summaryrefslogtreecommitdiff
path: root/meta-google/recipes-google/ncsi
AgeCommit message (Collapse)AuthorFilesLines
2021-11-16meta-google: gbmc-ncsi-config: Add missing dependenciesWilliam A. Kennington III1-0/+2
The gbmc-ncsi-ip-from-ra script was missing these. Change-Id: Id379632a814519d6623588905273b3e8e3b70528 Signed-off-by: William A. Kennington III <wak@google.com>
2021-11-10google-misc: srcrev bump 2be0536c62..379b061ffdAndrew Geissler1-0/+1
William A. Kennington III (1): ncsid: Add service for discovering routers Change-Id: I6691e682cff2785f7ac7a7be89abb234375c167f Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
2021-11-06meta-google: gbmc-bridge: Defer address reconfigurationWilliam A. Kennington III1-2/+7
Reconfiguring network interfaces immediately after detecting changes may not allow them enough time to settle. Without waiting, we might pre-emptively assume the configuration is changing even though networkd is just flushing and resetting the interface with the same config. Change-Id: I6a6858578d0499305fe2a3d3592dc73533bb02f1 Signed-off-by: William A. Kennington III <wak@google.com>
2021-11-06meta-google: gbmc-ncsi-config: Ignore deprecated addressesWilliam A. Kennington III2-2/+4
We plan to use deprecated addresses to allow for neighbor discovery, but they will be ignored by networkd and this script as to prevent misconfiguration. Change-Id: Ibc0bee71c19add79f05b5ce58b34d3175e2f6fbd Signed-off-by: William A. Kennington III <wak@google.com>
2021-11-06meta-google: gbmc-ncsi-config: Remove override if emptyWilliam A. Kennington III1-5/+8
Currently this will make no difference in configuration, but it will be useful once we implement our DHCP process and need to contend with multiple configurations. Change-Id: Ia93530e67cdb88fcbe90ef2b6dfbd5a239469ff7 Signed-off-by: William A. Kennington III <wak@google.com>
2021-11-06meta-google: gbmc-bridge: Restrict network from /72 to /76William A. Kennington III2-4/+4
We can have multiple gBMC networks within one "machine". This allows us to have multiple address sets. Change-Id: I5b18b7822f50bb0570e1aa5a70ac47036694d922 Signed-off-by: William A. Kennington III <wak@google.com>
2021-10-20meta-google: gbmc-ncsi-config: Re-organize RA codeWilliam A. Kennington III1-63/+73
This make it possible for the hostname or IP information to change independently, in case a mistake is made in a development environment and just the hostname or just the prefix need to be updated. Change-Id: I66169dc6cdee681f77bad4b8638dc6a2c72fca5f Signed-off-by: William A. Kennington III <wak@google.com>
2021-10-01meta-google: gbmc-ncsi-config: Fix missing bash rdepWilliam A. Kennington III1-0/+1
The scripts distributed with this recipe depend on bash at runtime, causing sanity check failures without proper specification. Change-Id: I32e4ad135ca94c3f0f707ca7d48f5c3fa29d2441 Signed-off-by: William A. Kennington III <wak@google.com>
2021-09-29meta-google: gbmc-ncsi-config: Parse hostnames from RAWilliam A. Kennington III1-0/+10
We need the hostname to be properly configured in order to login with GLOME. This derives the hostname from the FQDN that is passed via the DNS list in the RA messages from the smart NIC. Change-Id: I4e7a414b6b75bfb227df5763917e9e5d09579d7d Signed-off-by: William A. Kennington III <wak@google.com>
2021-09-29meta-google: gbmc-ncsi-config: Derive IP from RAWilliam A. Kennington III4-0/+140
Our end2end DHCP solution is not yet working, but we need a way to derive addresses for a BMC from the smart NIC in front of it. This provides a mechanism for detecting the address from RA beacons the NIC is sending. Change-Id: I0cdc8c192974c0b00257ebe58e911e62636e4c81 Signed-off-by: William A. Kennington III <wak@google.com>
2021-09-29meta-google: gbmc-ncsi-config: Add relay support for the bridgeWilliam A. Kennington III7-0/+68
We may have multiple BMCs running on the internal gbmcbr network via USB links to attached trays. These BMCs do not have a direct connection to the network, and require the NCSI BMC to relay all of their traffic (including DHCP) out opf the machine. This patch enables dhcrelay to run on the NCSI interface and proxy all DHCP traffic from the bridge out of the machine. Change-Id: I60f97ae2d64289c7b706b3d0a6c8fb79a931e485 Signed-off-by: William A. Kennington III <wak@google.com>
2021-09-27google-misc: srcrev bump d237c6cc59..b163a2c1baAndrew Geissler1-0/+2
Nan Zhou (1): libcr51sign: import from gBMC William A. Kennington III (2): ncsid: Stop targets when daemon stops ncsid: Support parsing unsolicited RA announcements Willy Tu (2): google-misc: libcr51sign: add feature to fetch image regions bios-key: import from gBMC Change-Id: I47cd3bd37ca6eeb647f61fab66994a4e224f982a Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
2021-09-16gbmc-ncsi-config: Fix nftables rule writingWilliam A. Kennington III1-1/+2
The `pfx` variable was not correctly being initialized Change-Id: Iafc0a2ca8dbfe943a9bc8c1649ae68fb00d267a1 Signed-off-by: William A. Kennington III <wak@google.com>
2021-08-07meta-google: Cleanup for Yocto override syntax changeWilly Tu2-6/+6
``` convert-overrides.py meta-google git grep "_[a-z0-9_/-]*[ :]" -- meta-google | grep ".bb" git grep -l _gbmc -- meta-google | grep ".bb" \ | xargs sed -i 's/_gbmc/:gbmc/' git grep -l _prod -- meta-google | grep ".bb" \ | xargs sed -i 's/_prod/:prod/' git grep -l _dev -- meta-google | grep ".bb" \ | xargs sed -i 's/_dev/:dev/' git grep -l _hoth -- meta-google | grep ".bb" \ | xargs sed -i 's/_hoth/:hoth/' git grep -l _bandaid -- meta-google | grep ".bb" \ | xargs sed -i 's/_bandaid/:bandaid/' ``` Some small fix includes ``` platforms_gbmc_bringup platforms_gbmc_secure ``` Tested: ``` $ git grep "_[a-z0-9_/-]*[ :]" -- meta-google | grep ".bb" meta-google/recipes-connectivity/avahi/avahi_%.bbappend:do_install:append:gbmc() { meta-google/recipes-core/dropbear/dropbear_%.bbappend:do_install:append:gbmc:dev() { meta-google/recipes-core/dropbear/dropbear_%.bbappend: echo ' chain gbmc_br_pub_input {' >>"$rules" meta-google/recipes-extended/libconfig/conf2struct-native_git.bb: oe_runmake checker meta-google/recipes-extended/libconfig/conf2struct-native_git.bb: oe_runmake install meta-google/recipes-extended/networking/mstpd_git.bb:do_install:append() { meta-google/recipes-extended/networking/sslh_git.bb: oe_runmake distclean meta-google/recipes-extended/networking/sslh_git.bb: oe_runmake sslh-conf.h meta-google/recipes-extended/networking/sslh_git.bb: oe_runmake install meta-google/recipes-google/ipmi/ipmi-fru-sh.bb:do_install:append() { meta-google/recipes-google/ncsi/gbmc-ncsi-config.bb:do_install:append() { meta-google/recipes-google/networking/gbmc-bridge.bb:do_rm_work:prepend() { meta-google/recipes-google/networking/gbmc-bridge.bb: # HACK: Work around broken do_rm_work not properly calling rm with `--` meta-google/recipes-google/networking/gbmc-ip-monitor.bb:do_install:append() { meta-google/recipes-google/networking/gbmc-iperf3.bb:do_install:append:dev() { meta-google/recipes-google/networking/gbmc-iperf3.bb: echo ' chain gbmc_br_pub_input {' >>"$rules" meta-google/recipes-google/networking/gbmc-mac-config.bb:do_install:append() { meta-google/recipes-google/networking/network-sh.bb:do_install:append() { meta-google/recipes-google/ssh/authorized-keys-comp.bb:SUMMARY = "Compiles a set of authorized_keys files into a single file" meta-google/recipes-google/ssh/authorized-keys-comp.bb:do_install:append() { meta-google/recipes-google/systemd/gbmc-systemd-config.bb:do_install:append:dev() { meta-google/recipes-google/test/test-sh.bb:do_install:append() { meta-google/recipes-phosphor/flash/inplace-gbmc-update.bb:do_install:prepend:dev() { meta-google/recipes-phosphor/host/phosphor-host-postd_%.bbappend:do_install:append:gbmc:dev() { meta-google/recipes-phosphor/initrdscripts/obmc-phosphor-initfs.bbappend:do_install:append:gbmc:dev() { meta-google/recipes-phosphor/initrdscripts/obmc-phosphor-initfs.bbappend:do_install:append:gbmc:prod() { meta-google/recipes-phosphor/ipmi/phosphor-ipmi-config.bbappend:do_install:append:gbmc() { meta-google/recipes-phosphor/ipmi/phosphor-ipmi-config.bbappend: overlapping="$(jq '."${GBMCBR_IPMI_CHANNEL}" | .is_valid and .name != "gbmcbr"' $chjson)" ``` Change-Id: I9d610c664bd44e8bd81fb8f7e76249a0b43b9ffd Signed-off-by: Willy Tu <wltu@google.com>
2021-06-24meta-google: ncsid: disable building testsBenjamin Fair1-0/+4
The unit tests aren't needed when building in Bitbake. Change-Id: I412f5c1b546ab56a4644cba696dd3fab456964bb Signed-off-by: Benjamin Fair <benjaminfair@google.com>
2021-06-17meta-google: gbmc-ncsi-config: Set NICEnabled propertyVivekanand Veeracholan2-0/+22
Sometimes the phosphor-networkd starts before systemd-networkd finishes configuring NCSI interface. This causes phosphor-networkd to mark this interface as unmanaged. Setting NICEnabled property to true will ensure the interface is enabled. If this service starts before systemd-networkd is done, the set-property command will fail. So retry till the command succeeds. Signed-off-by: Vivekanand Veeracholan <vveerach@google.com> Change-Id: I232d363cff48bbf955ac0f1f9a6dac7ae5467257
2021-05-13meta-google: gbmc-ncsi-config: Add unreachable bridge routeWilliam A. Kennington III1-0/+4
We don't want traffic being routed back out of the BMC when it is destined for the BMC network. It's nice that unrecognized routes return an obvious unreachable error to the end user. Change-Id: If261faf7b8f2416ee9a802f85db17ed62946625d Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-12meta-google: gbmc-ncsi-nft: More forward restrictionWilliam A. Kennington III2-1/+6
We only want to allow <pfx>::fd... traffic info the machine area network from the outside world. Instead of just blocking internal network addresses from the outside, explicitly look at the prefix. Change-Id: Id0afef7c813aef381e81b8fcfb570778f529f5dc Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-11meta-google: gbmc-bridge: Remove custom ip parsing logicWilliam A. Kennington III2-28/+31
Change-Id: I455ab70094cfdc79b38097a838051f51b3c852da Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-11meta-google: gbmc-bridge: Use networkctl reconfigureWilliam A. Kennington III1-19/+7
The other workarounds to try and restart networkd tend to result in flaky behavior. We get much more consistent and fast reconfigurations if we target the bridge directly. Change-Id: I3222eba4a2d2b71e3893f93643f412e5238ee60e Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-07meta-google: gbmc-systemd-config: Enable packet forwardingWilliam A. Kennington III1-0/+7
This allows gBMCs to route packets, needed for routing packets to the management netowrk. Change-Id: I71f59eeb12607aa9c9d64687fb983938d5d69413 Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-07meta-google: gbmc-ncsi-config: Add public address to gbmc-bridgeWilliam A. Kennington III2-0/+111
This dynamically detects addresses applied to the NC-SI interface and infers the addreses which should be used explicitly by BMCs. Change-Id: I9036be0a54936aace580746cd1900ee653f43cfd Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-07meta-google: gbmc-ncsi-config: Restrict NCSI input packetsWilliam A. Kennington III3-3/+122
Break down packets by their incoming address and ensure that we don't allow packets to unintended destinations. Right now this is effectively a no-op, but it will be necessary for BMC public addressing. Change-Id: I39c16c3b9cd4c293df42b928674e39677d7834e9 Signed-off-by: William A. Kennington III <wak@google.com>
2021-03-25meta-google: google-misc: Split into includeWilliam A. Kennington III1-13/+6
We don't want to generate bump commits for each project in the repo. Instead, provide an include that has common parameters used by all google-misc projects. Change-Id: Ice589c03aa0d38ca5043ee2081f3757568c4e4bb Signed-off-by: William A. Kennington III <wak@google.com>
2021-03-19google-misc: srcrev bump 15fe169d1f..1285115c16Andrew Geissler1-1/+1
William A. Kennington III (1): meson: Fix build with 0.57.1 Change-Id: I6b08157a77b2dbd2ce589a1f9fd4b8287890c92e Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
2021-03-10google-misc: srcrev bump a65b7b8174..15fe169d1fAndrew Geissler1-1/+1
Brandon Kim (2): Adding google license header to source files acpi-power-state: Import from gBMC Sui Chen (1): metrics-ipmi-blobs: Add from gBMC William A. Kennington III (2): metrics-ipmi-blobs: util: openbmc uses pragma once metrics-ipmi-blobs: Refactor meson build Change-Id: I276a1ccfa03e96d8d7e741865d5e4d466bbc11ee Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
2021-02-19meta-google: gbmc-ncsi-config: Fix sslhWilliam A. Kennington III2-4/+2
The name of the unit files got updated, but the internal references did not. Change-Id: I772e5755ba45cc7f4b4fdd2469286f08032c0f9d Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-18meta-google: gbmc-ncsi-config: Remove compatabilityWilliam A. Kennington III1-4/+0
We are now caught up enough that we don't need these compatability variables or provided packages anymore. Change-Id: I7dbfb1ffe447c97bb4baaba20a15be9187983b41 Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-17meta-google: Fold gbmc-sslh into gbmc-ncsi-configWilliam A. Kennington III3-4/+48
Logically these packages belong together and don't make much sense without each other. Combine them to reduce package complexity for users. Change-Id: I3d3998f8d10cacbd01f6d883b0033a3260ff60df Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-17meta-google: gbmc-ncsi-config: Add missing runtime requirementsWilliam A. Kennington III1-0/+2
We need sslh and nftables in order for our interface configuration to be useful. Change-Id: I7dffc66dadc1a0d758241344e3908017af304b6a Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-17meta-google: gbmc-ncsi-config: Rename from ncsid-configWilliam A. Kennington III3-45/+50
Make it clear this is a gbmc style configuration, similar to gbmc-systemd-config or gbmc-iperf3. Change-Id: Icd9a2f45f5b399ecb3f8ab1a63d1f0344342ab3a Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-10google-misc: srcrev bump 7d6fa42fd1..a65b7b8174Andrew Geissler1-1/+1
William A. Kennington III (1): Add missing googletest subproject Change-Id: I19603616da8f40104a86ef7367e8d8e7e2400494 Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
2021-02-09meta-google: ncsid-config: Error for missing interfaceWilliam A. Kennington III1-0/+5
Change-Id: Ifeb48720421e13f9313f056f8c15232982824daa Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-09meta-google: ncsid-config: Fixup recipeWilliam A. Kennington III2-2/+17
The license was mistakenly set to closed and it was missing an included rules file. Google-Bug-Id: 179618497 Change-Id: I8b9b01f7b53f03e6caa079de36e096db1a875955 Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-09meta-google: Add ncsid-config packageWilliam A. Kennington III1-0/+39
Google-Bug-Id: 179618497 Change-Id: Id0ba358215054159e1d9a2329ae2393b5b9eeabf Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-09meta-google: Add NCSId at 7d6fa42William A. Kennington III1-0/+40
Google-Bug-Id: 179618497 Change-Id: I1af1d4269e5473302b7741c4c74dcb7c130ff01e Signed-off-by: William A. Kennington III <wak@google.com>