Commit Graph

63555 Commits

Author SHA1 Message Date
Petr Štetiar
34b4a462bf
base-files: set hostname to prplOS
It was decided to rename project name from prplWrt to prplOS, so change
default hostname to prplOS as well.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit c7f349bb00021f768f660d3de0b36f08f4d36c96)
(cherry picked from commit d26279279e70fc4316172ba3b0a9bc87d82ca844)
2025-07-31 15:17:58 +00:00
Olaf Wachendorf
20d8e443d2
base-files: update banner from prplWrt to prplOS
Project was renamed in 8/2021 so let's update the welcome banner as well.

Closes PCF-639
Signed-off-by: Olaf Wachendorf <olaf.wachendorf@maxlinear.com>
(cherry picked from commit a03b397f687d95415433d09caa28695e40059414)
(cherry picked from commit 24a271688f57bc16f9b2936ad54891bba10b6ddf)
2025-07-31 15:17:57 +00:00
Petr Štetiar
79cc55a722
base-files: board.d: add guest bridge to default network config
It was decided, that prplOS should ship with guest bridge in default
config.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 484946872ee642fe0edff433857cad19c34d165b)
(cherry picked from commit 9c3661be648ed133a717f97d8ec0e94a4382d0f7)
2025-07-31 15:17:56 +00:00
Petr Štetiar
e899dc0a33
base-files: sysctl.d: fix failing cdrouter_firewall_508 test
cdrouter_firewall_508: Verify outbound packets are not forwarded if the
                 source address is not a prefix of the interior network

This test ensures that the random martian address assigned to the LAN
client in step 2 is outside of lanIp/lanMask, does not match any static
routes configured with staticRouteLanNetwork and is not within any of
the following reserved IP ranges: 0.0.0.0/8,
127.0.0.0/8, 169.254.0.0/16, 192.88.99.0/24, 224.0.0.0/4,
240.0.0.0/4, 255.255.255.255/32.

Make the test pass by setting `rp_filter` to strict mode. Strict mode as
defined in RFC3704 Strict Reverse Path Each incoming packet is tested
against the FIB and if the interface is not the best reverse path the
packet check will fail.  By default failed packets are discarded.

Current recommended practice in RFC3704 is to enable strict mode to
prevent IP spoofing from DDos attacks. If using asymmetric routing or
other complicated routing, then loose mode is recommended.

References: PCF-548
References: https://tools.ietf.org/html/rfc3704
References: https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit b9ad7cbf75a4a99b22ef0906d8a76d7b71a8df97)
(cherry picked from commit 4a593e72e3b4751074311f1d1f3607b13d5d9128)
2025-07-31 10:36:16 +00:00
John Crispin
2eacc18b31
backport: scripts/feeds: add a new command that allows generating a new feeds.conf
This can be used inside build setups for easy feeds.conf generation.

Signed-off-by: John Crispin <john@phrozen.org>
(cherry picked from commit f039f68dcbf26b424028f39f9dd80cd4c89ea9be)
2025-07-31 10:36:15 +00:00
Petr Štetiar
3fcc07ff55
ci: cdrouter: mxl25641-hdk-6: fix build job dependency
Due to the wrong build job name we've currently wrong CI job
dependencies between build and run stages, so CDRouter run time testing
jobs currently starts immediately in the CI pipeline and since there are
no firmware images build yet, they're going to fail. So lets fix it by
fixing the CI job needs with a proper build job name.

Fixes: d70801b2d945 ("ci: cdrouter: add mxl25641-hdk-6 aka OSPv2")
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:14 +00:00
Petr Štetiar
bfcaa5f711
ci: testbed-device.py: MXL25641-HDK-6: add VLAN bridge port
I've intentionally connected LAN network into different LAN port on the
board to increase testing coverage and possible fixed configurations
here and there, so for that we need to specify a different bridge port
for VLAN configuration used during CDRouter VLAN testing.

References: PCF-1138
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:13 +00:00
Petr Štetiar
b902184ce3
PROVISORY: ci: testbed-device.py: workaround MxL very generic DTS compatible
While integrating support for OSPv2, also known as MXL25641-HDK-6, I
discovered that it's impossible to uniquely identify the machine. This
is because the /proc/device-tree/compatible (DTS Root Node) is identical
across all MxL boards.

So lets workaround it by using `/proc/device-tree/model` additionally,
which at least help distinguish between OSPv1 and OSPv2, thus we first
check for `compatible` and if not usable, then fallback to `model`
property.

References: PCF-1161
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:12 +00:00
Petr Štetiar
4f059a8512
ci: cdrouter: add mxl25641-hdk-6 aka OSPv2
Copy over tests from urx851-hdk-3 and adapt them for mxl25641-hdk-6 so
we can QA this new board.

References: PCF-1138
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:11 +00:00
Petr Štetiar
7b77da8dbf
ci: testbed-02: add mxl25641-hdk-6 aka OSPv2
Add mxl25641-hdk-6 aka OSPv2 board with ethernet WAN uplink so we can QA
this new board.

References: PCF-1136
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:10 +00:00
Petr Štetiar
c6f301038c
ci: tests: cram: add tests for mxl25641-hdk-6 aka OSPv2
Copy over tests from urx851-hdk-3 and adapt them for mxl25641-hdk-6 so
we can QA this new board.

References: PCF-1137
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:09 +00:00
Petr Štetiar
525a043762
ci: add build support for OSPv2
Lets make builds for new MxL OSPv2 reference platform available.

Closes: PCF-1135
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:08 +00:00
Bhavesh Bharadiya
8b545a104a
profiles: add MxL OSPv2 profile to UPDK 9.1.55
Add MxL OSPv2 profile for MxL OSPv2 board.
Add mxl_wlan_hostap_ng_wav700 profile for WAV700 support.

Closes: PCF-1135
Signed-off-by: Bhavesh Bharadiya <bnbharadiya@maxlinear.com>
2025-07-31 10:36:07 +00:00
Petr Štetiar
b1b71958f9
PROVISORY: ci: 025-process-monitor: disable test removal check
amx-processmonitor currently crashes when the process check is removed,
so until its fixed, lets remove this problematic part of the test so the
CI passes and we can revert this workaround when the issue is fixed.

References: PCF-1145
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
2025-07-31 10:36:06 +00:00
Petr Štetiar
49f32972ae
profiles: prpl: add amx-processmonitor v0.2.0
The Process Monitor is a core element of prplOS, designed to oversee
TR-181 services developed with the Ambiorix framework. Its primary
function is to periodically assess the status of TR-181 services linked
to the system bus. This assessment takes place at intervals configured
to suit specific requirements.

In the event of test failures, the Process Monitor, based on its
configuration, can initiate actions such as restarting a single process
or a series of processes. Alternatively, it can trigger a device reboot
to ensure recovering full system functionality if single service restart
is not sufficient. This flexibility contributes to maintaining the
reliability and stability of the prplOS ecosystem, ensuring a seamless
user experience and uninterrupted system performance.

Closes: PCF-897, PCF-1097
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org> [bump to v0.2.0, tests]
2025-07-31 10:36:05 +00:00
Yüce Kürüm
b1e8de5fb5
profiles: prpl: treewide: fix self killing init scripts
Currently its impossible to stop or restart a lot of HL-API services due
to the usage of `killall` based approach which due to the same naming of
the process/daemons and their init script results into the self killing
init scripts.

So lets fix it by patching temporarily all affected services with fixed
and common process_stop_shutdown init script function which handles it
properly.

While at it refresh the patches so they apply cleanly.

Fixes: PCF-833
Signed-off-by: Yüce Kürüm <yuce.kurum@mind.be>
Signed-off-by: Yüce Kürüm <yuce.kurum_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:36:04 +00:00
Petr Štetiar
abd5c852c7
profiles: prpl: ethernet-manager: bump to version v1.20.1
Changes since current version v1.13.2:

 * Issue: HOP-5750 [TR181 Ethernet] Load default bridge MAC addresses correctly [fix]
 * Issue: HOP-5015 Dynamically add bridges based on networklayout.json [new]
 * Issue: HOP-5535 Add ability to manually configure MTU [new]
 * Issue: HOP-5340 Get description field from networklayout.json [new]
 * Issue: HOP-5694 Build issue, undeclared identifier [fix]
 * Issue: HOP-5340 Add a Description field to allow extra information [new]
 * Issue: HOP-5512 Add the support of specific vendor module [new]
 * Issue: HOP-5521 Wrong mac defaults for ap config [fix]
 * Issue: HOP-5452 MaxBitrate and DuplexMode not upgrade persistent [fix]
 * Issue: HOP-4341 If the MAC address changes, DHCPv6 client must be retriggered [new]
 * Issue: HOP-5272 Make Ethernet interfaces persistent [new]
 * Issue: HOP-5014 create new entry if moca  is upstream/wan interface
 * Issue: HOP-5118 Parameters for Ethernet Ports not setting (WAN) [fix]

References: PCF-1124
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:36:03 +00:00
Petr Štetiar
3646c51f2b
profiles: prpl: prplmesh: bump to latest release 4.2.3
This release delivers fix for memory Leaks in "beerocks_controller"
process (PPM-2723).

Signed-off-by: Frederik Van Bogaert <frederik.vanbogaert@mind.be>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:36:02 +00:00
Petr Štetiar
d31e6de673
ci: build: enable exception tracing on arm64 targets
For some unknown reason upstream Linux kernel in version 4.16 via commit
5ee39a71fd89 ("arm64: Disable unhandled signal log messages by default")
silenced the reporting of traces for user space exceptions and thus
making arm64 the only architecture having this disabled by default:

 arch/arm64/kernel/traps.c:int show_unhandled_signals = 0;
 arch/csky/kernel/traps.c:int show_unhandled_signals = 1;
 arch/loongarch/mm/fault.c:int show_unhandled_signals = 1;
 arch/mips/mm/fault.c:int show_unhandled_signals = 1;
 arch/parisc/mm/fault.c:int show_unhandled_signals = 1;
 arch/powerpc/kernel/signal.c:int show_unhandled_signals = 1;
 arch/riscv/kernel/traps.c:int show_unhandled_signals = 1;
 arch/s390/mm/fault.c:int show_unhandled_signals = 1;
 arch/sparc/mm/fault_32.c:int show_unhandled_signals = 1;
 arch/sparc/mm/fault_64.c:int show_unhandled_signals = 1;
 arch/x86/mm/fault.c:int show_unhandled_signals = 1;

We would like to be aware about such exceptions at least during
development, so lets enable it in development builds in the same spirit
as we did for coredumps in commit 6cf5635bf50e ("ci: generate coredumps
during development").

References: PCF-1107, PCF-1108
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:36:01 +00:00
Petr Štetiar
cd15811ae7
ci: tests: cram: generic: add check for crashes
Make it easier to spot sign of crashes directly in the runtime testing
CI job output:

  --- .gitlab/tests/cram/generic/check-for-crashes.t
  +++ .gitlab/tests/cram/generic/check-for-crashes.t.err
  @@ -13,4 +13,24 @@
     >      -e 'epc\s+:\s+\S+\s+([^+ ]+).*' \
     >      -e 'EIP: \[<.*>\] ([^+ ]+).*' \
     >      -e 'RIP: [[:xdigit:]]{4}:(\[<[[:xdigit:]]+>\] \[<[[:xdigit:]]+>\] )?([^+ ]+)\+0x.*'
  -  [1]
  +  Feb 27 17:48:25 prplOS tr181-dhcpv4client: mod-dhc - [!][wan] Ack received - (dhcp_state_on_ack@dhcp_state.c:797)
  +  Feb 27 17:48:29 prplOS netmodel-clients: netdev_ - [x]Instance NetDev.Link.[Name == 'dslite0']. not found - (find_instance_of_netdev@mib_netdev.c:213)
  +  Feb 27 17:48:29 prplOS netmodel-clients: mib     - [!]Mib[netdev_mib] NetModel.Intf.43. Sync object A not found, waiting... - (start_sync@mib.c:620)
  +  Feb 27 17:48:34 prplOS kernel: [  106.274333] ld-musl-aarch64[2519]: unhandled exception: DABT (lower EL), ESR 0x92000046, level 2 translation fault in aarch64-musl-sigsegv[400000+10000]
  +  Feb 27 17:48:34 prplOS kernel: [  106.274347] CPU: 2 PID: 2519 Comm: ld-musl-aarch64 Not tainted 5.4.213 #0
  +  Feb 27 17:48:34 prplOS kernel: [  106.274348] Hardware name: prpl Foundation Freedom (DT)
  +  Feb 27 17:48:34 prplOS kernel: [  106.274351] pstate: 60000000 (nZCv daif -PAN -UAO)
  +  Feb 27 17:48:34 prplOS kernel: [  106.274352] pc : 0000000000400544
  <snip>

References: PCF-1107, PCF-1108
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:36:00 +00:00
smahale
6e3bc0051e
profiles: prpl: feed-prpl update to fetch latest revision of OB-USP-A
Updated prpl profile to point to the feed-prpl branch created for updating OB-USP-A version.
OB-USP-A package updated to fetch the latest version of OB-USP-A from BBF v8.0.0-pre_release branch.
Prominent updates in latest version are listed below:
GetInstances in register sequence should only get instances of multi-instance objects (PCF-1078).
Unable to add subscription for a data model element if a USP Service has not registered it yet (PCF-1082).
Subscriptions must support Device. for event and OperationComplete (PCF-1085).
Fixes for crash seen when using -t option. Bug was introduced by dynamic roles and permissions feature.
USP Service build should not be dependant on OpenSSL.

Also in initscript, set trust store path to a trust store certficate already present in the device.

https://prplfoundationcloud.atlassian.net/browse/PCF-1078
https://prplfoundationcloud.atlassian.net/browse/PCF-1082
https://prplfoundationcloud.atlassian.net/browse/PCF-1085

Signed-off-by: Sandesh Mahale <sandesh.mahale@vantiva.com>
2025-07-31 10:35:59 +00:00
Petr Štetiar
676a9b805f
profiles: prpl: bump prplmesh to latest release 4.2.2
prplMesh version 4.2.0 brought:

 * Improved support of the OSP and Haze reference platforms
 * BSS Coloring (a.k.a Spatial Reuse) support
 * QoS support according to Easymesh R3 (OSP only, this uses ebtables and so is driver-dependent)
 * An Agent Northbound API, allowing for a deprecation of the usual method of grepping logs to determine prplMesh status
 * Improved support for the data model on rdb-b (using amxb-rbus)
 ... and many, many bugfixes! see full notes https://gitlab.com/prpl-foundation/prplmesh/prplMesh/-/releases/4.2.0

prplMesh version 4.2.1 additionally fixed:

 * Support prplMesh build with enabled LTO
 * Check message length to prevent UB that can do VLA-array oversize
 * bwl: dwpald: Add support to configure QOS_MAP_SET in hostapd
 * BPL: Service Prioritization: To add service prioritization support in CGR
 * ap_manager: Fix segfault when ap_manager stops

prplMesh version 4.2.2 fixed:

 * Replace file utility with grep
   (thus 0002-prplmesh_utils.sh-replace-file-utility-with-grep.patch backport
    could be removed)

While at it fix prplmesh version reporting as well.

Additionally fix potentially misaligned double word access on 32-bit targets (PPM-2747, PCF-1109).

Fixes: PPM-2747, PCF-1109
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:58 +00:00
Cedric DOURLENT
4c07a76772
build: add support for checksec.sh based mitigation reports
Checksec is a bash script to check the properties of executables (like
PIE, RELRO, Canaries, ASLR, Fortify Source).

Add an optional build feature, which when enabled is going to create a
JSON report about the state of mitigations in the produced binaries.

Upstream-Status: Submitted [https://github.com/openwrt/openwrt/pull/14569]
Signed-off-by: Cedric DOURLENT <cedric.dourlent@softathome.com>
2025-07-31 10:35:57 +00:00
Sandesh Mahale
de9a66deed
profiles: prpl: OBUSPA initscript and obuspa_param_reset file updates in feed-prpl
Updated prpl profile to point to the feed-prpl branch created for PCF-1076 and PCF-1077.
OBUSPA package updated for OBUSPA initscript and obuspa_param_reset file changes detailed below:
Enhanced OBUSPA initscript with implementation to query and update Serial Number & Manufacturer OUI.
TR181-device has dependency on the UnixDomainSockets created by OBUSPA, hence OBUSPA will now start at 25
so that unix domain sockets are created before TR181-device start.
Setting of unix domain socket broker_agent_path has been added to obuspa_param_reset.txt.
In obuspa_param_reset.txt redundant setting of Device.LocalAgent.Controller.2 has been removed.

https://prplfoundationcloud.atlassian.net/browse/PCF-1076
https://prplfoundationcloud.atlassian.net/browse/PCF-1077

Signed-off-by: Sandesh Mahale <sandesh.mahale@vantiva.com>
2025-07-31 10:35:56 +00:00
Mouna ALOUI
0a099b9c40
profiles: prpl: update tr069-manager and libtr69-engine to fix PCF-1090
* tr069-manager: bump to version v1.31.3

  * Issue: HOP-5745 Firmware upgrade not working with HTTPS
  * Issue: HOP-5407 the hgw sends "7 TRANSFER COMPLETE" before reboot
  * Issue: HOP-5492 ACS Session lasts 30s more than expected
  * Issue: HOP-3322 Annex F add repeater mode [new]
  * Issue: HOP-5464 ManagementServer.State.LastSession is not updated correctly after upgrade
  * Issue : HOP-5294 Performance issue on getParameterValues [fix]
  * Issue: HOP-5328 ACS session timeout with Nokia certification platform
  * Issue: HOP-5174 Fw rule for conn_req recreated multiple times on wan reset [fix]
  * Issue: HOP-3764 [TR-69] cwmpd add client cert and private key
  * Issue: HOP-3764 [TR-69] cwmpd add client cert and private key
  * Issue: HOP-5257 [TR-069] Connection Request Failed
  * Issue: HOP-5206 The DUT no longer listens to connection requests on the port after updating the ACS URL
  * Issue: HGWPR-25798 Admin user can update cwmp configuration [sec]

* libtr69-engine: bump to version v0.8.5

  * Issue: HOP-5663 LastSession not getting updated properly
  * Issue: HOP-2700 GPValues on empty Device.NAT.PortMapping. fails [fix]
  * Issue: HOP-5492 ACS Session lasts 30s more than expected
  * Issue: HGWPR-25924 inform sent every 12 sec [fix]
  * Issue: HOP-5464 ManagementServer.State.LastSession is not updated correctly after upgrade

Fixes: PCF-1090
Signed off by: Mouna ALOUI <mouna.aloui_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:55 +00:00
Petr Štetiar
01484375ea
ci: cram: urx851-b0-dk-pon: update and sync test cases
Currently the tests for MxL LGP reference device with PON WAN uplink are
a bit outdated, so lets fix that by using symlinks to urx851-b0-dk
tests as they're common and can be shared.

So this results in the new 011-tls.t test and update for 020-ubus.t,
030-wifi.t and 100-prplmesh.t tests.

While at it, fix the expected command outputs for 040-xpon.t test which
have changed in some previous ambiorix updates.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:54 +00:00
Bhavesh Bharadiya
0d8df3ec88
profiles: update mxl_x86 to UPDK 9.1.50
Update mxl_wlan_hostap_ng profile for below changes:
* bump to version WLAN6.2.2.65

Update mxl_x86 profiles for below changes:
* bump to version updk_9.1.50
* Enabled Maxlinear Multicast modules
* Enabled MaxLinear kernel speedtest module
* TC based QoS-SP, WRR, Q Shaping, DT, WRED
* Emmc flash partition layout now supports manufacturing data, LCM partition and separate rootfs data partition.
  * prpl Standard Flash layout v1.0 compliance is work in progress, tracked in PCF-1101
* LCM partition is added to Emmc flash
* LED nodes for MxL OSP platform are enabled
* An additional 4 GB DDR U-Boot configuration is added

Signed-off-by: Bhavesh Bharadiya <bnbharadiya@maxlinear.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [testbeds, test fixes]
2025-07-31 10:35:53 +00:00
Petr Štetiar
9ec389462f
ci: urx851-b0-dk: fix properly flapping 010-network.t test
We’re using eth0_1 free interface (there is nothing attached to that
port) for QA of tr181-bridging in the CI in the 020-bridging-guest.t
test. In the test we remove the eth0_1 interface from br-lan bridge, add
it to the br-guest bridge and then attach it into the br-lan bridge back
again. We confirm the validity of changes using bridge link system
command. This test works fine and always passes.

The problem is happening later in the CI job test pipeline, in the
010-network.t test, where we check expected network interface status
using ip link command, there we can spot the regression, where eth0_1
interface is not member of the br-lan bridge anymore.

This happens randomly and for some quite time already, but we should be
only testing for expected test result, not as currently in this case for
the failing test case, so lets fix it by testing against expected test
result and avoid any confusion, so the test fails again only in case of
regression.

References: PCF-1088
Fixes: 76e0393c21ed ("profiles: prpl: include latest fixes from M2.1/2023 delivery")
Suggested-by: Vincent Harle <vincent.harle@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:52 +00:00
smahale
d0a484a38b
profiles: prpl: feed-prpl update to fetch latest revision of OB-USP-A
Updated prpl profile to point to the feed-prpl branch created for updating OB-USP-A version.
OB-USP-A package updated to fetch the latest version of OB-USP-A from BBF v8.0.0-pre_release branch.
Prominent updates in latest version are listed below:
Added APIs to enable a USP Service to act as a USP Controller (PCF-1073).
Updated INTERNAL_SERVICES_GUIDE.md with example code for a USP Service acting as a Controller.

https://prplfoundationcloud.atlassian.net/browse/PCF-1073

Signed-off-by: Sandesh Mahale <sandesh.mahale@vantiva.com>
2025-07-31 10:35:51 +00:00
Petr Štetiar
1fb1036736
ci: ssh-server: fix test for pubkey auth and session features
We've currently random issue on Freedom board, where the `ubus call
SSH.Server.3.Session _get` doesn't return any data. It seems, that there
is some race condition between configuration setting of the `ci-testing` server
instance and enabling it, which results into following error:

 14:22:47 ubus-cli: > SSH.Server.+{Alias=ci-testing,Enable=1,Port=1922,AllowPasswordLogin=False,AllowRootLogin=False,AllowRootPasswordLogin=False}
 14:22:47 ssh_server: sshserv - [x]try to enable ssh instance ci-testing with empty interface - (ssh_server_initialize@dm_ssh_server_event.c:642)
 ...
 14:22:47 ubus-cli: > SSH.Server.ci-testing.Interface=Device.IP.Interface.3.

where its visible, that the instance is enabled before the `Interface`
is assigned. So lets fix it by moving the `Enable=1` setting into the
later stage.

References: https://gitlab.com/prpl-foundation/prplos/prplos/-/jobs/6028038301#L105
Fixes: e1d5159bd53f ("ci: ssh-server: add tests for pubkey auth and session features")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:50 +00:00
Marouan MCHARFI
b627c60c8e
PROVISORY: ci: tests: cram: relax hostapd check after disable wireless
After disabling the VAPs, we still have one hostapd process that is
still running, so until we get this fixed in PPM-2722, we've decided to
relax the test a bit, making one hostapd process instance acceptable,
but still make it possible to catch other possible regressions.

References: PPM-2722
Signed-off-by: Marouan MCHARFI <marouan.mcharfi_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [facelift, provisory]
2025-07-31 10:35:49 +00:00
Marouan MCHARFI
af8a1677a3
PROVISORY: ci: tests: prplmesh: fix VAP activation / deactivation test
* We extend the delay between each vaps activation, to ensure that
on boarding process is done and it's correctly activated.

* Since PPM-2721 we deactivate vap in inverted order, to avoid
this reconfiguration to happen

References: PPM-2721
Signed-off-by: Marouan MCHARFI <marouan.mcharfi_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [provisory]
2025-07-31 10:35:48 +00:00
Marouan MCHARFI
57644f8291
ci: tests: cram: urx851: disable autochannel selection
When this is enable radio are configured to do foreground cac op
to perform wifi dfs. Therefore the radio is not ready to beacon
resulting in a random delay in the activation of VAPs.
Disabling this feature will streamline the VAP activation process.

Signed-off-by: Marouan MCHARFI <marouan.mcharfi_ext@softathome.com>
2025-07-31 10:35:47 +00:00
Petr Štetiar
a9055880c1
ci: tests: cram: robustify 020-bridging-guest test
We've currently randomly flapping test, likely caused by some race
conditions:

 tr181-bridging: mod-bri - [x]port not added/removed, no bridge name given - (port_ioctl@bridging_ioctl.c:91)
 tr181-bridging: soc_uti - [x]function remove-port failed - (mod_bridging_execute_port_function@bridging_soc_utils.c:257)

so lets fix/workaround it by adding a small sleep between addition
of the new bridge port and enabling of the port.

While at it make the test idempotent, so it can be run in the loop if needed.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:46 +00:00
Marouan MCHARFI
c40f52a29f
ci: tests: urx851-b0-dk: 100-prplmesh.t fix missing guest
fix iw dev output with adding the missing guest interface

Signed-off-by: Marouan MCHARFI <marouan.mcharfi_ext@softathome.com>
2025-07-31 10:35:45 +00:00
Matthias FRANCK
65e11b2ff9
ci: tests: packet-interception: feature should be disabled by default
In previous merge request package-interception service was enabled by
default and tests were updated accordingly in commit 4ed8598cf0b8
(".gitlab: tests: cram: Update tests for M1 delivery"). This change has
unfortunately introduced regressions, so this commit reverts that change
and makes package-interception service disabled by default again.

Fixes: PCF-1009
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [facelift]
2025-07-31 10:35:44 +00:00
Marouan MCHARFI
85211c0d22
Revert "PROVISORY: ci: tests: urx851: 100-prplmesh.t: disable prplmesh test"
PPM-2674 seems to be fixed with M2.1 component version.
This reverts commit b5e2208789eed48c33cf7de83c32fbf2374e4565.
2025-07-31 10:35:43 +00:00
Marouan MCHARFI
0706eba3c6
Revert "PROVISORY: ci: tests: haze,turris: 100-prplmesh.t: disabling prplmesh test"
PPM-2673 seems to be fixed with M2.1 component version.
This reverts commit 719075e23f6069046e56fd99247473b04fcdc302.
2025-07-31 10:35:42 +00:00
Marouan MCHARFI
3bd80484f3
Revert "PROVISORY: ci: tests: treewide: 100-prplmesh.t: disable wireless test"
PPM-2672 seems to be fixed with M2.1 component version.
This reverts commit 844af5835e46e0206ce17e99daa8a9c649ec86de.
2025-07-31 10:35:41 +00:00
Marouan MCHARFI
552d84845c
profiles: mxl_wlan_hostap_ng: bump feed_wlan to get pwhm 5.x fixes
Bump feed_wlan to get fixes which are needed for changes introduced in
pwhm version 5.x.

Signed-off-by: Marouan MCHARFI <marouan.mcharfi_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [facelift]
2025-07-31 10:35:40 +00:00
Marouan MCHARFI
40cb6859c7
profiles: prpl: include latest fixes from M2.1/2023 delivery
* tr181-httpaccess: fix randomly unavailable REST API interface

  tr181-httpacess is accessing the datamodel throught the Device. proxy,
  however there is only a runtime dependency specified on the direct
  objects.  Adding the "Service." to Device.Firewall. object will make
  sure that Firewall is indeed started and not just the mapping is
  created. 

  Fixes: PCF-974

* prplmesh: fix wrong DataElements object exposure in agent mode

  During CI testing of prplOS using CDRouter TR-069 test cases we've found
  out, that prplMesh configured in the agent mode (default) is wrongly
  exposing Device.WiFi.DataElements object via ProxyManager. This results
  in 9005 error code failures when ManagementServer tries to access this
  unhandled datamodel object, making several CDRouter tests fail.

  So lets fix it by registering the proxy bindings only when prplMesh is
  configured in gateway/controller mode.

* prplmesh: fix config.in to fit service pwhm naming

  To make the naming consistent.

* prplmesh: bump pwhm, libswla, libswlc

  * bump pwhm to v5.16.4
  * bump libswla to v3.10.0
  * bump libswlc to v5.16.1

  removing 0002-PPM-2660-Call-vendor-radio-update-config-map-also-wh.patch,
  since this fixes has been introduce in pwhm v5.8.0

* lcm: bump packages to v3.0.1

  * cthulhu: bump to v3.5.1
  * rlyeh: bump to v2.3.2
  * libocispec: bump to dev_fix_autotools
  * cthulhu-lxc: bump to v0.9.3
  * cthulhu-dhcpc: bump to v1.2.3
  * cthulhu-networking: bump to v0.1.5
  * timingila-rlyeh: bump to v1.0.5
  * timingila-cthulhu: bump to v2.0.3

* tr069-manager: bump to v1.29.4

  * Issue: random cwmp_plugin crash
  * Issue: HOP-896 - Definition of Upgrade Persistent CWMPD Configuration
  * Issue: HOP-5097 ACS Session not created when ManagementServer.URL parameter is updated
  * Issue: HOP-4826 [prplos][Mxl-osp][tr69-manager] All tr69 cdrouter tests are failing
  * Issue: HOP-4560 All applications using sahtrace logs should use default log levels
  * Issue: HOP-3453 [Coverage] Remove SAHTRACE defines in order to increase branching coverage
  * Issue: VZ-442 [VZ] TR-069 failed to retrieve parametershttps

* network: bump packages

  * deviceinfo-manager: bump to v2.20.10
  * time-manager: bump to v2.4.3
  * mod-dhcpv4c: bump to v0.13.5
  * mod-dns-unbound: bump to v1.6.1
  * mod-logical-api: bump to v0.6.4
  * mod-vlan-ioctl: bump to v0.1.7
  * dhcpv4-manager: bump to v2.7.0
  * dhcpv6s-manager: bump to v0.16.1
  * ethernet-manager: bump to v1.13.2
  * ip-manager: bump to v1.41.5
  * moca-manager: bump to v0.3.4
  * netdev-plugin: bump to v1.11.2
  * routing-manager: bump to v1.16.2
  * tr181-bridging: bump to v2.3.4
  * tr181-dhcpv4client: bump to v1.24.3
  * tr181-dhcpv6client: bump to v1.2.1
  * tr181-dns: bump to v2.7.1
  * tr181-neighbordiscovery: bump to v0.8.2
  * tr181-ppp: bump to v0.13.4
  * tr181-routeradvertisement: bump to v0.14.6
  * tr181-xpon: bump to v1.4.0
  * wan-manager: bump to v1.1.0
  * libfwinterface: bump to v1.5.0
  * libfwrules: bump to v2.1.0
  * libqoscommon: bump to v0.2.1
  * mod-fw-amx: bump to v0.3.3
  * packet-interception: bump to v0.0.14
  * tr181-firewall: bump to v6.13.5
  * tr181-pcp: bump to v0.7.2
  * tr181-qos: bump to v3.3.12
  * mod-dmproxy: bump to v1.3.7
  * mod-httpaccess-lighttpd: bump to v0.1.8
  * multisettings: bump to v0.9.1
  * pcm-manager: bump to v0.16.1
  * ssh-server: bump to v0.5.4
  * tr181-device: bump to v0.17.4
  * tr181-httpaccess: bump to v0.10.3
  * tr181-upnp: bump to v0.6.4
  * tr181-usermanagement: bump to v0.14.1
  * hosts-manager: bump to v0.3.3
  * mod-pcm-svc: bump to v0.9.0
  * tr181-led: bump to v0.4.7
  * odl-generator: bump to v1.6.3

* netmodel: bump packages

  * libnetmodel: bump to v1.5.15
  * mod-netmodel: bump to v0.5.2

* gmap: bump packages

  * gmap-client: bump to v1.2.1
  * gmap-mod-ethernet-dev: bump to v1.16.1
  * gmap-mod-self: bump to v1.4.4
  * gmap-mibs-common: bump to v0.14.0
  * libgmap-client: bump to v1.6.1
  * libgmap-ext: bump to v1.0.0

* ambiorix: bump packages to v10.5.0

  * amx-cli: bump to v0.4.2
  * amx-fcgi: bump to v1.3.7
  * amxrt: bump to v2.1.2
  * libamxa: bump to v0.10.29
  * libamxb: bump to v4.7.21
  * libamxc: bump to v1.10.0
  * libamxd: bump to v6.1.0
  * libamxj: bump to v0.3.63
  * libamxm: bump to v0.0.62
  * libamxo: bump to v4.2.6
  * libamxp: bump to v1.3.1
  * libamxrt: bump to v0.3.4
  * libamxs: bump to v0.4.8
  * libamxt: bump to v0.2.25
  * libsahtrace: bump to v1.14.0
  * mod-amxb-ubus: bump to v3.1.28
  * mod-ba-cli: bump to v0.9.0
  * mod-dm-cli: bump to v0.2.6

* backports/packages_22.03: bump unbound-prpl to v0.4.0

  * Issue: HOP-4119 generic DNS failover mechanism [new]
  * Issue: HOP-2890 prplOS DNS rebinding [new]
  * Issue: HOP-4873 Refactor libamxo - libamxp: move fd and connection management out of libamxo [fix]
  * Issue: HOP-4308 DNS queries are forwarded using the UDP protocol when TCP queries are explicitly requested [fix]

* tr181-device: Add custom mapping file

  The tr181-device plugin is responsible for the Device. mapping in the
  datamodel. The file used in this plugin is static and the list contains
  more than actually available in prplOS. This commit overrides that
  static odl file and sets a file that is in line with what is availble in
  prplOS.

* PROVISORY: ssh-server: enforce IPv4 as default config bug workaround

  The default IPVersion has changed to 0 (= 4 and 6). Due to a bug in
  ssh-server IPv4 is not working if not all parameters are set for IPv6 as
  well when creating a new SSH server instance. This commits keeps te
  previous setting and sets the IP version back to v4.  This commit can be
  reverted as soon as this bug is solved.

  References: PCF-1086

* ssh-server: fix "extra_command: not found" error in log output

  Currently following error is visible at boot:

    procd: /etc/rc.d/S25ssh-server: /etc/rc.d/S25ssh-server: /etc/init.d/dropbear: line 13: extra_command: not found

  This is caused by the fact, that ssh-server's init script currently
  re-uses host key generation function `hk_generate_as_needed` from
  dropbear's init script, thus its including the /etc/init.d/dropbear init
  script and this causes harmless, but still unwanted log output, so lets
  fix it by silencing the output of the script during sourcing.

Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com> [test adaptation]
Signed-off-by: Marouan MCHARFI <marouan.mcharfi_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [rebase,fixes]
2025-07-31 10:35:39 +00:00
Matthias FRANCK
1faa16f07e
profiles: prpl: Remove deprecated config options
These options are not defined anymore in any component.

Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
2025-07-31 10:35:38 +00:00
Bhavesh Bharadiya
e1989c8f3c
profiles: prpl: update feed-prpl to pull fix for PCF-1083 issue
On MxL boards br-lan is assigned different MAC during bootup 1) by set_iface_mac
and 2) by ethernet-manager. Remove setting br-lan MAC address in
set_iface_mac script since ethernet-manager is assigning MAC address.

https://prplfoundationcloud.atlassian.net/browse/PCF-1083

Signed-off-by: Bhavesh Bharadiya <bnbharadiya@maxlinear.com>
2025-07-31 10:35:37 +00:00
smahale
4ff5b33de3
profiles: prpl: feed-prpl update to fetch latest revision of OB-USP-A
Updated prpl profile to point to the feed-prpl branch created for updating OB-USP-A version.
OB-USP-A package updated to fetch the latest version of OB-USP-A from BBF v8.0.0-pre_release branch.
Prominent updates in latest version are listed below:
Added support for calling register multiple times (PCF-1074).
Added dynamic roles and permissions support.

https://prplfoundationcloud.atlassian.net/browse/PCF-1074

Signed-off-by: Sandesh Mahale <sandesh.mahale@vantiva.com>
2025-07-31 10:35:36 +00:00
Petr Štetiar
98e39d632e
ci: fix missing Coverity scan job
I've just noticed, that Coverity scan build job got removed as we've
deprecated glinet-b1300 reference device, so lets fix it by adding the
job back with builds for ipq807x target.

Fixes: 9c054f15f350 ("ci: sync with current prplos branch state")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:35 +00:00
Petr Štetiar
c4da8dacbf
ci: release: include artifacts for WNC Freedom board
So the next prplOS release contains firmware images for the new WNC
Freedom board.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:34 +00:00
Petr Štetiar
3d0d0ec05b
profiles: mxl: remove KERNEL_GIT_DEPTH config defaults
It seems, that MxL has internally similar KERNEL_GIT_DEPTH config
option, but implemented as a string type, but prplOS has it implemented
as integer with valid range validation with default value of 0, which
results into following kconfig's complaints:

 .config:393:warning: symbol value '""' invalid for KERNEL_GIT_DEPTH

So lets fix it by removing the bogus default config options from the
profiles and stick to the config defaults.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:33 +00:00
Petr Štetiar
78b30ec094
ci: wnc-freedom: fix testcases with wireless interfaces
Simply forget to commit the updates in commit 6d69f685cb58 ("ci: add
runtime testing support for WNC Freedom board").

Fixes: 6d69f685cb58 ("ci: add runtime testing support for WNC Freedom board")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:32 +00:00
Petr Štetiar
b83d51d423
ci: add runtime testing support for WNC Freedom board
Add CI runtime testing bits to QA using new reference target WNC Freedom
board.

References: PCF-1047
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:31 +00:00
Petr Štetiar
4ee26f3db3
ci: qca_ipq95xx: add build support for WNC Freedom board
Add CI build bits for the new qca_ipq95xx reference profile which
supports WNC Freedom board.

References: PCF-1047
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2025-07-31 10:35:30 +00:00