On VirtualBox 5.2, vboxvideo crashes when the resolution changes
a few seconds after boot. It does not occur on VirtualBox 5.1.
This patch blacklists the vboxvideo module so it's not loaded
automatically, instead a systemd unit is requested by graphic.target.
This offers sufficient delay for vboxvideo to be loaded after
the resolution change, avoiding the crash.

Apertis: https://phabricator.apertis.org/T4485


Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.co.uk>

Differential Revision: https://phabricator.apertis.org/D7795

Andrew Lee (李健秋) authored 7 years ago and Andrej Shadura committed 7 years ago

As new version of mesa package that we updated in apertis that already
dropped libegl1-mesa-drivers transitional package.

So that we shouldn't keep install libegl1-mesa-drivers from our images.

This commit is to drop libegl1-mesa-drivers from ospack, uefi and sdk
images.

Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7779

As an Apertis developer doing a release, I want the web page on
images.apertis.org to be automatically updated from the updates done to
apertis-image-recipes.git.

The website is stored at images.apertis.org:/srv/images.apertis.org/www.
It used to be stored in the apertis-image-customization repo, but it has
been updated by hand directly on the server recently.

Here is a Jenkinsfile to depoly the website automaticlly.

Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7651

Denis Pynkin authored 7 years ago and Andrej Shadura committed 7 years ago

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Signed-off-by: Andrew Shadura <andrew.shadura@collabora.co.uk>

The image name to test must have "ostree" variant in the name.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7763

Use the unified name for LXC OStree tarballs:
 apertis_ostree_${release}-${type}-${architecture}-lxc_${PIPELINE_VERSION}

Changed path for publishing LXC tarballs, now they are uploaded in the
same manner as other Apertis images and ospacks:
 https://images.apertis.org/daily/{{release}}/{{date}}/{{arch}}/lxc



Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7764

Reworked test function to accept profile name to be used for test.
Assemble profile name and image name for test during outside of
testing function itself.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Frédéric Dalleau <frederic.dalleau@collabora.co.uk>
Reviewed-by: Luis Araujo <luis.araujo@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7747

This helps to use the image name for the different pipeline
phases.

This commit also includes the change to call the lava jobs
using the image name directly.

Signed-off-by: Luis Araujo <luis.araujo@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7749

The yaml file specifies an incorrect command line parameter for the
OSTree u-boot images.
The parameter is incorrect for Renesas R-car, and could be different
in any other u-boot board.
The serial port to use as console is defined in the dtb.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.co.uk>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7752

Forced recache is needed to use installed profile after the
system reboot.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Frédéric Dalleau <frederic.dalleau@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7741

Start of tests must be the last step in pipeline to avoid omissions
of images build caused by wrong tests description.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Luis Araujo <luis.araujo@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7735

Debos requires mountpoint options to be a list; they are ignored
silently if it isn't.

Apertis: https://phabricator.apertis.org/T4664



Signed-off-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7702

This name is the one used in the template/profiles.yaml file
for lqa to find all the template files.

Signed-off-by: Luis Araujo <luis.araujo@collabora.co.uk>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Reviewed-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7695

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

The switchroot script no longer works if the osname is changed.
Do it the same way than the C version.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7694

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

Building with a modified osname variable breaks the uefi setup.
Do not set a default value since the script is not intended to be
called without it.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Reviewed-by: Martyn Welch <martyn.welch@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7693

This commit should produce no semantic change, it is just a refactoring
to extract inline configuration values as variables and collect them at
the top of the file.

This should simplify the customization that downstream distributors have
to do and also makes backporting fixes to other branches easier in the
long term for Apertis itself.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Differential Revision: https://phabricator.apertis.org/D7564

The current path misses PIPELINE_VERSION, which causes upload
to fail.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7674

The ostree images were built after the ostree commit, which already
contained a `repo` folder created and uploaded to release server.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7667

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7657

This reverts commit 473e4ddd.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>

Signed-off-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7643

`debos` supports keyring-package in debootstrap action, but no
keyringpackage. This change syncs to proper field key.

Signed-off-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7642

Due to pam_cgfs utils are needed for unprivileged LXC containers
creation. We should should install libpam-cgfs package together with
LXC in Apertis images.

This is a fixup for previous commit which landed wrongly with
'git phab land'.

Apertis: https://phabricator.apertis.org/T4606


Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7629

Due to pam_cgfs utils are needed for unprivileged LXC containers
creation. We should should install lxcfs package together with LXC in
Apertis images.

Apertis: https://phabricator.apertis.org/T4606



Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7629

Due to newuidmap and newgidmap utils are needed for unprivileged
LXC containers creation. We should should install uidmap package
together with LXC in Apertis images.

Apertis: https://phabricator.apertis.org/T4599



Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7621

As an Apertis developer doing a release, we want the web page on
images.apertis.org to be automatically updated from the updates done to
apertis-image-recipes.git.

This is current files that copied from
    images.apertis.org:/srv/images.apertis.org/www.

Apertis: https://phabricator.apertis.org/T3095



Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7578

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

This reverts commit 79e6240b1fdf143b13bb9763d06182ac73144e76.
Instead of regenerating a new service file on boot in all ospacks, make
systemd-tmpfile creates a symbolic link used by canterbury.

Apertis: https://phabricator.apertis.org/T4589



Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7616

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

Canterbury index is stored in /var and generated upon debian
package postinst phase.
When creating the OStree commit, /var is erased and this file
is lost preventing canterbury to startup.
This patch creates a .service file so that on first boot,
systemd will initialize the index after OStree is deployed.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7612

In the current script, /home and /root are symlinks to
/var/home and /var/roothome. This does not work with
AppArmor because AppArmor checks the resolved path
against its rules, and the resolved path are denied.

This is impacting several services including Canterbury
and Tracker.

Replace those symlinks with systemd mount points and
enable those statically.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7610

/media is a symlink, which prevent media service to mount
anything on it.
/Applications does not exits, but the rootfs being readonly,
it is not possible to create the mountpoint. This prevents
canterbury to start

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7608

Create a yaml file for use with debos,
Add a script to install boot files in the image to be generated.
A small workaround allows to place arm64 dtbs at the appropriate
location to be found by u-boot.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.co.uk>
Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7600

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7593

The ostree images are built from apertis-ostree-image-{board}.yaml

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7587

Create Amd64 image from OStree commit.

Have following warnings caused by `ostree` during upgrade:
 (ostree upgrade:578): OSTree-WARNING **: Couldn't unlink ostree-0-1.conf
 Transaction complete; bootconfig swap: yes deployment count change: 1
or
 (ostree upgrade:492): OSTree-WARNING **: Couldn't unlink ostree-0-1.conf
 (ostree upgrade:492): OSTree-WARNING **: Couldn't unlink ostree-0-2.conf

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7586

Allow to use `bootctl` command from OStree deployment to
install file structure for EFI boot.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7585

`ostree` overlay allows to boot to ostree-based OS deployment.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7584

Add new overlay for 'ostree' feature.
Allow to boot ostree-based OS deployment according to boot
parameter 'ostree=....'. Additional parameter 'os=...' may be used
to indicate OS name ("apertis" by default).

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7576

As an Apertis developer, we want to be able to quickly find definitions
of Jenkins jobs we use so that we can easily fix and update them
without having to edit them scattered all over out CGit instance.

All jenkins jobs templates are moved into apertis-jenkins-jobs git
repository under git.apertis.org.

For the reason that we drop moved templates in this repository.

Apertis: https://phabricator.apertis.org/T4531


Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>

Differential Revision: https://phabricator.apertis.org/D7573