mirror of
https://git.yoctoproject.org/meta-security
synced 2026-01-11 15:00:34 +00:00
add gitlab framework and qemu machine
Machines: qemux86 qemux86-64 qemuarm qemuarm64 qemuppc qemumips84 qemuriscv64 Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
56
.gitlab-ci.yml
Normal file
56
.gitlab-ci.yml
Normal file
@@ -0,0 +1,56 @@
|
|||||||
|
stages:
|
||||||
|
- build
|
||||||
|
|
||||||
|
.build:
|
||||||
|
stage: build
|
||||||
|
image: crops/poky
|
||||||
|
before_script:
|
||||||
|
- export PATH=~/.local/bin:$PATH
|
||||||
|
- wget https://bootstrap.pypa.io/get-pip.py
|
||||||
|
- python3 get-pip.py
|
||||||
|
- python3 -m pip install kas
|
||||||
|
- wget -q 'https://downloads.rclone.org/rclone-current-linux-amd64.zip'
|
||||||
|
- unzip -q rclone-current-linux-amd64.zip
|
||||||
|
- mv rclone-*-linux-amd64/rclone ~/.local/bin/
|
||||||
|
- rm -rf rclone-*-linux-amd64*
|
||||||
|
after_script:
|
||||||
|
- rm -rf build
|
||||||
|
- ./scripts/ci-cleanup.sh
|
||||||
|
cache:
|
||||||
|
paths:
|
||||||
|
- layers
|
||||||
|
|
||||||
|
qemux86:
|
||||||
|
extends: .build
|
||||||
|
script:
|
||||||
|
- ./scripts/ci-build.sh $CI_JOB_NAME security-build-image
|
||||||
|
|
||||||
|
qemux86-64:
|
||||||
|
extends: .build
|
||||||
|
script:
|
||||||
|
- ./scripts/ci-build.sh $CI_JOB_NAME security-build-image
|
||||||
|
|
||||||
|
qemuarm:
|
||||||
|
extends: .build
|
||||||
|
script:
|
||||||
|
- ./scripts/ci-build.sh $CI_JOB_NAME security-build-image
|
||||||
|
|
||||||
|
qemuarm64:
|
||||||
|
extends: .build
|
||||||
|
script:
|
||||||
|
- ./scripts/ci-build.sh $CI_JOB_NAME security-build-image
|
||||||
|
|
||||||
|
qemumppc:
|
||||||
|
extends: .build
|
||||||
|
script:
|
||||||
|
- ./scripts/ci-build.sh $CI_JOB_NAME security-build-image
|
||||||
|
|
||||||
|
qemumips64:
|
||||||
|
extends: .build
|
||||||
|
script:
|
||||||
|
- ./scripts/ci-build.sh $CI_JOB_NAME security-build-image
|
||||||
|
|
||||||
|
qemuriscv64:
|
||||||
|
extends: .build
|
||||||
|
script:
|
||||||
|
- ./scripts/ci-build.sh $CI_JOB_NAME security-build-image
|
||||||
52
kas/kas-security-base.yml
Normal file
52
kas/kas-security-base.yml
Normal file
@@ -0,0 +1,52 @@
|
|||||||
|
header:
|
||||||
|
version: 8
|
||||||
|
|
||||||
|
distro: poky
|
||||||
|
|
||||||
|
repos:
|
||||||
|
meta-security:
|
||||||
|
|
||||||
|
poky:
|
||||||
|
url: https://git.yoctoproject.org/git/poky
|
||||||
|
refspec: master
|
||||||
|
layers:
|
||||||
|
meta:
|
||||||
|
meta-poky:
|
||||||
|
meta-yocto-bsp:
|
||||||
|
|
||||||
|
meta-openembedded:
|
||||||
|
url: http://git.openembedded.org/meta-openembedded
|
||||||
|
refspec: master
|
||||||
|
layers:
|
||||||
|
meta-oe:
|
||||||
|
meta-perl:
|
||||||
|
meta-python:
|
||||||
|
meta-networking:
|
||||||
|
|
||||||
|
local_conf_header:
|
||||||
|
meta-security: |
|
||||||
|
CONF_VERSION = "1"
|
||||||
|
SOURCE_MIRROR_URL = "http://downloads.yoctoproject.org/mirror/sources/"
|
||||||
|
SSTATE_MIRRORS = "file://.* http://sstate.yoctoproject.org/dev/PATH;downloadfilename=PATH \n"
|
||||||
|
SSTATE_DIR = "/home/srv/sstate/master"
|
||||||
|
DL_DIR = "/home/srv/downloads/master"
|
||||||
|
BB_HASHSERVE = "auto"
|
||||||
|
BB_SIGNATURE_HANDLER = "OEEquivHash"
|
||||||
|
|
||||||
|
diskmon: |
|
||||||
|
BB_DISKMON_DIRS = "\
|
||||||
|
STOPTASKS,${TMPDIR},1G,100K \
|
||||||
|
STOPTASKS,${DL_DIR},1G,100K \
|
||||||
|
STOPTASKS,${SSTATE_DIR},1G,100K \
|
||||||
|
STOPTASKS,/tmp,100M,100K \
|
||||||
|
ABORT,${TMPDIR},100M,1K \
|
||||||
|
ABORT,${DL_DIR},100M,1K \
|
||||||
|
ABORT,${SSTATE_DIR},100M,1K \
|
||||||
|
ABORT,/tmp,10M,1K"
|
||||||
|
|
||||||
|
bblayers_conf_header:
|
||||||
|
meta-security: |
|
||||||
|
POKY_BBLAYERS_CONF_VERSION = "2"
|
||||||
|
BBPATH = "${TOPDIR}"
|
||||||
|
BBFILES ?= ""
|
||||||
|
|
||||||
6
kas/qemuarm.yml
Normal file
6
kas/qemuarm.yml
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
header:
|
||||||
|
version: 8
|
||||||
|
includes:
|
||||||
|
- kas-security-base.yml
|
||||||
|
|
||||||
|
machine: qemuarm
|
||||||
6
kas/qemuarm64.yml
Normal file
6
kas/qemuarm64.yml
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
header:
|
||||||
|
version: 8
|
||||||
|
includes:
|
||||||
|
- kas-security-base.yml
|
||||||
|
|
||||||
|
machine: qemuarmu64
|
||||||
6
kas/qemuppc.yml
Normal file
6
kas/qemuppc.yml
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
header:
|
||||||
|
version: 8
|
||||||
|
includes:
|
||||||
|
- kas-security-base.yml
|
||||||
|
|
||||||
|
machine: qemuppc
|
||||||
6
kas/qemuriscv64.yml
Normal file
6
kas/qemuriscv64.yml
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
header:
|
||||||
|
version: 8
|
||||||
|
includes:
|
||||||
|
- kas-security-base.yml
|
||||||
|
|
||||||
|
machine: qemuriscv64
|
||||||
6
kas/qemux86-64.yml
Normal file
6
kas/qemux86-64.yml
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
header:
|
||||||
|
version: 8
|
||||||
|
includes:
|
||||||
|
- kas-security-base.yml
|
||||||
|
|
||||||
|
machine: qemux86-64
|
||||||
6
kas/qemux86.yml
Normal file
6
kas/qemux86.yml
Normal file
@@ -0,0 +1,6 @@
|
|||||||
|
header:
|
||||||
|
version: 8
|
||||||
|
includes:
|
||||||
|
- kas-security-base.yml
|
||||||
|
|
||||||
|
machine: qemux86
|
||||||
10
scripts/ci-build.sh
Executable file
10
scripts/ci-build.sh
Executable file
@@ -0,0 +1,10 @@
|
|||||||
|
#! /bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
CONF=$1
|
||||||
|
shift 1
|
||||||
|
IMAGES=$@
|
||||||
|
|
||||||
|
( kas shell kas/${CONF}.yml -c "bitbake --setscene-only ${IMAGES}" || true ) | sed -e '/^NOTE: .*Started$/d' -e '/^NOTE: Running /d'
|
||||||
|
kas shell kas/${CONF}.yml -c "bitbake --skip-setscene ${IMAGES}" | sed -e '/^NOTE: .*Started$/d' -e '/^NOTE: Running /d'
|
||||||
7
scripts/ci-cleanup.sh
Executable file
7
scripts/ci-cleanup.sh
Executable file
@@ -0,0 +1,7 @@
|
|||||||
|
#! /bin/bash
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
export SSTATE_CACHE_DIR=/home/srv/sstate/master
|
||||||
|
|
||||||
|
./poky/scripts/sstate-cache-management.sh -d -y
|
||||||
Reference in New Issue
Block a user