Commit Graph

427 Commits

Author SHA1 Message Date
Gabriel Valcazar 32a234b0d1 sysinfo: Add wireless configuration info
Print the wireless configuration as well as supplicant and hostapd version info

https://jira.digi.com/browse/DEL-3147

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2016-11-04 17:57:13 +01:00
Diaz de Grenu, Jose 7a1f46175c sysinfo: Add information about TrustFence (TM)
https://jira.digi.com/browse/DEL-3025

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-11-02 13:11:42 +01:00
Diaz de Grenu, Jose 66728c99fd sysinfo: read U-Boot from the device tree
This allows to correctly read the U-Boot version when using encrypted images.
Leave the current implementation as a fallback, in case the system is using an
old U-Boot which does not populate the device tree property.

https://jira.digi.com/browse/DEL-3025

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-11-02 11:05:45 +01:00
Diaz de Grenu, Jose 262ade8908 Revert "trustfence: disable SDCARD image generation when encryption is enabled"
When encryption is enabled, the signed U-Boot image will be used for the uSD.
This allows the uSD image to boot the device and recover it from the U-Boot
console, which is its main purpose. Nevertheless, the uSD image will not be
able to boot Linux.

https://jira.digi.com/browse/DEL-2877

This reverts commit 2e13e194d9.
2016-10-31 17:03:26 +01:00
Isaac Hermida 62362688df hostapd: update config file with default support for 802.11ac
Optimize the provided config file with default support for 802.11ac.

https://jira.digi.com/browse/DEL-3128

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-10-19 18:25:07 +02:00
Diaz de Grenu, Jose 7a02e1b00a trustfence: define new type of image for signed/encrypted ramdisks
Also change the image type of dey-image-trustfence-initramfs.

https://jira.digi.com/browse/DUB-615

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-10-19 10:33:34 +02:00
Isaac Hermida 69cf44fcb5 meta-digi-dey: include x11vnc for ccimx6ul
x11vnc is light in size so we can include it in the final rootfs after
reworking the qtbase and packaga-management stuff.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-10-05 11:55:45 +02:00
Isaac Hermida dabb7b02a7 meta-digi: qtbase: optimize recipe
Including ICU increases the rootfs too much and is not needed unless we want
to build qtwebkit, so only include it for platforms with enough size.
Additionally, linuxfb support is not needed for ccimx6.

https://jira.digi.com/browse/DEL-3058

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-10-05 11:55:45 +02:00
Isaac Hermida 2f275ca47b dey-image-qt: do not include package-management for ccimx6ul
The ccimx6ul has a small NAND flash rootfs partition, and removing
package-management image feature saves around 10MB.

https://jira.digi.com/browse/DEL-3058

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-10-05 11:55:45 +02:00
Isaac Hermida 702145661c bluez5: imx6ul: configure baudrate in the BT FW file
Do not use hcitattach to reconfigure the baudrate but set it directly in the
Bluetooth FW file; this work arounds some synchronization problems when not
using HW flow control.

https://jira.digi.com/browse/DEL-3052
https://jira.digi.com/browse/DEL-3057

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-10-03 17:55:43 +02:00
Javier Viguera 3a39aacdd7 meta-digi-dey: rework installed packages for ccimx6ul
CCIMX6UL's rootfs partition is not big enough for the default
'dey-image-qt' image. This commit reworks the QT5 and SATO installed
packages for the ccimx6ul, so the image fits in the rootfs partition.

https://jira.digi.com/browse/DEL-2607

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-09-27 11:27:50 +02:00
Javier Viguera a4c45ecd2d gst-player: disable 'glimagesink' patch for ccimx6ul
The ccimx6ul does not have a GPU, so opengl based gstreamer sink will
not work. Thus apply the patch only for the CCIMX6.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-09-27 11:27:50 +02:00
Javier Viguera 11ce6f30b7 qtbase: enable 'linuxfb' platform plugin
This plugin uses directly the framebuffer, so it can be used in non
X11-based systems, but it oly supports software rendered content,
no opengl/es.

https://jira.digi.com/browse/DEL-2607

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-09-27 11:27:50 +02:00
Javier Viguera 6e96f4ac7e qtbase: add i.MX6UL overrides
This allows to build 'qtbase' for the CC6UL.

It only fixes the broken build, as any QT application that uses OpenGL/ES
will fail because there is no support for QT/OpenGL in modules without
a GPU.

Fix:

arm-dey-linux-gnueabi-g++  -march=armv7-a -mfloat-abi=softfp -mfpu=neon
--sysroot=/ssd/dey/jethro/fb/ccimx6ulsbc/tmp/sysroots/ccimx6ulsbc
-Wl,-O1 -Wl,--hash-style=gnu -Wl,--as-needed -Wl,-O1 -o opengldesktop
opengldesktop.o   -lGL

.../arm-dey-linux-gnueabi/5.2.0/ld: cannot find -lGL

A similar commit was done in meta-fsl-arm.git (branch Krogoth).

https://jira.digi.com/browse/DEL-2607

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-09-27 11:27:49 +02:00
Javier Viguera e4e65538e8 pointercal.xinput: add empty calibration for ccimx6ul
Add an empty calibration file to prevent the 'xinput_calibrator' tool
being launched on X11 desktop start.

The file does not have any calibration data because capacitive touch
displays usually do not need calibration.

https://jira.digi.com/browse/DEL-3046

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-09-27 11:20:33 +02:00
Javier Viguera 8341462161 matchbox-session-sato: synchronize with matchbox 'session' file in poky
This file has not been synchronized with the one in Poky since previous
versions of DEY. Not much has changed, but sync it anyway.

Also:

* Get SHOWCURSOR from formfactor config files, but fallback to one
  value depending on HAVE_TOUCHSCREEN if it was not configured.

* Rename the bbappend to the version generic '_%.bbappend'

https://jira.digi.com/browse/DEL-3046

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-09-20 16:59:31 +02:00
Isaac Hermida 412f1b1e55 meta-digi: rename external ethernet references to second ethernet
The name "ext-eth" seems to indicate "External Ethernet". Rename that variable
and related ones to a more proper name like second ethernet.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-09-15 12:31:49 +02:00
Isaac Hermida 8e69db8ac5 recipes-connectivity: crda: update wireless regulatory DDBB to 2016-06-10
https://jira.digi.com/browse/DEL-3010

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-09-09 15:33:06 +02:00
Javier Viguera 7b170b58ac meta-digi-dey: add static libraries for core-image-base based SDK
https://jira.digi.com/browse/DEL-2881

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-09-01 17:37:10 +02:00
Isaac Hermida 2cad47099d recipes-connectivity: hostapd-2.4: add defconfig with custom setup
Copy of the original defconfig in hostapd-2.4 and enabling next options:
    - CONFIG_LIBNL32
    - CONFIG_EAP_PSK
    - CONFIG_EAP_PWD
    - CONFIG_WPS
    - CONFIG_WPS_NFC
    - CONFIG_RADIUS_SERVER
    - CONFIG_IEEE80211N
    - CONFIG_IEEE80211AC
    - CONFIG_DEBUG_FILE

This means that the hostapd binary will have support for that features, but it
does not imply that the wireless chip does support it.

https://jira.digi.com/browse/DEL-2936

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-09-01 14:27:22 +02:00
Isaac Hermida c164c462f1 recipes-connectivity: hostapd-2.4: removing machine dependency
The current applied patch is a backport of hostapd-2.5 so it is not any
machine dependency.

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-09-01 09:27:32 +02:00
Javier Viguera ab5f50e16a meta-digi: trailing whitespace cleanup
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-08-31 13:52:15 +02:00
Javier Viguera a63030f4fd meta-digi-dey: bump distro version to 2.0-r4
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-08-29 19:26:42 +02:00
Diaz de Grenu, Jose c59a5e6214 Revert "meta-digi-arm: Exclude u-boot-fw-utils if U-Boot environment encryption is"
This reverts commit b8f50680e5.

The support to read and write to an encrypted environment has been added, so
there is no need to exclude the u-boot-fw-utils anymore.

https://jira.digi.com/browse/DEL-2836

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-08-26 10:13:17 +02:00
Isaac Hermida 51415b9e12 meta-digi: dey-wireless: add hostapd to the list of packages for ccimx6ul
https://jira.digi.com/browse/DEL-2913

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-08-25 18:42:56 +02:00
Isaac Hermida d3f1b0b18a meta-digi-dey: init-ifupdown: add commented code for softAP example
Add commented lines as example to configure and run the wlan0 interface in AP
mode using hostapd daemon.

https://jira.digi.com/browse/DEL-2913

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-08-25 18:42:56 +02:00
Isaac Hermida 5444d3e8f8 recipes-connectivity: add hostapd functionality
Do not autostart hostapd daemon on boot because because it will conflict with
wpa-supplicant process and add a custom hostapd.conf file with WPA2-AES
encryption.

https://jira.digi.com/browse/DEL-2913

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-08-25 18:42:56 +02:00
Javier Viguera 2e13e194d9 trustfence: disable SDCARD image generation when encryption is enabled
Currently we don't support booting encrypted images from an SDCARD, so
just disable the generation of such images.

https://jira.digi.com/browse/DEL-2876

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-08-10 16:45:38 +02:00
Alex Gonzalez b8f50680e5 meta-digi-arm: Exclude u-boot-fw-utils if U-Boot environment encryption is
enabled

There is currently no support on fw_printenv/fw_setenv to access an
encrypted environment.

This commit removes the package if U-Boot environment encryption is
enabled to avoid environment corruption on access.

It also documents the issue as a known issue.

https://jira.digi.com/browse/DEL-2625

Signed-off-by: Alex Gonzalez <alex.gonzalez@digi.com>
2016-08-10 10:59:30 +02:00
Javier Viguera 7727b4402e init-ifupdown: use [[:blank:]] posix expression instead of '\s' shorthand
According to 'grep' manual '\s' is a synonym for [[:space:]] which
matches spaces, TABs, but also newlines, etc. We want to only match
spaces and TABs, so use [[:blank:]] instead.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-08-09 19:32:00 +02:00
Stephan Klatt b31c09e59f init-ifupdown: misc cellular fixes
* set cellular user and password
* stricter replace to not match set values
* only set cellular interface to auto

Internal merge of Github's PR:

https://github.com/digi-embedded/meta-digi/pull/2

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-08-09 19:06:23 +02:00
Diaz de Grenu, Jose 6746254558 meta-digi-dey: trustfence: add Yocto macro to unlock key revocation
By default, on closed devices you cannot revoke any key. To do so, it is
required to compile a U-Boot which instructs the HAB not to set the sticky
bit which write protects that field in the OCOTP controller.

This patch introduces a Yocto macro which allows to configure U-Boot in
that way.

In the ConnectCore 6, the value of this settings is ignored, because HAB never
sets the sticky bit which write protects that field.

https://jira.digi.com/browse/DUB-665

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-08-09 20:01:59 +02:00
Diaz de Grenu, Jose a9b8d74041 Revert "meta-digi-dey: trustfence: disable encryption for the ConnectCore 6UL"
Encryption is now supported in the ConnectCore 6UL

This reverts commit 454fff56ba.

https://jira.digi.com/browse/DEL-2857

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-08-08 13:15:22 +02:00
Alex Gonzalez 35271a8dc9 Merge branch 'dey-2.0/master' into dey-2.0/maint
Signed-off-by: Alex Gonzalez <alex.gonzalez@digi.com>
2016-08-04 19:13:00 +02:00
Diaz de Grenu, Jose 454fff56ba meta-digi-dey: trustfence: disable encryption for the ConnectCore 6UL
Encryption of U-Boot and kernel images is not yet supported in the Connect
Core 6 UL.

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-08-04 10:34:46 +02:00
Alex Gonzalez 0588b4b388 meta-digi-dey: trustfence: Do not disable console access by default.
While performing usability testing on the TrustFence documentation, it has
been noted that in order to follow the secure boot instructions the
console needs to be enabled.

We have now moved the secure console section to the end of the
documentation so that disabling the console is the last configuration to
make in a secure system.

Signed-off-by: Alex Gonzalez <alex.gonzalez@digi.com>
2016-08-03 15:55:18 +02:00
Alex Gonzalez dcd13093d2 meta-digi-dey: dey-trustfence: Force to repackage on console state change.
https://jira.digi.com/browse/DEL-2852

Signed-off-by: Alex Gonzalez <alex.gonzalez@digi.com>
2016-08-03 15:38:04 +02:00
Diaz de Grenu, Jose 9e5ee61851 meta-digi: use CAAM for environment encryption
https://jira.digi.com/browse/DUB-652

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-08-01 20:00:11 +02:00
Javier Viguera 6203b101b6 trustfence-tool: update checksums
Version: 1.0-gd725a21

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-29 10:35:27 +02:00
Isaac Hermida 5e35a9ca00 recipes-core: suspend: down the bluetooth interface before entering suspend
Down the bluetooth interface before entering suspend and up it after resuming
if it is present and up.

https://jira.digi.com/browse/DEL-2806

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-07-28 13:06:25 +02:00
Javier Viguera ba0834ed88 trustfence-tool: update checksums
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-26 16:47:32 +02:00
Isaac Hermida 8884970e5a meta-digi-dey: busybox: adapt acpid.map file for CC6UL
https://jira.digi.com/browse/DEL-2838

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-07-26 16:26:27 +02:00
Isaac Hermida ddd5d379a3 recipes-core: busybox: start syslog at a very early state
Start syslog earlier (from 20 to 02) so it is running and other init scripts
can use it to log into the system like the S03networking script.

https://jira.digi.com/browse/DEL-2812

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-07-26 16:21:27 +02:00
Javier Viguera a8bec40bea meta-digi-dey: trustfence: implement encrypted rootfs installation
https://jira.digi.com/browse/DEL-2700

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-26 14:19:26 +02:00
Javier Viguera b37cbc26c3 base-files: fix resize-ext4fs script to work with DM devices
This is needed so the encrypted rootfs is properly resized to the
partition size.

https://jira.digi.com/browse/DEL-2765

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-26 12:29:54 +02:00
Javier Viguera 416fb59bcf meta-digi-dey: bump distro version to 2.0-r3
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-22 10:53:46 +02:00
Javier Viguera a8c50c16ea trustfence-initramfs-init: remove cryptsetup from init script
New functionality has been implemented in trustfence-tool application,
so there is no need to call cryptsetup command.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-22 09:50:47 +02:00
Javier Viguera 4ca3aa176a trustfence-initramfs-init: clean mount rootfs warnings
Get filesystem type of rootfs block device and pass it explicitly to the
mount command to clean following warnings on boot:

EXT4-fs (dm-0): couldn't mount as ext3 due to feature incompatibilities
EXT4-fs (dm-0): couldn't mount as ext2 due to feature incompatibilities

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2016-07-22 09:50:47 +02:00
Isaac Hermida b81ce399f6 wpa-supplicant: add CC6UL specific configuration file
We need a different configuration file, because the SoftAP functionality is
supported using the hostapd package instead of the wpa_supplicant.

https://jira.digi.com/browse/DEL-2744

Signed-off-by: Isaac Hermida <isaac.hermida@digi.com>
2016-07-21 18:23:47 +02:00
Diaz de Grenu, Jose f23d8c6abb trustfence: simplify TRUSTFENCE_ configuration macros
Adapt the U-Boot recipe to the last U-Boot Kconfig entries changes.

Simplify the name of some TRUSTFENCE_ configuration macros. These were
used to configure U-Boot, but they will also configure the uImage signature
and encryption processes.

https://jira.digi.com/browse/DUB-602
https://jira.digi.com/browse/DUB-618
https://jira.digi.com/browse/DUB-534

Signed-off-by: Diaz de Grenu, Jose <Jose.DiazdeGrenu@digi.com>
2016-07-19 15:48:12 +02:00