65

default.xml: update meta-lmp layer

Relevant changes:
- 5b7271f base: security: op-tee: bump SHA

Signed-off-by: Ricardo Salveti <[email protected]>

64

default.xml: update meta-lmp layer

Relevant changes:
- bcecd3e base: recipes-sota: aklite.path: depend on aklite.service
- 7eab3eb base: recipes-sota: aktualizr: remove public sota config as a trigger

Signed-off-by: Ricardo Salveti <[email protected]>

63

git-mirrors.yml: add meta-security

Signed-off-by: Ricardo Salveti <[email protected]>

62

default.xml: update meta-updater layer

Relevant changes:
- a7e26b0 Remove a debug print in qemucommand.py
- 6cabdd8 Get the second IP from DHCP to access Inet
- 736cab6 OTA-4388: Conf variable to specify an update type for secondary
- 65b51c4 image_types_ostree: set version metadata field

Signed-off-by: Ricardo Salveti <[email protected]>

61

default.xml: update openembedded-core layer

Relevant changes:
- f3675be6be gtk+3: sort resources for reproducible binaries
- 0392fcbdc8 libidn2: Fix reproducibility issue
- d14a4b0db9 tar: Fix build determinism, disable rsh
- 39e25b0452 xserver-xorg: Fix reproducibility issue
- 5ed0840c93 patch: Extend to native/nativesdk and depend upon
- 5553c20f9f mc: Fix manpage date indeterminism
- 11d7a9e37c mc: Set zipinfo presence determinstically
- 6e2e048085 oeqa/reproducible: Improve test output and ensure deb+ipk compared
- a9b8287984 opkg-utils: Fix reproducibility issues in opkg-build

Signed-off-by: Ricardo Salveti <[email protected]>

60

default.xml: update meta-lmp layer

Relevant changes:
- 182d7d20 base: aktualizr: bump revision
- 755a747a meta-lmp-base: u-boot: bump u-boot sha

Signed-off-by: Michael Scott <[email protected]>

59

conf/imx_hab4: clean up scripts and extra SPL templates

- rename sign-spl.sh -> sign-file.sh
- new usage of sign-file.sh is:
  --cst <cst path/filename> (default: cst)
  --spl <spl binary to sign>
  --m4app <M4 binary to sign>
  --csf-template <template file to use> (default: u-boot-spl-sign.csf-template)
  --key-dir <directory where keys are located> (default: .)
  --fix-sdp-dcd (default: no)
- remove mfgtools csf template
- remove hard-coded block data from std template
- support M4 signing logic

NOTES:
- script will copy the original binary as *.mod
  if needed: modify it for: DCD handling, CSF address injection, etc.
  Make sure we don't touch original binary
- template is turned into *.csf-config
  - translates @@KEY_ROOT@@ into --key-dir setting
  - uses "od" to get the DCD/HAB block information
    and appends this to the config
  - for DCD handling: uses the 0x20 header offset as the first block hex
    (0x2f010000) as mkimage currently has a bug.
- cleans up copied files at the end

Change-Id: Ie7d930040c746991388832fa7d749bf3632e4a0b
Signed-off-by: Michael Scott <[email protected]>

58

default.xml: update meta-lmp layer

Relevant changes:
- 895130f u-boot-fio-fw-util: beagle: set uboot.env size to 0x20000
- ebf8a7f aktualizr: bump revision
- 7a55791 systemd-watchdog-config: recipe to enable systemd runtime
watchdog
- 7ccd2b5 aktualizr: bump revision
- fd6fe58 u-boot-ostree-scr: beagle: rename fit_loadaddr to addr_fit

Signed-off-by: Ricardo Salveti <[email protected]>

57

conf: imx_hab4: script to print the fuse table

Signed-off-by: Jorge Ramirez-Ortiz <[email protected]>

56

default.xml: update meta-lmp layer

Relevant changes:
- 550889f ostree: add patch to fix missing ostree-grub-generator

Signed-off-by: Ricardo Salveti <[email protected]>