aboutsummaryrefslogtreecommitdiffstats
path: root/conf
AgeCommit message (Collapse)AuthorFilesLines
2018-07-19Creates systemd service for APIsJosé Bollo7-43/+142
Before this change, APIs were only provided as binder's exported websockets. This forbade ability to use symbolic links. Allowing links is interesting for having platform sockets and for linked api (not using socket). The API afm-main is a platform API. It must run at system level and must be available for all user clients. To achieve it, we use a link. Bug-AGL: SPEC-1592 Change-Id: I8753f83373755eb7fc2d2cc50251b8f738b61b03 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2018-05-24afm-system-daemon.service: Fix a typoJosé Bollo1-1/+1
Change-Id: If9dcd49edad5a34ea9c7bdfcba7d7bc44bbafbeb Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2018-02-28Refactor user session managementJosé Bollo9-15/+70
Change-Id: Ib6ba886df110d8a23e3760e1818263ec757b9c7c Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2018-02-28provided.inc: Fix smack label of socketsJosé Bollo3-6/+6
Change-Id: I53d3cac7136e4d169acd8e3e3de5ea8439dd0192 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2018-02-28afm-user-session: Start target from user sessionJosé Bollo3-0/+27
Start the afm-user-session@%i.target from the user session after pam_sytemd session started. Change-Id: I5aeb8f01426b3cee2cbfad6ba30ecf37fe21abca Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2018-02-28Update date of copyright noticesJosé Bollo4-4/+4
Change-Id: Ia4ef2a6e3c07616ccd756933a82f0806844c4faf Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2018-02-28Add configuration variables for runtime socket dirsJosé Bollo7-19/+20
2 new configuration variables: - afm_platform_rundir (default /run/platform) Path to location of platform runtime sockets - afm_users_rundir (default /run/user) Path to location of users runtime sockets Change-Id: I65007fee1ca2ce6f1247a67ba0b121f97c08f209 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-12-11unit.conf: Fix Smack permission on api wsJosé Bollo3-0/+6
The Smack permission to write on the websocket of the API must be set to something that allows the communication! Here the chosen value is * Change-Id: Ia276219b232e33bd35353d8feb333513b340e75c Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-12-07unit.cont: Refactor PATH and LD_LIBRARY_PATHjobol3-6/+6
Change-Id: Ic6da02c0039421fd5656238f5fa812574af1c268 Signed-off-by: jobol <jose.bollo@iot.bzh>
2017-11-24simplify afm-user-session processJosé Bollo11-50/+10
Change-Id: If2739fd2c5a19d7cd31e117e1e79c0b51451552b Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Improve afm-user-session setupJosé Bollo2-9/+3
Change-Id: I4dfb0939afc871e93874cf021548db2e85d3656c Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Avoid implicit Before socket.targetJosé Bollo4-0/+22
Change-Id: I493c49a80ebb1fa85f586d0b0704b5682f0c3613 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Config for afm-user-sessionJosé Bollo8-9/+15
Change-Id: I6567b58fa0a6dd17deba4c7cccbf3b9f441730eb Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24afm-user-startup.service: Fix typeJosé Bollo1-0/+1
Change-Id: I8ecddbc5be346441f002ef8c50dd733fec0e6ef2 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24unit.conf: Fix target nameJosé Bollo4-12/+12
Change-Id: I144bcd47b65b86dd07ca5de71514a0032166b3a6 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Add a PAM config fileJosé Bollo3-2/+8
Change-Id: I27f726cd3cec7c0e499086c5ac3de1a736ef108c Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Rework on systemd start of user sessionsJosé Bollo21-55/+189
Change-Id: Iad46596435eebdc5c521b572fd8320b52a61d197 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24unit.conf: Bound start to agl-user-sessionJosé Bollo4-6/+6
Change-Id: Ic9731dbc9ee71872198ad70995dbaced8a7aa683 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24unit.conf: Remove unset of capabilitiesJosé Bollo3-6/+6
Remove the unsetting of capabilities because it currently breaks the image. To be reworked. Change-Id: I69a1d9c23f463a36edebb7993aa94fae14fb60e8 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24unit.conf: binder's service of type notifyJosé Bollo3-0/+3
Change-Id: Ibb80974c65f48d7473b8aa56604154bf70a49e14 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24unit.conf: Fix remaining %tJosé Bollo5-9/+12
Change-Id: If9c1c0d8b805e7de6490c75f0465d3455e84eb36 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24genconf: set filetype and syntaxJosé Bollo4-0/+4
Change-Id: Ibcff5a513c4559c84ddfca1ef9449b1eff544006 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24afm-unit.conf: Fix missing @ in service nameJosé Bollo4-20/+9
Regression introduced by commit: c7db705 Generate afm-unit.conf using m4 Change-Id: Ibeeaf14b697e79cb2a95154b50b2ac775f93d529 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24wgtpkg-unit: remove metadata.app-data-dir variableJosé Bollo5-21/+22
Change-Id: I51cbbad8ecdc371f457a008808c8c0f63501ac2b Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Generate afm-unit.conf using m4José Bollo7-239/+431
The use of m4 to generate the afm-unit.conf and afm-unit-debug.conf files has benefits: - the sync between debug versus not debug is mechanical - it allows easier maintainance by improving readability and writability (ex: macros TARGET or UNIT_NAME_BASE) Change-Id: Ic0427bedf4f8a5b174318562336603077f174fa5 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24afm-unit.conf: remove invocation of PAMJosé Bollo2-2/+2
Change-Id: I2b446907b0c68b3bdb1c59227427e237f429ed8e Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24afm-unit.conf: Add XDG dirs definitionsJosé Bollo2-0/+6
Change-Id: I40d73de059e955256d90ca7831870815c7d90481 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24afm-unit.conf: Add slice indicationJosé Bollo2-0/+2
Change-Id: I50c2166ffab106988fa4ac1e68c14ea56c5b3145 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Don't rely on features available for user unitsJosé Bollo2-0/+4
Change-Id: I117b8de2eec6cba9f475e18b794f90347bc184f8 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Avoid polkit and bugJosé Bollo1-2/+2
Accessing systemd/system with DBUS from a user not root make systemd use polkit. It doesn't work for us because: - at the end systemd crashes (sigsegv) - we don't want polkit here Change-Id: I206edd108b8b659c8c6a3a68f61500cb114995d4 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24remove secure-bit directivesJosé Bollo2-2/+0
Doesn't work after dropping capabilities! Change-Id: I748a8de9bb04006c14cba09cc6c4469da06c1b5d Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24bug fixes and improvementsJosé Bollo2-2/+3
Change-Id: I2fc3de0a84e471e8e87f43170c20f8d6d0d05fdc Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24provide access to systemd systemJosé Bollo2-9/+6
Change-Id: I1e3d2dc780a1449f2bfc894baa1f26a94be61cd8 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Remove afm-system-daemonJosé Bollo3-4/+16
Change-Id: I1e6c0488b7183724a65fcc06fd3cf6909e0efd53 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24afm-unit.conf: Removes capabilities of applicationsJosé Bollo2-0/+8
Change-Id: I081e8a8f9ea344d47ae007a4d6c9e72663f82fcf Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24Start user units at the system levelJosé Bollo2-18/+24
When service name end with @ it means that the user UID must be provided. Change-Id: I6707df0151b7cab985cfc53a81fccf6a7150c9a3 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-11-24afm-unit.conf: Rename generated systemd unitsJosé Bollo2-32/+48
Uses a more uniform naming for units and allows to use templating for some other purpose. Change-Id: Ia99f84a8f4436fcce6cecf3b3720870d27e9e303 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-09-19Remove legacy mode without systemdJosé Bollo2-59/+0
Change-Id: Id26322a1a46baa8b53b6d3c214477ae50a7c99f6 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-09-01afm-unit-debug.conf: Move monitoring optionJosé Bollo1-1/+1
Put it in the same place that other unconditionnal options Change-Id: I75fc5503db6fd9776299564b4a559a5bbf889952 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-09-01afm-unit-debug.conf: Increase the verbosity in debugJosé Bollo1-0/+1
Latest version of the binder separated the verbosity levels of WARNING and NOTICE. This commits asks for notice report by default in debug. Change-Id: Ibdaf16560384c7f2576066250e42c44074501ebb Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-31afm-unit.conf: improve setting of namesJosé Bollo2-4/+4
The names are now prefixed by "afbd-" to clearly identify the binder daemon. Change-Id: I0dbd0a5dd68260a6315599e18e3e2f4a6be3efc5 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-29afm-unit.conf: use option --name for setting binder nameJosé Bollo2-7/+17
Also enforce output to journal Change-Id: I85957cfb8cc7e2264c9146ca18c352a0af347934 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-29afm-unit-debug.conf: add --monitoring optionJosé Bollo1-0/+1
Change-Id: I3174738bf4c164513bb6a0399584784548b22c2c Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-29afm-unit-debug.conf: provides a default tokenJosé Bollo1-1/+1
The default token is set to HELLO Change-Id: I275c8d91633f4b6aa596c6195b90f1ad7c1b0cde Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-29afn-unit.conf: Fix bug for option --no-httpdJosé Bollo2-25/+23
The option --no-httpd is applied for applications of type 'application/vnd.agl.service' but the option was misplaced in the command line. On an other hand, setting --no-httpd makes option --roothttp irrevelant. Also, the option is currently not to be applied when AGL_DEVEL (pulling afm-unit-debug.in) is required. Change-Id: I05b15fa2a847a5564d7c88ce7ac47cd8a2a29f40 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-08afm-unit.conf: refactor LD_LIBRARY_PATH valueJosé Bollo2-4/+4
Changes from LD_LIBRARY_PATH=$ORIGIN/$LIB to LD_LIBRARY_PATH=$ORIGIN/lib because $LIB isn't univoque for integrators while lib is. Change-Id: Ic4b2f8bb1410c35f75eb957a0ebc10141f995aba Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-07Set explicit path for services and unitsJosé Bollo2-0/+2
This patch removes references to /usr/local and add reference to the installation directory. The companion programs can be run using path relatives to the installation directory. Bug-AGL: SPEC-384 Change-Id: I7e10be1d0df1b62f3be0104f88d1787dd849d152 Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-08-03Fix socket dependency for afb serviceRonan Le Martret2-4/+4
Change-Id: Icb65d7165e1f1c0811f170effe148606bc367872 Signed-off-by: Ronan Le Martret <ronan.lemartret@iot.bzh>
2017-07-24Add service debugging support (afm-debug).Sebastien Douheret3-3/+295
Add necessary tools/scripts, such as afm-debug, to allow service binding. These tools are only available in develvopment (AGL_DEVEL is set). Change-Id: I4e946146af985c74c8bd97d8c118b932394bbc5e Signed-off-by: Sebastien Douheret <sebastien.douheret@iot.bzh> Signed-off-by: José Bollo <jose.bollo@iot.bzh>
2017-07-07unit.conf: Allow service to run by defaultJosé Bollo1-2/+0
Change-Id: Ifc2d1795041d0254af7db518f64c988bb747200c Signed-off-by: José Bollo <jose.bollo@iot.bzh>