Avoid EHCI timeout errors seen on some USB sticks by removing the redundant
`usb reset` between partitions.
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
The previous socket wait fixed a race where the login prompt could appear
before Weston had created its Wayland socket. In that case, logging in as
root left WAYLAND_DISPLAY empty and applications could not use waylandsink.
Only wait for the socket when a DRM display is connected, or when the kernel
does not expose DRM connector status files. This keeps the race fix for
display boots while allowing immediate headless logins.
Keep showing a warning when there is no wayland socket.
https://onedigi.atlassian.net/browse/DEL-10141
Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Bootable SD cards may boot with root=/dev/mmcblkXpY instead of
root=PARTUUID=... In that case mount_digiparts.sh treated the system
as NAND/UBI and failed to mount the Digi partitions.
Resolve the active system from the block device mounted as "/" before
falling back to the existing UBI logic.
https://onedigi.atlassian.net/browse/DEL-9676
Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Make this service generic so it can be reused on every device containing
a Murata+Infineon chip.
In some platforms Worldwide pseudo-country could be 'XZ', in others it
could be 'WW'. Cover both of them.
In the meantime, improve the service to ensure the wifi device is
available by waiting for udev device discovery to settle, retrying
until the wireless interface responds to wl, and restarting the
oneshot unit on failure.
https://onedigi.atlassian.net/browse/DEL-9798
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
Add CLM blob files with power limits based on the CCMP25 Certification
process.
There is a different CLM blob file to be used if the device operates
as STATION or Access point (AP) or if it is meant to be used Indoors or
Outdoors. Every file is deployed into the system, but only
STATION+INDOOR files are selected by default.
For each use case there is a US-only and a Worlwide CLM blob file.
Initial list of countries covered by the Worldwide binaries is:
* US
* Canada
* Europe
* Japan
* Australia
* New Zealand
Files:
- cyfmac55500-sdio_US.APIndoor.clm_blob (MD5SUM: 3e6f5fdcf9a88cf425179c69862ac67f)
- cyfmac55500-sdio_US.APOutdoor.clm_blob (MD5SUM: f8655f59b87ac5a71a2a90f08c52755b)
- cyfmac55500-sdio_US.STAIndoor.clm_blob (MD5SUM: e2bf5ed665876203085bd0cc9c90e590)
- cyfmac55500-sdio_US.STAOutdoor.clm_blob (MD5SUM: ddc81881d8ed0b70e2b843bb7899e758)
- cyfmac55500-sdio_World.APIndoor.clm_blob (MD5SUM: e48416c461469652ef5594a402a596cd)
- cyfmac55500-sdio_World.APOutdoor.clm_blob (MD5SUM: 5c57605395d4e186c58b59e4a57d80cd)
- cyfmac55500-sdio_World.STAIndoor.clm_blob (MD5SUM: 3f54dbf06d633d7b1aad816f6d655b9d)
- cyfmac55500-sdio_World.STAOutdoor.clm_blob (MD5SUM: 9f706f9ae5d833e386ebabc21e7c779b)
https://onedigi.atlassian.net/browse/DEL-9798
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
Sync STM32MP-specific RT kernel patches, aligned with the latest
ST release from meta-st-x-linux-rt layer.
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
The udev mount script always queried the active system before mounting
any partition. On eMMC systems this lookup used /dev/disk/by-partlabel,
which is populated by udev itself and may still be incomplete and the
script exited for that partition.
Only resolve the active system for linux_a/linux_b, and read the eMMC
root partition name from sysfs instead of the udev-created by-partlabel
links.
https://onedigi.atlassian.net/browse/DEL-10131
Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
create_st_fip_binary.sh converts binary encryption keys to hex before
passing them to encrypt_fw. hexdump may collapse repeated binary data
into '*', corrupting the key and causing encrypt_fw to reject it with an
invalid key size.
Add a bbappend to patch the helper from meta-digi and use hexdump -v so
the full key is emitted.
https://onedigi.atlassian.net/browse/DEL-10115
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
When TrustFence encryption is enabled, the TF-A recipe converts the
binary FIP encryption key to a hexadecimal string and passes it to the
TF-A build as ENC_KEY.
hexdump suppresses repeated output by default and emits '*' when it folds
duplicate data. If that happens while converting the key, the generated
ENC_KEY contains the '*' marker instead of the full hex string. The
malformed value then breaks the make command line, and make can interpret
the remaining key fragment as a target, failing for example with:
make ... ENC_KEY=13eb911dfcc316b1b99bbbbf10a7000c3055e863* 166d3c8c9cd6f888b720a9 all
make: *** No rule to make target '166d3c8c9cd6f888b720a9'. Stop.
Use hexdump -v so every byte of the binary key is emitted and ENC_KEY is
always a complete, contiguous hex string.
https://onedigi.atlassian.net/browse/DEL-10115
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Drop the imx-m7-demos dependency and build only the A55 boot target,
since Cortex-M firmware is board-specific and should not be selected as
a default SoC artifact. This follows the same cleanup done upstream in
meta-freescale commit 598f047ef112a0c88f699714cd10dc87c8460c5a.
https://onedigi.atlassian.net/browse/DEL-9882
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
(cherry picked from commit 81cf596834382f87701d701277e13c97316de978)
This commit generalizes the BT GPIO value used in the bluetooth-init
script for different platforms.
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
https://onedigi.atlassian.net/browse/DEL-9668
Install the wl tool by default. It is a useful utility for customers to
perform additional wireless configuration and debugging.
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
Currently only the CCMP25 and CC95 will officially support containers.
For these platforms, "/root" is a common path with enough free space.
Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
This commit replaces systemd-udev-settle from bluetooth-init and
ifupdown service. Systemd recommends not to use that service and
wait for specifc event or service to sync interfaces.
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
https://onedigi.atlassian.net/browse/DEL-9338
Enable CONFIG_NETFILTER_XT_MATCH_MULTIPORT in the Docker kernel fragment
so port publishing works.
Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
Switch ccimx8/ccimx9 wic images to a layout with a u-boot-env
partition. Use a fixed PARTUUID for SD rootfs.
https://onedigi.atlassian.net/browse/DUB-1119
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
For consistency, rename LVDS overlays:
- Add display model to ccimx93-dvk LVDS overlay
- Convert underscore to dash on ccimx95-dvk LVDS overlays
(the underscore only to separate platform from functionality)
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
Update the recipe to pull Infineon firmware binaries from the official Infineon
repository (aligned with imx-scarthgap-longma Murata branch), avoiding
tarball-related build issues. Firmware remains at Infineon 2026_0108.
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
This commit adds support for environment encryption/decryption of the
u-boot environment on the CCMP2 platform in Linux.
https://onedigi.atlassian.net/browse/DEL-10029
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
(cherry picked from commit 9b99c0b073)
This commit adds support for environment encryption/decryption of the
u-boot environment on the CCMP2 platform in Linux.
https://onedigi.atlassian.net/browse/DEL-10029
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
Add a bootscript for the ConnectCore 95 platform, including the default device
tree overlay names.
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
This partially reverts commit f6d91b9022. The new
mca-tool v1.26 already installs its binaries to /usr/sbin (instead of /sbin),
so the workaround is no longer needed.
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
The original do_install() preserves file ownership, which can contaminate the
SDK build and cause "getpwuid(): uid not found: 1000". Adjust the copy command
to not preserve owner/group.
https://onedigi.atlassian.net/browse/DEL-10022
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
This commit imports the Digi custom version of sign-stm32mp bbclass to ensure
that the search_path() function does not raise a build exception if the signing
tool or keys are not present in the PATH before starting the build process.
In our case, we do not need to manually install the tools or generate the keys
beforehand, as this is automatically handled by Yocto in our DEY distribution.
https://onedigi.atlassian.net/browse/DEL-10022
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
Commit 3fdb245765 ("trustfence: add encrypted
boot artifact support for CCMP13 platform") broke PKI tree generation when
encryption is disabled. Fix it for ccmp15.
https://onedigi.atlassian.net/browse/DEL-10022
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
Commit 52a1111da6d72446530da26e135b65a34b48e279 ("OPTEE: MANAGE signature,
M33TD") in the ST layer incorrectly enables CFG_REMOTEPROC_PUB_KEY_VERIFY=y for
all platforms when SIGN_ENABLE is set.
However, co-processor public key verification against OTP fuses is not
supported on stm32mp1x platforms and causes the build to fail.
Remove CFG_REMOTEPROC_PUB_KEY_VERIFY for ccmp15.
https://onedigi.atlassian.net/browse/DEL-10022
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
Remove the TF-A specific toolchain from SDK generation to avoid build issues
caused by unresolved runtime library dependencies in nativesdk-gcc-aarch64-none-elf,
including libcrypt.so.1, libncursesw.so.6, libpython3.8.so.1.0, and
libtinfo.so.6.
https://onedigi.atlassian.net/browse/DEL-10022
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
Update secure boot support for Cortex-M processors by refreshing the patch set
and dropping patches already integrated, aligning the implementation with ST
release openstlinux-6.6-yocto-scarthgap-mpu-v26.02.18.
https://onedigi.atlassian.net/browse/DEL-10022
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
Arturo Buzarra
Francisco Gil
Hector Bujanda
Isaac Hermida
Gonzalo Ruiz
Mike Engel
Javier Viguera
Hector Palacios