8 Commits

Author SHA1 Message Date
Andreas Müller
5346b3baa8 Remove fixmac
MAC setup magic should not be installed by default in all our images

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2020-06-04 11:51:54 +02:00
Andreas Müller
903d753fc0 Ban weston-init from our images
Maybe I missed something:

* Although disabled by default it is started automatically
* A passwordless root account reached by two keys - NOT ACCECTABLE!!!
* Weston ships sessions that are the preferred way to start weston as
  unpriviledged user

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2020-06-04 11:51:54 +02:00
Andreas Müller
5e4b883bc2 Let all our images log volatile (not only xfce4-music-image)
should have done this much earlier:

* Don't ruin sd-cards on machines running 24/7
* On Raspi4 it buys us boot time reduced by ~2s
* Was never happy about the misleading entries in journal from boots long ago

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2020-05-10 13:22:54 +02:00
Andreas Müller
7e3a5954e5 network-manager-applet/-openvpn: Add missing bits to import vpn-config
This is more or less a backport of what will be send to master soon. Since
there is no hope to get backports added to stable branches, adjust recipes
here.

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2020-03-18 18:15:28 +01:00
Andreas Müller
eca422e4a7 console-net-image: add networkmanager-openvpn
In times of home-office users might want to tunnel to copmpany's network

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2020-03-18 18:12:04 +01:00
Andreas Müller
babc8fbe27 scripts: prepare scipts to write bbone images based upon wic
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2019-09-19 12:42:53 +02:00
Andreas Müller
eb55623c66 instant-sysroot-target.bbclass: Minor corrections on remote debug instructions
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2019-09-10 22:06:16 +02:00
Andreas Müller
c921e73d35 Ensure rng-tools does not find it's way into images
It blocks shutdown for ages. [1] helps to see

[  232.089805] systemd-shutdown[1]: Sending SIGTERM to remaining processes...
[  232.128654] systemd-journald[188]: Received SIGTERM from PID 1 (systemd-shutdow).
[  322.127531] systemd-shutdown[1]: Sending SIGKILL to remaining processes...
[  322.166520] systemd-shutdown[1]: Sending SIGKILL to PID 178 (rngd).

[1] https://freedesktop.org/wiki/Software/systemd/Debugging/#index2h1

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
2019-07-10 09:53:34 +02:00
23 changed files with 50 additions and 47 deletions

View File

@@ -70,7 +70,7 @@ It has its origin Ångström distribution - check https://github.com/Angstrom-d
* All images for console / kde / lxqt / xfce ar found. allgui-images build
images for all graphical environments.
[recipes-utils](recipes-utils):
[recipes-utlis](recipes-utlis):
* udev-rules-udisks-hide-bootpart: Hide boot partition from udisks
* Some tools (these are the only left from angstrom). Honestly: Have never
used them but kept them if users come from angstrom and might miss

View File

@@ -1 +0,0 @@
PACKAGECONFIG_remove = "introspection"

View File

@@ -0,0 +1,3 @@
EXTRA_OECONF_append = " \
--with-libnm-gtk \
"

View File

@@ -0,0 +1,12 @@
PACKAGECONFIG_append = " gnome"
DEPENDS_append = " gtk+3 networkmanager network-manager-applet"
do_configure_append() {
# network-manager-openvpn.metainfo.xml is created in source folder but
# compile expects it in build folder. As long as nobody comes up with a
# better solution just support build:
if [ -e ${S}/appdata/network-manager-openvpn.metainfo.xml ]; then
mkdir -p ${B}/appdata
cp -f ${S}/appdata/network-manager-openvpn.metainfo.xml ${B}/appdata/
fi
}

View File

@@ -0,0 +1 @@
RRECOMMENDS_${PN} += "udev-rules-udisks-hide-bootpart"

View File

@@ -1 +1 @@
PACKAGECONFIG_append = " startup-notification gladeui2"
PACKAGECONFIG_append = " startup-notification gladeui"

View File

@@ -1,3 +0,0 @@
RRECOMMENDS_${PN} += " \
imsettings \
"

View File

@@ -1 +1 @@
PACKAGECONFIG_append = " sound-setter notify"
PACKAGECONFIG_append = " datetime-setter sound-setter notify"

View File

@@ -0,0 +1 @@
PACKAGECONFIG_append = " gnome"

View File

@@ -0,0 +1,2 @@
RRECOMMENDS_${PN}-sshd_remove_class-target = "rng-tools"

View File

@@ -0,0 +1,2 @@
# A root session without password activated by just two keys - honestly..
RRECOMMENDS_${PN}_remove = "weston-init"

View File

@@ -173,7 +173,7 @@ do_copy_to_target_sysroot() {
fi
}
addtask copy_to_target_sysroot after do_package_write_deb do_package_write_ipk do_package_write_rpm before do_build
addtask copy_to_target_sysroot after do_package before do_build
# same as do package
do_copy_to_target_sysroot[vardeps] = "${PACKAGEBUILDPKGD} ${PACKAGESPLITFUNCS} ${PACKAGEFUNCS} ${@gen_packagevar(d)}"

View File

@@ -4,8 +4,6 @@
# libc settings
DISTRO_FEATURES += "${@['', ' nls'][d.getVar('ENABLE_BINARY_LOCALE_GENERATION') == '1']}"
DISTRO_FEATURES_remove = "ldconfig"
USE_NLS_glib-2.0 = "yes"
USE_NLS_glib-2.0-native = "yes"
USE_NLS_gcc-cross = "no"

View File

@@ -10,7 +10,7 @@
###############################################################################
# follow Yocto version scheme
DISTRO_VERSION = "v3.0"
DISTRO_VERSION = "v2.7"
# With Angstrom we had DISTRO_TYPE = "debug"/"release". No recipe except
# good old lxdm takes care (yes it was me). OE-Core way is setting
@@ -114,8 +114,10 @@ ENABLE_BINARY_LOCALE_GENERATION_ep9312 = "0"
ENABLE_BINARY_LOCALE_GENERATION_armeb = "0"
# blacklist policy
PNBLACKLIST[pn-fso-apm] = "regular apmd is good enough"
PNBLACKLIST[pn-fso-apm] = "regular apmd is good enough"
# warrior specific - on master there might come times they do the right thing...
PNBLACKLIST[rng-tools] = "blocks shutdown and no issues found for openssl"
###############################################################################
# Quality & security hardening
@@ -135,11 +137,12 @@ WARN_TO_ERROR_QA = " \
already-stripped compile-host-path install-host-path \
installed-vs-shipped ldflags pn-overrides rpaths staticdev \
unknown-configure-option useless-rpaths host-user-contaminated \
invalid-packageconfig patch-fuzz src-uri-bad \
invalid-packageconfig patch-fuzz \
"
WARN_QA_remove = "${WARN_TO_ERROR_QA}"
ERROR_QA_append = " ${WARN_TO_ERROR_QA}"
PNBLACKLIST[weston-init] = "A passwordless root session reachable by two keys - security???"
###############################################################################
# Image defaults

View File

@@ -8,7 +8,7 @@ BBFILE_COLLECTIONS += "mortsgna-layer"
BBFILE_PATTERN_mortsgna-layer := "^${LAYERDIR}/"
BBFILE_PRIORITY_mortsgna-layer = "7"
LAYERSERIES_COMPAT_mortsgna-layer = "sumo thud warrior zeus"
LAYERSERIES_COMPAT_mortsgna-layer = "sumo thud warrior"
# This is a compromise: Because of dynamic appends it needs oe-core only. Our
# images have a huge dependency list (see README). So the layers set here are
@@ -22,6 +22,8 @@ BBFILES_DYNAMIC += " \
\
multimedia-layer:${LAYERDIR}/appends/meta-multimedia/*.bbappend \
\
networking-layer:${LAYERDIR}/appends/meta-networking/*.bbappend \
\
openembedded-layer:${LAYERDIR}/appends/meta-oe/*.bbappend \
\
qt5-layer:${LAYERDIR}/appends/meta-qt5/*.bbappend \

View File

@@ -1,10 +1,8 @@
[Configuration]
ColorForeground=#ffffffffffff
ColorBackground=#000000000000
ColorCursor=#a0a0a0a0a0a0
FontName=Monospace 9
MiscAlwaysShowTabs=FALSE
MiscBell=FALSE
MiscBellUrgent=FALSE
MiscBordersDefault=TRUE
MiscCursorBlinks=FALSE
MiscCursorShape=TERMINAL_CURSOR_SHAPE_BLOCK
@@ -12,6 +10,7 @@ MiscDefaultGeometry=80x24
MiscInheritGeometry=FALSE
MiscMenubarDefault=FALSE
MiscMouseAutohide=FALSE
MiscMouseWheelZoom=TRUE
MiscToolbarDefault=TRUE
MiscConfirmClose=TRUE
MiscCycleTabs=TRUE
@@ -19,5 +18,12 @@ MiscTabCloseButtons=TRUE
MiscTabCloseMiddleClick=TRUE
MiscTabPosition=GTK_POS_TOP
MiscHighlightUrls=TRUE
ScrollingLines=1000000
MiscMiddleClickOpensUri=FALSE
MiscCopyOnSelect=FALSE
MiscDefaultWorkingDir=
MiscRewrapOnResize=TRUE
MiscUseShiftArrowsToScroll=FALSE
MiscSlimTabs=FALSE
ColorForeground=#000000000000
ColorBackground=#fae0f4f1a311

View File

@@ -13,15 +13,6 @@ IMAGE_INSTALL += " \
\
orage \
xfce4-orageclock-plugin \
\
pkgconfig binutils-symlinks elfutils gnu-config \
cmake meson \
gdbserver \
git git-bash-completion \
qt5-creator \
qwt-qt5 \
\
nodejs nodejs-npm nodejs-systemtap \
"
IMAGE_LINGUAS_libc-glibc = "${IMAGE_LINGUAS_FULL}"

View File

@@ -13,7 +13,6 @@ IMAGE_INSTALL += " \
systemd-analyze \
cpufrequtils \
htop \
fixmac \
util-linux-lsblk \
nano \
"

View File

@@ -32,7 +32,6 @@ RDEPENDS_${PN} = " \
man man-pages \
gawk \
chrpath \
nodejs nodejs-npm nodejs-systemtap \
\
wireshark \
nfs-utils-client \

View File

@@ -54,7 +54,6 @@ RDEPENDS_${PN} = " \
\
${@bb.utils.contains('BBFILE_COLLECTIONS', 'sdr-layer', 'packagegroup-sdr-python-extended packagegroup-sdr-gnuradio-base packagegroup-sdr-gnuradio-extended packagegroup-sdr-rtlsdr packagegroup-sdr-uhd', '', d)} \
\
${@bb.utils.contains('BBFILE_COLLECTIONS', 'meta-qt5-extra', 'qmlarkdown', '', d)} \
"
# firefox

View File

@@ -20,5 +20,5 @@ RDEPENDS_${PN} = " \
gnome-system-monitor \
dconf-editor \
\
glmark2 mesa-demos \
glmark2 mesa-demos eglinfo-x11 \
"

View File

@@ -7,29 +7,21 @@
# This script updates checksums in recipes after version bump. It is supposed
# to run run in same environment as bitbake:
#
# update-recipe-checksums.sh [-d <recipedir> <recipes>
# update-recipe-checksums.sh <recipe>
#
# where <recipe> can be a single recipe, a packagegroup an image or...
# Includes
. `dirname $0`/include/common-helpers.inc
echo
if [ "$1" = "-d" ]; then
shift
_TOPDIR="$1"
echo -e "${style_bold}Use $1 as recipe directory...${style_normal}"
shift
else
echo -e "${style_bold}Ask bitbake for recipe directory...${style_normal}"
GetBitbakeEnvVar "TOPDIR"
_TOPDIR="$BitbakeEnvVar"
fi
if [ -z "$1" ]; then
ErrorOut "No fetch target set in first parameter!"
fi
# Ask bitbake for recipe directory
GetBitbakeEnvVar "TOPDIR"
_TOPDIR="$BitbakeEnvVar"
echo
echo -e "${style_bold}Run bitbake -k --runall=fetch $@...${style_normal}"