Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Levent Komurcu authored 2 years ago and Tino Lippold committed 1 year ago

apt_source.sh script places credentials to sources.list file. This will cause
apt to generate a warning message everytime said repository is hit.

(N: Usage of apt_auth.conf(5) should be preferred over embedding login
information directly in sources.list(5) entry for 'https://.......')

This change will automatically seperate credentials from sources.list file to
auth.conf file

This change was cherry picked from GitLab repository
https://gitlab.apertis.org/infrastructure/apertis-image-recipes


from commit aa830587d5f2ed8e0cb62b040a2143fa18668315.

Signed-off-by: Komurcu Levent <levent.komurcu@nl.bosch.com>
(cherry picked from commit aa830587d5f2ed8e0cb62b040a2143fa18668315)

Pablo Vigo Mas authored 1 year ago and Ritesh Raj Sarraf committed 1 year ago

The SSH server on the Aurora system, operating on port 22, is consistently under probing attempts by attackers.
Enhancing security on the server can be achieved by transitioning to port 7711.
The pipeline is now configured to use the new SSH port of the Aurora server.

Signed-off-by: Pablo Vigo <pvigo@collabora.com>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

On image generation only main repositories are used, which causes that
updates are not applied. Include both updates and security repositories
similar as it is done with standard Apertis images.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

From Bookworm trying to disable a service that is not installed triggers an
error, so remove the call to disable iptables as it is not present.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

qa.apertis.org is being served by the qa-report-app.
So modify the LAVA callback to point to qa.apertis.org.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

There is already a variable for the LAVA callback URL, switch to actually
use it.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

This is required to enable audio and the Intel AX210 wifi module on the
UP Squared 6000 board.

Without these firmware pkgs, drivers will retry several times. Thus,
lots of kernel msgs are printed to the serial console, which makes LAVA
test fail to parse the login prompt. E.g.:

  [   14.595274] iwlwifi 0000:02:00.0: firmware: failed to load iwlwifi-ty-a0-gf-a0-40.ucode (-2)
  Apertis v2022 apertis ttyS0
  apertis [   14.599430] asus-nb-wmi asus-nb-wmi: Detected BFPI, not ASUSWMI, use DSTS
  [   14.599734] asus_wmi: Failed to set throttle thermal policy (retval): 0xffffffff
  [   14.614016] iwlwifi 0000:02:00.0: Direct firmware load for iwlwifi-ty-a0-gf-a0-40.ucode failed with error -2
  login: [   14.625103] asus-nb-wmi asus-nb-wmi: Using throttle_thermal_policy for platform_profile support
  [   14.644462] iwlwifi 0000:02:00.0: firmware: failed to load iwlwifi-ty-a0-gf-a0-39.ucode (-2)

Signed-off-by: Ariel D'Alessandro <ariel.dalessandro@collabora.com>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

Signed-off-by: Apertis CI <devel@lists.apertis.org>

This also activates `x` and `u` in bash to avoid using unset
variables and print the environment variables to ease tracking down
issues.

Use `nfsroot` as test type but keep `nfs` in image name.

Signed-off-by: Detlev Casanova <detlev.casanova@collabora.com>

Signed-off-by: Detlev Casanova <detlev.casanova@collabora.com>

Signed-off-by: Detlev Casanova <detlev.casanova@collabora.com>

Signed-off-by: Ritesh Raj Sarraf <rrs@debian.org>

When multiple projects upload to the same folder, conflicts will occur
if they all use a `build-env.txt` file. To avoid that, disambiguate the
name of the file so each project does not risk overwriting files
produced by other projects.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Since we pass it to GitLab as a dotenv artifacts the runner takes
care of sourcing it for us.

It also means that some of the workarounds needed to use dynamic
variables like `$PIPELINE_VERSION` are no longer needed as they are
now accessible from `variables:` entries.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

To know whether the artifacts should be uploaded as daily builds or test
builds the pipeline checks the branch name.

However, it was still looking for an `apertis/*` branch rather than an
`$DOWNSTREAM_NAME/*` branch.

Fix that by relying on the `$osname` variable.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>

Signed-off-by: Ritesh Raj Sarraf <rrs@debian.org>

Signed-off-by: Ritesh Raj Sarraf <rrs@debian.org>

Since merged-usr is the default for other Apertis images switch to it
for consistency.

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

Signed-off-by: Ritesh Raj Sarraf <rrs@debian.org>

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>

Move the `rules:` from `.submit-tests` to the main `.gitlab-ci.yml` to
make them easier to customize.

Signed-off-by: Emanuele Aina <emanuele.aina@collabora.com>