In the past we started a proof-of-concept implementation of self-updating
OSTree-based LXC containers, but in the end the project which prompted this
development ended up updating containers from the host.

Since we have no planned use for them, they are not part of any formal release,
no test is performed on them and since they fell quite behind after the rebase
to Buster with several parts still commented out, let's drop them altogether.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

After the rebase to Buster some AppArmor profiles have become problematic,
preventing the components from working, in this is the case Rhosydd. Put
the tool in complain mode for now.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Rhosydd had been re-enabled in the target, but not in the SDK or devroot
where it had also previously been installed. Re-enable it on the SDK, but
just in 1 place, deleting the second. On the devroot, we should really
have the relevant library headers rather than rhosydd its self, so add
libcroesor-0-dev and librhosydd-0-dev to that image instead.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

After the rebase to Buster some AppArmor profiles have become problematic,
preventing the components from working. This is the case for a number of
the tracker tools. Put tracker in complain mode for now.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

After the rebase to Buster, some AppArmor profiles have become
problematic and prevent the components from working: this is the case for
Newport, which currently fails to start.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Emanuele Aina authored 5 years ago and Martyn Welch committed 5 years ago

Newport was listed twice, and there's no need to install
{ribchester,canterbury}-core separately from their full counterparts.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Need to have 'fsck' tool in initramfs for all images variants.
Include 'fsck' overlay into ospacks.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Need to have 'fsck' tool in initramfs for all images variants.
Moved appropriate rule for initramfs into separate feature.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

In previous versions of Apertis we were using a modified iptables package
containing custom scripting/systemd unit to load iptables rules at boot.
Debian contains the iptables-persistent package which performs this task.

Use this instead of adding the custom scripts to the new version. Add the
custom rules to an overlay so we don't need to modify the package.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

This file contains name of files skipped during creation of the
rollback test delta. It does not need to be uploaded to the target.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>

Emanuele Aina authored 5 years ago and Frédéric Dalleau committed 5 years ago

Commit 3611bdcb moved the VersionNumber generation at the beginning of the
pipeline so we only generate it once.

The installer merge landed at roughly the same time so it missed that.

Align the stage generating the installer images to the new approach.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

With newer kernels it takes far longer in early boot to get random
numbers (as >= 4.18 kernels ensure good quality entropy is availble
before starting  providing randomness).

Commit 85cc6eba took care of the minimal ospack/images introducing
rng-tools to integrate with hardware random number generators
while jitterentropy-rngd can provide randomness without.

This commit applies the same change to the target, basesdk and sdk
ospacks/images.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

The installer images are currently being uploaded to
`public/installers/v2019dev0/installer/...`, but should be uploaded to
`public/daily/v2019dev0/installer/...`.

Tweak the Jenkinsfile to upload the images to the correct location.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

It got disabled when things were in flux, now it is time to enable it again.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Frederic Danis authored 6 years ago and Emanuele Aina committed 5 years ago

APERTIS-5675

This uses the new Recipe action to merged previous recipes in one.

ROOTDIR needs to be reseted between ostree-commit and ostree-deploy
Fixes: APERTIS-5739

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

The Eclipse SDK is currently not being installed in the SDK image. Add it
back, remove redundant old entries in the Debos configuration and tweak
the desktop file to take into account it's new name and icon.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

It seems that the naming of the Icon file provided by Devhelp has changed.
We currently add a desktop link via an overlay, which isn't using the
correct name and hence the wrong icon is being used.

Update the icon name to get the right icon.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

We currently don't provide a default panel configuration. As a result the
user is getting multiple errors at boot, reading "No running instance of
xfce4-panel was found". Depending on the how the user navigates these
messages, the user may find themselves presented with the message
"Modifying the panel is not allowed" on every subsequent boot.

Provide default panel configuration to improve the user experience and to
avoid them being presented with errors.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

Use the `{setup,append}-kernel-cmdline` properties from the
`filesystem-deploy` Debos action to configure the commandline parameters
for the Linux kernel, rather than setting them by hand via sed.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Denis Pynkin authored 5 years ago and Denis Pynkin committed 5 years ago

Add Collection ID and binding refs for OSTree-based artifacts:
- commits
- images
- test delta

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Denis Pynkin authored 6 years ago and Denis Pynkin committed 5 years ago

If variable "collection_id" is set during the images build the
Collection ID would be added into remote's configuration.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Denis Pynkin authored 6 years ago and Denis Pynkin committed 5 years ago

Add Collection ID and Refs bindings to used branch.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

We are moving to installing U-Boot in the SPI NOR on the SABRE Lite board.
Provide an image to make it trivial to get U-Boot installed without
needing to follow a list of error prone instructions.

Signed-off-by: Martyn Welch <martyn.welch@collabora.com>

After the rebase to Buster, some AppArmor profiles have become
problematic and prevent the components from working.

In particular, the logind, Canterbury and Ribchester profiles prevent
the Mildenhall HMI from appearing on the screen.

Until they get updated, switch them to complain mode rather
than enforcing.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>

The chaiwala-apparmor-profiles contains some AppArmor abstractions in use in
some Apertis-specific profiles.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Emanuele Aina authored 6 years ago and Frédéric Dalleau committed 6 years ago

With this, running debos with no template parameters does not
fail badly:

    debos apertis-ospack-sysroot.yaml
    debos apertis-sysroot.yaml

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Emanuele Aina authored 6 years ago and Frédéric Dalleau committed 6 years ago

The sysroots are specifically meant for actual cross-building and
debugging, so any runtime package can be dropped.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Emanuele Aina authored 6 years ago and Frédéric Dalleau committed 6 years ago

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Emanuele Aina authored 6 years ago and Frédéric Dalleau committed 6 years ago

Move the shell commands to prepare the local ostree repository out of
the Jenkinsfile to a script for easier usage when building locally.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

The test ostree commit is generated after the successful commit.
Removing updatectl, it makes it impossible to mark an update successful.
Hence the bootcount will be increased at each boot, eventually causing
rollback to the previous deployment.

Ostree provides --skip-list that allows to create a commit with a list
of files to skip. That is useful to generate the rollback commit.
This way there is not need to modify existing recipes or provide
additional one. The execution time is also very short.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>

Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk>

Move the definition of env.PIPELINE_VERSION very early so that the devroot name
setting can make use of it.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

The package has been introduced back into :sdk

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

Dropped (obsolete) dependency on gir1.2-appindicator3-0.1 for blueman

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>