[cip-dev] Resource describing the Deby workflow?

[cip-dev] Resource describing the Deby workflow?

[Mohammed Billoo]

[-- Attachment #1.1: Type: text/plain, Size: 780 bytes --]

Hi,

I'm almost done getting SSL working between the BBB and hawkbit. The last
piece of the puzzle is to get NTP working on the BBB (since I need valid
time to ensure that the server certificate is valid). Unfortunately, I'm
having a hard time understanding the proper way to add utilities or modify
configurations in Deby. It's similar enough to Yocto where I tried creating
bbappend recipes and failed miserably. I stumbled upon successfully adding
openssl to the rfs, but don't know why it worked. Can anybody point me to a
good resource that can describe the proper Deby workflow?

As an example, I want to install NTP and then modify its configuration so
that it points to the hawkbit server.

Thanks
-- 
Mohammed A Billoo
Founder
MAB Labs, LLC
www.mab-labs.com
201-338-2022

[-- Attachment #1.2: Type: text/html, Size: 1205 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#4980): https://lists.cip-project.org/g/cip-dev/message/4980
Mute This Topic: https://lists.cip-project.org/mt/75736954/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [cip-dev] Resource describing the Deby workflow?

[Akihiro Suzuki]

[-- Attachment #1.1: Type: text/plain, Size: 2910 bytes --]

Hi Mohammed,

Are you using isar-cip-core, not Deby, to create the rootfs for BBB, right?
If you use isar-cip-core and its cip-sw-updates/swupdate branch,
you can add Debian packages by adding package names to DEBIAN_DEPENDS
used at isar-cip-core/recipes-core/customizations/customizations.bb
https://gitlab.com/cip-project/cip-core/isar-cip-core/-/blob/cip-sw-updates/swupdate/recipes-core/customizations/customizations.bb#L25

e.g.) add ntp package to the rootfs
DEBIAN_DEPENDS = " \
     ifupdown, isc-dhcp-client, net-tools, iputils-ping, ssh, sshd-regen-keys, \
-    rt-tests, stress-ng"
+    rt-tests, stress-ng, ntp"

Then, you can customize the rootfs at isar-cip-core/recipes-core/images/cip-core-image.bb.
Keep in mind to change from do_rootfs_append() to ROOTFS_FEATURES, ROOTFS_POSTPROCESS_COMMAND and some function name like the following:
https://gitlab.com/cip-project/cip-sw-updates/cip-sw-updates-demo/-/blob/suzuki/fix-rebase-related-errs/patch/0001-SWUpdate-commit-for-demo.patch#L175-177
The above function (rootfs_put_swupdate_setting()) adds setting to mount the rootfs as RO.
Actually this function was not executed until recently.
This was resolved by https://gitlab.com/cip-project/cip-sw-updates/cip-sw-updates-tasks/-/issues/15, but it hasn’t been merged to the master yet.

BTW, if you want to use NTP client, please consider using systemd-timesyncd instead.
systemd-timesyncd is a simple NTP client.
It has been already installed in the rootfs but when I tried to use it, the following error occurred.
So dbus package or something might need to be installed in the rootfs by adding the package name to DEBIAN_DEPENDS.

# timedatectl status
Failed to create bus connection: No such file or directory

Thanks,
Suzuki

From: cip-dev@lists.cip-project.org <cip-dev@lists.cip-project.org> On Behalf Of Mohammed Billoo
Sent: Thursday, July 23, 2020 9:08 AM
To: cip-dev@lists.cip-project.org
Subject: [cip-dev] Resource describing the Deby workflow?

Hi,

I'm almost done getting SSL working between the BBB and hawkbit. The last piece of the puzzle is to get NTP working on the BBB (since I need valid time to ensure that the server certificate is valid). Unfortunately, I'm having a hard time understanding the proper way to add utilities or modify configurations in Deby. It's similar enough to Yocto where I tried creating bbappend recipes and failed miserably. I stumbled upon successfully adding openssl to the rfs, but don't know why it worked. Can anybody point me to a good resource that can describe the proper Deby workflow?

As an example, I want to install NTP and then modify its configuration so that it points to the hawkbit server.

Thanks
--
Mohammed A Billoo
Founder
MAB Labs, LLC
www.mab-labs.com<http://www.mab-labs.com>
201-338-2022

--
Mohammed Billoo
MAB Labs, LLC
www.mab-labs.com<http://www.mab-labs.com>

[-- Attachment #1.2: Type: text/html, Size: 11199 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#4990): https://lists.cip-project.org/g/cip-dev/message/4990
Mute This Topic: https://lists.cip-project.org/mt/75736954/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [cip-dev] Resource describing the Deby workflow?

[Pavel Machek]

[-- Attachment #1.1: Type: text/plain, Size: 595 bytes --]

Hi!

> I'm almost done getting SSL working between the BBB and hawkbit. The last
> piece of the puzzle is to get NTP working on the BBB (since I need valid
> time to ensure that the server certificate is valid). Unfortunately,
> I'm

Notice that in this case SSL is not adding as much security as you
think it does.

SSL attempts to protect against active attackers, and those can
manipulate NTP easily.

Best regards,
								Pavel
-- 
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany

[-- Attachment #1.2: Digital signature --]
[-- Type: application/pgp-signature, Size: 181 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#4995): https://lists.cip-project.org/g/cip-dev/message/4995
Mute This Topic: https://lists.cip-project.org/mt/75736954/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [cip-dev] Resource describing the Deby workflow?

[Mohammed Billoo]

[-- Attachment #1.1: Type: text/plain, Size: 90 bytes --]

Is tlsdate a better alternative?

--
Mohammed Billoo
MAB Labs, LLC
www.mab-labs.com

[-- Attachment #1.2: Type: text/html, Size: 111 bytes --]

[-- Attachment #2: Type: text/plain, Size: 419 bytes --]

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#4996): https://lists.cip-project.org/g/cip-dev/message/4996
Mute This Topic: https://lists.cip-project.org/mt/75736954/4520388
Group Owner: cip-dev+owner@lists.cip-project.org
Unsubscribe: https://lists.cip-project.org/g/cip-dev/leave/8129055/727948398/xyzzy  [cip-dev@archiver.kernel.org]
-=-=-=-=-=-=-=-=-=-=-=-