summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Configure shadow to work with PAM.Pedro Alvarez2015-05-072-3/+11
| | | | | | | | | | | | | Also modify some /etc/pam.d files: - Make the requirement on pam_selinux.so optional in shadow default pam.d configuration files. - Modify 'system-auth' when installing systemd to add pam_deny.so, so that login attempts with wrong passwords fail now that shadow is configured to use PAM. Change-Id: I7110d27b6b46ce33eeaeae904dea854deb46c759
* Revert "Upgrade to GCC 5.1"Sam Thursfield2015-05-064-18/+17
| | | | | | | | | | | | This reverts commit acb29d344d117133891199ea536d9c4d34c7d05e. We have discovered that Baserock systems built with GCC 5.1 cannot *deploy* working disk images. The images hang in SYSLINUX. We suspect that it is a bug in SYSLINUX that is triggered by the compiler upgrade, and upgrading SYSLINUX may well fix this issue, but we don't have time to do this and test it in time for a 15.19 release Change-Id: I3c661b14fb923eee37c4c0148904620362fe62e2
* Update ceph to latest releasebaserock/pedroalvarez/last-with-gcc-5Patrick Darley2015-05-061-2/+2
| | | | Change-Id: I95adef541f5c782cd54ad4766aa7edf26a57127b
* shadow/PAM: Use SHA512 rather than DES for password hashesRichard Maw2015-05-051-2/+13
| | | | | | DES truncates passwords, so is an insecure default. Change-Id: I3fc7fe55a855ff762e51ef9d71fd6741b1cbc428
* Move python-decorator and networkx to python-commonFrancisco Redondo Marchena2015-05-053-25/+8
| | | | Change-Id: Ifa9fd4a7561bb92e4ae579ea5028bef76d68efa1
* Move python-markdown to python-coreFrancisco Redondo Marchena2015-05-053-10/+4
| | | | Change-Id: I50bc8690a84324030e806dc124c80743e510b1b9
* Add python-tools to Openstack system and stratumFrancisco Redondo Marchena2015-05-053-19/+4
| | | | | | This removes duplicated chunks between these strata. Change-Id: Ibb62709034bb6543615a75d0ba440683292cbbf3
* Use swift stratum instead of having swift inside openstack-servicesFrancisco Redondo Marchena2015-05-055-85/+19
| | | | | | To avoid duplication and make openstack-services more manageable. Also move duplicated chunk to openstack-common. Change-Id: I97468e5e7757d2250c643eacfcb76826e5c5ed92
* Create test-tools stratumFrancisco Redondo Marchena2015-05-058-147/+133
| | | | | | | | | Move the test tools and frameworks from zookeper and openstack to it, but tempest because it is explicit for openstack. Move some python packages to python-common because they are shared by various strata. Change-Id: I51be08946572fd76075261f88fbe365a7049f286
* Fix syntax errors in armv8 base system definitionsEdward Cragg2015-05-012-2/+4
| | | | Change-Id: I74ce7ee1fe268359493750c452c2b6f699e99636
* clusters/release.morph: Use unique names for deployment namesPedro Alvarez2015-05-011-2/+2
| | | | Change-Id: I5ee7098ab77ceb408b3dff5aa8d6dd89dea03db2
* cluster/ci: Add genivi systems to the ciJavier Jardón2015-05-011-0/+19
| | | | | | So our released systems are being tested in the ci Change-Id: Iced5b662a90d4586a13738f03471f8598058128a
* openstack: improve network configuration extensionTiago Gomes2015-05-011-5/+18
| | | | | | Also ensure that the /etc/openstack directory exists. Change-Id: I633cf3e9add94ff1d9622062e55b4d15db541cbf
* clusters/weston-system-x86_64-generic-deploy: Add ability to boot from USBJavier Jardón2015-05-011-1/+12
| | | | Change-Id: I312071ee1ff2d705af095ddff2b5db50b302d4af
* distbuild: Disable strict SSH host key checkingSam Thursfield2015-05-011-0/+10
| | | | | | | | | | | | | | | | | | Although we scan the keys of the Trove, we can only do this for the exact hostname specified in TROVE_HOST. If the definitions being built point to repos in the Trove using an SSH URL but with a different hostname (e.g. as an IP address, or a differently qualified hostname) then the distbuild will fail with a fairly opaque error: ERROR: Build of xx failed: ERROR: Failed to update cached version of repo ssh://git@.../xxx Currently we expect distbuild to be deployed on a trusted private network, so this change doesn't make it less secure. However, it would be a problem in future if we want distbuild networks connecting to their Trove across a public, untrusted network. Change-Id: I6cf8b318cab8985e811b5ee5ac29df225b62270d
* openstack: improve ceilometer configuration extensionTiago Gomes2015-05-011-33/+25
| | | | Change-Id: Ie14289e4fe23979d6d0d3f65658c0b48f0b1de18
* openstack: improve nova configuration extensionTiago Gomes2015-05-011-43/+25
| | | | Change-Id: Ibc0b20feb13848d73dbc2ce5836efe565bc3381b
* openstack: improve cinder configuration extensionTiago Gomes2015-05-011-38/+26
| | | | Change-Id: I709085e7ca489510196cb6ea8c0502cdd34ff3a0
* openstack: improve neutron configuration extensionTiago Gomes2015-05-011-53/+30
| | | | Change-Id: I05e7147ea9577557fe8adbe1c2fc46db33351090
* openstack: enable glance only in the controllerTiago Gomes2015-05-014-16/+39
| | | | Change-Id: I506525f48952b1807732fb726aa16f9f33e608d7
* openstack: enable keystone only in the controllerTiago Gomes2015-05-014-20/+38
| | | | Change-Id: I43f1cd43645ff8358a1d8d699352438633124038
* openstack: tidy up cluster morphologiesTiago Gomes2015-05-013-8/+9
| | | | Change-Id: Ide6df1bb9128585973dfc3eec37fd46c5eda7a68
* openstack: remove duplicated information in clusterTiago Gomes2015-05-012-15/+0
| | | | | | | Those variables were already defined somewhere in the cluster, so there is no need to duplicate them. Change-Id: Ia02e93b561f9d33580c45d96d7f01520acf3b678
* clusters/release: Add the ability for x86_64 images to boot from a USB stickJavier Jardón2015-05-011-0/+14
| | | | Change-Id: I07fad716d823813e91abb0c3f94dd9cec73b339f
* Add ocaml chunk, strata and systemDaniel Firth2015-05-013-0/+39
| | | | Change-Id: I7b36e0e1ef55b4146896aaa3dbc9e4f61c4d205e
* openstack: update IP address for one-node clusterTiago Gomes2015-04-301-1/+1
| | | | | | To be consistent with the other IP addresses used. Change-Id: Idf47ac2af56ea94575d4c534eefb61d5aa38b411
* openstack: fix three node cluster documentationTiago Gomes2015-04-301-1/+1
| | | | Change-Id: I5ff7da209fc7710f508a3d89a32a917c939497cc
* openstack: fix typo on neutron-db.ymlTiago Gomes2015-04-301-1/+1
| | | | Change-Id: Id4c7228cfe3f72b0cdb90d66dcdb9da30c5e75c0
* Upgrade u-boot to latest releaseJames Thomas2015-04-301-4/+4
| | | | | | | We can use mainline u-boot now, however this also requires us to bump dtc Change-Id: I35786072d3ff76b99ec8e6b4b2727b5487434498
* Upgrade jetson to 4.0James Thomas2015-04-304-15/+24
| | | | | | | | Quite a lot of changes here, new firmware, nouveau platform driver no longer exists as a separate module, and we no longer need the bsp-support to set the scaling governor, as it's ON_DEMAND by default Change-Id: I7ab2b969659702929b9df3bcb1ab7dd6d68f73f4
* Upgrade mesa to latest stable release + jetson specific patchesJames Thomas2015-04-301-2/+3
| | | | | Mesa now depends on python-core, since it requires mako Change-Id: I1d066756fdc57f50f134522a0cce58408bcae17f
* Add mesa-common-vm and use this for x86_64 systemsJames Thomas2015-04-304-4/+28
| | | | | | | | We're locked at the last version of mesa that allows egl_gallium as we need to be able to use this in a VM, so add a separate run-time mesa for this. At build-time we can use the upgraded mesa Change-Id: I687fa98e12d99816efce2b61561cc8a07aa146f5
* Upgrade libdrm to 2.4.60 and patch for jetsonJames Thomas2015-04-302-2/+11
| | | | | | Jetson support now requires new features not found in mainline yet Change-Id: I3128058e8e821ec00f26877ed42a1c46dcbd12b5
* Disable werrors in qemuFrancisco Redondo Marchena2015-04-301-1/+1
| | | | Change-Id: I7336a7233d87c5a7557743a65ab999763fd2d5be
* Add base systems for armv8l64 and armv8b64Edward Cragg2015-04-302-0/+42
| | | | | | These were previously conspicuous by their absence Change-Id: I425da2784927cdb336b462898d894fd69faec3ce
* Add neccessary kernel config for google compute engine.Mark Doffman2015-04-301-0/+3
| | | | Change-Id: Ic51480a7f1e3083bb245393336ecd2fad57fba67
* strata/foundation.morph: Use hash instead tag for libgpg-errorJavier Jardón2015-04-291-1/+2
| | | | Change-Id: I1b6b6117b272633a47b6ec1b48b0758ef47c315a
* Use latest morphJavier Jardón2015-04-291-1/+1
| | | | | | | | | | | | This includes: e9f13c8 Fix lines bigger than 79 characters in install-essential-files.configure.help c41216a morphlib/builder.py: Add comment, os-release is now generated as an extension ed423dc Add install-essential-files configuration extension 93dd98f distbuild: Fix NameError when worker disconnects 87f8dbe Add version guessing function to gitdir and cached repo. Change-Id: Iaaf548bd6ea05b5fd10a31b4997fed6268d18904
* Upgrade to GCC 5.1Javier Jardon2015-04-294-17/+18
| | | | Change-Id: Iad8f11341a4a770c14393a50d1b0d3e26c076dbf
* Update libgpg-error to latest release (1.19)Javier Jardon2015-04-292-1/+9
| | | | | | This release fixed problems when compiling with GCC 5.1 Change-Id: I7c5f3f97cb124980eb04cca23bcf6cb5199e9d77
* Configure systemd to support user instancesJonathan Maw2015-04-291-1/+13
| | | | | | | | | This involves: * A workaround to user@.service being shut down prematurely. * Fixing a systemd unit using 'kill' from a path that doesn't necessarily exist. Change-Id: Iacad155da9752313a2e4bbaae34a3e593d6ecc1b
* Fix linux-pamJonathan Maw2015-04-2910-60/+118
| | | | | | | | | | | | | | | | This involves: * Reordering the chunks linux-pam, acl, attr and libcap2 - this means moving them into the 'core' stratum, and fixing errors that occur because of the move. * Configuring pam correctly. * Fix acl failing to build in core. * Fix shadow to build against pam and reconfigure shadow to not do things covered by pam. * Fix tar not building - I am not sure what caused this to fail to build, but fixing it involved stopping it from trying to init submodules that were already checked out. Change-Id: I1b00ca0158c31ce5f31c11fe60816434508a05a1
* strata/core/bash.morph: Add configuration file /etc/bash.bashrcJavier Jardon2015-04-291-5/+34
| | | | | | | | This will: - Enable bash autocompletion if it's installed - Reset the terminal title when exit the current process Change-Id: Ic46a1edd1f84cf54f189956559344a85d8b64638
* Move definitions to version 2Richard Ipsum2015-04-291-1/+1
| | | | | | | | | | | | | | | | The version of morph we now have in definitions master supports definitions version 2 Version 2 makes paths to non-existent chunk morphs invalid, prior to version 2 morph would simply ignore paths to non-existent chunk morphs and either use the morph in the chunk repo (if there was one) or run build system detection. With version 2, if morph encounters a path to a chunk morph that doesn't exist it will error with an error message such as: "ERROR: Couldn't find morphology: strata/cats/xattr.morph referenced in strata/swift.morph" Change-Id: I8c1d6808567e0aaccee7a7c99740167ec956c007
* Add essential-files/etc/profileJavier Jardón2015-04-293-5/+10
| | | | | | | Also source /etc/bash.bashrc so bash will work properly if we use it for login Change-Id: I4a4b238f84c44858904b0a208ef8737a859c355d
* Install /etc/os-release using the new install-essential-files extensionJavier Jardón2015-04-2961-0/+66
| | | | | | This is currently hardcoded in morph Change-Id: I34446bbdf6ad3a7bdd0c34e4fcbd79433ce0fd71
* pxeboot: add support for PXEBOOT_TARGET_INTERFACEPedro Alvarez2015-04-282-4/+26
| | | | | | | | | | This is to set the name of the interface of the target to pxeboot from. Some targets with more than one interface try to get the rootfs from a different interface than the interface from where the pxeboot server is reachable. Using this variable, the kernel arguments will be filled to include the device. Change-Id: I022bf6b17a66d63f7f9b8830e72ca4020158a80a
* pxeboot: Add symlink to pxeboot config file also for local deploymentsPedro Alvarez2015-04-281-1/+15
| | | | | | | | | This functionality was added for remote deployments in a6d7d3a8. Some bootloaders look for a pxelinux configuration file on the TFTP server whose name is the normalized MAC address of the NIC prefixed with '01-' Change-Id: I6a5dc0cd71f72bf6cea6bbed05ebbeda765af805
* strata/morph-utils.morph: Use latest morphJavier Jardón2015-04-281-1/+1
| | | | | | | | | | | | | This adds: 2594f6d get-repo: Delete partially cloned repo on errors 154a760 Add armv5l to list of valid architectures fa5c470 Add a test for `morph get-repo` cc7be86 Add a `morph get-repo` command to clone repositories from the cache b0301d6 Fix regression that caused original_ref to be lost in some builds 1fd7d64 morphlib: Add example use to morph certify and fix spelling error Change-Id: I75fed399fde43a47b39f7e395aeebec656ec5333
* Install Pango modules fileAdam Coldrick2015-04-282-0/+9
| | | | | | | This commit adds system-integration-commands for Pango to correctly install /usr/etc/pango/pango.modules. Change-Id: Ic4f3f936e1cf70c6e6a3984f3f182965aa7361b5