Commit Graph

1659 Commits

Author SHA1 Message Date
Arturo Buzarra 44ff44680f meta-digi: update revisions for dey-3.2-r2.1
Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-12-02 23:26:47 +01:00
Francisco Gil a96fc150bf u-boot-dey: missing ";" in installation scripts for cc6ul
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2021-12-02 17:14:58 +01:00
Mike Engel c970d87d5a trustfence: change RAM location to the same values used in u-boot
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2021-12-01 13:11:39 +01:00
Mike Engel ddec434bc8 trustfence: move CC8X read-only signature to the end of the image
This commit moves the read-only container signature to the end of
rootfs image for the CC8X platform.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2021-12-01 13:11:39 +01:00
Hector Palacios fbeb7f6720 read-only: remove regular rootfs fstypes for read-only-rootfs
If IMAGE_FEATURE 'read-only-rootfs' is active, the rootfs image
will be SQUASHFS.
Remove other root file system images, such as ext4, ubifs, sdcard.gz
to avoid confusion and use by install scripts.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-12-01 11:49:20 +01:00
Arturo Buzarra 46f7d6a64c u-boot-dey: ccimx6ul: sync boot script with new dualboot variables
U-Boot uses partition names instead of partition indexes for the nand devices.
This commit syncs the boot scripts with the new dualboot variables.

https://onedigi.atlassian.net/browse/CC6UL-1254

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-11-29 11:55:17 +01:00
Francisco Gil b8d46f0120 read_only: create folders in build time
These folders /mnt/linux, /mnt/update and /mnt/data are
created by the automount_block.sh script. In a read only
system, these folders are not created raising some errors.

Creating these folders solves the issue.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2021-11-25 12:42:59 +01:00
Francisco Gil afc61dfb83 wifi: add symbolics links needed by the read only filesystem.
Create this symbolics links in build time instead of doing it
in run-time. This simplifies the system and allows it to work
with read only filesystems.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2021-11-25 12:39:28 +01:00
Francisco Gil 179d4315ef wireless: mac: create symbolic links for the wireless macs
Before this patch the MAC addresses were read from the device
tree in the qualcomm.sh script executed at init, and a creates
a file where the MAC where located.

In 0a92f5d9e8df644de74e74f152ed6ff3dd8d3369 in the qca driver
the support to read these MAC addresses from the filesystem
was added.

This commits creates the simbolic link between the device tree
and the expected path where the MAC addresses where located, and
gets rid of the file with the MAC addresses.

Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2021-11-25 11:38:27 +01:00
Gonzalo Ruiz 446ecdd2e0 imx-boot: install mkimage logs into imx-boot-tools directory
mkimage logs are required for signature on CC8X and CC8M platforms. Create a
copy in the 'imx-boot-tools' deploy directory so a prebuilt imx-boot file can
be later signed using the standalone signature procedure.

Build the 'print_fit_hab' target unconditionally so the log is available for
future standalone signature processes.

Also, use 'CONFIG_MKIMAGE_LOG_PATH' and 'CONFIG_FIT_HAB_LOG_PATH' variables to
point to the logs before calling the sign scripts. We no longer require
creating a symbolic link of the log files.

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-11-19 17:45:34 +01:00
Arturo Buzarra ed03674968 firmware-qualcomm: update proprietary firmware to release r00006.3
Latest release r00006.3 - CS3 0.0.006.3 updates the following files from
qca6574au-le-2-2-2_qca_oem repository:

qca65X4_pcie:   qwlan30.bin ->  c0741f39de31ee92a623e15adf60881e
                utf.bin     ->  875b0f52c9b80130c78f9ed2b64d7148
qca65X4_sdio:   qwlan30.bin ->  066692969db9bbb82f36cdb2352d3aa8
                utf30.bin   ->  d3b5042c3dd316b15d72db6214b60fbc

https://onedigi.atlassian.net/browse/DEL-7730

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-11-17 11:53:31 +01:00
Gabriel Valcazar 500cc96394 kernel-module-qualcomm: re-add compatibility with the ccimx6sbc
This change was accidentally reverted when merging to dey-3.2/maint, causing
the qualcomm module to be missing in the rootfs.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-11-17 11:44:14 +01:00
Arturo Buzarra 291c64d343 cryptoauthlib: set ATECC508A as default device type in default configuration
https://onedigi.atlassian.net/browse/DEL-7727

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-11-16 15:49:13 +01:00
Arturo Buzarra 916f383d8c cryptoauthlib: fix default i2c bus speed
By default, all platforms except ccimx6qpsbc work at 400 kHz on the i2c bus
connected to the ATECC508A crypto chip.

https://onedigi.atlassian.net/browse/DEL-7727

Signed-off-by: Arturo Buzarra <arturo.buzarra@digi.com>
2021-11-16 15:29:16 +01:00
Hector Palacios 82dd2cbc4d trustfence-sign-artifact: re-use RAMDISK address for rootfs
Re-use RAMDISK address for authenticating the rootfs instead
of allocating a new address (if authenticating a rootfs, we're
not using a ramdisk).

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-11-12 09:01:44 +01:00
Hector Palacios fe2a1f281e Merge branch 'dey-3.2/master' into dey-3.2/maint
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-11-11 16:23:43 +01:00
Mike Engel 2145614724 images: add function to sign read only rootfs when Trustfence is enabled
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2021-11-11 13:37:30 +01:00
Mike Engel eb730358e5 trustfence: add read only rootfs signing option to signing script
Signed-off-by: Mike Engel <Mike.Engel@digi.com>
2021-11-11 13:37:30 +01:00
Hector Palacios 75fca73cc5 u-boot: cc6ul: fix script adding missing call to 'uuu'
Add missing call to 'uuu' and erase the partition before creating
the UBI volumes.

Also add larger timeouts to erase operations.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-11-11 13:32:16 +01:00
Hector Palacios bc88451131 machines: add SQUASFS to IMAGE_FSTYPES for read-only-rootfs
Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-7708
2021-11-05 11:18:16 +01:00
Hector Palacios 7cd57a40e3 libubootenv: adapt recipe for read-only-rootfs
The config file /etc/fw_env.config is generated dynamically basing on
the partition table and, in the case of NAND-based SOMs, on the NAND
geometry. This is done on a postinst script that modifies the file on the
first boot of the target. Since this is not allowed on read-only-rootfs,
this commit adds a default fw_env.config file to use instead when
read-only-rootfs is enabled.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-7708
2021-11-05 11:18:16 +01:00
Javier Viguera c89a66480b meta-digi: remove postinst on target when using read-only-rootfs image feature
Signed-off-by: Javier Viguera <javier.viguera@digi.com>
2021-11-05 11:18:16 +01:00
Gabriel Valcazar dcd97799c9 ccimx6sbc: install Qualcomm-related packages along with the Atheros ones
The idea is to have the support for both chips co-exist in the same image, then
have the system detect which chip is being used during runtime.

https://onedigi.atlassian.net/browse/DEL-7661
https://onedigi.atlassian.net/browse/DEL-7666

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-11-03 15:58:53 +01:00
Gabriel Valcazar 7ea02c26aa qualcomm: adapt firmware and module recipes to be compatible with the ccimx6sbc
This allows the packages to be included in the ccimx6sbc images. While at it,
include the Qualcomm bluez patches in ccimx6 builds. These patches aren't
destructive, they simply add functionality required by the Qualcomm chip, so
they shouldn't have any secondary effects when using the Atheros chip.

https://onedigi.atlassian.net/browse/DEL-7661
https://onedigi.atlassian.net/browse/DEL-7666

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-11-03 15:58:53 +01:00
Hector Palacios 899f89eb33 digi-defaults: use '+=' operator in assignment of BOOT_SCRIPTS
Other layers, such as meta-digi-dualboot, may add scripts to this
list on their layer.conf file. Depending on the order and priority
of layers, using a strict '=' here completely overrides previous
values, which is not desired.

Reported-by: Francisco Gil <francisco.gilmartinez@digi.com>
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-10-20 10:10:40 +02:00
Hector Palacios 2e35d16e03 linux-dey: fix apply of kernel configuration fragments
- Add the '-m' parameter. Without it, the script doesn't
  generate the output merged configuration file, and the
  fragments are not applied.
- Fix the if condition. The '*.cfg' expands to a list of
  files, but the '-f' only admits one parameter. Use instead
  the Python find_cfgs() function.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-10-15 19:14:27 +02:00
Hector Palacios 9ac3bd46ca uboot: install-uuu: restore variables on bootcmd after 'env default -a'
The variable 'dualboot' (and 'singlemtdsys' for CC6UL) was restored
after the bootcmd that runs the first time after programming U-Boot runs
fastboot again to resume the script.
This is ok for the CC6UL but not for the rest of platforms, that run the
partition script on the bootcmd, *before* running fastboot.

Restore the variables for all platforms in the bootcmd right after
resetting the environment.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-10-14 13:35:46 +02:00
Hector Palacios 3ab0340741 u-boot: print what system is booting after update
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-10-11 11:36:00 +02:00
Hector Palacios 13a46ed323 conf: move UBOOT_HAS_FASTBOOT to ccimx8x common include
The SBC Express also supports fastboot now.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-10-08 14:20:22 +02:00
Hector Palacios f7a1a484a6 conf: move BOOT_SCRIPTS variable to common include file
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-10-08 14:15:13 +02:00
Francisco Gil e67ed06dd5 dualboot: move the logic of fallback boot to altbootcmd
U-Boot has embedded support to handle bootcount tries.
When the limit of tries is reached, U-Boot runs the script
in `altbootcmd` rather than the usual `bootcmd`.
This other script resides on meta-digi-dualboot layer.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
Signed-off-by: Francisco Gil <francisco.gilmartinez@digi.com>
2021-10-08 12:59:30 +02:00
Gonzalo Ruiz 825dd6a555 install_linux_fw_uuu: remove redirection in every case
Ensure stdout redirection to the USB interface is removed in every case.
Otherwise, it would be left redirected when INSTALL_UBOOT_FILENAME is
manually set.

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-09-30 10:36:40 +02:00
Gonzalo Ruiz 555be511a6 u-boot-dey: customize install_linux_fw_uuu script for ccimx6/ccimx6qp
Also, set UBOOT_HAS_FASTBOOT = "true" for these platforms.

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-09-30 10:32:17 +02:00
Gonzalo Ruiz 1166981fa1 u-boot-dey: add install_linux_fw_uuu.sh for ccimx6/ccimx6qp
Add initially as a copy of the script used on the ccimx8x platform.

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-09-29 18:52:29 +02:00
Gonzalo Ruiz 2e375b2e3f u-boot-dey: [cosmetic] change permissions for install_linux_fw_uuu.sh
Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-09-29 18:52:29 +02:00
Hector Palacios cc2df395c5 uboot: ccimx6ul: rename variable for single MTD system partition
Rename from 'ubisysvols' to 'singlemtdsys'.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-29 13:44:50 +02:00
Hector Palacios fa3028a17e uboot: install sd/usb: convert double condition in a simpler single condition
Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-29 13:44:50 +02:00
Hector Palacios f3ae964d10 uboot: cc6ul: force erase of partitions before update on install scripts
Install scripts may rework the partition table basing on the value of
env variables. Information of UBI volumes may remain on the NAND that
could later not correspond to the new partition table.
Make sure the MTD partitions are erased prior to updating:
- For Multi-MTD, append '-e' option to the update command.
- For Single-MTD, erase the system partition.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-29 13:44:50 +02:00
Hector Palacios f647e6d442 uboot: add dualboot support to fw install script from SD/USB
Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-7649
2021-09-24 09:42:59 +02:00
Hector Palacios dae2b5000a uboot: add dualboot support to uuu firmware install script
Check the status of 'dualboot' env variable.
If set to "yes", use the dualboot partition table in the script and
restore the variable (default is "no") after resetting the environment.
Also, for dualboot, there's no need to wipe the recovery partition or
boot into recovery mode.

For dualboot, this script programs both systems A and B with the same
images.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-7649
2021-09-24 09:42:50 +02:00
Hector Palacios 85d55a70a2 uboot: use ssh protocol when using Digi internal MTK remote
Commit c33fc8a7fe wrongly used
https protocol when using MTK remote when it should have been
ssh.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-16 12:53:09 +02:00
Gonzalo Ruiz 4502004cd7 conf: machine: add flexSPI overlay to CC8X/CC8M
https://onedigi.atlassian.net/browse/DEL-7584

Signed-off-by: Gonzalo Ruiz <Gonzalo.Ruiz@digi.com>
2021-09-15 15:58:12 +02:00
Gabriel Valcazar 42cab22b95 ccimx6: add "pam" to DISTRO_FEATURES
This is necessary for images that have SELinux enabled. Aside from changing
some package configurations and including an additional library in the rootfs,
this change has no apparent effects on the core functionality of the system.

https://onedigi.atlassian.net/browse/DEL-7641

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-09-15 10:19:14 +02:00
Gabriel Valcazar 32a39c7910 linux-dey: add support for configuration fragments
This allows users to apply small changes to our kernel configuration without
having to create a completely new defconfig. Use a simplified version of the
kernel-yocto.bbclass implementation.

https://onedigi.atlassian.net/browse/DEL-6706

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-09-15 10:16:28 +02:00
Gabriel Valcazar abba0948a9 refpolicy: adapt reference policy to DEY prebuilt image features
The default policy provided by meta-selinux breaks a lot of the features in
DEY, so adapt it to make most features work. Note that this is simply an
example, end users should create their own policies for their own needs.

Make these changes toggleable so that users can use the reference policy
instead.

https://onedigi.atlassian.net/browse/DEL-7641

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-09-15 10:16:28 +02:00
Gabriel Valcazar 96f54105d3 ccimx6/6ul: add "firmware-imx-regulatory" package
This package includes a script that is executed by a udev rule that we
currently include in our sysvinit images. Without it, the regulatory firmware
mechanism is broken and an error appears when booting the system.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-09-13 16:42:35 +02:00
Gabriel Valcazar c26d78d7a1 firmware-imx: install firmware loading scripts regardless of the init manager
When we added the SDMA fw systemd service, we accidentally made it so that all
scripts were installed only when using systemd. These files are still needed
when using sysvinit, so correct this change.

While at it, include the SDMA fw service in firmware-imx-sdma's FILES.

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
2021-09-13 16:42:22 +02:00
Hector Palacios 05d21a1310 u-boot: boot.txt: move dualboot checks to the top
When DualBoot mechanism is enabled and an update is pending,
the boot script needs to change certain variables and save the
environment.
The regular boot script already changes a number of variables,
such as 'extra_bootargs' and 'overlays' by appending strings to
the already existing values. Saving the envionment may make these
grow endlessly with each iteration of the boot script.

For this reason, move the DualBoot check as the first thing in
the script, save the environment if needed, and then continue
with the normal flow, that changes variables before booting
but doesn't save them.

On certain scripts, this allows us to get rid of some instructions
for resetting the overlays variable.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-09 17:38:44 +02:00
Hector Palacios 27c13055eb uboot: ccimx6ul: decide on using UBI vols basing on ubisysvols
The script required the passing of option '-b' for setting up the
target to use a single MTD partition and multiple UBI volumes.
If a target however already has the variable 'ubisysvols' set to
'yes' but this parameter is forgotten when calling the script, the
partition layout would change to default (several MTD partitions).

Remove the recently added '-b' option and make the script decide
basing on the current value of 'ubisysvols' variable.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>
2021-09-09 17:38:44 +02:00
Hector Palacios 13df57c1fc ccimx6ul: add support for ubisysvols on SD/USB install scripts
The script preserves the current value of env variable 'ubisysvols'
so that the new partition script generates the appropriate partition
table before proceeding with the update operations.
If using a UBI volumes layout, the script will not erase the partitions.

Signed-off-by: Hector Palacios <hector.palacios@digi.com>

https://onedigi.atlassian.net/browse/DEL-7614
2021-09-09 17:38:44 +02:00