Forced recache is needed to use installed profile after the
system reboot.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Frédéric Dalleau <frederic.dalleau@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7741

Start of tests must be the last step in pipeline to avoid omissions
of images build caused by wrong tests description.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Luis Araujo <luis.araujo@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7735

Debos requires mountpoint options to be a list; they are ignored
silently if it isn't.

Apertis: https://phabricator.apertis.org/T4664



Signed-off-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7702

This name is the one used in the template/profiles.yaml file
for lqa to find all the template files.

Signed-off-by: Luis Araujo <luis.araujo@collabora.co.uk>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Reviewed-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7695

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

The switchroot script no longer works if the osname is changed.
Do it the same way than the C version.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7694

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

Building with a modified osname variable breaks the uefi setup.
Do not set a default value since the script is not intended to be
called without it.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Reviewed-by: Martyn Welch <martyn.welch@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7693

This commit should produce no semantic change, it is just a refactoring
to extract inline configuration values as variables and collect them at
the top of the file.

This should simplify the customization that downstream distributors have
to do and also makes backporting fixes to other branches easier in the
long term for Apertis itself.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Differential Revision: https://phabricator.apertis.org/D7564

The current path misses PIPELINE_VERSION, which causes upload
to fail.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7674

The ostree images were built after the ostree commit, which already
contained a `repo` folder created and uploaded to release server.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7667

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7657

This reverts commit 473e4ddd.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>

Signed-off-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7643

`debos` supports keyring-package in debootstrap action, but no
keyringpackage. This change syncs to proper field key.

Signed-off-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Reviewed-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7642

Due to pam_cgfs utils are needed for unprivileged LXC containers
creation. We should should install libpam-cgfs package together with
LXC in Apertis images.

This is a fixup for previous commit which landed wrongly with
'git phab land'.

Apertis: https://phabricator.apertis.org/T4606


Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7629

Due to pam_cgfs utils are needed for unprivileged LXC containers
creation. We should should install lxcfs package together with LXC in
Apertis images.

Apertis: https://phabricator.apertis.org/T4606



Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7629

Due to newuidmap and newgidmap utils are needed for unprivileged
LXC containers creation. We should should install uidmap package
together with LXC in Apertis images.

Apertis: https://phabricator.apertis.org/T4599



Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Denis Pynkin <denis.pynkin@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7621

As an Apertis developer doing a release, we want the web page on
images.apertis.org to be automatically updated from the updates done to
apertis-image-recipes.git.

This is current files that copied from
    images.apertis.org:/srv/images.apertis.org/www.

Apertis: https://phabricator.apertis.org/T3095



Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7578

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

This reverts commit 79e6240b1fdf143b13bb9763d06182ac73144e76.
Instead of regenerating a new service file on boot in all ospacks, make
systemd-tmpfile creates a symbolic link used by canterbury.

Apertis: https://phabricator.apertis.org/T4589



Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7616

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

Canterbury index is stored in /var and generated upon debian
package postinst phase.
When creating the OStree commit, /var is erased and this file
is lost preventing canterbury to startup.
This patch creates a .service file so that on first boot,
systemd will initialize the index after OStree is deployed.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7612

In the current script, /home and /root are symlinks to
/var/home and /var/roothome. This does not work with
AppArmor because AppArmor checks the resolved path
against its rules, and the resolved path are denied.

This is impacting several services including Canterbury
and Tracker.

Replace those symlinks with systemd mount points and
enable those statically.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7610

/media is a symlink, which prevent media service to mount
anything on it.
/Applications does not exits, but the rootfs being readonly,
it is not possible to create the mountpoint. This prevents
canterbury to start

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7608

Create a yaml file for use with debos,
Add a script to install boot files in the image to be generated.
A small workaround allows to place arm64 dtbs at the appropriate
location to be found by u-boot.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.co.uk>
Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7600

Frédéric Dalleau authored 7 years ago and Frédéric Dalleau committed 7 years ago

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7593

The ostree images are built from apertis-ostree-image-{board}.yaml

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7587

Create Amd64 image from OStree commit.

Have following warnings caused by `ostree` during upgrade:
 (ostree upgrade:578): OSTree-WARNING **: Couldn't unlink ostree-0-1.conf
 Transaction complete; bootconfig swap: yes deployment count change: 1
or
 (ostree upgrade:492): OSTree-WARNING **: Couldn't unlink ostree-0-1.conf
 (ostree upgrade:492): OSTree-WARNING **: Couldn't unlink ostree-0-2.conf

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7586

Allow to use `bootctl` command from OStree deployment to
install file structure for EFI boot.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7585

`ostree` overlay allows to boot to ostree-based OS deployment.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7584

Add new overlay for 'ostree' feature.
Allow to boot ostree-based OS deployment according to boot
parameter 'ostree=....'. Additional parameter 'os=...' may be used
to indicate OS name ("apertis" by default).

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Héctor Orón Martínez <hector.oron@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7576

As an Apertis developer, we want to be able to quickly find definitions
of Jenkins jobs we use so that we can easily fix and update them
without having to edit them scattered all over out CGit instance.

All jenkins jobs templates are moved into apertis-jenkins-jobs git
repository under git.apertis.org.

For the reason that we drop moved templates in this repository.

Apertis: https://phabricator.apertis.org/T4531


Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>

Differential Revision: https://phabricator.apertis.org/D7573

This 'devhelp-disable-gnome-vfs.gschema.override' file originally from
our apertis-sdk-meta to disable the gnome-vfs-2.0 documentation which is
deprecated. As we moved all packages from the meta packages into image
recipes. So that this file and script should also move into
apertis-image-recipes to keep the deprecated gnome-vfs-2.0 documentation
disabled.

Apertis: https://phabricator.apertis.org/T4274


Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>

Differential Revision: https://phabricator.apertis.org/D7565

Signed-off-by: Martyn Welch <martyn.welch@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.com>
Differential Revision: https://phabricator.apertis.org/D7552

Fix the path to unified OStree repository.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.co.uk>
Reviewed-by: Martyn Welch <martyn.welch@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7554

Naming convention for branches includes release number for now:
- apertis/${release}/${architecture}-${board}/${type}

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7543

Switch to `ostree-push` instead of `rsync` allows to keep
all branches in single repository.

Naming convention for branches includes release number for now:
- apertis/${release}/${architecture}-${board}/${type}

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
Reviewed-by: Sjoerd Simons <sjoerd.simons@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7542

As @sjoerd pointed out, replacing coreutils-gplv2 and tar-gplv2 with
their GPLv3 versions in the development and sdk images seem to be
largely working by chance, and a more involved approach needs to be
taken.

In particular, instead of listing tar and coreutils in the packages
list, the replace-tar-coreutils-for-build.sh should be used.

Signed-off-by: Andrew Lee (李健秋) <ajqlee@collabora.co.uk>

Differential Revision: https://phabricator.apertis.org/D7541

The current image recipes rely on a bunch of meta packages to fetch the
appropriate packages.

This approach does not scale well: every time we want to add a new image
type we would need to create a new recipe and a new package, filling the
archive with meta packages that may differ only for a couple
dependencies and making the whole flow more cumbersome.

Current recipes also do not exclusively rely on these meta packages, as
they often explicitly list some direct package dependencies already.

Putting the package dependencies directly in the recipes and dropping
the meta package would provide a smoother workflow.

This patch do not use any Apertis-specific meta package but instead
directly list the desired packages in the image recipes.

Apertis: https://phabricator.apertis.org/T4274


Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>

Differential Revision: https://phabricator.apertis.org/D7521

Signed-off-by: Andrew Shadura <andrew.shadura@collabora.co.uk>
Reviewed-by: Emanuele Aina <emanuele.aina@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D7522

Document usage of `docker run` which will automatically pull the image
and run it, now that the Dockerfile for `docker build` has been moved
to another repository,
    https://git.apertis.org/cgit/apertis-docker-images.git/

Apertis: https://phabricator.apertis.org/T4472


Signed-off-by: Andrew Lee (李健秋) <andrew.lee@collabora.co.uk>

Differential Revision: https://phabricator.apertis.org/D7434