Enable CONFIG_SYSREGISTER_RESET_BOOTCOUNT to reset the bootcount at the
end of the init phase of the boot sequence.
Implements: PCF-2088
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Enable CONFIG_SYSREGISTER_RESET_BOOTCOUNT to reset the bootcount at the
end of the init phase of the boot sequence.
Implements: PCF-2088
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Update the board name after the change in imagegenerator.
Implements: PCF-2354
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
3 define instructions are created to prepare imagegenerator build
directory, to run binman and run swugenerator.
Those defines can be used with artifacts related variables to build
images with those tools.
A device could typically build images with those tools as such:
define Device/mydevice
...
IMG_GEN_DIR := $$(wildcard $$(BUILD_DIR_BASE)/hostpkg/imagegenerator-*)
BINMAN_INPUT_tb341 := $$(IMG_GEN_DIR)/configs/binman/binman_mydevice.dts \
$$(KDIR)/u-boot-*/u-boot-nodtb.bin \
$$(KDIR)/u-boot-*/u-boot.dtb \
$$(KDIR)/vmlinux.gz \
$$(KDIR)/tmp/$$(DEVICE_IMG_PREFIX).dtb \
$$(BIN_DIR)/$(IMG_PREFIX)-secure-initramfs.cpio.gz \
$$(KDIR)/tmp/$$(DEVICE_IMG_PREFIX)-squashfs-fs.rootfs
SWU_INPUT_tb341 := $$(IMG_GEN_DIR)/configs/swugenerator/sw-description_mydevice
ARTIFACT/wgrtd159be_b_wav700-image.swu := imagegenerator-init $$(BINMAN_INPUT_mydevice) $$(SWU_INPUT_mydevice) | \
binman binman_mydevice.dts | \
swugenerator sw-description_mydevice
ARTIFACTS := mydevice-image.swu
...
endef
Implements: PCF-2354
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Enable options to support encrypted and globally signed SMD.
Implements: PCF-2141
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Enable options to support encrypted and globally signed SMD.
Implements: PCF-2141
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
imagegenerator is both a target and host package. Enable the target
package that installs public keys in the rootfs of the targets.
Implements: PCF-1874, PCF-1885, PCF-2141
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
imagegenerator is both a target and host package. Enable the target
package that installs public keys in the rootfs of the targets.
Implements: PCF-1874, PCF-1885, PCF-2141
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
prpl CI enables CONFIG_IB which runs imagebuilder. Imagebuilder was
failing when trying to copy targets from symlink whose path was
absolute. The solution is to convert absolute symlinks into relative
ones when creating the secure initramfs.
Fixes: PCF-1893
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
OpenWrt does not provide an host package for OpenSSL but OpenSSL headers
files are required to build U-Boot hosttools. libssl-dev is therefore
installed in the Docker prior to launching the build.
Implements: PCF-1874
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Set the lib_mfg config option where the SMD are stored.
Implements: PCF-2103
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Set the lib_mfg config option where the SMD are stored.
Implements: PCF-2103
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
partname_volume_init() calls block_volume_format() passing the device
path.
Previously the parent path was passed typically leading to retrieve the
size of the parent device and not the device to be formatted.
Eventually, formatting the block device with mkfs.f2fs failed silently
when the block device is too small and created a ram overlayfs instead
of trying to format with ext4.
Patch was sent upstream for review in
https://patchwork.ozlabs.org/project/openwrt/patch/tencent_1BDE4F7AE014AD4D4FA835C5DFEAB35AFB06@qq.com/
Fixes: PCF-1893
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Add lvm2 to manage logical volumes in the initramfs.
Implements: PCF-1893
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
This change wires the secure initramfs generator into the image
pipeline. It also introduces a load address for the initrd in FITs and
aligns kernel config handling for initramfs compression.
- include/image.mk:
* Rewrite Image/SecureInitramfs as a traced shell block with clearer
variables and debug output.
* Add explicit `secure-initramfs` phony target and run it before
`kernel_prepare`.
* Keep existing initramfs kernel/ramdisk artifacts flow intact.
Closes: PCF-1893
Tracked-by: FEAT-29
Signed-off-by: Mohamed-nour Toumi <mohamed.toumi_ext@softathome.com>
The secure initramfs is used to load the rootfs based on information
from the kernel command line, parse the FIT image encapsulating the
rootfs and perform other operations such as authenticating the rootfs.
Tracked-by: FEAT-29
Closes: PCF-1893
Signed-off-by: Mohamed-nour Toumi <mohamed.toumi_ext@softathome.com>
Set CONFIG_SAH_LIB_MFG_RO_PART_FILE to point at the right eMMC
partition where the SMD are stored, i.e. /dev/mmc0p13.
Implements: PCF-2141
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Add the necessary userspace app, libraries and kernel modules to support
reading SMD that are globally signed and also contain encrypted fields.
Implements: PCF-2141
Closes: PCF-2144
Tracked-by: FEAT-29
Signed-off-by: Paul HENRYS <paul.henrys_ext@softathome.com>
Generate FIT images and SWUpdate image using binman and SWUGenerator
from imagegenerator.
Implements: PCF-1878
Tracked-by: FEAT-29
Signed-off-by: yan wang <yan.wang@softathome.com>
Generate FIT images and SWUpdate image using binman and SWUGenerator
from imagegenerator.
Implements: PCF-1875, PCF-1876
Tracked-by: FEAT-29
Signed-off-by: yan wang <yan.wang@softathome.com>
sysregister driver is added to the default prpl core config to be able
to access registers provided in boards' device trees.
The typical use of this driver is to access in userspace the bootcount
and force-inactive registers used by prpl's boot logic.
Implements: PCF-2098
Tracked-by: FEAT-29
Signed-off-by: yan wang <yan.wang@softathome.com>
Add swupdate package to get SWUpdate to flash .swu images. libubootenv
package is also added to read/write U-Boot environment from Linux.
Implements: PCF-1888
Tracked-by: FEAT-29
Signed-off-by: Mohamed-nour Toumi <mohamed.toumi_ext@softathome.com>
Add swupdate package to get SWUpdate to flash .swu images. libubootenv
package is also added to read/write U-Boot environment from Linux.
Implements: PCF-1888
Tracked-by: FEAT-29
Signed-off-by: Mohamed-nour Toumi <mohamed.toumi_ext@softathome.com>
The current profile qca_95xx for Freedom board does not build U-boot.
Add a new package u-boot-freedom. The scope is only for Freedom board.
Implements: PCF-1869
Tracked-by: FEAT-29
Signed-off-by: yan wang <yan.wang@softathome.com>
Signed-off-by: FAOUZI YAHYA <faouzi.yahya_ext@softathome.com>
Allow to specify a branch without a commit ID to always use the branch
head which is handy for development purpose.
Implements: PCF-1869
Tracked-by: FEAT-29
Signed-off-by: Mohamed-nour Toumi <mohamed.toumi_ext@softathome.com>
Integrates following changes:
service: prplmesh: use exit instead of return in init script (1f6f373a)
Closes: PPM-4095
Signed-off-by: Igor Plesser <i.plesser@inango-systems.com>
signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
When MBSSID is enabled in EMA mode and link removal is triggered
from the Tx BSS with ttlm_enable set,
hostapd_validate_link_removal_ttlm() attempts to iterate over
non-Tx BSS entries.
The termination condition for this iteration is incorrect, causing
the traversal to continue beyond the valid BSS array bounds once all
entries are processed. This results in out-of-bounds access to
hapd->iface->bss[] and may lead to memory corruption.
Fix the termination condition to ensure proper bounds checking.
Fixes: https://prplfoundationcloud.atlassian.net/browse/PCF-2608
Signed-off-by: Marvin Lu <marvin.lu@wnc.com.tw>
Integrates following changes:
service: prplmesh: kill leftover processes on start to avoid stop/start race (a1444709)
Closes: PPM-4029
Signed-off-by: Igor Plesser <i.plesser@inango-systems.com>
signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
Change the way to check the prplMesh status from the `ps` command to the
check X_PRPLWARE-COM_ProcessManager.PrplMesh.Status.
Affected cram tests:
* arcadyan-mozart/110-prplmesh-dataelements.t
* prpl-haze/100-prplmesh.t
* turris-omnia/100-prplmesh.t
* wnc-freedom/102-pwhm-static-puncturing.t
Closes: PPM-4071
Signed-off-by: Igor Plesser <i.plesser@inango-systems.com>
Change the way to check the prplMesh status from the `ps` command to the
check X_PRPLWARE-COM_ProcessManager.PrplMesh.Status.
Affected cram tests (Freedom):
* 102-pwhm-static-puncturing.t;
* 126-wifi-radio-capability.t.
Closes: PPW-1862
Signed-off-by: Roman Shcherbakov <r.shcherbakov@inango-systems.com>
Integrates following changes:
- genFsm: Fix radio remains up after being disabled (478814e3)
References: PPW-2040
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- genRad: prevent toggling backhaul when adding new vap to fronthaul (51c60042)
- radFsm: fix AP/EP syncAllBits flag to only mark AP/EP actions (a9f7e6c2)
- genFsm: improve disabling vap when no hostapd global socket (96fb884d)
References: PPW-2025
Signed-off-by: prplbot <bot@prplfoundation.org>
Signed-off-by: Ahmed Amine HAOUES <ahmed-amine.haoues_ext@softathome.com>
Signed-off-by: Hela Saadani <hela.saadani_ext@softathome.com>
Integrates following changes:
- cwmp_plugin: use IPv6WaitTime datamodel name (c44b64bc)
- cwmp_plugin: get the PreferredIPVersion at start (64b20216)
References: PPW-1404
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- librlyeh: add support for https scheme (92153109)
- unit tests: add scheme validation tests and adapt to refactored parsing (d54571f6)
- docs: add doxygen comments to scheme validation API (7f0cc8c3)
References: PPW-1525
Signed-off-by: prplbot <bot@prplfoundation.org>
Integrates following changes:
- odl: increase maximum length to 256 for DeploymentUnit.Name (b068cb61)
References: TR-181, PPW-1672
Signed-off-by: prplbot <bot@prplfoundation.org>
Update the test script with the following test cases:
- Move all endpoints to a new MLDUnit
- Verify the data model after clearing MLDUnit
References: FEAT-488
Signed-off-by: Houssem Dafdouf <houssem.dafdouf_ext@softathome.com>
