Age | Commit message (Collapse) | Author | Files | Lines |
|
Add agl-selinux feature to enable SELinux support.
Notes:
- SELinux is in permissive mode by default for now, and using the
targeted policy by default.
- The linux-yocto specific bbappend in meta-selinux is masked out in
favor of adding a more universal kernel configuration fragment with
AGL's own scheme.
- SELinux specific recipes and bbappends are added via a meta-selinux
dynamic-layers addition in meta-agl-core to keep using meta-selinux
optional. This will avoid issues with the Yocto autobuilder testing
of meta-agl-core.
- To avoid the effectively hard-coded autorelabel on first boot, a
bbappend is added to the selinux-autorelabel recipe to remove the
flag creation. In the off chance that a build happens on a filesystem
without xattr support, the logic in the selinux-image bbclass will
still touch the /.autorelabel flag and trigger relabeling.
- A systemd unit and script are added with a new systemd-selinux-relabel
recipe to handle relabeling of some systemd generated files that do
not get handled during root filesystem construction. Some of these
can be addressed by some upstream tweaks, but /etc/machine-id will
always need special handling unless there is a shift to using
read-only or stateless root by default. With this workaround we still
avoid doing a full relabel and reboot on first boot, which helps
simplify CI.
Bug-AGL: SPEC-4332
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: Ibf469e11eb3a67709074cc6794b3d12cd5071a90
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27790
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
|
|
Since polkit comes from meta-oe and not poky, move adding it to
packagegroup-agl-graphical-weston to a bbappend that is in a meta-oe
dynamic-layers hierarchy. This is required to avoid breaking the
meta-agl-core testing on the Yocto autobuilder, which does not pull
in meta-oe currently. This may need to be revisited down the road
when providing a binary packagefeed is attempted, as it may be the
case that explicitly adding meta-oe as a meta-agl-core dependency
ends up the better solution for packagefeed stability.
Bug-AGL: SPEC-4359, SPEC-4375
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: I920d9184f936d0c529db944bf1667a470aa863c6
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27568
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
|
|
The qtwayland patch being applied for Qt issue:
https://bugreports.qt.io/browse/QTBUG-79838
does not apply against 5.15, and the issue has been determined to
have been fixed by upstream qtwayland rework, so remove it.
Bug-AGL: SPEC-3819
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: I21eaec04a1d07080936ae8cd22de82d0d4df54ec
|
|
This is mostly the result of running a slightly customized version
of the convert-overrides.py script from poky with additional
overrides added. A few minor fixups were done by hand afterwards
during a review of the changes.
The intent of these changes is to minimize the effort to keep the
"next" branch that builds against poky master up to date and tested
in preparation for the switch to the next Yocto LTS release in
early 2022.
Bug-AGL: SPEC-4052
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: Ia3bf63b7cb1aa1d95ada373d1a3ab56def0a125d
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/26564
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
|
|
With long-running qt applications which have fluid animations
in wayland environment, the animation becomes obviously sluggish
because massive amount of memcpy() is called through a constructor
being placed in a loop in QTimerInfoList::timerInsert() function.
This is caused by a timer-index leak bug of qtwayland, which is
already reported to the qt project as following ticket.
https://bugreports.qt.io/browse/QTBUG-79838
Unfortunately QTBUG-79838 is still open because maintenance of
non-commercial version of qt5 is already stopped. However, we've
confirmed that the patch attached to that ticket works fine
except for that part of it is no longer needed due to the deletion
of the code. So let's apply only effective part of it.
Bug-AGL: SPEC-3991
Signed-off-by: Hiroyuki Ishii <ishii.hiroyuki002@jp.panasonic.com>
Change-Id: Ib148b81aabb98e8df10c1414cdbfe26f7ddf09a6
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/26466
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
|
|
Add a dynamic layer addition for meta-qt5 that contains a qtbase
bbappend with the required configuration changes for building
it with Wayland support. The aim is to avoid duplication of these
configuration changes among meta-agl-core users.
Bug-AGL: SPEC-3972
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: I642ad6e62c10da1b1c2323a13c7d5fa91ba9f028
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/26395
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
|