVivekanand Veeracholan1-0/+3
The DISTRO_FEATURE option for this is merged, https://gerrit.openbmc-project.xyz/c/openbmc/openbmc/+/45523 Signed-off-by: Vivekanand Veeracholan <vveerach@google.com> Change-Id: I70ba330f1f39aa785a31b63d1640a4c4b3c3eba8
2021-08-16meta-google: Add GBMC_CONFIG variableVivekanand Veeracholan1-0/+4
GBMC_CONFIG variable controls dev/prod configuration for the builds. Possible values: dev, prod This variable is defaulted to "dev" through weak assignment. Can be explicitly set through local.conf file or in build command. To set it in build command, additional step of including this variable to the "BB_ENV_EXTRAWHITE" environment variable is needed. https://docs.yoctoproject.org/bitbake/bitbake-user-manual/bitbake-user-manual-metadata.html#passing-information-into-the-build-task-environment Signed-off-by: Vivekanand Veeracholan <vveerach@google.com> Change-Id: I46c34d47c958a96ce00e2c89a2bc771a483a83ab
2021-08-07meta-google: Cleanup for Yocto override syntax changeWilly Tu1-4/+4
``` convert-overrides.py meta-google git grep "_[a-z0-9_/-]*[ :]" -- meta-google | grep ".bb" git grep -l _gbmc -- meta-google | grep ".bb" \ | xargs sed -i 's/_gbmc/:gbmc/' git grep -l _prod -- meta-google | grep ".bb" \ | xargs sed -i 's/_prod/:prod/' git grep -l _dev -- meta-google | grep ".bb" \ | xargs sed -i 's/_dev/:dev/' git grep -l _hoth -- meta-google | grep ".bb" \ | xargs sed -i 's/_hoth/:hoth/' git grep -l _bandaid -- meta-google | grep ".bb" \ | xargs sed -i 's/_bandaid/:bandaid/' ``` Some small fix includes ``` platforms_gbmc_bringup platforms_gbmc_secure ``` Tested: ``` $ git grep "_[a-z0-9_/-]*[ :]" -- meta-google | grep ".bb" meta-google/recipes-connectivity/avahi/avahi_%.bbappend:do_install:append:gbmc() { meta-google/recipes-core/dropbear/dropbear_%.bbappend:do_install:append:gbmc:dev() { meta-google/recipes-core/dropbear/dropbear_%.bbappend: echo ' chain gbmc_br_pub_input {' >>"$rules" meta-google/recipes-extended/libconfig/conf2struct-native_git.bb: oe_runmake checker meta-google/recipes-extended/libconfig/conf2struct-native_git.bb: oe_runmake install meta-google/recipes-extended/networking/mstpd_git.bb:do_install:append() { meta-google/recipes-extended/networking/sslh_git.bb: oe_runmake distclean meta-google/recipes-extended/networking/sslh_git.bb: oe_runmake sslh-conf.h meta-google/recipes-extended/networking/sslh_git.bb: oe_runmake install meta-google/recipes-google/ipmi/ipmi-fru-sh.bb:do_install:append() { meta-google/recipes-google/ncsi/gbmc-ncsi-config.bb:do_install:append() { meta-google/recipes-google/networking/gbmc-bridge.bb:do_rm_work:prepend() { meta-google/recipes-google/networking/gbmc-bridge.bb: # HACK: Work around broken do_rm_work not properly calling rm with `--` meta-google/recipes-google/networking/gbmc-ip-monitor.bb:do_install:append() { meta-google/recipes-google/networking/gbmc-iperf3.bb:do_install:append:dev() { meta-google/recipes-google/networking/gbmc-iperf3.bb: echo ' chain gbmc_br_pub_input {' >>"$rules" meta-google/recipes-google/networking/gbmc-mac-config.bb:do_install:append() { meta-google/recipes-google/networking/network-sh.bb:do_install:append() { meta-google/recipes-google/ssh/authorized-keys-comp.bb:SUMMARY = "Compiles a set of authorized_keys files into a single file" meta-google/recipes-google/ssh/authorized-keys-comp.bb:do_install:append() { meta-google/recipes-google/systemd/gbmc-systemd-config.bb:do_install:append:dev() { meta-google/recipes-google/test/test-sh.bb:do_install:append() { meta-google/recipes-phosphor/flash/inplace-gbmc-update.bb:do_install:prepend:dev() { meta-google/recipes-phosphor/host/phosphor-host-postd_%.bbappend:do_install:append:gbmc:dev() { meta-google/recipes-phosphor/initrdscripts/obmc-phosphor-initfs.bbappend:do_install:append:gbmc:dev() { meta-google/recipes-phosphor/initrdscripts/obmc-phosphor-initfs.bbappend:do_install:append:gbmc:prod() { meta-google/recipes-phosphor/ipmi/phosphor-ipmi-config.bbappend:do_install:append:gbmc() { meta-google/recipes-phosphor/ipmi/phosphor-ipmi-config.bbappend: overlapping="$(jq '."${GBMCBR_IPMI_CHANNEL}" | .is_valid and .name != "gbmcbr"' $chjson)" ``` Change-Id: I9d610c664bd44e8bd81fb8f7e76249a0b43b9ffd Signed-off-by: Willy Tu <wltu@google.com>
2021-08-02meta-google: images: Add inplace-gbmc-updateBrandon Kim1-0/+2
For gbmc override, add inplace-gbmc-update and set it as the PREFERRED_PROVIDER for virtual/bmc-update. Google-Bug-Id: 179618452 Google-Bug-Id: 179618500 Signed-off-by: Brandon Kim <brandonkim@google.com> Change-Id: If8b7a3640b66fd323ee5c1a98619a09463933898
2021-02-18meta-google: Add gbmc distroBrandon Kim1-0/+18
Upstream our base distro Upstream: 1fe32412faa5dbe9691b977c100712d2baa89887 Google-Bug-Id: 179617826 Signed-off-by: Brandon Kim <brandonkim@google.com> Change-Id: Ib0795ffb39ea8124c808f7ecb1d48808bce3e46e
generated by cgit v1.2.3 (git 2.39.0) at 2026-09-08 19:00:58 +0300