Adding obuspa package has increased slightly prplOS firmware image, but
it was enough to trigger Haze's bootloader factory pre-configured
limits.
U-Boot shipped with the devices has configuration limits which prevents
to boot initramfs images which have size of 33951166 Bytes = 32.4 MiB:
U-Boot 2016.01 (Nov 09 2022 - 16:51:22 +0800)
...
IPQ807x# tftpboot 0x41000000 openwrt-ipq807x-generic-prpl_haze-initramfs-uImage.itb && bootm 0x41000000
...
Uncompressing Kernel Image ... Error: inflate() returned -5
Image too large: increase CONFIG_SYS_BOOTM_LEN
Must RESET board to recover
resetting ...
So lets workaround this bootloader limit by writting the firmware image
directly into the eMMC storage with sysupgrade image, thats it, we
couldn't use initramfs images on Haze until we get U-Boot with suitable
configuration.
References: PCF-1048, PCF-929
Signed-off-by: Petr Štetiar <ynezz@true.cz>
This reverts commit 04b4955eacf89c38d0068a023b0fcc9ab29c43f5 as it
seems, that the bugs related to the security profile are less prevalent.
References: PCF-967
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Currently its not possible to customize LCM SDK for our LCM container CI
QA purposes, so lets provide ImageBuilder based LCM testing containers
which can be used for the same purposes.
References: LCM-737, LCM-745, LCM-741
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Currently its not possible to customize LCM SDK for our LCM container CI
QA purposes, so lets provide ImageBuilder containers which can be used
for the same purposes.
References: LCM-737, LCM-745, LCM-741
Signed-off-by: Petr Štetiar <ynezz@true.cz>
We're going to provide ImageBuilder containers as well, so lets extend
current SDK stage with ImageBuilder.
References: LCM-737
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Once prplos-v* tag is created, gather build artifacts, upload them to
generic packages and create a release.
Closes: PCF-800
Signed-off-by: Petr Štetiar <ynezz@true.cz>
It seems, that there are some remaining issues to be fixed in ambiorix
stack on aarch64 as `ubus-cli` is currently crashing heavily and thus
prevents the CI QA. So lets workaround that by disabling the security
profile and enable it again once the issues are fixed.
References: PCF-967
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Add security compiler options.
- Enable the hardened-ld-pie.specs and -fPIC CFLAG (48f2de33d3/include/hardened-ld-pie.specs):
CONFIG_BUSYBOX_DEFAULT_PIE=y
CONFIG_PKG_ASLR_PIE_ALL=y
- Add -fstack-protector-strong to CFLAGS:
CONFIG_PKG_CC_STACKPROTECTOR_STRONG=y
CONFIG_KERNEL_CC_STACKPROTECTOR_STRONG=y
- Add -D_FORTIFY_SOURCE=2 to CFLAGS:
CONFIG_PKG_FORTIFY_SOURCE_2=y
- Add the -fPIE option to gcc:
CONFIG_TOOLCHAINOPTS=y
CONFIG_GCC_DEFAULT_PIE=y
Add the same time enable this by default for the CI builds
References: PCF-880
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [rebased]
Import URX851 support for runtime testing from private prplos-urx851
project, so we can extend public QA process using those devices as well.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Add builds for URX851 targets using very restricted environment to suit
NDA restrictions:
* using dedicated restricted builders
* no internet access during builds
* no build artifacts after builds
* using known container image for builds, its forced and can't be changed
* approval is needed to allow build in the merge request
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Historically prplOS web user interface was based on uhttpd/LuCI so it
made sense to keep this feature in separate webui.yml profile, but
nowadays the same feature is provided by single `prpl-webui` package and
thus it doesn't make sense anymore to maintain separate profile for that
package, so lets simply move `prpl-webui` package into prpl.yml profile.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Use latest labgrid with following fixes and additions:
* modbus: allow exclusive management of a single coil
* shelldriver: make run wrapper injecting more reliable
* shelldriver: make kernel silencing more reliable
* shelldriver: fix missing kernel silencing on passwordless consoles
* shelldriver: make post_login_settle_time generally available
* ubootdriver: allow handling of console output decoding errors
* ubootdriver: use codec and decodeerrors args for decoding
* smallubootdriver: use codec and decodeerrors args for decoding
* ubootdriver: add possibility to delay boot_command execution
* ubootdriver: add possibility to extend init commands timeout
Mainly doing that in a hope, that it should hopefully improve DUT
bringup at least for Turris Omnia and URX851 reference targets.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
There is no plan to use those as reference targets, so lets don't spend
time on those and remove them from the ci.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Sync CI bits with the current state in prplos branch on commit
9af7fff65169 ("ci: fix build Docker image sdk-x86-64 job").
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Remove testing on intel_mips target as this one is probably going to be
replaced by newer target in the testbed soon anyway.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
