summaryrefslogtreecommitdiffstats
path: root/projectroot
Commit message (Collapse)AuthorAgeFilesLines
...
* utelnetd: /usr mergeMichael Olbrich2017-04-111-1/+1
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rtps: /usr mergeMichael Olbrich2017-04-111-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* nfsutils: /usr mergeMichael Olbrich2017-04-111-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* networkmanager: /usr mergeMichael Olbrich2017-04-113-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* mysql: /usr mergeMichael Olbrich2017-04-113-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* bootchart: /usr mergeMichael Olbrich2017-04-111-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* initmethod: /usr mergeMichael Olbrich2017-04-111-0/+0
| | | | | | move initmethod-bbinit-functions.sh Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* fake-overlayfs: /usr mergeMichael Olbrich2017-04-113-2/+2
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* busybox: /usr mergeMichael Olbrich2017-04-112-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rc-once: /usr mergeMichael Olbrich2017-04-114-1/+1
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* udev-legacy: /usr mergeMichael Olbrich2017-04-111-1/+1
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* systemd: /usr mergeMichael Olbrich2017-04-111-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rsyslog: misc improvements and fixesClemens Gruber2017-03-311-3/+3
| | | | | | | | | | | | json-c is no longer needed, rsyslog uses libfastjson from now on. Make imkmsg, mmjsonparse and pmciscoios configurable. Use --disable-unlimited-select as most other distros do and add missing configure options. Replace legacy configuration directives and do not load immark by default. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* openssh: update 7.3p1 -> 7.5p1Clemens Gruber2017-03-291-17/+2
| | | | | | | Update to 7.5p1 and refresh default sshd_config. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* passwd: corrected gid of systemd-journal-remote userArtur Wiebe2017-03-281-1/+1
| | | | | Signed-off-by: Artur Wiebe <artur@4wiebe.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* systemd: added users/groups for journal-gateway, -remote, -uploadArtur Wiebe2017-03-242-0/+5
| | | | | Signed-off-by: Artur Wiebe <artur@4wiebe.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rauc: new packageEnrico Jorns2017-03-243-0/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds recipes for building the RAUC update tool both as a host tool as well as a target update tool and service. When using systemd, the package will install a rauc.service that allows to start RAUC, by default RAUC does not start automatically but uses D-Bus activation when invoked by your application or by the command line tool ./rauc. You will also get a rauc-mark-good.service in your rootfs by default that is wanted by multi-user.taget and is used to notify the underlying bootloader implementation about having booted successfully in userspace. You can also make it depend on your application services being started. For integrating RAUC with your platform, you need to have a system description file /etc/rauc/system.conf in your platforms projectroot/ dir. This defines all relevant slots and provides information and configuration RAUC requires to properly handle the platform it is running on. You also have to place a valid keyring file into you platforms projectroot/ as /etc/rauc/ca.cert.pem to allow RAUC verifying update Bundles before installing them. There are dummy files installed by default for ca.cert.pem and system.conf which only contain hints on how to set up correct project-specific ones. The additional good-marking-service installed by the recipe runs after user space is brought up and notifies the underlying bootloader implementation about a successful boot of the system. This is typically used in conjunction with a boot attempts counter in the bootloader that is decremented before starting the systemd and reset by `rauc status mark-good` to indicate a successfully system startup. Signed-off-by: Enrico Jorns <ejo@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* passwd: add systemd-coredump userMichael Olbrich2017-03-151-0/+1
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* passwd: remove obsolete systemd-bus-proxy userMichael Olbrich2017-03-151-1/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* systemd: version bump 232 -> 233Michael Olbrich2017-03-151-0/+1
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* projectroot: Fix HTML syntax in examplesClemens Gruber2017-01-052-0/+4
| | | | | Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* collectd: update 5.4.1 -> 5.7.0 and add sensors supportClemens Gruber2017-01-051-0/+1
| | | | | | | | | | | To avoid mistakes in future updates, reorganize the configure options, add missing options and list all plugins separately. This update adds support for the sensors plugin, which reads sensor data through lm_sensors. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* nginx: new packageClemens Gruber2016-11-303-0/+63
| | | | | | | | | | | | | | | | | | | Add nginx package. Heavily inspired by Buildroot's nginx.mk, using their revised patches for 1.10.x and the endian patch from Marc Kleine-Budde, as well as the nginx.make from the patchset Robert sent, as a starting point. But instead of building the modules by default, each module is selectable in PTXdist, to allow reducing the binary size. Most popular modules are supported, systemd unit file and basic configuration files are included as well. Supports SSL, HTTP/2, HTTP Proxying, GZIP, Auth Basic, Rewrite, FastCGI, SCGI, uWSGI, etc. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> [mol: regenerate patches with git-ptx-patches] Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* systemd: make sure $TERM is set for all sessionsMichael Olbrich2016-09-271-0/+5
| | | | | | Systemd will not set $TERM for telnet sessions etc. Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* glibc: install ldconfig and create ld.so.cacheClemens Gruber2016-09-092-0/+8
| | | | | | | | | | | | Add an option to install the ldconfig binary from the toolchain and another one to enable the generation of /etc/ld.so.cache at first boot with a rc-once.d script. Use only the new format, which is supported since glibc 2.2 from the year 2000. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> [mol: minor cleanup] Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* udev init script should pass --action=add to udevadm triggerGuillermo Rodriguez2016-09-021-1/+1
| | | | | | | | | | | 'udevadm trigger' was being called without parameters in the udev init script. This is equivalent to --action=change, which means that udev rules for the "add" action would not be triggered. Fix this by explicitly passing --action=add to udevadm trigger. Signed-off-by: Guillermo Rodriguez <guille.rodriguez@gmail.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* lighttpd: create /etc/lighttpd/conf.d in any caseRobert Schwebel2016-09-021-1/+1
| | | | | | | | | | | Otherwhise 'systemctl status lighttpd' shows that include_shell in lighttpd.conf tries to glob in a non-existing directory. While being there, test if there are *.conf files before including them, which also would give an error. Signed-off-by: Robert Schwebel <r.schwebel@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rc-once/systemd: fall back to the rescue boot-target if rc-once fails to ↵Juergen Borleis2016-08-151-1/+4
| | | | | | | | | | | | | | remount RW In cases where the root filesystem medium has some kind of external write protection (like an SD card has), remounting the root filesystem read-write fails and the system seems frozen, because systemd never starts any log-in console. This change forces the rescue target for this special case. Signed-off-by: Juergen Borleis <jbe@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* projectroot: etc/passwd: Change home of rootDavid Jander2016-08-011-1/+1
| | | | | | | | systemd assumes $HOME of root to be "/root", and apparently so do most other Linux distributions. Adapt to the de-facto standard. Signed-off-by: David Jander <david@protonic.nl> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* make /var/run a symlink to /runMichael Olbrich2016-07-231-1/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rc-once: set IgnoreOnIsolate=true for rc-once.serviceMichael Olbrich2016-07-061-0/+1
| | | | | | | | | | rc-once calls 'systemctl default' which is basically 'systemctl isolate default.target'. Without IgnoreOnIsolate=true this will stop rc-once.service because it is not part of the new default target. This was never noticed because 'systemctl default' is the last command. Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* crda: update to new regulatory.binMarc Kleine-Budde2016-06-241-0/+0
| | | | | | | | This regulatory.bin was downloaded from: https://git.kernel.org/cgit/linux/kernel/git/sforshee/wireless-regdb.git/plain/regulatory.bin?id=ce069203de85ff370d23bdca6c1a2edb941def35 Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
* NetworkManager: fix resolv.conf handlingRobert Schwebel2016-06-131-0/+1
| | | | | | | | | | | | | | | With NetworkManager 1.2, the /etc/resolv.conf handling was changed and we didn't notice. NetworkManager assumes that resolv.conf is already handled manually and writes its generated resolv.conf only to /run/NetworkManager/resolv.conf instead of the location we set our /etc/resolv.conf link to. By setting rc-manager=file, the old behaviour is restored. Found-by: Michael Olbrich <m.olbrich@pengutronix.de> Signed-off-by: Robert Schwebel <r.schwebel@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* mySQL: exhume a gone package by updating it to a new releaseJuergen Borleis2016-05-266-0/+136
| | | | | | | | | | | | | | | | | | After the remove of the old package from the staging area this change adds a new release of the mySQL package. Its intended and checked on a read-only root filesystem with write access in "/var/mysql" only. The database engine runs as a regular user and does not need root permissions. Due to its dependency to boost_1_59_0 it uses exactly this version and the already present boost lib in PTXdist isn't used. Be aware: its buildsystem uses a huge amount of memory. If your host is low on memory don't forget to build this package with the '-ji1' parameter. Signed-off-by: Juergen Borleis <jbe@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* mySQL: remove an orphaned fileJuergen Borleis2016-05-261-4/+0
| | | | | | | The corresponding package is gone with 7e3cd4d1d83c24ff5070fea5b6789936351a880a Signed-off-by: Juergen Borleis <jbe@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* projectroot: etc/group: add missing shadow groupMarc Kleine-Budde2016-05-241-0/+1
| | | | Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
* rng-tools: add systemd service and rngtest optionsSteffen Trumtrar2016-05-171-0/+7
| | | | | Signed-off-by: Steffen Trumtrar <s.trumtrar@pengutronix.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* Add persistant iptable-rules via systemdGavin Schenk2016-04-116-0/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Supports ipv4 and ipv6 and both options can be selected in menuconfig by IPTABLES_IPV6_SYSTEMD_UNIT and/or IPTABLES_IPV4_SYSTEMD_UNIT If you select IPTABLES_IPV4_SYSTEMD_UNIT a systemd unit is started on multiuser.target that set the iptable rules from file: /etc/iptables/rules.v4 If you select IPTABLES_IPV6_SYSTEMD_UNIT a systemd unit is started on multiuser.target that set the iptable rules from the file: /etc/iptables/rules.v6 The Package provides empty files. If you want to add custom rules, you have to provide your own files. The rule files can be generated with the utils iptables-save ip6tables-save from the iptables package. Example: Generating a rule file, that drops port 5000 on interface eth0 for ipv4 1.) iptables -A INPUT -i eth0 -p TCP --dport 5000 -j DROP 2.) iptables-save > /etc/iptables/rules.v4 The basic idea was taken from https://github.com/gronke/systemd-iptables written by Stefan Grönke <stefan@gronke.net> in 2015. Signed-off-by: Gavin Schenk <g.schenk@eckelmann.de> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* gptp: add new package for IEEE1588Robert Schwebel2016-02-171-0/+28
| | | | | | | | | | | This adds the linuxptp project. The original ptxdist rules have been written by Steffen Trumtrar. Signed-off-by: Steffen Trumtrar <s.trumtrar@pengutronix.de> [clean up rules, add license, version bump to 1.6] Signed-off-by: Robert Schwebel <r.schwebel@pengutronix.de> [mol: white space fixes, GPL-2.0 -> GPL-2.0+] Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* Export LANG environment variable for systemdClemens Gruber2016-02-161-0/+7
| | | | | Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* nfsutils: version bump 1.3.0 -> 1.3.3Michael Olbrich2016-01-125-21/+14
| | | | | | Cleanup and simplify rules while at it. Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* rpcbind: new packageMichael Olbrich2016-01-122-0/+24
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* pcsc-lite: add missing reader.conf config fileMarc Kleine-Budde2015-12-171-0/+2
| | | | Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
* openct: new packageMarc Kleine-Budde2015-12-102-0/+8
| | | | Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
* lldpd: update to 0.7.19 and add systemd supportClemens Gruber2015-12-091-0/+13
| | | | | | | | | Bump version to current stable version 0.7.19. Add options for custom TLV and JSON support. Add systemd unit and adapt rule file accordingly. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* systemd: networkd: don't configure eth0 for nfsrootMichael Olbrich2015-11-251-0/+1
| | | | | | | systemd-networkd now clears existing addresses, so make sure it does not touch eth0 when running from nfsroot. Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* opkg: version bump 0.2.2 -> 0.3.0Michael Olbrich2015-11-251-0/+1
| | | | | | | | * remove obsolete patches. This is handled correctly now by libarchive. * the lock-file is now configured in the config file. * The binary is now called 'opkg' instead of 'opkg-cl'. Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* openssh: harden security options and host keysClemens Gruber2015-11-072-43/+91
| | | | | | | | | | | | | | The rc.once.d script generates the host keys which are enabled in the ssd_config file. Ed25519 and RSA are the default host key signature algorithms as both do not solely rely upon good entropy sources. DSA and ECDSA are not recommended on embedded systems. The SSH configuration is hardened: Enabled sandboxing, reduced login grace time, strict mode, etc. Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com> [mol: use 4096 bits for RSA keys, base config on upstream example] Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* os-release: move to /usr/libMichael Olbrich2015-11-071-0/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
* dbus: version bump 1.8.16 -> 1.10.0Michael Olbrich2015-10-152-144/+0
| | | | Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>