Age | Commit message (Collapse) | Author | Files | Lines |
|
meta-security: b9bc938785..1856a7cf43:
Armin Kuster (1):
scap-security-guide: update to 0.1.69+
Lei Maohui (2):
paxctl: Fix do_package QA Issue.
ccs-tools: Fix do_package QA Issue.
Martin Jansa (1):
layer.conf: update LAYERSERIES_COMPAT for nanbield
Yi Zhao (1):
scap-security-guide: pass the correct cpe/schemas/xsl paths to oscap
meta-arm: 992c07f7c0..bd0953cc60:
Abdellatif El Khlifi (1):
arm-bsp/u-boot: corstone1000: detect the kernel size automatically
Anusmita Dutta Mazumder (5):
arm-bsp/u-boot: corstone1000: add unique firmware GUID
arm-bsp/trusted-firmware-m: corstone1000: add unique firmware GUID
arm-bsp/scp-firmware: Update N1SDP scp-firmware version
arm-bsp/n1sdp: Enable tests with pseudo trusted application
CI: Build custom image for N1SDP optee-xtest
Delane Brandy (1):
arm-bsp/corstone1000: mmc2-enablement
Emekcan Aras (2):
arm-bsp/trusted-firmware-a: corstone1000: Update TF-A v2.9
arm-bsp/optee-os: corstone1000: Update optee-os v3.22
Javier Tia (1):
optee-client: Add path condition to tee-supplicant.service
Jon Mason (14):
arm/trusted-firmware-a: update to 2.9.0
arm-bsp/juno: update kernel to 6.4
arm/linux-yocto: change defconfig patch for 6.4
arm/hafnium: update to v2.8
arm/linux-yocto: update kernel patches
arm/trusted-services: add SRCREV_FORMAT
arm-bsp/tc1: update optee
arm-bsp/fvp-baser-aemv8r64: update u-boot to 2023.01
arm-bsp/corstone500: upgrade u-boot to the latest
arm-bsp/corstone500: removal of support
arm: patch clean-ups
arm/edk2: update to 202305 version
arm/sbsa-acs: update to v7.1.2
arm-bsp/trusted-firmware-a: remove unneeded patches
Mariam Elshakfy (2):
arm-bsp/trusted-firmware-a: Update TF-A version for N1SDP
arm-bsp/n1sdp: Update edk2-firmware version for N1SDP to 202305
Ross Burton (3):
kas/: pass through DISPLAY from environment
Remove explicit SRCPV
arm-bsp/external-system: set PACKAGE_ARCH as this is machine-specific
meta-raspberrypi: 5e2f79a6fa..6501ec892c:
Andrei Gherzan (2):
ci: Add usrmerge to distro features
docs: Fix documentation theme
Sangmo Kang (1):
omxplayer: fix an error caused by new srcrev fetcher API
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
|
|
Josh Lehan (1):
Add Negative and PositiveHysteresis to PID loop
Change-Id: Ic0196d109c7cedef1b36b965ae2fc895f8f7dfeb
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
George Liu (1):
meson_options.txt: Support for reading options from meson.options
Change-Id: I3b599cfb967719b40c1e4197e62eb607a79254c9
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
William A. Kennington III (1):
network_manager: Explicitly capture references in cb
Change-Id: I47f29750862d44578ee43603dd50b4f1793740c9
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Sagar Srinivas (1):
Add additional information for logging
Change-Id: I8fd8bfc5b5350599ced35a690bf79b06a5bbb7e4
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Ed Tanous (1):
Fix libpeci build
Change-Id: I26c3813c979e482620a7f6d9c59b80c578b4221b
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Jonico Eustaquio (1):
mori_bmc: Move EID and EInstance spec to DCSCM_INLET
Josh Lehan (1):
Add ZoneIndex to PID zone
Change-Id: I40841368829ecf1d7f41fedeffab9f2af383f428
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Patrick Rudolph (1):
ethernet_interface: Fix configuration
Change-Id: I048d559a491b26d3dd24fc8685ef78360ff0504a
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Ed Tanous (2):
Fix regression in ip address delete
Simplify datetime parsing
Troy Lee (1):
Fixes bmcweb crashed when mounting virtual media
Change-Id: Id8d9e0f1e031324ebcb3a9696bd8d4768009576e
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Willy Tu (1):
Set lastRebootTime once at startup only
Change-Id: I70c99a40ef41be5308881ab723d3e0b2ffefa0df
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
- Enable dbus-sensors
- Add board specific blacklist
Change-Id: I04c02a3b2302cb480e05eed258cacf3bd3bd88db
Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
|
|
Fix commit 4f282598b1c60378a83d032bacd388ce74e80541
"meta-ibm/genesis3: Add inventory".
Actually do generate an inventory based on added YAML.
TEST: Verified that generated.cpp is not empty.
Change-Id: Ia5c92894a573d6c5dad1db7473362130e966ee47
Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
|
|
Fix commit d7191a5492f3a6864a28806cf8ea2d21e5482499
"meta-ibm/sbp1: Add inventory".
Actually do generate an inventory based on added YAML.
TEST: Verified that generated.cpp is not empty.
Change-Id: Ib626f3777ba1db29dfee653b487256a5bed4f592
Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
|
|
The NVMe SSDs on the ruler drives are already found by FruDevice.
Enable nvmesensor to read temperatures as soon as the x86 is
powered on.
Change-Id: I2191f909ab1b9e4bc79ae0d24de9042fe54291eb
Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
|
|
After rebasing on upstream the config wasn't properly updated
to use genesis3 custom YAML config. Update the config to actually
read the MAC from EEPROM and set it on Dbus.
Tested: MACAddress field is set on DBus ans phosphor-networkd
applies the MAC address to the network interface.
Change-Id: Ideaffc68e75a005c351edd3b53860bfcc30dfde4
Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
|
|
After rebasing on upstream the config wasn't properly updated
to use SBP1 custom YAML config. Update the config to actually
read the MAC from EEPROM and set it on Dbus.
Tested: MACAddress field is set on DBus ans phosphor-networkd
applies the MAC address to the network interface.
Change-Id: I44fa3f3350e5b532ab56f5317e4228b36a4a5a14
Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
|
|
Patrick Williams (1):
chassis_check_power_status: fix missing include
Change-Id: Ica62ece8a6c1a411c5fc963a4c7361225649a6cf
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Xinnan Xie (1):
certificate_service: Fix garbled display caused by dangling reference
Change-Id: I3d0f5b66394e1c0365db14242d4133ed5632c230
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Thu Nguyen (2):
pldmtool: Support compact Numeric Sensor PDR in GetPDR
pldmtool: Support Auxiliary name PDRs in GetPDR
Change-Id: I0b7cb2cc2e9c6c9ed6065b78fb407e4de5d96bf8
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Blocks reads, whos values are greated than 128, will be formated as
negative integers, causing cascading errors in the checksum calculation.
Format using unsigned specifier instead to prevent this.
Tested:
Before:
```
dd if=/sys/bus/i2c/devices/13-0050/eeprom bs=1 count=8 skip=8 | \
hexdump -v -e '1/1 "%d "'
1 1 32 36 -107 47 -115 -121
```
After:
```
dd if=/sys/bus/i2c/devices/13-0050/eeprom bs=1 count=8 skip=8 | \
hexdump -v -e '1/1 "%u "'
1 1 32 36 149 47 141 135
```
Change-Id: I187f0918a25005310bb900022047e03fe68483d4
Signed-off-by: Vlad Sytchenko <vsytch@google.com>
|
|
This includes security and bug fixes from the 6.1.47 through to 6.1.51
stable releases.
Change-Id: I8f5d057a785e38f6980487c84c587e1baf38bf8f
Signed-off-by: Joel Stanley <joel@jms.id.au>
|
|
Boleslaw Ogonczyk Makowski (1):
Fix mounting in legacy mode in virtual media
Gunnar Mills (1):
System: Error log level when internalError
Jason M. Bills (1):
Don't return failed password in Redfish error response
Change-Id: I6abb0a4b71a987bf4b702e44f61985f721be8ebd
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Instead of individual filenames, adding the containing directory
itself.
Adding the directory used by the gRPC receiver of SMBIOS blobs from
remote hosts, so they can stick around after the smbios-mdr service is
restarted, without requiring hosts to send them again.
As for the gRPC receiver itself, see this patch stack:
https://gerrit.openbmc.org/c/openbmc/smbios-mdr/+/65048
Change-Id: Ic73ab81e3a9761a101b6040a445a5cf042cbb4b0
Signed-off-by: Josh Lehan <krellan@google.com>
|
|
IBM observed consistent hangs in the `uart_otp` tool when programming
the OTP image into the SoC. This was root-caused by Aspeed:
> Message-ID: <TYZPR06MB677027C95FCFABCDA6F81C4D800DA@TYZPR06MB6770.apcprd06.prod.outlook.com>
> From: Neal Liu <neal_liu@aspeedtech.com>
> Subject: Server Management technical issue by Rose.Drehmel@us.ibm.com
>
> Hi Andrew,
>
> It’s okay, I found the problem.
>
> The utility timeout is because it programs key retire bits in
> OTPCFG4[7:0] without enabling secure boot.
>
> In the case of secure boot is enabled, the hardware would detect the
> current boot up key number #id, and it can only retire the number
> which is smaller than the current boot up key #id.
> If not, the OTP status will keep busy, and the utility stocks in
> polling loop.
>
> If you still want to disable key #0 without enabling secure boot,
> OTPCFG0[5] can be another option for you.
>
> I also provide a new programmer.bin to fix this infinite loop problem
> in case user thought BMC is crashed.
>
> You can try it with this command:
>
> $ uart_otp -s 2600 -p ast2600_otp_programmer.bin /dev/ttyUSBx
>
> Thanks
>
> Best Regards,
>
> -Neal
In discussion with Chris we determined that we were not intentionally
attempting to retire the development / low-security key, rather were
just trying to be complete in the specification of our configuration.
Neal responded to our request of how to avoid programming a key
retirement in the configuration file:
> Message-ID: <TYZPR06MB67700B238DB429A51E048E328010A@TYZPR06MB6770.apcprd06.prod.outlook.com>
> From: Neal Liu <neal_liu@aspeedtech.com>
> Subject: Server Management technical issue by Rose.Drehmel@us.ibm.com
>
> Hi Andrew,
>
> Just delete line #72 as unspecified value.
>
> Thanks
>
> Best Regards,
>
> -Neal
>>
>> From: Andrew Jeffery <andrewrj@au1.ibm.com>
>> To: Neal Liu <neal_liu@aspeedtech.com>
>> Subject: Re: Server Management technical issue by Rose.Drehmel@us.ibm.com
>>
>> Hi Neal,
>>
>> I've discussed your findings with Chris Engel, who is our platform
>> security person. We determined that we do not want to mark the low
>> security key as retired in the OTP as we're handling that via the
>> FWSPIMISO strapping pin.
>>
>> What change should I make to our OTP configuration so that we don't
>> retire key 0 during programming?
>>
>> Andrew
Line 72 in this case refers to our OTP configuration file:
https://github.com/openbmc/openbmc/blob/2a25492c13e2b768f94b864a51f84e82e4238aef/meta-ibm/recipes-bsp/u-boot/u-boot-aspeed-sdk/p10bmc/ibm.json#L72
Leave "Keys Retire ID" unspecified to avoid leaving the OTP engine busy.
Cc: Chris Engel <cjengel@us.ibm.com>
Cc: Rose Drehmel <Rose.Drehmel@us.ibm.com>
Cc: Briana Foxworth <befoxwor@us.ibm.com>
Cc: Nicole Nett <nschwart@us.ibm.com>
Change-Id: Ib6b75a40f5debd5ba1166f0f69a07114b76d9c34
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>
|
|
There's a bug in socsec that prevents the IBM's configuration from
successfully building an OTP image.
I have got the fix merged upstream:
https://github.com/AspeedTech-BMC/socsec/pull/18
However, Aspeed do not plan on doing a release until October:
> [ 17:51 ] arj: @Troy Lee any chance Neal can tag a new socsec release so we can bump it in OpenBMC and pick up some recent fixes?
> [ 18:25 ] Troy Lee: Current schedule is October.
https://discord.com/channels/775381525260664832/922871693008068638/1144547174286377062
For now, fix otptool using a recipe patch, in violation of the usual
guidelines.
I prefer we do this over switching to a "git" version for the recipe as
instability with these tools really cannot be tolerated.
Change-Id: I65b1992b5479ea257cfa65fd8b3cfc021b7d3dea
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>
|
|
Change-Id: I95010b4925632b4384b90b2f113b9b826b5b63bd
Signed-off-by: Andrew Jeffery <andrew@aj.id.au>
|
|
Michal Orzel (1):
Change authority D-Bus names
Change-Id: I81a7e5c0fb65a7e77a4797477130d18a3e2763d9
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Divya Jyoti (1):
Fix incorrect response code for header size limit
Change-Id: I989caeb2aef2631d660a3ceb2e95d352ab493ea9
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Jonathan Doman (1):
Separate IPMI and legacy snoop code to different files
Change-Id: Iaf1f88220948ad3d01e162044f6b81bcfd66d607
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Jonathan Doman (1):
Refactor unnecessary shared_ptr usage
Change-Id: I270db996e670e45a6708cea9f770d70c59f81894
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Andrew Jeffery (1):
transport: Filter for the response to the issued request
Change-Id: If5e6f02b1478c920620c02515eba1dcf2e77fc3e
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Jinu Joy Thomas (1):
Correct PEL create on default value in D1 keyword (#158)
Change-Id: I829d90ba8f7f528c47d751034f2e6509ae58207e
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Dhruvaraj Subhashchandran (2):
Generate dump types table
Generate error map as part of dump types
Change-Id: I1fb7c3d9a09f1fb3cae85a3982d0a162b171fb80
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Matt Spinler (2):
Make gmock dep initially not required
Remove remaining fmt::format use
Change-Id: I23b8b23e274972c8265272f082eafed4cd6cf9fe
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
glome was moved to meta-security layer and libhoth was moved to
meta-tpm layer.
Change-Id: I4bcfb78948da25b90e02a1db786937484c09d93f
Signed-off-by: Tom Tung <shes050117@gmail.com>
|
|
This is required to pick up the glome recipe that was moved from
meta-google to meta-security.
Change-Id: I52790cd2b792ed208498715748e5bed6fb120d20
Signed-off-by: Willy Tu <wltu@google.com>
|
|
Vernon Mauery (1):
Add OEM get BMC Version String command
Change-Id: Ifb786919d28d3798a627d3a904e48fcf06ba1f3b
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Stanley Chu (1):
add run_state API
Signed-off-by: Tim Lee <timlee660101@gmail.com>
Change-Id: I41d78074c29ab3b1386137846d2e712025f37a41
|
|
Changelog:
Andrew Geissler (1):
ensure power off works after istep boot
Jason Albert (5):
Move -lstdc++fs to istep only builds, only used there
Fix issue with missig .c_str()
Update method to read eeprom label value
Renable VPD support in host builds
Update to pb-plugin build
RAJESWARAN THILLAIGOVINDAN (1):
Updated to support putScomUnderMask
Steven Janssen (2):
Update ecmd to latest ecmd15 branch changeset
update ecmd to latest with gcc compile fixes
deepa (1):
Fix CI build failure
deepakala-k (6):
Resolve compilation error
Fix istep name displayed on 'istep list'
Add support to log traces into journal
ecmd-pdbg: Fix getscom to handle target not enabled
ecmd-pdbg: Fix getscom to allow only functional targets
Fix omic getscom
Change-Id: I429e886938741a90ebf35a6ed8b3c5002bba4306
Signed-off-by: Deepa Karthikeyan <deepakala.karthikeyan@ibm.com>
|
|
Jason M. Bills (1):
Fix more build warnings
Change-Id: I3554ac3f66209cb02891984582fa12f997e851bc
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|
|
Change-Id: Ifccac09484d800c0c94092238ccb715362fb2b32
Signed-off-by: Charles Kearney <charles.kearney@hpe.com>
|
|
The ampere platform managment recipe is not upstreamed yet. Remove until dependency is satisfied.
Change-Id: I59863e7df1b64c7025cfbdc34f496a89fea14684
Signed-off-by: Charles Kearney <charles.kearney@hpe.com>
|
|
Change-Id: Ia13dbd9b2178aca967df916cb507e5c92bacd6ec
Signed-off-by: Charles Kearney <charles.kearney@hpe.com>
|
|
Bumping revisions in multiple projects in order to support changed name
of authority certificate store service:
- phosphor-certificate-manager: 2e8ef4ce...2e8fa88e
Michal Orzel (1):
config: Change authority D-Bus names
- bmcweb: 0a4776cf...b2254ccd
Michal Orzel (1):
Change authority D-Bus names
Myung Bae (1):
Ignore Non-software-related events during Update
- phosphor-user-manager: 24637e5f...23f82c1e
Michal Orzel (1):
Change authority D-Bus names
Change-Id: If75951a40e7264102424e1d31a29f7c2e8a90f0e
Signed-off-by: Michal Orzel <michalx.orzel@intel.com>
|
|
The machine is no longer being supported.
Change-Id: I06cccfd7abdefc6ba93c43b1135b4c8942267eb6
Signed-off-by: Willy Tu <wltu@google.com>
|
|
Changelog:
TIP FW 0.6.2 L0 0.5.1 L1
==============
- Release tag: TIP_FW_L0_0.6.2_L1_0.5.1
- Fix trap issue in export found on DC_SCM only.
- Optimize memory usage.
- RSA and RNG code cleanup.
Tested:
Build pass and boot up successful with correct version.
Signed-off-by: Tim Lee <timlee660101@gmail.com>
Change-Id: Ie35d15345fdefbdb9d66801f3ebb70ffc39d776d
|
|
Changelog:
IGPS 03.09.03 - Aug 10th 2023
==============
- Update scripts: fix typos.
- Update scripts: copy all keys always.
To replace a key please remove it from both:
IGPS_..\py_scripts\ImageGeneration\keys
IGPS_..\py_scripts\ImageGeneration\inputs\key_input
Tested:
Build pass and boot up successful both TIP and NO TIP mode.
Signed-off-by: Tim Lee <timlee660101@gmail.com>
Change-Id: I4f364735d393d6c84475fd11f96da14e4b1d7b56
|
|
The RPMB partition of the eMMC on our boards has been written
with a test key from optee-os. As a result, we cannot use the
key from OTP to access RPMB. Thus, we need to remove it.
And add back CFG_REE_FS and CFG_REE_FS_TA support for optee-os.
Tested: build pass and boot successfully then run xtest pass.
Signed-off-by: Tim Lee <timlee660101@gmail.com>
Change-Id: I47ea2f1ba8ed09b34a1530c2b4110d296dd09e11
|
|
Stanley Chu (7):
pinctrl: npcm8xx: sync with upstream driver
pinctrl: npcm8xx: add name for gpio function
board: nuvoton: set console environment variable
serial: npcm: support skip uart initialization
configs: arbel/poleg: support more uart baud rate
watchdog: npcm: fix reset/expire function
dts: npcm8xx: add watchdog
Signed-off-by: Tim Lee <timlee660101@gmail.com>
Change-Id: Id3923f96f68fa0f59f18b7f6d9f533d48d7cb6b1
|
|
George Liu (1):
hardcode dbus name
Change-Id: I0dcb9b2b146db38f396dd0246029e2b4c6a5614b
Signed-off-by: Andrew Geissler <openbmcbump-github@yahoo.com>
|