Commit Graph

209 Commits

Author SHA1 Message Date
Oliver Smith 3140454c3c sftp-server: new package
Package OpenSSH's sftp-server program, so we can install it as
dependency of dropbear in a future patch. Once sftp-server is installed,
the scp tool from OpenSSH can be used with the SFTP protocol, without
enabling the legacy flag for the legacy SCP protocol.

The sftp-server binary is 126K in size.

After packaging this, I realized that we could also have used
the openssh-sftp-server package from poky:
https://gitea.sysmocom.de/sysmo-bts/generic-poky/src/branch/pyro/meta/recipes-connectivity/openssh
But let's use this extra package now, it uses the most recent OpenSSH
source and doesn't build the rest of OpenSSH which we don't need.

Related: SYS#6403
Change-Id: I376bc31413935f7a560afd916a623228550dc6fe
2023-05-03 15:30:56 +02:00
Oliver Smith 7588bee7fa gpsd: fix gpsd.hotplug udev rules
Adjust the bundled udev rules to use gpsd.hotplug instead of
gpsd.hotplug.wrapper, as the wrapper has been removed upstream.

Fix for:
systemd-udevd[1004]: failed to execute '/lib/udev/gpsd.hotplug.wrapper' '/lib/udev/gpsd.hotplug.wrapper': No such file or directory

Fixes: 6a8f914b ("gpsd: upgrade to 3.24")
Related: 711a3f8412
Related: SYS#6222
Change-Id: I95c9d1537a9a7090b1239aecef14f25f8d7ca554
2023-05-03 14:02:59 +02:00
Oliver Smith d69834d507 openvpn: bring back openvpn.service file
Restore the openvpn.service file from packaging of openvpn 2.3.6, so we
can still start it the same way (as currently described in manuals).

Related: SYS#6303
Change-Id: I2cf96bc1ecca79ae98be1181fbd3c15edad15ca8
2023-05-03 13:57:29 +02:00
Harald Welte d950005138 openvpn: upgrade openvpn from 2.3.6 to 2.5.8
Our openvpn server has meanwhile been migrated to 2.5.x, and
establishing backwards compatibility with 2.3.x means we have to
disable ciphers + tls versions that are no longer considered secure.

Related: SYS#6303
2023-05-03 13:56:42 +02:00
Oliver Smith fae46a5d5a gpsdate: upgrade to fix build against new gpsd
Upgrade gpsdate to the latest commit, where the build against newer gpsd
was fixed.

Related: SYS#6222
Change-Id: Ia83008933a1e94e556b6908903ad7b63759fc1e3
2023-05-03 13:56:32 +02:00
Oliver Smith 0543e7992b gpsd: upgrade to 3.24
Usually when upgrading packages, we just copy the upstream package and
adjust it slightly. I've looked at the upstream package here:
https://git.openembedded.org/meta-openembedded/tree/meta-oe/recipes-navigation/gpsd
(HEAD at f3d14d41ad60d2d52a0ea795ae10fe0882146ed1)

But as I compared both packaging trees, I found ours is quite different
than upstream. We have a lot of additional patches, still use python2 and
have these extra files:

├── gpsd
│   ├── 60-gpsd.rules
│   ├── gpsd
│   ├── gpsd-default
│   ├── gpsd.service
│   ├── oc2g
│   │   ├── gpsd-default
│   │   └── gpsd.service
│   ├── sysmobts2100
│   │   └── gpsd-default
│   ├── sysmobts-v2
│   │   └── gpsd-default
│   └── sysmocom-idu
│       └── gpsd-default

Therefore I didn't start with the upstream packaging but instead
increased the gpsd version in our packaging and went through each patch
to see if it can be dropped or needs to be forward ported.

Change the version by renaming the .bb file. Reset the version of the
recipe (PR) back to "r0" again, as it is common practice after changing
the package version. The previous value "r3.20" looked a bit like a
package version, but it's not that.

Rebase patches:
* 0001-gps2udp-Add-a-label-timestamp-and-mac-address-to-eac.patch
* 0002-gps2udp-leave-argv-untouched.patch (leave-argv-untouched.patch)
* 0003-tsip-configure-and-enable-1PPS.patch (gpsd-tsip-pps.patch)

Add build fixes:
* 0004-SConscript-force-use-of-pthread.patch

Drop patches:
* 0001-SConstruct-prefix-includepy-with-sysroot-and-drop-sy.patch:
  unused in previous version
* 0001-SConstruct-disable-html-and-man-docs-building-becaus.patch:
  doesn't apply, instead disable docs building via manbuild='no'
* 0002-SConstruct-respect-sysroot-also-in-SPLINTOPTS.patch:
  not needed anymore (no splintopts line in 3.24)
* gpsd-3.3-ldflags.patch:
  fixed upstream
* no-rpath-please.patch:
  doesn't apply, not needed anymore (see 5df2de36 in gpsd.git)

Related: https://docs.yoctoproject.org/bitbake/2.2/bitbake-user-manual/bitbake-user-manual-ref-variables.html#term-PR
Related: SYS#6222
Change-Id: I2debe481c5f1cc4ee8290ad0dc883d6a4ea73741
2023-05-03 13:56:23 +02:00
Oliver Smith f9db945110 gpsd: cosmetic fixes in SRC_URI, EXTRA_OESCONS
Change-Id: Ic5af4db7bbce6ba0bf55387265fdfc95a1761230
2023-05-03 13:56:09 +02:00
Oliver Smith ea8cea6735 git clones: update git.sysmocom.de urls
Related: SYS#6022
Change-Id: I1ebd33c26df99e288a281bd2946d6fe43a6a1c25
2022-09-16 15:31:56 +02:00
Oliver Smith 53dc1b9dfb git clones: protocol=git -> protocol=https
Related: SYS#6022
Change-Id: I3287ee8e7c688d900ee2821cb603a41a8d9067a7
2022-09-16 15:31:46 +02:00
Harald Welte b417110988 Revert "migrate from git://github.com to https://github.com"
This reverts commit 8b9e304c23.

git:// doesn't have the same meaning to the bitbake fetcher than
it has to the rest of the world.
2022-01-11 12:18:35 +01:00
Harald Welte 8b9e304c23 migrate from git://github.com to https://github.com
The unauthenticated git protocol on port 9418 is no longer supported.

Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
2022-01-11 11:15:45 +01:00
Oliver Smith 50145d6174 ca-certificates: fix busybox error in post-upgrade
Do not try to use "mktemp --tmpdir" in the update-ca-certificates
script. This broke upgrading, as the script gets executed during
post-upgrade.

Related: 66951d3b45
Related: SYS#5283
2021-11-16 08:43:45 +01:00
Harald Welte 2b77d822e7 ca-certificates: Fix back-port from modern OE/poky
We cannot just use the new upstream package but have to deal a bit
with package naming convention changes.

Fixes: cbc0de86f4
2021-11-05 12:17:34 +00:00
Oliver Smith cbc0de86f4 ca-certificates: upgrade to 20211016
Import latest version from openembedded-core.git, which has the expired
"DST Root CA X3" removed.

Fixes: OS#5259
Related: 5b83fd9847
Related: 9c351e7a0b
Related: https://github.com/openembedded/openembedded-core/tree/hardknott/meta/recipes-support/ca-certificates/ca-certificates
2021-11-05 12:38:39 +01:00
Harald Welte dbe8d4b62e ca-certificates: Migrate from DST_X3 to ISRG_X1
Related: OS#5259
Change-Id: I8112e5ba3651ab537a87df5e92cfbc4214d54ab3
2021-11-05 12:37:22 +01:00
Daniel Willmann d66c6f7d7b oc2g: Fix gpsd to use the correct baudrate and port
The autobauding feature of gpsd would not work even once the correct port was
set. The systemd service file now sets the baudrate of 115200 before starting
gpsd.
2019-03-20 17:29:53 +01:00
Daniel Willmann 1c914678ff python-enum: Fix error fetching from HTTP instead of HTTPS
Resolving pypi.python.org (pypi.python.org)... 151.101.112.223, 2a04:4e42:1b::223
Connecting to pypi.python.org (pypi.python.org)|151.101.112.223|:80... connected.
HTTP request sent, awaiting response... 403 SSL is required
2019-01-16 10:29:27 ERROR 403: SSL is required.
2019-02-01 10:31:15 +01:00
Pau Espin 8e88c736b0 atftp: Update recipe to latest meta-oe to fix compilation issues 2018-08-10 12:41:49 +02:00
Pau Espin 04f60f5aa6 libksba: Remove old version, newer provided by poky pyro 2018-08-08 13:24:37 +02:00
Pau Espin 60f4b04f42 gnupg: Remove old 2.0.19 version
Nowadays we depend on poky pyro, which comes with newer v2.1.18.
2018-08-07 16:35:14 +02:00
Pau Espin ab9e4afa3a gpsdate: use systemd.bbclass
Also update SRCREV to one commit forward, which fixes installing the
service file when using systemctl enable (which OE uses).
2017-08-04 10:43:19 +02:00
Pau Espin 5ba7c52b06 gpsd: Update udev rules syntax for u-blox 4
Fixes following error during boot:
systemd-udevd[1953]: Invalid rule /etc/udev/rules.d/60-gpsd.rules:43: unknown key 'SYSFS{idVendor}'
2017-08-04 10:43:19 +02:00
Pau Espin 8ef336e223 Replace base_contains with bb.utils.contains
base_contains is marked as deprecated and the build log outputs lots of lines stating so.
2017-08-04 10:43:19 +02:00
Pau Espin 7990e01fcd Replace systemd_unitdir/system with systemd_system_unitdir 2017-08-04 10:43:19 +02:00
Max ca35320a2d gpsd: fix build by adding missing *systemd stuff 2017-08-04 10:43:19 +02:00
Max 03d679aaab Attempt to fix gpsd build
Backport changes from
upstream (https://layers.openembedded.org/layerindex/branch/master/layer/meta-oe/):

* add systemd support
* remove obsolete idu-specific install
* remove copy-pasted commented strings to simplifa comparison
2017-08-04 10:43:19 +02:00
Max 15cb1d0902 Use gpsd.service for sysmobts2100
This should superceed the broken initscript and fix gpsd startup.
2017-08-04 10:43:19 +02:00
Harald Welte 8dfafd7aca n2n: Add systemd integration (service file + start script)
This allows for configuration of tunnels by putting config files into
/etc/n2n/ similar to what we're used to from /etc/openvpn/
2017-08-04 10:43:19 +02:00
Harald Welte 203b5da2b5 n2n: RRECOMMEND the tun kernel module
this way the tun module should be automatically installed with n2n
together.
2017-08-04 10:43:19 +02:00
Harald Welte 8777422cfc Add recipe for n2n L2-in-L3 peer-to-peer VPN protocol
This is a basic recipe, not including any configuration or systemd
service files yet.
2017-08-04 10:43:19 +02:00
Harald Welte 59aa24ab9a gpsd configuration for sysmobts2100 2017-06-13 14:30:49 +02:00
Holger Hans Peter Freyther 789c9a650c iperf: Upgrade to 2.0.9 to solve c++ compilation issue
2.0.5 is known not to build with newer G++/libstdc++. Upgrade to
version 2.0.9, fix compilation issue on arm for C code and let's
see..
2017-04-17 06:59:31 +02:00
Holger Hans Peter Freyther 2b8949c52e ifupdown: Build without access to dpkg-architecture
Take a patch from newer version in Poky to hardcode the os to
Linux. This surfaced because of the more strict sysroot in newer
versions of Poky.
To avoid some bad surprises I am continuing to use this version
of ifupdown instead of the newer one in Poky.
2017-04-17 06:59:24 +02:00
Holger Hans Peter Freyther 39afcd35ae rauc: Make gdbus-codegen available to the build process
Require glib-2.0-native so that we can call gdbus-codegen from
the build process. Needed for newer versions of poky.
2017-04-16 20:09:51 +02:00
Holger Hans Peter Freyther 49153b2904 gpsd: Make sure that LDFLAGS are passed to scons
In newer Poky the LDFLAGS are not passed through the $CC variable
anymore and we need to make sure scons is picking them up. Take an
old Gentoo patch for it.
2017-04-16 20:08:50 +02:00
Daniel Willmann 9833551361 sysmocom-bsc: Install dnsmasq in the image with correct config
Ticket: SYS#3081, SYS#2439
2016-11-28 17:36:48 +01:00
Harald Welte 17758a0de8 update gpsdate to fixed init script revision
... using variables from /etc/default/gpsdate not only in systemd
service file, but also init script.
2016-08-01 14:02:18 +02:00
Harald Welte 7c07fdaa46 barebox-state.bb: add missing spaces at end of line of FILES lines 2016-06-23 09:23:40 +02:00
Harald Welte 4a8db6dbea update barebox-state to current dt-utils master
which (at least for owhw-v2) fixes the automatic discovery of the
bootstate backend EEPROM. I suspect it should now also work without
the hardc-de-layout-values.patch on sysmobts-v2 and sysmocom-odu, but
that remains to be tested (and thus the patches remain).
2016-06-23 00:41:12 +02:00
Harald Welte 8cde214b95 rauc: support OWHW 2016-06-23 00:39:11 +02:00
Holger Hans Peter Freyther a8b9551257 ca-cacert-rootcert: Add the letsencrypt certificate here as well
This is not quite "ca-cacert" anymore, more like "ca-sysmocom" for
the root certificates needed for us.

Fixes: SYS#2499
2016-04-09 18:25:03 +02:00
Holger Hans Peter Freyther 29ba452c5f lmsensors-apps: The code vanished once again, move to fedora 2016-02-20 19:36:25 +01:00
Holger Hans Peter Freyther 5a1dca4d60 ca-certificates: Try to fetch it from launchpad
The angstrom mirror is very slow in finding the file (no dirhash?),
let's see if canonical is any better in serving the file.
2015-11-25 17:52:04 +01:00
Holger Hans Peter Freyther 85f60e5a65 ca-certificates: The source has vanished from debian
It was never a released version so it is not showing up on the
archive.debian.org page. Let's move to angstrom for our stable
source of it.
2015-11-25 17:28:42 +01:00
Holger Hans Peter Freyther 0700c55790 lm-sensors: Attempt to move to a URI where the code still exists
lm-sensors.org seems to have vanished from the internet. Start to
use a copy what was found by googling.
2015-11-21 10:15:57 +00:00
Jan Luebbe ecff51c389 rauc: update to newer git version for file reuse support
The new version searches mounted slots for matching files referenced by
the new manifest. This avoids downloading files we already have on the
system.

Additionally, the new version includes better error handling and more
unit tests.

Signed-off-by: Jan Luebbe <jluebbe@debian.org>
2015-09-08 14:35:47 +02:00
Holger Hans Peter Freyther c0d9e409d9 rauc-native: Fix the building of the rauc-native tool
Drop system.conf from the SRC_URI and link the right (current
test certificates) to be used.
2015-08-08 13:51:43 +02:00
Harald Welte 78b77de220 gpsdate: Update to most recent version and sub-package gps-watchdog 2015-08-05 11:20:05 +02:00
Harald Welte 4504966c7e import python-smbus from meta-oe/meta-python
As we have a lot of I2C peripherals, it is useful to be able to access
them from a scripting language.
2015-08-01 18:43:55 +02:00
Jan Luebbe e8097c044e rauc: update to newer version
The new version fixes a possible free of an uninitialized pointer.
2015-07-02 22:10:21 +02:00