aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorStephane Desneux <stephane.desneux@iot.bzh>2018-07-25 18:00:17 +0000
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>2018-07-25 21:50:34 +0000
commitd63eb2fa5f294f94e7adcc21cc5f3ebffc605cc3 (patch)
tree3433f09cfca0fc08a31d40611ee954069a801730
parent2a130864a20160ff6d36ad992beeb4cc3bb6dd78 (diff)
af-main: set relax handling for apps signatures even when agl-devel is not set
Allow widgets to be unsigned even in non-development mode. This is a temporary workaround to let some time to setup the apps signing workflow. This workaround can be disabled for smoother transition to the world where all apps must be signed. For this, define AGL_FORBID_UNSIGNED_APPS="1" in local.conf. **IMPORTANT: THIS PATCH MUST BE REVERTED IN THE FUTURE AND ALL APPS MUST BE SIGNED** This patch alters the correct behaviour that was introduced here: https://gerrit.automotivelinux.org/gerrit/#/c/15527/1/meta-app-framework/recipes-core/af-main/af-main_1.0.bb Bug-AGL: SPEC-1614 Change-Id: I6bf50b70905a00445598f42ef5f6d9326c6d4cfe Signed-off-by: Stephane Desneux <stephane.desneux@iot.bzh>
-rw-r--r--meta-app-framework/recipes-core/af-main/af-main_1.0.bb22
1 files changed, 21 insertions, 1 deletions
diff --git a/meta-app-framework/recipes-core/af-main/af-main_1.0.bb b/meta-app-framework/recipes-core/af-main/af-main_1.0.bb
index e4e98d5d5..c1f85bd5d 100644
--- a/meta-app-framework/recipes-core/af-main/af-main_1.0.bb
+++ b/meta-app-framework/recipes-core/af-main/af-main_1.0.bb
@@ -37,7 +37,27 @@ EXTRA_OECMAKE = "\
-DUNITDIR_SYSTEM=${systemd_system_unitdir} \
"
-EXTRA_OECMAKE_append_agl-devel = " -DAGL_DEVEL=1 -DALLOW_NO_SIGNATURE=ON"
+# ------------------------ WARNING WARNING WARNNING ---------------------------
+#
+# ATM (FF.rc2), forcing all apps to be signed is an issue when building without
+# agl-devel feature. A workaround is to define ALLOW_NO_SIGNATURE=ON for all
+# builds but this must be removed later. See SPEC-1614 for more details.
+#
+# A variable AGL_FORBID_UNSIGNED_APPS is introduced to enable/disable this
+# workaround in local.conf and allow transition to signed apps:
+# * forbid unsigned apps by setting: AGL_FORBID_UNSIGNED_APPS="1"
+# * [DEFAULT] allow unsigned apps: do nothing (or set: AGL_FORBID_UNSIGNED_APPS="0")
+AGL_FORBID_UNSIGNED_APPS ?= "0"
+#
+# WORKAROUND:
+EXTRA_OECMAKE_append_agl-devel = " -DAGL_DEVEL=1"
+EXTRA_OECMAKE_append = " ${@bb.utils.contains('AGL_FORBID_UNSIGNED_APPS','1','','-DALLOW_NO_SIGNATURE=ON', d)}"
+#
+# Correct version (IMPORTANT TODO: to be restored later):
+#EXTRA_OECMAKE_append_agl-devel = " -DAGL_DEVEL=1 -DALLOW_NO_SIGNATURE=ON"
+#
+# ------------------------ WARNING WARNING WARNNING ---------------------------
+
USERADD_PACKAGES = "${PN}"
USERADD_PARAM_${PN} = "-g ${afm_name} -d ${afm_datadir} -r ${afm_name}"