Musl-based LMP is not officially supported (due several issues with
systemd and other recipes, so drop the gcc patch entirely as OE-Core
moves to GCC 10.x.

Signed-off-by: Ricardo Salveti <[email protected]>

OE-Core now provides QEMU 5.0, which already includes the patch.

Signed-off-by: Ricardo Salveti <[email protected]>

Sync from OE-Core af687c9137a3e8efe48afa6fd12866cf656ae913.

Signed-off-by: Ricardo Salveti <[email protected]>

Sync changes from meta-updater a7189aa (sanity check).

Signed-off-by: Ricardo Salveti <[email protected]>

Use the patch available from meta-freescale for optee-imx in order to
make optee-os compatible with gcc10.

Not applied to the optee-os fio repository as that requires backport of
more patches in order to be compatible with both gcc 9 and 10 (and we
hope to rebase to a newer version soon).

Signed-off-by: Ricardo Salveti <[email protected]>

Relevant changes:
- 57e1652 Globals: add missing include string

Signed-off-by: Ricardo Salveti <[email protected]>

Relevant changes:
- 51586b13 [FIO toup] libnxpse050: ecc: fix sign/verify
- 60999608 [FIO toup] libnxpse050: ecc: fix support for verify
- 3e0d239d [FIO toup] libnxpse050: refactor apdu api
- fc785154 [FIO toup] libnxpse050: SCP03 key rotation
- b2732736 [FIO toup] libnxpse050: core: ecc shared secret
- c3a6d3b5 [FIO toup] libnxpse050: glue: lock i2c transfers
- 57d51746 Revert "[FIO temphack] core: se050: disable canaries"
- dcf48198 [FIO toup] core: increase stacks when using SE050

Signed-off-by: Ricardo Salveti <[email protected]>

Extend the default list of fallback ntp server to include the ntp server
from cloudflare.com. This is done in a way to avoid relying on one
single domain, which might be blocked in certain networks.

This change also allows the user to easily overwrite the default
fallback via the DEF_FALLBACK_NTP_SERVERS variable.

Change based on a similar change done in meta-toradex-torizon.

Signed-off-by: Ricardo Salveti <[email protected]>

Docker is a crucial service for LMP, so make sure the service triggers a
reboot in case it fails to start, as then the system can automatically
perform a rollback in case of a bad update.

Also enable TasksMax=infinity since this is recommended by the Docker
team when using newer systemd version than 226.

Change based on a similar change done in meta-toradex-torizon.

Signed-off-by: Ricardo Salveti <[email protected]>

From the systemd.special(7) man page section boot-complete.target:
This target is intended as generic synchronization point for services
that shall determine or act on whether the boot process completed
successfully.

Let's make use of the target. Since aktualizr-lite by default marks a
boot as successful, we consider aktualizr.service a service which needs
to be executed on successful boot (hence after the boot-complete.target).

This allows to declare a service as crucial by simply ordering it before
the boot-complete.target. The systemd example service
systemd-boot-check-no-failures.service can serve as an example.

This change does not add any service dependency by default as
boot-complete.target by default does not has any extra dependencies.

Note that rebooting in the failure case is not handled by this
mechanism. This can be added by using FailureAction.

Boot assessement infrastructure got introduced with systemd 240. See
also:
https://systemd.io/AUTOMATIC_BOOT_ASSESSMENT/

Change based on a similar change done in meta-toradex-torizon.

Signed-off-by: Ricardo Salveti <[email protected]>

Make use of the boot-complete.target synchronization point. Order the
unit docker.service before this target to make its start necessary for
a boot to be considered successful.

This makes sure that aktualizr-lite.service (which is ordered after
boot-complete.target) only gets started if the docker.service is
successful, and hence a boot is only marked successful if Docker starts
and is functional.

Change based on a similar change done in meta-toradex-torizon.

Signed-off-by: Ricardo Salveti <[email protected]>

Prefer using a known SRCREV instead of AUTOREV in order to avoid
unexpected issues due repo changes.

Signed-off-by: Ricardo Salveti <[email protected]>

Meta-virtualization changed docker to be activated via socket instead of
the standard service file, so move back to force docker.service as the
default activation mechanism in LMP.

This is required as docker is a critical service for LMP, and we need to
know if it is functional or not during early boot instead of only when
it gets first used by the system.

Signed-off-by: Ricardo Salveti <[email protected]>

Include additional bbappend that are now available in the latest
meta-toradex-bsp-common repository (which can cause contamination with
other targets).

Signed-off-by: Ricardo Salveti <[email protected]>

Mirror update from meta-toradex-nxp.

Signed-off-by: Ricardo Salveti <[email protected]>

Update the default bbmask list based on the latest meta-toradex-nxp
update (27643dc).

Signed-off-by: Ricardo Salveti <[email protected]>

Relevant changes:
- b63b688c85add ARM: defconfig: apalis/colibri-imx*: enable GPIO/serial sources for PPS
- 78e290d674455 arm64: defconfig: enable GPIO/serial sources for PPS
- ad1860a80539f ARM64: dts: apalis-imx8x: remove no-1-8-v from sd-card node
- b4d382b9ea490 ARM64: dts: colibri-imx8x: remove no-1-8-v from sd-card node
- 02ffc275063f1 ARM64: dts: apalis-imx8x: disable write-protection on apalis-sd
- 33f0885835b0e imx8: isi: ar0521: disable debug messages
- 5903b6ce9b0fc arm64: dts: apalis-imx8qm: add ar0521 device trees
- 950b5c0df30de arm64: defconfig: enable ar0521 driver
- 1554f7c30bb7b imx8: isi: ar0521: add initial driver
- 70115fee22201 arm64: dts: apalis-imx8qxp: cleanup pinctrl gpio mess
- 636221c6d4053 arm64: dts: apalis-imx8qm: cleanup pinctrl gpio mess
- 303d84b713620 arm64: dts: apalis-imx8qm: improve v1.1 related stuff
- 56751cc5442f7 ARM64: dts: apalis-imx8: use proper rgmii-rxid
- a8363cd02eec2 ARM64: dts: apalis-imx8qm: sync pcie clocks with NXP branch imx_4.14.98_2.3.0
- 453fdfde79e13 ARM64: dts: fsl-imx8qm-apalis-v1.1-eval: change model string
- 60f8ee9af1da4 ARM64: dts: apalis-imx8qm-v1.1: spi: use gpio cs
- b642c7233b0fc ARM: dts: imx8qxp-apalis: add gpio-line-names
- 118d6304a06eb ARM: dts: imx8qm-apalis: add gpio-line-names
- 440ffd07418da ARM: dts: imx8qxp-colibri: add gpio-line-names
- 4b7f6697ff56a ARM: dts: imx6ull-colibri: add gpio-line-names
- af79b7f174405 arm64: defconfig: add bluetooth drivers for Gumstix AutoBSP
- 4caad84c583b1 arm64: defconfig: add sensor drivers for Gumstix AutoBSP
- c150a766f251a arm64: defconfig: add sound drivers for Gumstix AutoBSP
- bf660e2d081ae ASoC: Add prompt for ICS43432 codec
- 6ce96b6f20b77 ARM64: dts: verdin-imx8mm: sort alphabetically
- fac5bc1cc73bc ARM64: dts: apalis-imx8x: integrate reset_moci#_drv handling
- ec7d8bddde9b1 ARM64: dts: apalis-imx8x: pull reset_moci low into reset-active
- 676affd2e411a scripts/dtc: Remove duplicate definitions of yylloc
- 88c001354a157 scripts/dtc: Remove redundant YYLOC global declaration
- 8c0a76c920130 ARM: dts: imx6-apalis: add gpio-line-names
- 76f62fe644888 ARM: dts: imx6-colibri: add gpio-line-names
- b02286c7121c8 usb: misc: usb3503: make error text unique
- b23cb2e3601c2 ARM64: dts: keep hub control signals reset pull state
- fb6b17a226345 ARM: dts: verdin-imx8mm: add gpio-line-names
- e9310105b093f ARM64: dts: verdin-imx8mm: add dahlia carrier board
- d832964749954 ARM64: dts: verdin-imx8mm: prepare for dahlia carrier board
- c4136f24663a7 ARM64: verdin-imx8mm: silence mmc wp switch warning
- ee6d8af88d62a ARM: dts: imx7-colibri: add gpio-line-names
- 35db8a1fc5c54 Accept partial 'gpio-line-names' property.
- 0347fe7527d06 MLK-23837 Asoc: fsl_dsp: Fix system crash when do dsp suspend test
- 20a5e74485abe MLK-23880 arm64: dts: imx8dx: refine the pcieb clocks
- aa5d66d3571e8 MLK-23275-3: regulator: bd71837: correct ldo1/ldo2 group
- 167cbe000b2e8 MLK-23275-2: ARM64: dts: freescale: fsl-imx8mn-ddr4-evk: correct ldo1/ldo2 voltage
- 96c179b63e7bb MLK-23275-1: ARM64: dts: freescale: fsl-imx8mm-evk: correct ldo1/ldo2 voltage
- 52635c5ba1ff8 MGS-5565-1 staging: android: ion: Flush outer cache after zero CMA allocated memory
- 03cfd33c5f341 MGS-5565 staging: android: ion: Flush cache after zero CMA allocated memory
- 252217e0dc992 LF-1236 mxc: vpu_malone: roundup allocated kfifo size to power-of-two
- 02e96760b8fbe MLK-21644 crypto: tcrypt - workaround for overlapping src, dst AAD
- 651364b5fe44c LF-717: crypto: dcp - fix scatterlist linearization for hash
- c2937fd8fe144 MLK-23681 arm64: dts: imx: enable pcieb on 8qm mek baseboard
- 82a6695ed109e MLK-23220:mxc:vpu_malone:kfifo_alloc failure in VPU driver when memory fragment
- fc7c45cf829d1 MLK-23396: crypto: caam - ensure CAAM context is not sharing the cacheline
- 359d8f37b464a MLK-23233-5 PCI: imx: add the mandatory required peripheral clocks
- 73a14019d0d4c MLK-23233-4 arm64: dts: refine pcie dts and add the pcieax2 and pciebx1 usecase
- 041b7a6f981bb MLK-23233-3 ata: imx: add the clks into sata driver
- e7e4a80d6b9a2 MLK-23233-2 dts: arm64: sata: add the clks into sata nodes
- 22b12c5f04d4a MLK-23233-1 dt-bindings: ata: add the peripheral clocks for imx8qm sata
- 54312465a5121 MLK-23331 arm64: dts: imx8mn: Update settings according to latest datasheet
- 5ae5b1903d413 LF-838: crypto: caam - increase the domain of write memory barrier to full system
- e4b7f6538df92 MLK-23326 arm64: dts: imx8mn-evk: Correct 1.2GHz OPP voltage

Signed-off-by: Ricardo Salveti <[email protected]>

OE-Core e684532 changed the sccs parsing order, making defconfig be the
first one to be parsed, but the required elements check wasn't updated
to include the new sccs_defconfig variable, causing scc to be skipped
and resulting in a kernel build failure.

Workaround the issue by defining KERNEL_FEATURES with a common and basic
config fragment, as then elements will not be empty, causing scc to be
called as usual.

Can be reverted once the proper fix lands upstream.

Signed-off-by: Ricardo Salveti <[email protected]>

Relevant changes:
- 9713f2b Replace ThalesIgnite/crypto11 with patched version
- 6548084 ecies: Pull in pkcs11 implementation
- 2c3ad9d ecies: Make handler generic to key source
- ef8e96b use new ecies library in application
- d3c6fe4 Pull in ecies implementation from ethereum
- e671534 Start of pkcs11 support
- 8eceef8 pkcs11: Stub out where this will happen
- 8bea5ca app: Actually process the sota.toml
- a6fc8e4 Use real TLS server and sota.toml for testing
- 225f82d clean up testWrapper
- 5528586 Decouple decryption logic for app creation
- 8c25022 main: Don't crash if init functions fail

Signed-off-by: Ricardo Salveti <[email protected]>

Toradex bsp layer ends up overriding generic variables (e.g. SRCREV),
which is not ideal for us, so port the required imx-boot changes from
meta-toradex-nxp to meta-lmp-bsp instead.

Signed-off-by: Ricardo Salveti <[email protected]>