Re: [OE-core] [PATCH v3 00/12] systemd uki support

[Mikko Rapeli <mikko.rapeli@linaro.org>]

Hi,

On Fri, Sep 20, 2024 at 08:26:30AM +0100, Richard Purdie wrote:
> On Thu, 2024-09-19 at 17:36 +0300, Mikko Rapeli via lists.openembedded.org wrote:
> > These changes enable building systemd uki images which combine
> > kernel, kernel command line, initrd and possibly signatures to
> > a single UEFI binary. This binary can be booted with UEFI firmware
> > and systemd-boot. No grub is needed and UEFI firmware and/or
> > systemd-boot provide possibilities for boot menus.
> > The uki binary can also be signed for UEFI secure boot
> > so the secure boot extends from firmware to kernel and initrd.
> > Binding secure boot to full userspace is then easier since for example
> > kernel command line and initrd contain the support needed to mount
> > encrypted dm-verity etc partitions, and/or create partitions on demand
> > with systemd-repart using device specific TPM devices for encryption.
> > 
> > Tested on qemuarm64-secureboot machine from meta-arm with changes to
> > support secure boot. Slightly different configuration tested on
> > multiple arm64 System Ready boards with UEFI firmware, real and firmware
> > based TPM devices. Tested with ovmf firmware on x86_64 with selftests but
> > without secure boot which seems to be harder to setup in ovmf.
> > 
> > Sadly I see two wic selftests, wic.Wic2.test_rawcopy_plugin_qemu and
> > wic.Wic2.test_expand_mbr_image, failing when executing all wic selftests
> > on a build machine with zfs filesystem. Will investigate this further.
> > The issue seems to be in mkfs.ext4 producing broken filesystem, and partially
> > in the tests which don't run the correct rootfs file (.ext4 vs .wic).
> > Will debug this further and it is IMO unrelated to these changes since
> > they reproduce on pure master branch without this series.
> > 
> > v3: rebased, fixed and added more sefltests, removed wic plugin side uki
> > support
> > 
> > v2: https://lists.openembedded.org/g/openembedded-core/message/204090
> > 
> > Michelle Lin (1):
> > � uki.bbclass: add class for building Unified Kernel Images (UKI)
> > 
> > Mikko Rapeli (11):
> > � python3-pefile: add recipe from meta-openembedded
> > � maintainers.inc: add python3-pefile
> > � systemd-boot-native: add runtime dependency to python3-pefile-native
> > � image_types_wic.bbclass: set systemd-boot and os-release dependency
> > ��� for all archs
> > � wic bootimg-efi.py: keep timestamps and add debug prints
> > � wic bootimg-efi.py: change UKI support from wic plugin to uki.bbclass
> > � oeqa selftest uki.py: add tests for uki.bbclass
> > � oeqa selftest efibootpartition.py: add TEST_RUNQEMUPARAMS to runqemu
> > � oeqa selftest efibootpartition.py: remove systemd-boot from grub-efi
> > ��� test
> > � oeqa selftest wic.py: add TEST_RUNQEMUPARAMS to runqemu
> > � oeqa selftest wic.py: support UKIs via uki.bbclass
> > 
> > �meta-selftest/wic/test_efi_plugin.wks�������� |�� 5 +-
> > �meta/classes-recipe/image_types_wic.bbclass�� |�� 5 +-
> > �meta/classes-recipe/uki.bbclass�������������� | 197 ++++++++++++++++++
> > �meta/conf/distro/include/maintainers.inc����� |�� 1 +
> > �.../oeqa/selftest/cases/efibootpartition.py�� |� 11 +-
> > �meta/lib/oeqa/selftest/cases/uki.py���������� | 138 ++++++++++++
> > �meta/lib/oeqa/selftest/cases/wic.py���������� |� 58 ++++--
> > �.../systemd/systemd-boot-native_256.5.bb����� |�� 2 +
> > �.../python/python3-pefile/run-ptest���������� |�� 3 +
> > �.../python/python3-pefile_2023.2.7.bb�������� |� 28 +++
> > �.../wic/canned-wks/efi-uki-bootdisk.wks.in��� |�� 3 +
> > �scripts/lib/wic/plugins/source/bootimg-efi.py | 187 +++++------------
> > �12 files changed, 481 insertions(+), 157 deletions(-)
> > �create mode 100644 meta/classes-recipe/uki.bbclass
> > �create mode 100644 meta/lib/oeqa/selftest/cases/uki.py
> > �create mode 100644 meta/recipes-devtools/python/python3-pefile/run-ptest
> > �create mode 100644 meta/recipes-devtools/python/python3-pefile_2023.2.7.bb
> > �create mode 100644 scripts/lib/wic/canned-wks/efi-uki-bootdisk.wks.in
> 
> In addition to the other recipe issue, I also noticed selftest failing:
> 
> https://valkyrie.yoctoproject.org/#/builders/35/builds/142/steps/14/logs/stdio
> 
> "runqemu - ERROR - Can't handle two unknown args: None qemux86-64"
> 
> (all the selftest targets failed, this is one example)

Sorry about this too. Will add an 'or ""' to the amended runqemu variables.

Cheers,

-Mikko