Age | Commit message (Collapse) | Author | Files | Lines |
|
Witherspoon is running tight on space, and as our primary hardware CI
machine, we need to keep it going.
The GUI has already been pulled out so the KVM package doesn't make much
sense anyway.
Tested:
- Reduced image size by ~200KB
- Will rely on CI to regression test
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Change-Id: I3e55702da764e4e1ca1673e158c7acf4f74c9bda
|
|
Modify the machine meta-layer configs to remove the use of the
OBMC_MACHINE_FEATURES indirection and favor the Yocto MACHINE_FEATURES
variable instead.
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Ifafb79e4e4c010e9476b9547cd4982f5b645060e
|
|
openpower-pnor-code-mgmt: srcrev bump 9c2ef681e3..6fc7fcd6b1
Adriana Kobylak (2):
Add a new pldm feature option
Add support for the host PLDM transport that takes place of hiomap
(mboxd). Add this new feature to p10bmc.
Tested: Verified that tacoma (that doesn't support pldm) and p10bmc
(supports pldm) reached runtime.
Change-Id: I31e8beba5ff8a413b7b7fa7476f5f2403d3781dd
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
|
|
With the reshuffle that occurred in 38cfcc393d9e ("meta-aspeed:
u-boot-aspeed-sdk: Use provided signing key by default") we no-longer
need to specify these options in p10bmc.conf
Mistakenly, `SOCSEC_SIGN_ENABLE = "1"` was duplicated later in the file
by 699146128388 ("meta-ibm: p10bmc: Assert that we want the SPL signed
by socsec"). Removing the instance as done in this patch still leaves us
with the positive assertion that we want SPL signing enabled.
Change-Id: Iaa9cbe5b0ba4aaf69bb0fba1eb8f6bc62d085a33
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>
|
|
Configure the SOCSEC_SIGN_* variables to sign the SPL and exploit the
AST2600 hardware root-of-trust.
Note that this doesn't require that secure-boot is enabled on the
system, the SoC will bootstrap just fine with the signature in place
while secure-boot is disabled. Signing the SPL allows us to switch the
systems over to secure-boot at our leisure.
Change-Id: I07b5c4afb7bacc040cbdce6c82a0fb3a57d0f7f8
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>
|
|
Change-Id: I9116ed7260e369136acb39eec15075db2d4dbeba
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
|
|
As for Rainier and Everest, use KCS2 as the debug-trigger interface.
Change-Id: I2614ffc3d97164658f2ad4fbb916cbf44be152e1
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>
|
|
OpenBMC requires additional capabilities for the
OpenPOWER systems such as
- A common mechanism to access and control the host
hardware from the BMC.
- A storage mechanism to store the data that can be
used for initialize, control and access the CEC
hardware.
- An infrastructure to initialize the hardware using
the hardware procedures provided by the hardware team.
- Common mechanism to handle the hardware failures for
the host hardware.
These above features are essential for the BMC to provide
better RAS capability and to support lab debug for the
enterprise class systems.
The phal(POWER Hardware Abstraction Layer) aims to provide
a common layout such that the OpenPOWER application can
use this infrastructure to boot, enable RAS features like dump,
diagnostics, and lab debug tooling purpose.
The phal is a combination of open source packages that are
tailored/customised to use in OpenBMC. For instance POWER
hardware access and control is managed through pdbg and
host hardware data modelling is done via devicetree.
phal is group of libraries running in BMC. These libraries
are used by OpenPOWER specific application for host hardware
interactions, Hostboot and SBE initialization, diagnostics
and debugging.
Signed-off-by: Jayanth Othayoth <ojayanth@in.ibm.com>
Change-Id: I187d9582598743871279a1e407451f4cf4f72668
|
|
Change-Id: Ic1cde1cd67fa6f8f68df80a1f327ace64a39d72b
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>
|
|
The rainier machine has been replaced with the generic p10bmc.
Change-Id: Ia7b6e8b6ad569d6f607d4a38318704fb402f2a1f
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
|
|
Use the 'insecure/imprint' development key to sign the p10bmc SPL. The
key can be overriden for a production key if necessary.
Signed-off-by: Klaus Heinrich Kiwi <klaus@linux.vnet.ibm.com>
Change-Id: I6e4abecb5859fb59c6185a097cf88bdcb958e207
|
|
Use the insecure key provided by commit '748d586bc1 meta-aspeed: Add
development key for Kernel sign' to sign both the Kernel as well as
U-Boot fitImages. This is used for U-Boot FIT Signature Verification
using a known key, fit for development purposes. For production
purposes, a secure private key must be used.
Signed-off-by: Klaus Heinrich Kiwi <klaus@linux.vnet.ibm.com>
Change-Id: If0c39f4aa17e6eaa5f6952a90283457f252a64d3
|
|
This creates a new DISTRO_FEATURE "ibm-service-account-policy" which
- Adds an admin account which cannot SSH to the BMC's command shell.
- Adds a service account which can SSH and has passwordless sudo access.
This feature is applied to witherspoon-tacoma and p10bmc (rainier).
Tested:
The image behaves as before when the distro feature is not configured.
When the distro feature is configured:
The root user has the same access as before.
The admin user:
- Is not allowed to access the BMC's command shell.
- Console login gets: This account is currently not available.
- SSH login gets: Permission denied, please try again.
- Redfish and REST API access works with role=Administrator.
The service user:
- Console login to the BMC's command shell works. The home
directory is /. Passwordless sudo works.
- SSH login works and using sudo from a SSH session works.
- Redfish and REST API access works with role=Administrator.
Change-Id: Icac5ba7f4fa663047709ab55007bbcfec8158f5e
Signed-off-by: Joseph Reynolds <joseph-reynolds@charter.net>
|
|
The OBMC_ORG_YAML_SUBDIRS variable is intended to be set system-wide
and not via bbappends. There was an existing 'ibm-distrovars.inc'
that was unused. Rename it as appropriate, add it to the machines,
and remove the bbappend files.
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: Id5acd359f41c17ec9e68d1f0717e2f5c1bf96dcf
|
|
The meta-ibm layer supported two different DISTROs depending on the
machine being built. This caused complexity since the user needed to
remember to specify the DISTRO name, in addition to the CI build scripts
needed to check for the machine name being built to override the default
DISTRO.
For simplification, remove the openbmc-witherspoon DISTRO, which is the
openpower DISTRO plus additional features, and move these features to
the machine configuration files. Make the openpower DISTRO the default.
Tested: Built witherspoon and p10bmc using "source setup <machine> build"
followed by "bitbake obmc-phosphor-image" without specifying the
DISTRO. Verified witherspoon built a ubi image and p10bmc built
a emmc image.
Change-Id: If33441ab4ad2dc0fbedde09f0db91d691d2da4f7
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
|
|
Replace rainier with p10bmc as build target. Keep the rainier.conf as a
symlink to p10bmc.conf to allow the transition. Remove the rainier.conf
and the machine override from p10bmc.conf in a later commit to complete
the replacement.
Tested: Built rainier and p10bmc and checked for some files/service
units to exist on both.
Change-Id: Ic8c8c6ffbc3507fbd9c692da259e37ae695359a6
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
|
|
The IBM rainier system is being replaced with the generic p10bmc name.
Since the rainier.conf file will be renamed p10bmc.conf, add the device
tree files for all p10 systems that will be supported with the p10bmc
name (rainier, everest).
Change-Id: I10983b913d8a2ae98ed4d327131b864f2df96a0c
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
|
|
The IBMC POWER10 systems will have a common BMC image, therefore there
will be a transition to move from the 'rainier' system name to the
generic 'p10bmc' name.
This will be done in two stages. The first one is to create a p10bmc
MACHINEOVERRIDES and replace the rainier conditionals with p10bmc.
Once that's done, the rainier.conf will be replaced with p10bmc.conf.
Change-Id: Ic499d36dd7f74a8b7f4a44723f76d1e344e15a32
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
|
|
Both rainier and witherspoon-tacoma systems support the mpreboot
feature.
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Change-Id: Ieeb4724a5cf5678ba0f6ab950b5403db5aebcd88
|
|
The AST2600 systems booted from NOR during bringup, but now that we have
eMMC support in u-boot they can run from eMMC.
(From meta-ibm rev: 46419c51c3bd3d43873ecbab7fbbb6f1d6c54de4)
Signed-off-by: Joel Stanley <joel@jms.id.au>
Change-Id: Idd2389ab62e1b7cc32639f5547f1f1098631654f
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
At a high level, the purpose of this feature was to utilize the BMC
hardware watchdogs to switch the BMC boot flash when certain errors were
hit which were preventing the BMC from booting.
At a high level, this worked but some critical issues were found with
this:
- No failure data is gathered to understand why the boot flash was
switched
- No event or error is logged to notify the user of the system that the
boot flash has switched
- At times, switching sides didn't help because the BMC network
information was not properly copied to the other boot flash which
caused even more confusion for the user
Give the above, this patch proposes a reset on this logic until we can
come back and address the above issues and get this working end to end.
(From meta-ibm rev: d5069cffe865ea104915d8e0fdbe8d7d145644fc)
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Change-Id: I8c8d2b30c80940f4674e6c6848bd22f759e943a5
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
witherspoon-tacoma systems do not utilize this feature
(From meta-ibm rev: b32849212c59c6383543ba769b8b4f6e2fbbc48b)
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Change-Id: I59c5b19b6ad140447f5cdf4184db5acf251c2842
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
rainier systems do not utilize this feature
(From meta-ibm rev: dcfa1a4d7ad4065d983e3bf77cc88d5167492e9d)
Change-Id: I0a9b430c8245016237c0f168781ecf0b68438f96
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
Build the u-boot and the SPL binary. The image_types_phosphor.bbclass
keys off these configs to concatenate them together into a single
file which is used during code update to update the device where
the SPL+U-Boot reside.
(From meta-ibm rev: 2e8a6ac2986dfbfc62139355cf663ec5161cb1b9)
Change-Id: Ia17635ef68c059bfa6fd937ac806c3f21fad8c84
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
Prior to this patch the Rainier system doesn't include any host
processor configuration. Rainier is a server with a host processor, so
include the correct host processor configuration.
(From meta-ibm rev: 5b44384b92419673b1ce7cca40c5dc613cc6d60a)
Change-Id: I3da77be772c3cd0f89539c8e56c5d0719ad84c44
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
For tacoma, adjusting the size of the eMMC image by making the
hostfw partition smaller.
(From meta-ibm rev: f12da2705f487a933cbf291c129d3832b91d1816)
Change-Id: Ic13d141d41ab513f2af7bff790efc7529739b11d
Signed-off-by: Adriana Kobylak <anoo@us.ibm.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
This system will no longer be supported or maintained. Drop to minimize
cruft.
(From meta-ibm rev: 7c17e6a1f826cdfbbb39ffa3f237025e56fab52f)
Change-Id: Id954a1c91c754a1eb4eb67348c5fb01a115326ed
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
(From meta-ibm rev: 34c7a88436d2e425429b7a61065e25ce4a9b0664)
Change-Id: I9d4259e36c7c7225e5f29041e204f7d75dc15720
Signed-off-by: Vishwanatha Subbanna <vishwa@linux.vnet.ibm.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
This was a P9 DD1 workaround. These systems are no longer supported and
are not found in the wild, so the workaround has been retired.
All of the p9 systems in the tree exclude the package so this change
should be a noop.
(From meta-ibm rev: 38c5c9539fb3f01fc2b96d483701938bffdf48a0)
Change-Id: I1c7786526dee4d9bb0d5db916890c1cbe3d51577
Signed-off-by: Joel Stanley <joel@jms.id.au>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
The metadata common to all IBM systems is confusingly split between
meta-ibm and meta-witherspoon. Move everything to meta-ibm.
The meta-ibm README is re-written to more accurately reflect the scope
of the layer.
Allow the configuration samples (bblayers.conf.sample,
local.conf.sample) to be sourced from either meta-ibm or
meta-witherspoon until such a time that any workflows and tooling have
had the opportunity to move to meta-ibm.
(From meta-ibm rev: 6e05ef2e90b214eaf4e43ee7027bbbb1d8d09442)
Change-Id: I3ec890d5300f9649c974ea6b9dca93a2e8a889ab
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
ibm.inc simply includes openpower.inc. That, and meta-ibm is a distro
policy layer and doesn't enable any specific hardware.
Update machine configurations to include openpower.inc directly. Add a
conf/distro/include/ibm.inc to meta-ibm at a later time when meta-ibm
has distro policy to apply.
(From meta-ibm rev: 3d1be91f99c646b350c02bfe1004a019cd436c13)
Change-Id: I4bf1e9badba105f4ed10c478f7d5473e3f169791
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|
|
The new subtree model brings the subtrees up from the openbmc-machines
layer.
Change-Id: I58a03ae1be374bc79ae1438e65e888375d12d0c0
Signed-off-by: Dave Cobbley <david.j.cobbley@linux.intel.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
|