| *** lexano <lexano!~lexano@cpe00e06722f0e4-cm98524a70e35e.cpe.net.cable.rogers.com> has joined #yocto | 00:24 | |
| *** lexano <lexano!~lexano@cpe00e06722f0e4-cm98524a70e35e.cpe.net.cable.rogers.com> has quit IRC (Remote host closed the connection) | 00:56 | |
| *** jwillikers <jwillikers!~jwilliker@ics141-1.icsincorporated.com> has joined #yocto | 01:27 | |
| *** Crofton_ <Crofton_!sid401373@lymington.irccloud.com> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** rmmr <rmmr!sid240755@helmsley.irccloud.com> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** CosmicPenguin <CosmicPenguin!sid489106@uxbridge.irccloud.com> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** aeroraptor <aeroraptor!sid503835@ilkley.irccloud.com> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** dl9pf <dl9pf!sid395223@helmsley.irccloud.com> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** moto-timo <moto-timo!sid495702@fedora/ttorling> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** smurray <smurray!sid98062@hampstead.irccloud.com> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** woky <woky!~woky@li1651-31.members.linode.com> has quit IRC (Ping timeout: 260 seconds) | 01:34 | |
| *** CosmicPenguin <CosmicPenguin!sid489106@id-489106.uxbridge.irccloud.com> has joined #yocto | 01:34 | |
| *** smurray <smurray!sid98062@id-98062.hampstead.irccloud.com> has joined #yocto | 01:34 | |
| *** aeroraptor <aeroraptor!sid503835@id-503835.ilkley.irccloud.com> has joined #yocto | 01:34 | |
| *** dl9pf <dl9pf!sid395223@id-395223.helmsley.irccloud.com> has joined #yocto | 01:34 | |
| *** rmmr <rmmr!sid240755@id-240755.helmsley.irccloud.com> has joined #yocto | 01:34 | |
| *** woky <woky!~woky@li1651-31.members.linode.com> has joined #yocto | 01:34 | |
| *** raghavgururajan <raghavgururajan!9fd51d1ea8@user/raghavgururajan> has quit IRC (Excess Flood) | 01:35 | |
| *** moto-timo <moto-timo!sid495702@fedora/ttorling> has joined #yocto | 01:35 | |
| *** raghavgururajan <raghavgururajan!9fd51d1ea8@user/raghavgururajan> has joined #yocto | 01:35 | |
| *** Crofton_ <Crofton_!sid401373@id-401373.lymington.irccloud.com> has joined #yocto | 01:35 | |
| *** camus <camus!~Instantbi@58.246.136.202> has joined #yocto | 02:01 | |
| *** jwillikers <jwillikers!~jwilliker@ics141-1.icsincorporated.com> has quit IRC (Remote host closed the connection) | 02:07 | |
| *** xmn <xmn!~xmn@cpe-72-225-198-203.nyc.res.rr.com> has quit IRC (Quit: ZZZzzz…) | 02:29 | |
| *** fleg <fleg!64bf4386e9@user/fleg> has quit IRC (Remote host closed the connection) | 02:59 | |
| *** camus1 <camus1!~Instantbi@58.246.136.202> has joined #yocto | 03:05 | |
| *** camus <camus!~Instantbi@58.246.136.202> has quit IRC (Ping timeout: 260 seconds) | 03:05 | |
| *** camus1 is now known as camus | 03:05 | |
| *** jmiehe1 <jmiehe1!~Thunderbi@user/jmiehe> has joined #yocto | 03:11 | |
| *** jmiehe <jmiehe!~Thunderbi@user/jmiehe> has quit IRC (Ping timeout: 252 seconds) | 03:12 | |
| *** jmiehe1 is now known as jmiehe | 03:12 | |
| *** Tokamak_ <Tokamak_!~Tokamak@172.56.2.32> has quit IRC (Quit: My MacBook has gone to sleep. ZZZzzz…) | 03:34 | |
| *** mfe <mfe!~marc@ipagstaticip-ad9375f2-382c-b511-8ac1-9541f69fe50f.sdsl.bell.ca> has quit IRC (Ping timeout: 260 seconds) | 04:19 | |
| *** dtometzki <dtometzki!~dtometzki@fedora/dtometzki> has quit IRC (Quit: ZNC 1.8.2 - https://znc.in) | 04:38 | |
| *** dtometzki <dtometzki!~dtometzki@fedora/dtometzki> has joined #yocto | 04:40 | |
| *** mfe <mfe!~marc@ipagstaticip-ad9375f2-382c-b511-8ac1-9541f69fe50f.sdsl.bell.ca> has joined #yocto | 04:43 | |
| *** alessioigor <alessioigor!~alessioig@185.178.95.254> has joined #yocto | 05:17 | |
| *** alessioigor <alessioigor!~alessioig@185.178.95.254> has quit IRC (Client Quit) | 05:19 | |
| *** iceaway <iceaway!~iceaway@c188-149-180-24.bredband.tele2.se> has joined #yocto | 05:20 | |
| *** iceaway <iceaway!~iceaway@c188-149-180-24.bredband.tele2.se> has quit IRC (Client Quit) | 05:23 | |
| *** iceaway <iceaway!~pelle@185.106.183.100> has joined #yocto | 05:24 | |
| iceaway | Good morning! I am in the process of migrating from Sumo to Dunfell, and when I have generated the SDK using bitbake -c populate_sdk <image_name>, with the Dunfell version the generated SDK toolchain claims that my CPU does not have an FPU when triyng to compile with -mfloat-abi=hard. We use both 32-bit and 64-bit applications, and this is an issue with the 32-bit toolchain. I'm a bit puzzled where to even | 05:27 |
|---|---|---|
| iceaway | start looking. | 05:27 |
| *** alessioigor <alessioigor!~alessioig@185.178.95.254> has joined #yocto | 05:38 | |
| *** alessioigor <alessioigor!~alessioig@185.178.95.254> has quit IRC (Client Quit) | 05:39 | |
| *** bluelightning <bluelightning!~paul@2406:e003:1528:db01:30:4358:33f4:7690> has quit IRC (Ping timeout: 245 seconds) | 05:50 | |
| *** Guest3644 <Guest3644!~Guest36@14.139.93.243> has joined #yocto | 06:00 | |
| barath | iceaway: I hope someone else can chime in and give you the shortcut solution, but I'd grep through poky (?) and check where the error message about not having an FPU is generated and then work backwards to figure out on what basis it decides that | 06:07 |
| iceaway | barath: The error message comes from g++, so not sure there is a way to backtrace the error message itself to the Yocto build. Feels more like the 32-bit version of the toolchain is not build with FPU support, but I'm guessing here. | 06:15 |
| Guest3644 | Hi folks, Is there anyway to use an externally buiit toolchain in yocto except meta-sorcery one? | 06:16 |
| *** Schlumpf <Schlumpf!~Schlumpf@62.157.232.203> has joined #yocto | 06:17 | |
| barath | Hm. Then it almost sounds like after the version bump the GCC behavior has changed and the flag mightve changed 🤔 but I can't pretend to have much experience with exactly that, unfortunately | 06:17 |
| *** kpo <kpo!~kpo@bwu34.internetdsl.tpnet.pl> has quit IRC (Read error: Connection reset by peer) | 06:17 | |
| *** goliath <goliath!~goliath@user/goliath> has joined #yocto | 06:19 | |
| *** kpo <kpo!~kpo@bwu34.internetdsl.tpnet.pl> has joined #yocto | 06:22 | |
| *** adrian_ <adrian_!~F_Adrian@62.32.0.69> has joined #yocto | 06:22 | |
| *** rob_w <rob_w!~bob@host-82-135-31-73.customer.m-online.net> has joined #yocto | 06:27 | |
| *** fleg <fleg!64bf4386e9@user/fleg> has joined #yocto | 06:31 | |
| *** Guest3644 <Guest3644!~Guest36@14.139.93.243> has quit IRC (Quit: Client closed) | 06:32 | |
| *** dtometzki <dtometzki!~dtometzki@fedora/dtometzki> has quit IRC (*.net *.split) | 06:34 | |
| *** otavio <otavio!~otavio@201-34-65-230.user3p.brasiltelecom.net.br> has quit IRC (*.net *.split) | 06:34 | |
| *** Bardon <Bardon!~Bardon@user/Bardon> has quit IRC (*.net *.split) | 06:34 | |
| *** zeddii <zeddii!~zeddii@cpe04d4c4975b80-cmf4c11490699b.cpe.net.cable.rogers.com> has quit IRC (*.net *.split) | 06:34 | |
| *** JaMa <JaMa!~martin@ip-109-238-218-228.aim-net.cz> has quit IRC (*.net *.split) | 06:34 | |
| *** chrfle <chrfle!~chrfle@217-209-195-249-no206.tbcn.telia.com> has quit IRC (*.net *.split) | 06:34 | |
| *** troth <troth!~troth@c-24-8-35-226.hsd1.co.comcast.net> has quit IRC (*.net *.split) | 06:34 | |
| *** wooosaii <wooosaii!~wooo@89-212-21-243.static.t-2.net> has quit IRC (*.net *.split) | 06:34 | |
| *** nerdboy <nerdboy!~nerdboy@gentoo/developer/nerdboy> has quit IRC (*.net *.split) | 06:34 | |
| *** dlan <dlan!~dennis@gentoo/developer/dlan> has quit IRC (*.net *.split) | 06:34 | |
| *** marka <marka!~marka@198-84-181-245.cpe.teksavvy.com> has quit IRC (*.net *.split) | 06:34 | |
| *** warthog9 <warthog9!warthog9@proxy.monkeyblade.net> has quit IRC (*.net *.split) | 06:34 | |
| *** tangofoxtrot <tangofoxtrot!~tangofoxt@user/tangofoxtrot> has quit IRC (*.net *.split) | 06:34 | |
| *** mcfrisk <mcfrisk!mcfrisk@kapsi.fi> has quit IRC (*.net *.split) | 06:34 | |
| *** Schlumpf <Schlumpf!~Schlumpf@62.157.232.203> has quit IRC (Quit: Client closed) | 06:35 | |
| *** Schlumpf <Schlumpf!~Schlumpf@62.157.232.203> has joined #yocto | 06:36 | |
| *** g0hl1n_ <g0hl1n_!~g0hl1n@bubus.at> has quit IRC (Remote host closed the connection) | 06:43 | |
| *** frieder <frieder!~frieder@i59F4B31D.versanet.de> has joined #yocto | 06:44 | |
| *** mckoan|away is now known as mckoan | 06:46 | |
| mckoan | good morning | 06:46 |
| *** camus <camus!~Instantbi@58.246.136.202> has quit IRC (Ping timeout: 265 seconds) | 06:46 | |
| *** camus <camus!~Instantbi@58.246.136.202> has joined #yocto | 06:47 | |
| *** Ad0 <Ad0!~Ad0@93.124.245.194> has joined #yocto | 06:51 | |
| *** dtometzki <dtometzki!~dtometzki@fedora/dtometzki> has joined #yocto | 06:56 | |
| *** otavio <otavio!~otavio@201-34-65-230.user3p.brasiltelecom.net.br> has joined #yocto | 06:56 | |
| *** Bardon <Bardon!~Bardon@user/Bardon> has joined #yocto | 06:56 | |
| *** zeddii <zeddii!~zeddii@cpe04d4c4975b80-cmf4c11490699b.cpe.net.cable.rogers.com> has joined #yocto | 06:56 | |
| *** JaMa <JaMa!~martin@ip-109-238-218-228.aim-net.cz> has joined #yocto | 06:56 | |
| *** chrfle <chrfle!~chrfle@217-209-195-249-no206.tbcn.telia.com> has joined #yocto | 06:56 | |
| *** troth <troth!~troth@c-24-8-35-226.hsd1.co.comcast.net> has joined #yocto | 06:56 | |
| *** nerdboy <nerdboy!~nerdboy@gentoo/developer/nerdboy> has joined #yocto | 06:56 | |
| *** dlan <dlan!~dennis@gentoo/developer/dlan> has joined #yocto | 06:56 | |
| *** marka <marka!~marka@198-84-181-245.cpe.teksavvy.com> has joined #yocto | 06:56 | |
| *** warthog9 <warthog9!warthog9@proxy.monkeyblade.net> has joined #yocto | 06:56 | |
| *** tangofoxtrot <tangofoxtrot!~tangofoxt@user/tangofoxtrot> has joined #yocto | 06:56 | |
| *** mcfrisk <mcfrisk!mcfrisk@kapsi.fi> has joined #yocto | 06:56 | |
| *** jpnurmi <jpnurmi!jpnurmi@user/jpnurmi> has quit IRC (Remote host closed the connection) | 06:59 | |
| *** jpnurmi <jpnurmi!jpnurmi@user/jpnurmi> has joined #yocto | 07:01 | |
| *** rfuentess <rfuentess!~rfuentess@static-5-51-117-151.ftth.abo.bbox.fr> has joined #yocto | 07:02 | |
| *** bps <bps!~bps@27-reverse.bang-olufsen.dk> has joined #yocto | 07:11 | |
| *** manuel1985 <manuel1985!~manuel198@62.99.131.178> has joined #yocto | 07:21 | |
| *** zyga <zyga!~zyga@31.0.173.147> has joined #yocto | 07:24 | |
| *** pgowda_ <pgowda_!uid516182@id-516182.ilkley.irccloud.com> has joined #yocto | 07:26 | |
| JosefHolzmayrThe | yo dudx | 07:29 |
| mckoan | hey JosefHolzmayrThe | 07:33 |
| *** zyga <zyga!~zyga@31.0.173.147> has quit IRC (Remote host closed the connection) | 07:34 | |
| *** zyga <zyga!~zyga@31.0.173.147> has joined #yocto | 07:36 | |
| *** alessioigor <alessioigor!~alessioig@185.178.95.254> has joined #yocto | 07:38 | |
| *** alessioigor <alessioigor!~alessioig@185.178.95.254> has quit IRC (Client Quit) | 07:38 | |
| *** xmn <xmn!~xmn@cpe-72-225-198-203.nyc.res.rr.com> has joined #yocto | 07:39 | |
| *** leon-anavi <leon-anavi!~Leon@78.130.197.211> has joined #yocto | 08:02 | |
| *** gsalazar <gsalazar!~gsalazar@173.111.90.149.rev.vodafone.pt> has joined #yocto | 08:06 | |
| *** camus1 <camus1!~Instantbi@58.246.136.202> has joined #yocto | 08:14 | |
| *** camus <camus!~Instantbi@58.246.136.202> has quit IRC (Ping timeout: 265 seconds) | 08:16 | |
| *** camus1 is now known as camus | 08:16 | |
| *** frieder <frieder!~frieder@i59F4B31D.versanet.de> has quit IRC (Ping timeout: 265 seconds) | 08:30 | |
| *** kanavin <kanavin!~Alexander@95.168.156.18> has quit IRC (Remote host closed the connection) | 08:33 | |
| *** florian <florian!~florian@port-217-146-132-69.static.as20676.net> has joined #yocto | 08:39 | |
| *** kanavin <kanavin!~Alexander@2a02:2454:29b:3b00:d35d:e3cf:58b5:748b> has joined #yocto | 08:40 | |
| *** frieder <frieder!~frieder@i59F4B31D.versanet.de> has joined #yocto | 08:44 | |
| *** goliath <goliath!~goliath@user/goliath> has quit IRC (Quit: SIGSEGV) | 08:54 | |
| coldspark29[m] | Can anyone clarify a few things on Secure Boot for me? I am currently trying to sign images following this guide https://boundarydevices.com/high-assurance-boot-hab-i-mx8m-edition/. It works for U-Boot but not for the uImage of the kernel. I can successfully complete the described signing process, but the image is not accepted by U-Boot. One possible reason I see is that we are using a uImage instead of a zImage. On the internet you find a | 09:07 |
| coldspark29[m] | lot of misguiding information stating that zImages can't be booted by U-Boot, but then others say you can by adding CONFIG_CMD_BOOTZ=y to the kernel configuration. Does signing not work with uImages? A zImage can be anything from what I understand, some image or a compressed uImage with the gzip compression method. Is that correct? So do I only have to change the mkimage command to -C gzip to get a zImage? | 09:07 |
| coldspark29[m] | s/Can anyone clarify a few things on Secure Boot for me? I am currently trying to sign images following this guide https://boundarydevices.com/high-assurance-boot-hab-i-mx8m-edition/. It works for U-Boot but not for the uImage of the kernel. I can successfully complete the described signing process, but the image is not accepted by U-Boot. One possible reason I see is that we are using a uImage instead of a zImage. On the internet you find | 09:07 |
| coldspark29[m] | a lot of misguiding information stating that zImages can't be booted by U-Boot, but then others say you can by adding CONFIG_CMD_BOOTZ=y to the kernel configuration. Does signing not work with uImages? A zImage can be anything from what I understand, some image or a compressed uImage with the gzip compression method. Is that correct? So do I only have to change the mkimage command to -C gzip to get a zImage?/Can anyone clarify a few things | 09:07 |
| coldspark29[m] | on Secure Boot for me? I am currently trying to sign images following this guide https://boundarydevices.com/high-assurance-boot-hab-i-mx8m-edition/. It works for U-Boot but not for the uImage of the kernel. I can successfully complete the described signing process, but the image is not accepted by U-Boot. One possible reason I see is that we are using a uImage instead of a zImage. On the internet you find a lot of misguiding information | 09:07 |
| coldspark29[m] | stating that zImages can't be booted by U-Boot, but then others say you can by adding `CONFIG_CMD_BOOTZ=y` to the kernel configuration. Does signing not work with uImages? A zImage can be anything from what I understand, some image or a compressed uImage with the gzip compression method. Is that correct? So do I only have to change the `mkimage` command to `-C gzip` to get a zImage?/ | 09:07 |
| qschulz | coldspark29[m]: aarch64 kernel images are named Image and they are booted with booti. You can also used fitimages which is VERY likely what you will want to do for secureboot, and fitimages are booted with bootm. | 09:31 |
| *** camus <camus!~Instantbi@58.246.136.202> has quit IRC (Ping timeout: 245 seconds) | 09:34 | |
| *** camus <camus!~Instantbi@58.246.136.202> has joined #yocto | 09:34 | |
| coldspark29[m] | qschulz: Ah okay, currently we are booting with bootm. I am trying to convert the image to a zImage, but just adding gzip compression, which is probably not going to work. I am very new to the whole boot process in general. Been reading a lot last week. | 09:35 |
| coldspark29[m] | So I guess adding the compression and booting with bootz is not going to solve my problem. Another thing I was thinking is that signing a FIT image is not going to work with the above guide, because it already contains an IVT | 09:36 |
| coldspark29[m] | So I need to sign somewhere in the process I guess? | 09:37 |
| coldspark29[m] | * sign somewhere earlier in the | 09:37 |
| qschulz | coldspark29[m]: this guide is only for secureboot up until U-Boot | 09:41 |
| *** goliath <goliath!~goliath@user/goliath> has joined #yocto | 09:42 | |
| qschulz | coldspark29[m]: you need another guide for secureboot in and after U-boot (i.e. kernel+dtb+rootfs) | 09:42 |
| qschulz | All I can say is that most likely nothing is specific to imx8m at that point | 09:42 |
| qschulz | in which case, I can suggest the following talk https://www.youtube.com/watch?v=jtLQ8SzfrDU which explains the whole structure and what you're supposed to do | 09:43 |
| coldspark29[m] | Signing the kernel is described here at the bottom https://boundarydevices.com/high-assurance-boot-hab-dummies/#kernel_auth | 09:43 |
| coldspark29[m] | This is the older version for the i.MX6 | 09:43 |
| qschulz | it's not really technical but will give you an overview of which keys are doing what and stored where | 09:43 |
| coldspark29[m] | They use a zImage and we have a uImage | 09:44 |
| qschulz | yeah no, don't use this guide | 09:44 |
| coldspark29[m] | Ah I love Bootlin talks. They are usually really good | 09:45 |
| qschulz | just use U-Boot normal fitimages, put your Image in it, put your dtb, initramfs whatever | 09:45 |
| coldspark29[m] | They make the boot process seem fun ^^ | 09:45 |
| qschulz | then let U-Boot check the signature and all | 09:45 |
| coldspark29[m] | What is wrong with the guide? | 09:45 |
| qschulz | they use a SoC specific mechanism while there is no need for it | 09:46 |
| qschulz | though it might predate the U-Boot implementation of secureboot with fitimage or use vendor BSP | 09:46 |
| coldspark29[m] | So you say verification should work out of the box? | 09:46 |
| qschulz | anyway, in the talk you'll see, you need two sets of keys, one whose hash are in the SoC and one public key in U-Boot dtb that is used to check the fitimage signature | 09:46 |
| qschulz | since you validated the U-Boot with the SoC, you know you can trust the public key in it and use that one for checking the fitimage which contains the kernel and other things | 09:47 |
| coldspark29[m] | Hmm well I will have a look at the video. Hopefully I'll be a bit smarter then | 09:47 |
| qschulz | coldspark29[m]: you might need a few kconfig options selected but yeah, bootm $addr_fit_img will do the check if correctly configured | 09:48 |
| *** zen_coder <zen_coder!~zen_coder@2a02:8109:a280:2d8d:dc9e:1427:a97:e25a> has joined #yocto | 09:48 | |
| RP | kanavin: any idea why libnewt-python would be non-reproducible due to linking to libpthread in one case and not another? :/ | 09:57 |
| RP | kanavin: the empty pthread in glibc 2.34 is probably partly at fault but I don't know why we'd see this now | 09:58 |
| RP | kanavin: ah, it is building on debian11. I bet this is host leakage :( | 10:01 |
| *** nucatus <nucatus!~nucatus@lie62-2-78-196-130-58.fbx.proxad.net> has quit IRC () | 10:03 | |
| *** adrian__ <adrian__!~F_Adrian@165.225.27.22> has joined #yocto | 10:07 | |
| *** adrian_ <adrian_!~F_Adrian@62.32.0.69> has quit IRC (Ping timeout: 260 seconds) | 10:10 | |
| *** kpo <kpo!~kpo@bwu34.internetdsl.tpnet.pl> has quit IRC (Read error: Connection reset by peer) | 10:28 | |
| *** kpo <kpo!~kpo@bwu34.internetdsl.tpnet.pl> has joined #yocto | 10:32 | |
| *** zyga <zyga!~zyga@31.0.173.147> has quit IRC (Quit: Leaving) | 10:32 | |
| *** florian_kc <florian_kc!~florian@port-217-146-132-69.static.as20676.net> has joined #yocto | 10:35 | |
| manuel1985 | I have problems executing a self-written do_patch() function after a self-written do_fetch() function. | 10:45 |
| manuel1985 | do_fetch() mkdirs the directory and git-clones the repo, but do_patch deletes the directory | 10:46 |
| *** gsalazar_ <gsalazar_!~gsalazar@194.38.148.130> has joined #yocto | 10:46 | |
| manuel1985 | ( Before you have an heart attack: I'm selfcoding do_fetch and do_patch solely for explanatory purposes. ) | 10:46 |
| *** florian_kc <florian_kc!~florian@port-217-146-132-69.static.as20676.net> has quit IRC (Quit: Ex-Chat) | 10:48 | |
| *** gsalazar <gsalazar!~gsalazar@173.111.90.149.rev.vodafone.pt> has quit IRC (Ping timeout: 252 seconds) | 10:49 | |
| kanavin | RP: I guess this is now sorted? | 11:03 |
| RP | kanavin: I'm hoping so. I now found bootchart also fails reproduce but I think I can see why too. Why so many python failures all of a sudden :/ | 11:07 |
| kanavin | some new python3 items made it to master | 11:09 |
| RP | kanavin: I think its python versions changing on the stream workers | 11:10 |
| RP | kanavin: the bootchart issue looks like all of a sudden some versions could find a host python_compile.py script | 11:10 |
| *** alicef_ is now known as alicef | 11:16 | |
| *** jwillikers <jwillikers!~jwilliker@ics141-1.icsincorporated.com> has joined #yocto | 11:37 | |
| *** tnovotny <tnovotny!~tnovotny@ip4-83-240-26-162.cust.nbox.cz> has joined #yocto | 11:38 | |
| *** xmn <xmn!~xmn@cpe-72-225-198-203.nyc.res.rr.com> has quit IRC (Ping timeout: 246 seconds) | 12:17 | |
| coldspark29[m] | qschulz: So I think I got a good overview. We have successfully completed the signing of the Bootloader and my colleague told me to use the same set of keys to verify the kernel. What you are suggesting is to use another set of keys for the kernel. I don't really mind about the approach as long as it works. I guess your approach is the standard U-Boot way of verifying kernels? | 12:19 |
| coldspark29[m] | I realized that you are actually the guy having given that talk :) | 12:19 |
| qschulz | coldspark29[m]: you could reuse the "same" keys in that their content is the same but they'll be duplicated in U-Boot binary too | 12:20 |
| qschulz | coldspark29[m]: co-presenter with Mylène yes :) | 12:20 |
| coldspark29[m] | You are based in Tolouse right? I was actually there this summer for one day. Really beautiful city! | 12:21 |
| qschulz | coldspark29[m]: not working at Bootlin and not in Toulouse anymore :) | 12:23 |
| qschulz | but yes, I was there. Too warm for me :p | 12:23 |
| coldspark29[m] | My colleague says it is alright if I try your approach. Also interesting what you said about the dependency loop in in Yocto. This is for an Android image atm which usese dm-verity, but I will have to do the same thing later for Yocto. Did you write a detailed guide for this or can you recommend one? | 12:24 |
| coldspark29[m] | For working it is too warm maybe. I live in Germany and like the cold days for being productive at the computer. For leisure it is better when it is warm though. Tolouse reminded me of Barcelona a lot. which I also like | 12:25 |
| qschulz | coldspark29[m]: I didn't upstream the custom fitimage class, nor is it publicly available somewhere and I don't have access to the sources anymore. IIRC it was really not complicated, a really stripped down version of kernel-fitimage bbclass | 12:27 |
| qschulz | coldspark29[m]: otherwise Bartosz from Baylibre tried to upstream something to fix this a few months ago/last year | 12:27 |
| coldspark29[m] | Well I will try the approach for this Android image first. I hope your presentation will be sufficient to get this working. I am still missing a lot of parts to the puzzle, but it is really an interesting topic once you start to understand a few things. | 12:30 |
| qschulz | The only thing that was not tackled during this talk is if you want secureboot with RW rootfs, that we didn't investigate at all | 12:30 |
| qschulz | the rest, I don't think there's much more to it except some vendors oddities maybe | 12:31 |
| qschulz | but things might click a bit better while working on it (hopefully) | 12:32 |
| coldspark29[m] | Yeah we will ignore dm-verity for now. First things first: I need to sign and verify the image | 12:32 |
| qschulz | U-Boot has some docs too, don't hesitate to read those | 12:32 |
| coldspark29[m] | Yeah I should really do that | 12:32 |
| qschulz | the fitimage is signed with `mkimage` btw, that should help you look for the right guides/docs | 12:33 |
| coldspark29[m] | Yeah I got that part, but how to implement it into U-Boot? | 12:35 |
| coldspark29[m] | U-Boot has to know about the keys | 12:35 |
| coldspark29[m] | Guess I have to read about U-Boot now | 12:35 |
| coldspark29[m] | It's time | 12:35 |
| qschulz | it's a special device tree which points to the dev-key, then dtc will fetch the keys and include them in the dtb which is included in the U-Boot binary | 12:46 |
| qschulz | In recent U-Boot, a lot of ARM boards have now a dtb, so I don't know how and where it fits in the big picture, I didn't have any device tree for the aarch32 SoC back then | 12:47 |
| coldspark29[m] | Yeah I already found a few things. I just wonder, when I add the CONFIG_SECURE_BOOT flag in the kernel config atm, HAB seems to try to verify the Kernel. Will this automatically be replaced if I configure this method? | 12:51 |
| qschulz | coldspark29[m]: all process was done with an upstream U-Boot, so if you're using a vendor one, I cannot say how it's working and if it can work | 12:53 |
| coldspark29[m] | Hmm we indeed use the one from boundarydevices | 12:57 |
| *** rob_w <rob_w!~bob@host-82-135-31-73.customer.m-online.net> has quit IRC (Quit: Leaving) | 13:33 | |
| *** lexano <lexano!~lexano@cpe00e06722f0e4-cm98524a70e35e.cpe.net.cable.rogers.com> has joined #yocto | 13:33 | |
| *** sb27 <sb27!~sb27@aftr-82-135-83-252.dynamic.mnet-online.de> has joined #yocto | 13:41 | |
| sb27 | What is the usual way to do PDF generation with yocto? Is there a latex recipe that I can use? Seems like that would be a pretty massive footprint though. | 13:42 |
| JosefHolzmayrThe | sb27: care to elaborate? pdf generation where, and when? | 13:44 |
| sb27 | The yocto system is running a chrome browser with a c++-python-javascript application. I basically want to be able to convert HTML to PDF and be able to print the PDF out to a printer (whenver the user desires) | 13:46 |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has joined #yocto | 13:46 | |
| JosefHolzmayrThe | just pack the stuff into the webpage. js can totally do that. | 13:46 |
| *** tnovotny <tnovotny!~tnovotny@ip4-83-240-26-162.cust.nbox.cz> has quit IRC (Remote host closed the connection) | 13:47 | |
| JosefHolzmayrThe | rendering html to pdf in anything that is not effectively a full blown browser rendering engine is basically pain. | 13:47 |
| JosefHolzmayrThe | more pain than in the browser, that is. | 13:47 |
| *** artri <artri!~artri@bras-base-toroon4843w-grc-03-76-67-19-22.dsl.bell.ca> has joined #yocto | 13:48 | |
| JosefHolzmayrThe | if on the other hand you're willing to leave out the "html to" part, then i'd go for some library that matches your needs in the backend. i'm sure there's some usable stuff in the python space. | 13:50 |
| *** atril <atril!~artri@208.116.134.46> has joined #yocto | 13:53 | |
| sb27 | JosefHolzymayrThe: Thanks! I think the reason we like latex is because it does a lot of things out of the box like table splitting, multi-page reports, embedded images, and the output is most likely going to be prettier. In this case we would directly generate latex vs convert from html to pdf. But I'm guessing the size requirements are too large. | 13:55 |
| *** artri <artri!~artri@bras-base-toroon4843w-grc-03-76-67-19-22.dsl.bell.ca> has quit IRC (Ping timeout: 265 seconds) | 13:57 | |
| JosefHolzmayrThe | sb27: well if your target is big enough to hold a chromium frontend then latex certainly might be doable too, in terms of resources. texlilve seems to even be cross compile aware, so trying to package it up is probably not extraordinarily crazy either: https://www.tug.org/texlive/doc/tlbuild.html#Cross-compilation | 13:58 |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has quit IRC (Read error: Connection reset by peer) | 13:58 | |
| sb27 | JosefHolzmayrThe: Thank you so much! Hopefully it's not too difficult to make a recipe out of that. | 14:03 |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has joined #yocto | 14:03 | |
| JosefHolzmayrThe | sb27: have fun - and if you have something, send patches! | 14:04 |
| qschulz | please upstream it if you manage to get this to work, depending how long it takes to build everything (browser excluded) I might actually make use of it | 14:10 |
| qschulz | nevermind, mixing up Buildroot and Yocto, need it for a Buildroot project :| | 14:10 |
| qschulz | please make it public anyway, I'm sure it can be useful to some people :) | 14:11 |
| *** tnovotny <tnovotny!~tnovotny@ip4-83-240-26-162.cust.nbox.cz> has joined #yocto | 14:15 | |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has quit IRC (Quit: Textual IRC Client: www.textualapp.com) | 14:30 | |
| *** Schlumpf <Schlumpf!~Schlumpf@62.157.232.203> has quit IRC (Ping timeout: 256 seconds) | 14:53 | |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has joined #yocto | 15:05 | |
| *** goliath <goliath!~goliath@user/goliath> has quit IRC (Quit: SIGSEGV) | 15:13 | |
| *** goliath <goliath!~goliath@user/goliath> has joined #yocto | 15:14 | |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has quit IRC (Quit: My MacBook has gone to sleep. ZZZzzz…) | 15:17 | |
| *** goliath <goliath!~goliath@user/goliath> has quit IRC (Quit: SIGSEGV) | 15:25 | |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has joined #yocto | 15:25 | |
| *** tnovotny <tnovotny!~tnovotny@ip4-83-240-26-162.cust.nbox.cz> has quit IRC (Quit: Leaving) | 15:33 | |
| *** dmoseley <dmoseley!~dmoseley@24.96.56.90> has quit IRC (Quit: ZNC 1.8.2 - https://znc.in) | 15:38 | |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has quit IRC (Quit: My MacBook has gone to sleep. ZZZzzz…) | 15:47 | |
| *** Crofton_ is now known as Crofton | 16:03 | |
| *** Crofton is now known as Crofton|cloud | 16:03 | |
| *** Crofton|cloud is now known as Crofton | 16:04 | |
| zeddii | tlwoerner: I was most out last week, but I did get a first pass at the defconfig chopper script up and running. | 16:07 |
| *** florian <florian!~florian@port-217-146-132-69.static.as20676.net> has quit IRC (Quit: Ex-Chat) | 16:08 | |
| *** manuel1985 <manuel1985!~manuel198@62.99.131.178> has quit IRC (Quit: Leaving) | 16:08 | |
| tlwoerner | zeddii: nice! | 16:10 |
| zeddii | I'll check the initial version into the kernel-tools repo and send you some details. and we can see what it does :D | 16:10 |
| tlwoerner | sounds fantastic! :-D | 16:10 |
| tlwoerner | friendly remind to everyone that the CFP for YPS2021.11 closes in a week. please get your proposals in for lightning talks, talks, and hands-on classes | 16:11 |
| tlwoerner | https://pretalx.com/yocto-project-summit-2021-11/cfp | 16:12 |
| *** dmoseley <dmoseley!~dmoseley@24.96.56.90> has joined #yocto | 16:12 | |
| *** frieder <frieder!~frieder@i59F4B31D.versanet.de> has quit IRC (Remote host closed the connection) | 16:15 | |
| *** goliath <goliath!~goliath@user/goliath> has joined #yocto | 16:16 | |
| *** rfuentess <rfuentess!~rfuentess@static-5-51-117-151.ftth.abo.bbox.fr> has quit IRC (Remote host closed the connection) | 16:20 | |
| zeddii | ahah. running out of time | 16:21 |
| * zeddii makes a note to submit a few options. | 16:21 | |
| *** mckoan is now known as mckoan|away | 16:33 | |
| *** gsalazar_ <gsalazar_!~gsalazar@194.38.148.130> has quit IRC (Ping timeout: 245 seconds) | 16:46 | |
| *** pgowda_ <pgowda_!uid516182@id-516182.ilkley.irccloud.com> has quit IRC (Quit: Connection closed for inactivity) | 17:02 | |
| *** lexano <lexano!~lexano@cpe00e06722f0e4-cm98524a70e35e.cpe.net.cable.rogers.com> has quit IRC (Remote host closed the connection) | 17:10 | |
| *** lexano <lexano!~lexano@cpe00e06722f0e4-cm98524a70e35e.cpe.net.cable.rogers.com> has joined #yocto | 17:21 | |
| *** jmiehe <jmiehe!~Thunderbi@user/jmiehe> has quit IRC (Ping timeout: 260 seconds) | 17:37 | |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has joined #yocto | 18:33 | |
| *** Tokamak <Tokamak!~Tokamak@172.56.2.32> has quit IRC (Quit: My MacBook has gone to sleep. ZZZzzz…) | 19:12 | |
| wCPO | hmm, yoctoproject.org got blacklisted (https://admin.uribl.com/), so that's why all the lists mail are suddenly in spam | 19:24 |
| *** sb27 <sb27!~sb27@aftr-82-135-83-252.dynamic.mnet-online.de> has quit IRC (Quit: Client closed) | 19:27 | |
| *** dev1990 <dev1990!~dev@dynamic-78-8-51-35.ssp.dialog.net.pl> has joined #yocto | 19:29 | |
| *** pabigot <pabigot!~pab@67-1-116-23.tcso.qwest.net> has joined #yocto | 19:37 | |
| wCPO | maybe, rspamd just shouldn't use that list, hm | 19:52 |
| *** florian <florian!~florian@dynamic-002-243-146-195.2.243.pool.telefonica.de> has joined #yocto | 19:56 | |
| *** goliath <goliath!~goliath@user/goliath> has quit IRC (Quit: SIGSEGV) | 19:57 | |
| override | whats the best way to make a recipe start referring to custom configs | 20:12 |
| override | without touching the recipe itself, trying to do it using bbappend kind of mechanisms | 20:13 |
| *** goliath <goliath!~goliath@user/goliath> has joined #yocto | 20:32 | |
| *** pabigot <pabigot!~pab@67-1-116-23.tcso.qwest.net> has quit IRC (Remote host closed the connection) | 20:33 | |
| *** jmiehe <jmiehe!~Thunderbi@user/jmiehe> has joined #yocto | 20:34 | |
| *** pabigot <pabigot!~pab@67-1-116-23.tcso.qwest.net> has joined #yocto | 20:35 | |
| *** Wouter0100 <Wouter0100!~Wouter010@entry.nbg.netvos.nl> has quit IRC (Ping timeout: 245 seconds) | 20:38 | |
| *** lexano <lexano!~lexano@cpe00e06722f0e4-cm98524a70e35e.cpe.net.cable.rogers.com> has quit IRC (Remote host closed the connection) | 20:45 | |
| *** adrian_ <adrian_!~F_Adrian@165.225.27.22> has joined #yocto | 21:04 | |
| *** adrian__ <adrian__!~F_Adrian@165.225.27.22> has quit IRC (Ping timeout: 265 seconds) | 21:05 | |
| khem | override: write a bbappend and create the dropin files parallel to bbappend in a directory and hook them up into right locations via do_install:append | 21:18 |
| *** lexano <lexano!~lexano@cpe00e06722f0e4-cm98524a70e35e.cpe.net.cable.rogers.com> has joined #yocto | 21:25 | |
| *** dev1990 <dev1990!~dev@dynamic-78-8-51-35.ssp.dialog.net.pl> has quit IRC (Quit: Konversation terminated!) | 21:35 | |
| *** Wouter0100 <Wouter0100!~Wouter010@entry.nbg.netvos.nl> has joined #yocto | 21:50 | |
| *** xmn <xmn!~xmn@cpe-72-225-198-203.nyc.res.rr.com> has joined #yocto | 21:57 | |
| *** davidinux <davidinux!~davidinux@84.17.59.156> has quit IRC (Quit: WeeChat 2.8) | 21:59 | |
| *** sakoman <sakoman!~steve@rrcs-66-91-142-162.west.biz.rr.com> has quit IRC (Quit: Leaving.) | 22:07 | |
| *** sakoman <sakoman!~steve@rrcs-66-91-142-162.west.biz.rr.com> has joined #yocto | 22:08 | |
| *** xmn <xmn!~xmn@cpe-72-225-198-203.nyc.res.rr.com> has quit IRC (Ping timeout: 245 seconds) | 22:13 | |
| *** xmn <xmn!~xmn@cpe-72-225-198-203.nyc.res.rr.com> has joined #yocto | 22:15 | |
| *** zen_coder <zen_coder!~zen_coder@2a02:8109:a280:2d8d:dc9e:1427:a97:e25a> has quit IRC (Ping timeout: 256 seconds) | 22:24 | |
| RP | halstead: ^^^ ? | 22:32 |
| *** leon-anavi <leon-anavi!~Leon@78.130.197.211> has quit IRC (Quit: Leaving) | 22:42 | |
| *** atril <atril!~artri@208.116.134.46> has quit IRC (Ping timeout: 264 seconds) | 22:44 | |
| *** GillesM <GillesM!~gilles@72.118.119.78.rev.sfr.net> has joined #yocto | 22:45 | |
| *** wberrier <wberrier!~wberrier@c-24-2-101-38.hsd1.ut.comcast.net> has joined #yocto | 22:45 | |
| wberrier | any suggestions about having an additional golang version where various recipes can pick which version of go to use? | 22:46 |
| *** WadeBerrier[m] <WadeBerrier[m]!~wberrierm@2001:470:69fc:105::3f0e> has joined #yocto | 22:47 | |
| WadeBerrier[m] | any suggestions about having an additional golang version where various recipes can pick which version of go to use? | 22:48 |
| *** florian <florian!~florian@dynamic-002-243-146-195.2.243.pool.telefonica.de> has quit IRC (Ping timeout: 260 seconds) | 22:48 | |
| *** GillesM <GillesM!~gilles@72.118.119.78.rev.sfr.net> has quit IRC (Remote host closed the connection) | 22:52 | |
| *** Ad0 <Ad0!~Ad0@93.124.245.194> has quit IRC (Ping timeout: 268 seconds) | 23:22 | |
| halstead | wCPO: thank you for the report. I've been messing with a new mail relay today and may have caused an issue | 23:26 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!