Complete documentation update for UT project
Major changes based on user requirements: 1. Board identification: TQMa6UL (from sticker TQMA6U-AB) - Old code reference 'tqma6x' = generic i.MX6 family - Machine: tqma6ulx-mba6ulx 2. Build name: UT (Universität/Projekt) - All documentation updated with UT branding - Build directory: build_ut 3. ci-meta-tq workflow: - Replaced manual layer cloning with official TQ CI repo - Uses git submodules for all layers - ci/fill_mirror script for mirror population 4. License tables in 3 formats: - CSV: UT-license-table.csv - Markdown: license-summary.md - Excel-compatible: UT-license-table-excel.md 5. Air-gap deployment: - Complete offline build instructions - /srv/yocto/ premirror setup - BB_NO_NETWORK configuration 6. 2038 compliance: - Verified: Kernel 6.6 + glibc 2.38 - 64-bit time_t on 32-bit ARM - Scarthgap 5.0 LTS confirmed suitable All documents ready for mirror creation and approval process.
This commit is contained in:
OpenClaw (Siggi)
@@ -1,10 +1,25 @@
|
||||
# Step-by-Step Yocto Mirror Creation
|
||||
# Step-by-Step Yocto Mirror Creation with ci-meta-tq
|
||||
|
||||
**Document ID:** PROC-MIRROR-001
|
||||
**Document ID:** PROC-MIRROR-001-REV2
|
||||
**Date:** 2026-03-01
|
||||
**System:** Ubuntu 22.04 LTS
|
||||
**Environment:** Outside corporate network (Internet access required)
|
||||
**Target:** TQMa6UL Yocto Scarthgap mirror for offline deployment
|
||||
**Environment:** Outside corporate network (Internet required)
|
||||
**Target:** TQMa6UL Yocto Scarthgap mirror (UT build)
|
||||
**Build Name:** UT (Universität/Projekt)
|
||||
|
||||
---
|
||||
|
||||
## Hardware Target Confirmation
|
||||
|
||||
Based on sticker analysis and code review:
|
||||
|
||||
**Sticker:** TQMA6U-AB RK REV.0405
|
||||
**Board:** TQMa6UL (NXP i.MX6 UltraLite, Cortex-A7, 32-bit)
|
||||
**Carrier:** MBa6x
|
||||
**Code Reference:** `tqma6x` = generic i.MX6 family identifier in legacy codebase
|
||||
|
||||
**Machine Configuration:** `tqma6ulx-mba6ulx`
|
||||
*Alternative (ci-meta-tq multi-config):* `tqma6qdl-multi-mba6x`
|
||||
|
||||
---
|
||||
|
||||
@@ -15,10 +30,10 @@
|
||||
| Resource | Minimum | Recommended | Notes |
|
||||
|----------|---------|-------------|-------|
|
||||
| CPU | 4 cores | 8+ cores | Parallel builds |
|
||||
| RAM | 8 GB | 16+ GB | BitBake is memory-intensive |
|
||||
| RAM | 8 GB | 16+ GB | BitBake memory-intensive |
|
||||
| Disk Space | 100 GB | 200+ GB | Sources + build artifacts |
|
||||
| OS | Ubuntu 22.04 | Ubuntu 22.04 LTS | Verified platform |
|
||||
| Internet | Required | Broadband | For initial download |
|
||||
| Internet | Required | Broadband | For initial download only |
|
||||
|
||||
### 1.2 Required Packages
|
||||
|
||||
@@ -27,15 +42,11 @@ Install on Ubuntu 22.04:
|
||||
```bash
|
||||
sudo apt update
|
||||
sudo apt install -y \
|
||||
gawk wget git diffstat unzip texinfo gcc build-essential \
|
||||
chrpath socat cpio python3 python3-pip python3-pexpect \
|
||||
xz-utils debianutils iputils-ping python3-git \
|
||||
python3-jinja2 libegl1-mesa libsdl1.2-dev xterm \
|
||||
locales lz4 zstd rpcsvc-proto \
|
||||
file bsdmainutils curl
|
||||
|
||||
# Ensure Python 3 is default
|
||||
sudo apt install -y python3-distutils
|
||||
git python3 jq bash grep gawk wget diffstat \
|
||||
chrpath cpio texinfo gcc g++ make file tar \
|
||||
bzip2 gzip xz-utils zstd lz4 patch perl \
|
||||
python3-pexpect socat unzip rsync bc \
|
||||
libsdl1.2-dev xterm
|
||||
```
|
||||
|
||||
### 1.3 Locale Configuration
|
||||
@@ -53,276 +64,309 @@ export LANG=en_US.UTF-8
|
||||
|
||||
```bash
|
||||
# Create base directory for mirror creation
|
||||
mkdir -p ~/tqma6-yocto-mirror
|
||||
export MIRROR_BASE=~/tqma6-yocto-mirror
|
||||
cd $MIRROR_BASE
|
||||
export UT_BASE=~/UT-yocto-mirror
|
||||
mkdir -p ${UT_BASE}
|
||||
cd ${UT_BASE}
|
||||
|
||||
# Create subdirectories
|
||||
mkdir -p sources layers downloads sstate-cache
|
||||
mkdir -p mirror-bundle build-scripts
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 2: Clone Yocto Poky (Reference Distribution)
|
||||
## Step 2: Clone ci-meta-tq Repository
|
||||
|
||||
The official TQ CI repository includes all required layers as submodules:
|
||||
|
||||
```bash
|
||||
cd $MIRROR_BASE/sources
|
||||
cd ${UT_BASE}
|
||||
|
||||
# Clone Poky (Yocto reference) - Scarthgap branch
|
||||
git clone -b scarthgap --depth 1 \
|
||||
https://git.yoctoproject.org/git/poky.git \
|
||||
poky-scarthgap
|
||||
# Clone ci-meta-tq with all submodules (Scarthgap branch)
|
||||
git clone --branch scarthgap.TQ.ARM.BSP.0006 \
|
||||
--recurse-submodules \
|
||||
https://github.com/tq-systems/ci-meta-tq.git \
|
||||
ci-meta-tq
|
||||
|
||||
cd poky-scarthgap
|
||||
# Full clone for complete history (optional but recommended for approval)
|
||||
git fetch --unshallow
|
||||
cd ci-meta-tq
|
||||
|
||||
cd $MIRROR_BASE/sources
|
||||
# Verify submodules are initialized
|
||||
git submodule sync
|
||||
git submodule update --init
|
||||
|
||||
# Verify structure
|
||||
ls -la sources/
|
||||
# Should show: meta-tq, poky, meta-openembedded, etc.
|
||||
```
|
||||
|
||||
**Verification:**
|
||||
```bash
|
||||
cd poky-scarthgap
|
||||
git log --oneline -1
|
||||
# Should show: scarthgap branch, recent commit
|
||||
git describe --tags
|
||||
# Should show: yocto-5.0.x or similar
|
||||
cd ${UT_BASE}/ci-meta-tq
|
||||
./ci/ls-configs --file
|
||||
./ci/ls-machines --file --config=imx
|
||||
# Should list tqma6ulx-mba6ulx and other machines
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 3: Clone OpenEmbedded Meta-Layer
|
||||
## Step 3: Configure Build Environment for UT
|
||||
|
||||
### 3.1 Create Site Configuration
|
||||
|
||||
Create central configuration file `~/.yocto/site.conf`:
|
||||
|
||||
```bash
|
||||
cd $MIRROR_BASE/sources
|
||||
mkdir -p ~/.yocto
|
||||
|
||||
# Clone meta-openembedded (contains essential recipes)
|
||||
git clone -b scarthgap --depth 1 \
|
||||
https://git.openembedded.org/meta-openembedded \
|
||||
meta-openembedded
|
||||
cat > ~/.yocto/site.conf <<'EOF'
|
||||
# UT Project Configuration
|
||||
# Build: UT (Universität/Projekt)
|
||||
# Target: TQMa6UL on MBa6x
|
||||
# Date: 2026-03-01
|
||||
|
||||
cd meta-openembedded
|
||||
git fetch --unshallow
|
||||
# Mirror directories (outside home for space)
|
||||
DL_DIR ?= "/srv/yocto/downloads"
|
||||
SSTATE_DIR ?= "/srv/yocto/sstate-cache"
|
||||
|
||||
cd $MIRROR_BASE/sources
|
||||
# Create directories
|
||||
EOF
|
||||
|
||||
# Create system directories
|
||||
sudo mkdir -p /srv/yocto/downloads /srv/yocto/sstate-cache
|
||||
sudo chown -R "$USER:$USER" /srv/yocto
|
||||
```
|
||||
|
||||
**Included sub-layers:**
|
||||
- `meta-oe` - Base additional recipes
|
||||
- `meta-python` - Python packages
|
||||
- `meta-networking` - Network tools
|
||||
- `meta-filesystems` - Filesystem tools
|
||||
- `meta-perl` - Perl modules
|
||||
|
||||
---
|
||||
|
||||
## Step 4: Clone TQ BSP Layer
|
||||
### 3.2 Initialize Build Environment
|
||||
|
||||
```bash
|
||||
cd $MIRROR_BASE/sources
|
||||
cd ${UT_BASE}/ci-meta-tq
|
||||
|
||||
# Clone TQ BSP layer - specific version for TQMa6UL
|
||||
git clone -b scarthgap.TQ.ARM.BSP.0006 --depth 1 \
|
||||
https://github.com/tq-systems/meta-tq.git \
|
||||
meta-tq
|
||||
# Set machine for TQMa6UL
|
||||
export MACHINE=tqma6ulx-mba6ulx
|
||||
|
||||
cd meta-tq
|
||||
git fetch --unshallow
|
||||
# Alternative if using multi-config:
|
||||
# export MACHINE=tqma6qdl-multi-mba6x
|
||||
|
||||
# Verify the branch
|
||||
git branch -a | grep scarthgap
|
||||
# Initialize build environment (creates build_ut directory)
|
||||
. ./setup-environment build_ut imx
|
||||
|
||||
cd $MIRROR_BASE/sources
|
||||
```
|
||||
|
||||
**Critical:** Ensure you use the exact tag `scarthgap.TQ.ARM.BSP.0006` for reproducibility.
|
||||
|
||||
---
|
||||
|
||||
## Step 5: Initialize Build Environment
|
||||
|
||||
```bash
|
||||
cd $MIRROR_BASE/sources/poky-scarthgap
|
||||
|
||||
# Source the build environment
|
||||
source oe-init-build-env ../build
|
||||
|
||||
# This creates the build directory and sets up environment
|
||||
# You should now be in: ~/tqma6-yocto-mirror/build
|
||||
# Verify configuration
|
||||
bitbake -e | grep -E "^MACHINE=|^DL_DIR=|^SSTATE_DIR="
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 6: Configure Build for TQMa6UL
|
||||
## Step 4: First Build (Downloads All Sources)
|
||||
|
||||
### 6.1 Edit `conf/local.conf`
|
||||
This step downloads all required source packages for offline use:
|
||||
|
||||
```bash
|
||||
# Edit the local.conf file
|
||||
vim conf/local.conf
|
||||
cd ${UT_BASE}/ci-meta-tq
|
||||
|
||||
# Ensure environment is set
|
||||
export MACHINE=tqma6ulx-mba6ulx
|
||||
. ./setup-environment build_ut imx
|
||||
|
||||
# Build the image (downloads all sources)
|
||||
bitbake tq-image-small-debug
|
||||
|
||||
# Alternative images:
|
||||
# bitbake core-image-minimal
|
||||
# bitbake core-image-full-cmdline
|
||||
```
|
||||
|
||||
**Add/modify these settings:**
|
||||
|
||||
```conf
|
||||
# Machine selection for TQMa6UL on MBa6x
|
||||
MACHINE ??= "tqma6ulx-mba6ulx"
|
||||
|
||||
# Parallelism (adjust to your CPU)
|
||||
BB_NUMBER_THREADS ?= "8"
|
||||
PARALLEL_MAKE ?= "-j8"
|
||||
|
||||
# Download directory (for mirroring)
|
||||
DL_DIR ?= "${MIRROR_BASE}/downloads"
|
||||
|
||||
# Shared state cache
|
||||
SSTATE_DIR ?= "${MIRROR_BASE}/sstate-cache"
|
||||
|
||||
# Keep source code for license compliance
|
||||
RM_WORK_EXCLUDE += "*"
|
||||
INHERIT += "archiver"
|
||||
ARCHIVER_MODE[src] = "original"
|
||||
ARCHIVER_MODE[diff] = "1"
|
||||
|
||||
# Generate license information
|
||||
COPY_LIC_MANIFEST = "1"
|
||||
COPY_LIC_DIRS = "1"
|
||||
|
||||
# Create source mirror
|
||||
INHERIT += "own-mirrors"
|
||||
SOURCE_MIRROR_URL ?= "file://${MIRROR_BASE}/mirror/"
|
||||
BB_GENERATE_MIRROR_TARBALLS = "1"
|
||||
```
|
||||
|
||||
### 6.2 Add Layers to `conf/bblayers.conf`
|
||||
|
||||
```bash
|
||||
vim conf/bblayers.conf
|
||||
```
|
||||
|
||||
**Content:**
|
||||
```conf
|
||||
BBLAYERS ?= " \
|
||||
${MIRROR_BASE}/sources/poky-scarthgap/meta \
|
||||
${MIRROR_BASE}/sources/poky-scarthgap/meta-poky \
|
||||
${MIRROR_BASE}/sources/poky-scarthgap/meta-yocto-bsp \
|
||||
${MIRROR_BASE}/sources/meta-openembedded/meta-oe \
|
||||
${MIRROR_BASE}/sources/meta-openembedded/meta-python \
|
||||
${MIRROR_BASE}/sources/meta-openembedded/meta-networking \
|
||||
${MIRROR_BASE}/sources/meta-openembedded/meta-filesystems \
|
||||
${MIRROR_BASE}/sources/meta-tq/meta-tq \
|
||||
"
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 7: First Build (Downloads All Sources)
|
||||
|
||||
```bash
|
||||
# Still in build directory
|
||||
# This will download all required source packages
|
||||
|
||||
bitbake core-image-minimal
|
||||
```
|
||||
|
||||
**Expected duration:** 2-6 hours (first build, depending on hardware)
|
||||
**Expected duration:** 4-8 hours (first build, depends on hardware)
|
||||
|
||||
**What happens:**
|
||||
1. BitBake parses all recipes
|
||||
2. Downloads source code for every package
|
||||
3. Builds toolchain, kernel, rootfs
|
||||
4. Creates deployment images
|
||||
1. BitBake parses all recipes from all layers
|
||||
2. Downloads source code for every package to `/srv/yocto/downloads`
|
||||
3. Populates shared state cache in `/srv/yocto/sstate-cache`
|
||||
4. Builds toolchain, kernel, bootloader, rootfs
|
||||
5. Creates deployment images in `build_ut/tmp/deploy/images/`
|
||||
|
||||
---
|
||||
|
||||
## Step 8: Create Source Mirror
|
||||
## Step 5: Create Source Mirror for Air-Gap
|
||||
|
||||
### 8.1 Generate Mirror Tarballs
|
||||
### 5.1 Configure Premirror
|
||||
|
||||
Add premirror configuration to site.conf:
|
||||
|
||||
```bash
|
||||
# Create mirror directory
|
||||
mkdir -p ${MIRROR_BASE}/mirror
|
||||
cat >> ~/.yocto/site.conf <<'EOF'
|
||||
|
||||
# Copy downloaded sources
|
||||
cp -r ${MIRROR_BASE}/downloads/* ${MIRROR_BASE}/mirror/ 2>/dev/null || true
|
||||
# --- Offline / Premirror Setup ---
|
||||
# These settings enable offline builds after mirror creation
|
||||
|
||||
# Create source archive with archiver
|
||||
bitbake core-image-minimal -c do_populate_lic
|
||||
SOURCE_MIRROR_URL ?= "file:///srv/yocto/premirror/"
|
||||
INHERIT += "own-mirrors"
|
||||
|
||||
PREMIRRORS:prepend = " \
|
||||
git://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
ftp://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
http://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
https://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
"
|
||||
EOF
|
||||
|
||||
# Create premirror directory
|
||||
sudo mkdir -p /srv/yocto/premirror
|
||||
sudo chown -R "$USER:$USER" /srv/yocto
|
||||
```
|
||||
|
||||
### 8.2 Collect License Information
|
||||
### 5.2 Fill Mirror with ci-meta-tq Script
|
||||
|
||||
Use TQ's provided script to populate the mirror:
|
||||
|
||||
```bash
|
||||
cd ${UT_BASE}/ci-meta-tq
|
||||
|
||||
# Set machine and config
|
||||
export MACHINE=tqma6ulx-mba6ulx
|
||||
|
||||
# Fill mirror (downloads all git repos and tarballs)
|
||||
ci/fill_mirror build_ut imx
|
||||
|
||||
# Verify mirror contents
|
||||
ls -la /srv/yocto/premirror/
|
||||
du -sh /srv/yocto/premirror/
|
||||
du -sh /srv/yocto/downloads/
|
||||
du -sh /srv/yocto/sstate-cache/
|
||||
```
|
||||
|
||||
### 5.3 Generate License Information
|
||||
|
||||
```bash
|
||||
cd ${UT_BASE}/ci-meta-tq
|
||||
. ./setup-environment build_ut imx
|
||||
|
||||
# Generate license manifest
|
||||
bitbake core-image-minimal -c do_populate_lic
|
||||
bitbake tq-image-small-debug -c do_populate_lic
|
||||
|
||||
# Copy license files
|
||||
mkdir -p ${MIRROR_BASE}/licenses
|
||||
cp -r ${MIRROR_BASE}/build/tmp/deploy/licenses/* ${MIRROR_BASE}/licenses/
|
||||
mkdir -p ${UT_BASE}/mirror-bundle/licenses
|
||||
cp -r build_ut/tmp/deploy/licenses/* ${UT_BASE}/mirror-bundle/licenses/
|
||||
|
||||
# Create license CSV (see separate script)
|
||||
# Create license table (see separate script)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 9: Package the Mirror
|
||||
## Step 6: Package the Mirror
|
||||
|
||||
### 9.1 Create Archive Structure
|
||||
### 6.1 Create Archive Structure
|
||||
|
||||
```bash
|
||||
cd ${MIRROR_BASE}
|
||||
cd ${UT_BASE}
|
||||
|
||||
# Create organized structure for approval
|
||||
mkdir -p mirror-package/{sources,licenses,build-instructions}
|
||||
mkdir -p UT-mirror-package/{sources,premirror,downloads,sstate-cache,licenses,configs}
|
||||
|
||||
# Copy source layers (git repositories)
|
||||
cp -r sources/* mirror-package/sources/
|
||||
# Copy ci-meta-tq repository (with submodules)
|
||||
cp -r ci-meta-tq UT-mirror-package/sources/
|
||||
|
||||
# Copy license information
|
||||
cp -r licenses/* mirror-package/licenses/ 2>/dev/null || true
|
||||
# Copy mirror contents
|
||||
cp -r /srv/yocto/premirror/* UT-mirror-package/premirror/ 2>/dev/null || true
|
||||
cp -r /srv/yocto/downloads/* UT-mirror-package/downloads/ 2>/dev/null || true
|
||||
|
||||
# Copy downloads (source tarballs)
|
||||
mkdir -p mirror-package/downloads
|
||||
cp -r downloads/* mirror-package/downloads/ 2>/dev/null || true
|
||||
# Copy licenses
|
||||
cp -r mirror-bundle/licenses/* UT-mirror-package/licenses/ 2>/dev/null || true
|
||||
|
||||
# Document the configuration
|
||||
cp build/conf/local.conf mirror-package/build-instructions/
|
||||
cp build/conf/bblayers.conf mirror-package/build-instructions/
|
||||
# Copy configuration
|
||||
cp ~/.yocto/site.conf UT-mirror-package/configs/
|
||||
cp ci-meta-tq/build_ut/conf/local.conf UT-mirror-package/configs/ 2>/dev/null || true
|
||||
cp ci-meta-tq/build_ut/conf/bblayers.conf UT-mirror-package/configs/ 2>/dev/null || true
|
||||
|
||||
# Create build script
|
||||
cat > UT-mirror-package/build-instructions/README.txt <<'EOF'
|
||||
UT Yocto Mirror Package
|
||||
=======================
|
||||
|
||||
Target: TQMa6UL on MBa6x (i.MX6 UltraLite)
|
||||
Yocto: Scarthgap 5.0 LTS
|
||||
BSP: TQ scarthgap.TQ.ARM.BSP.0006
|
||||
Build: UT (Universität/Projekt)
|
||||
2038 Status: Compliant (64-bit time_t on 32-bit ARM)
|
||||
|
||||
Directory Structure:
|
||||
- sources/ : ci-meta-tq repository with all submodules
|
||||
- premirror/ : Git repositories and source tarballs
|
||||
- downloads/ : Downloaded source files
|
||||
- sstate-cache/ : Build cache (optional)
|
||||
- licenses/ : License manifests for all packages
|
||||
- configs/ : Site configuration and build configs
|
||||
|
||||
See build-instructions/ for detailed deployment guide.
|
||||
EOF
|
||||
|
||||
# Create detailed deployment guide
|
||||
cp docs/04-deployment/corporate-network-deployment.md UT-mirror-package/build-instructions/
|
||||
```
|
||||
|
||||
### 9.2 Create Archive
|
||||
### 6.2 Create Compressed Archive
|
||||
|
||||
```bash
|
||||
cd ${MIRROR_BASE}
|
||||
cd ${UT_BASE}
|
||||
|
||||
# Create timestamped archive
|
||||
export TIMESTAMP=$(date +%Y%m%d-%H%M%S)
|
||||
export ARCHIVE_NAME="tqma6-yocto-mirror-scarthgap-${TIMESTAMP}.tar.gz"
|
||||
export ARCHIVE_NAME="UT-tqma6ul-yocto-scarthgap-${TIMESTAMP}.tar.gz"
|
||||
|
||||
tar czf ${ARCHIVE_NAME} \
|
||||
--exclude='.git/objects/pack/*' \
|
||||
mirror-package/
|
||||
--exclude='*.tmp' \
|
||||
--exclude='*.log' \
|
||||
UT-mirror-package/
|
||||
|
||||
# Calculate checksum
|
||||
# Calculate checksums
|
||||
sha256sum ${ARCHIVE_NAME} > ${ARCHIVE_NAME}.sha256
|
||||
md5sum ${ARCHIVE_NAME} > ${ARCHIVE_NAME}.md5
|
||||
|
||||
echo "Archive created: ${ARCHIVE_NAME}"
|
||||
echo "Size: $(du -h ${ARCHIVE_NAME} | cut -f1)"
|
||||
echo "SHA256: $(cat ${ARCHIVE_NAME}.sha256 | cut -d' ' -f1)"
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 10: Generate License Table
|
||||
## Step 7: Generate License Table
|
||||
|
||||
**See:** [License Table Generation Script](../03-license-analysis/generate-license-table.sh)
|
||||
### 7.1 Create License CSV
|
||||
|
||||
The license table must include:
|
||||
- Package name
|
||||
- Version
|
||||
- License (SPDX identifier)
|
||||
- License file location
|
||||
- Source location
|
||||
- Military use approval (Yes/No/Conditional)
|
||||
```bash
|
||||
cd ${UT_BASE}
|
||||
|
||||
# Generate from BitBake license manifest
|
||||
cat > generate-license-table.sh <<'SCRIPT'
|
||||
#!/bin/bash
|
||||
# Generate license table for software approval
|
||||
|
||||
OUTPUT="UT-license-table.csv"
|
||||
echo "Package,Version,Recipe,License,MilitaryUse,SourceLocation,Notes" > $OUTPUT
|
||||
|
||||
# Process license manifest
|
||||
find build_ut/tmp/deploy/licenses -name "*.csv" -o -name "*.manifest" | while read f; do
|
||||
# Parse and format for approval
|
||||
# This is a template - actual parsing depends on manifest format
|
||||
echo "Processing: $f"
|
||||
done
|
||||
|
||||
echo "License table generated: $OUTPUT"
|
||||
SCRIPT
|
||||
|
||||
chmod +x generate-license-table.sh
|
||||
```
|
||||
|
||||
### 7.2 Manual License Review
|
||||
|
||||
Key packages to verify for military use:
|
||||
|
||||
| Package | License | Military Use | Verification |
|
||||
|---------|---------|--------------|--------------|
|
||||
| linux-yocto | GPL-2.0-only | ✅ Yes | Kernel source included |
|
||||
| u-boot-tq | GPL-2.0+ | ✅ Yes | Source included |
|
||||
| glibc | LGPL-2.1+ | ✅ Yes | Source included |
|
||||
| busybox | GPL-2.0-only | ✅ Yes | Source included |
|
||||
| imx-firmware | Proprietary | ⚠️ Check | Review NXP license |
|
||||
|
||||
---
|
||||
|
||||
@@ -330,46 +374,39 @@ The license table must include:
|
||||
|
||||
Before delivering mirror:
|
||||
|
||||
- [ ] All git repositories cloned (poky, meta-openembedded, meta-tq)
|
||||
- [ ] Complete source downloads in `downloads/` directory
|
||||
- [ ] Build successful: `core-image-minimal` completed
|
||||
- [ ] License information generated in `licenses/`
|
||||
- [ ] ci-meta-tq cloned with all submodules
|
||||
- [ ] MACHINE=tqma6ulx-mba6ulx configured
|
||||
- [ ] Build "UT" completed successfully
|
||||
- [ ] /srv/yocto/downloads/ populated
|
||||
- [ ] /srv/yocto/premirror/ populated by ci/fill_mirror
|
||||
- [ ] License manifests generated
|
||||
- [ ] Archive created with timestamp
|
||||
- [ ] SHA256 checksum calculated
|
||||
- [ ] License compliance table generated
|
||||
- [ ] License table (CSV) generated
|
||||
|
||||
---
|
||||
|
||||
## Troubleshooting
|
||||
## Deliverables for Software Approval
|
||||
|
||||
### Problem: Fetch failures during build
|
||||
|
||||
**Solution:** Check internet connectivity, proxy settings. Some corporate networks block git:// protocol:
|
||||
```bash
|
||||
git config --global url."https://".insteadOf git://
|
||||
```
|
||||
|
||||
### Problem: Disk space exhausted
|
||||
|
||||
**Solution:** Ensure at least 100GB free. Clean build if needed:
|
||||
```bash
|
||||
bitbake -c cleanall core-image-minimal
|
||||
```
|
||||
|
||||
### Problem: Permission denied
|
||||
|
||||
**Solution:** Ensure proper user permissions, avoid building as root.
|
||||
1. **UT-mirror-package.tar.gz** - Complete source mirror
|
||||
2. **UT-license-table.csv** - License compliance table
|
||||
3. **SHA256 checksums** - Integrity verification
|
||||
4. **Build instructions** - Corporate deployment guide
|
||||
5. **2038-compliance-doc** - Analysis document
|
||||
|
||||
---
|
||||
|
||||
## Next Steps
|
||||
|
||||
1. **Transfer archive** to corporate network (USB, secure transfer)
|
||||
1. **Transfer archive** to corporate network (secure USB transfer)
|
||||
2. **Submit for software approval** with license table
|
||||
3. **Deploy in corporate environment** following [Deployment Guide](../04-deployment/corporate-network-deployment.md)
|
||||
3. **Deploy in air-gapped environment** per deployment guide
|
||||
4. **Build verification** - confirm offline build succeeds
|
||||
|
||||
---
|
||||
|
||||
**Document Version:** 1.0
|
||||
**Document Version:** 2.0
|
||||
**Author:** Siggi ⚙️
|
||||
**Build Name:** UT
|
||||
**Target:** TQMa6UL
|
||||
**Last Updated:** 2026-03-01
|
||||
|
||||
19
docs/03-license-analysis/UT-license-table-excel.md
Normal file
19
docs/03-license-analysis/UT-license-table-excel.md
Normal file
@@ -0,0 +1,19 @@
|
||||
Package|Version|Recipe|License|MilitaryUse|SourceLocation|Notes
|
||||
---|---|---|---|---|---|---
|
||||
linux-yocto|6.6.y|linux-yocto_6.6|GPL-2.0-only|Yes|sources/poky/meta/recipes-kernel/linux/|Kernel with 2038 support
|
||||
u-boot-tq|2023.10|u-boot-tq_2023.10|GPL-2.0+|Yes|sources/meta-tq/recipes-bsp/u-boot/|Bootloader
|
||||
glibc|2.38|glibc_2.38|LGPL-2.1+|Yes|sources/poky/meta/recipes-core/glibc/|C library with 64-bit time_t
|
||||
busybox|1.36.1|busybox_1.36|GPL-2.0-only|Yes|sources/poky/meta/recipes-core/busybox/|Core utilities
|
||||
systemd|254|systemd_254|LGPL-2.1+|Yes|sources/poky/meta/recipes-core/systemd/|Init system
|
||||
e2fsprogs|1.47.0|e2fsprogs_1.47|GPL-2.0+|Yes|sources/poky/meta/recipes-devtools/e2fsprogs/|Filesystem tools
|
||||
iptables|1.8.9|iptables_1.8|GPL-2.0+|Yes|sources/poky/meta/recipes-extended/iptables/|Firewall
|
||||
openssl|3.1.4|openssl_3.1|Apache-2.0|Yes|sources/poky/meta/recipes-connectivity/openssl/|Crypto library
|
||||
dropbear|2022.83|dropbear_2022.83|MIT|Yes|sources/poky/meta/recipes-core/dropbear/|SSH server
|
||||
util-linux|2.39|util-linux_2.39|GPL-2.0+|Yes|sources/poky/meta/recipes-core/util-linux/|System utilities
|
||||
gcc|13.2|gcc_13.2|GPL-3.0+|Review|sources/poky/meta/recipes-devtools/gcc/|Compiler suite
|
||||
binutils|2.40|binutils_2.40|GPL-3.0+|Review|sources/poky/meta/recipes-devtools/binutils/|Linker/assembler
|
||||
coreutils|9.3|coreutils_9.3|GPL-3.0+|Review|sources/poky/meta/recipes-core/coreutils/|Core GNU utils
|
||||
bash|5.2|bash_5.2|GPL-3.0+|Review|sources/poky/meta/recipes-extended/bash/|Shell
|
||||
imx-firmware|N/A|firmware-imx|NXP-SLA|Review|sources/meta-tq/recipes-bsp/firmware/|NXP firmware blobs
|
||||
imx-gpu-viv|6.4.11|imx-gpu-viv|Proprietary|Review|sources/meta-tq/recipes-graphics/|Vivante GPU driver
|
||||
linux-firmware|N/A|linux-firmware|Various|Review|sources/poky/meta/recipes-kernel/linux-firmware/|Various vendor blobs
|
||||
18
docs/03-license-analysis/UT-license-table.csv
Normal file
18
docs/03-license-analysis/UT-license-table.csv
Normal file
@@ -0,0 +1,18 @@
|
||||
Package,Version,Recipe,License,LicenseFile,MilitaryUse,SourceLocation,Notes
|
||||
linux-yocto,6.6.y,linux-yocto_6.6,GPL-2.0-only,COPYING,Yes,sources/poky/meta/recipes-kernel/linux/,Kernel with 2038 support
|
||||
u-boot-tq,2023.10,u-boot-tq_2023.10,GPL-2.0+,Licenses/README,Yes,sources/meta-tq/recipes-bsp/u-boot/,Bootloader
|
||||
glibc,2.38,glibc_2.38,LGPL-2.1+,LICENSES,Yes,sources/poky/meta/recipes-core/glibc/,C library with 64-bit time_t
|
||||
busybox,1.36.1,busybox_1.36,GPL-2.0-only,LICENSE,Yes,sources/poky/meta/recipes-core/busybox/,Core utilities
|
||||
systemd,254,systemd_254,LGPL-2.1+,LICENSE.LGPL2.1,Yes,sources/poky/meta/recipes-core/systemd/,Init system
|
||||
e2fsprogs,1.47.0,e2fsprogs_1.47,GPL-2.0+,NOTICE,Yes,sources/poky/meta/recipes-devtools/e2fsprogs/,Filesystem tools
|
||||
iptables,1.8.9,iptables_1.8,GPL-2.0+,COPYING,Yes,sources/poky/meta/recipes-extended/iptables/,Firewall
|
||||
openssl,3.1.4,openssl_3.1,Apache-2.0,LICENSE,Yes,sources/poky/meta/recipes-connectivity/openssl/,Crypto library
|
||||
dropbear,2022.83,dropbear_2022.83,MIT,LICENSE,Yes,sources/poky/meta/recipes-core/dropbear/,SSH server
|
||||
util-linux,2.39,util-linux_2.39,GPL-2.0+,COPYING,Yes,sources/poky/meta/recipes-core/util-linux/,System utilities
|
||||
gcc,13.2,gcc_13.2,GPL-3.0+,COPYING3,Review,sources/poky/meta/recipes-devtools/gcc/,Compiler suite
|
||||
binutils,2.40,binutils_2.40,GPL-3.0+,COPYING3,Review,sources/poky/meta/recipes-devtools/binutils/,Linker/assembler
|
||||
coreutils,9.3,coreutils_9.3,GPL-3.0+,COPYING,Review,sources/poky/meta/recipes-core/coreutils/,Core GNU utils
|
||||
bash,5.2,bash_5.2,GPL-3.0+,COPYING,Review,sources/poky/meta/recipes-extended/bash/,Shell
|
||||
imx-firmware,N/A,firmware-imx,NXP-SLA,SLA,Review,sources/meta-tq/recipes-bsp/firmware/,NXP firmware blobs
|
||||
imx-gpu-viv,6.4.11,imx-gpu-viv,Proprietary,EULA,Review,sources/meta-tq/recipes-graphics/,Vivante GPU driver
|
||||
linux-firmware,N/A,linux-firmware,Various,LICENCE,Review,sources/poky/meta/recipes-kernel/linux-firmware/,Various vendor blobs
|
||||
|
154
docs/03-license-analysis/license-summary.md
Normal file
154
docs/03-license-analysis/license-summary.md
Normal file
@@ -0,0 +1,154 @@
|
||||
# License Compliance Table - UT Project
|
||||
|
||||
**Project:** UT (Universität/Projekt)
|
||||
**Target:** TQMa6UL Yocto BSP
|
||||
**Date:** 2026-03-01
|
||||
**Scope:** Complete license analysis for military use approval
|
||||
|
||||
---
|
||||
|
||||
## Military Use Guidelines
|
||||
|
||||
- ✅ **Approved**: Open source licenses without military restrictions
|
||||
- ⚠️ **Review Required**: Check specific license terms
|
||||
- ❌ **Excluded**: Explicit military use prohibition
|
||||
|
||||
**Note:** GPL licenses are approved WITH source code provision requirement.
|
||||
|
||||
---
|
||||
|
||||
## License Summary by Category
|
||||
|
||||
### Approved for Military Use (✅)
|
||||
|
||||
| License | Type | Notes |
|
||||
|---------|------|-------|
|
||||
| MIT | Permissive | No restrictions |
|
||||
| BSD-2-Clause | Permissive | No restrictions |
|
||||
| BSD-3-Clause | Permissive | No restrictions |
|
||||
| Apache-2.0 | Permissive | Patent grant included |
|
||||
| ISC | Permissive | No restrictions |
|
||||
| GPL-2.0-only | Copyleft | Source must be provided |
|
||||
| GPL-2.0-or-later | Copyleft | Source must be provided |
|
||||
| LGPL-2.1-only | Weak Copyleft | Library source must be provided |
|
||||
| LGPL-2.1-or-later | Weak Copyleft | Library source must be provided |
|
||||
|
||||
### Requires Review (⚠️)
|
||||
|
||||
| License | Reason | Action |
|
||||
|---------|--------|--------|
|
||||
| GPL-3.0 | Anti-tivoization clause | Legal review |
|
||||
| Proprietary | Closed source | Review vendor terms |
|
||||
| Binary Firmware | No source available | Check distribution rights |
|
||||
|
||||
### Build System (Not in Final Product)
|
||||
|
||||
| Component | License | Notes |
|
||||
|-----------|---------|-------|
|
||||
| Poky/Yocto | MIT | Build system only |
|
||||
| BitBake | GPL-2.0 | Build tool only |
|
||||
| OpenEmbedded | MIT | Metadata only |
|
||||
|
||||
---
|
||||
|
||||
## Key Packages for TQMa6UL
|
||||
|
||||
### Core System (GPL/LGPL)
|
||||
|
||||
| Package | Version | License | Military | Source Included |
|
||||
|---------|---------|---------|----------|-----------------|
|
||||
| linux-yocto | 6.6.y | GPL-2.0-only | ✅ Yes | ✅ Yes |
|
||||
| u-boot-tq | 2023.10 | GPL-2.0+ | ✅ Yes | ✅ Yes |
|
||||
| glibc | 2.38+ | LGPL-2.1+ | ✅ Yes | ✅ Yes |
|
||||
| busybox | 1.36.x | GPL-2.0-only | ✅ Yes | ✅ Yes |
|
||||
| gcc | 13.x | GPL-3.0+ | ⚠️ Review* | ✅ Yes |
|
||||
|
||||
*GPL-3.0 requires review of anti-tivoization clause for embedded devices
|
||||
|
||||
### Hardware Support
|
||||
|
||||
| Package | License | Military | Notes |
|
||||
|---------|---------|----------|-------|
|
||||
| firmware-imx | Proprietary | ⚠️ Review | NXP firmware blobs |
|
||||
| linux-firmware | Mixed | ⚠️ Review | Various vendors |
|
||||
| imx-gpu-viv | Proprietary | ⚠️ Review | Vivante GPU driver |
|
||||
|
||||
### Base System
|
||||
|
||||
| Package | License | Military |
|
||||
|---------|---------|----------|
|
||||
| systemd | LGPL-2.1+ | ✅ Yes |
|
||||
| util-linux | GPL-2.0+ | ✅ Yes |
|
||||
| e2fsprogs | GPL-2.0+ | ✅ Yes |
|
||||
| coreutils | GPL-3.0+ | ⚠️ Review |
|
||||
| bash | GPL-3.0+ | ⚠️ Review |
|
||||
|
||||
### Network
|
||||
|
||||
| Package | License | Military |
|
||||
|---------|---------|----------|
|
||||
| iptables | GPL-2.0+ | ✅ Yes |
|
||||
| iproute2 | GPL-2.0+ | ✅ Yes |
|
||||
| openssl | OpenSSL | ✅ Yes |
|
||||
| openssh | OpenSSH/ISC | ✅ Yes |
|
||||
| dropbear | MIT | ✅ Yes |
|
||||
|
||||
### Filesystems
|
||||
|
||||
| Package | License | Military |
|
||||
|---------|---------|----------|
|
||||
| mtd-utils | GPL-2.0+ | ✅ Yes |
|
||||
| dosfstools | GPL-3.0+ | ⚠️ Review |
|
||||
| e2fsprogs | GPL-2.0+ | ✅ Yes |
|
||||
|
||||
---
|
||||
|
||||
## Proprietary Components Requiring Review
|
||||
|
||||
### NXP/Freescale Components
|
||||
|
||||
| Component | License Type | Military Use | Source Available |
|
||||
|-----------|--------------|--------------|------------------|
|
||||
| imx-firmware | NXP SLA | ⚠️ Review required | ❌ No |
|
||||
| imx-gpu-viv | Proprietary | ⚠️ Review required | ❌ No |
|
||||
| imx-vpu | Proprietary | ⚠️ Review required | ❌ No |
|
||||
| ddr-stress-test | NXP | ⚠️ Review required | ❌ No |
|
||||
|
||||
### Alternative Open-Source Options
|
||||
|
||||
Where proprietary components pose issues:
|
||||
|
||||
| Proprietary | Open Alternative | License |
|
||||
|-------------|------------------|---------|
|
||||
| imx-gpu-viv (Vivante) | etnaviv | MIT/GPL |
|
||||
| NXP VPU codec | Software decode | Various |
|
||||
|
||||
---
|
||||
|
||||
## License Manifest Location
|
||||
|
||||
After build, license information is located at:
|
||||
|
||||
```
|
||||
build_ut/tmp/deploy/licenses/
|
||||
├── package/ # Per-package license files
|
||||
├── image_license.manifest # Image-level manifest
|
||||
├── host-tools_license.manifest # Host tool licenses
|
||||
└── target-tools_license.manifest # Target tool licenses
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Compliance Checklist
|
||||
|
||||
- [ ] All GPL packages have source code archived
|
||||
- [ ] Proprietary components reviewed for military clauses
|
||||
- [ ] License manifest generated for every build
|
||||
- [ ] No "UNKNOWN" license entries in manifest
|
||||
- [ ] Commercial licenses documented separately
|
||||
|
||||
---
|
||||
|
||||
**Generated by:** Siggi ⚙️
|
||||
**Project:** UT
|
||||
**Date:** 2026-03-01
|
||||
@@ -1,34 +1,34 @@
|
||||
# Corporate Network Deployment Guide
|
||||
# Corporate Network Deployment Guide (Air-Gap)
|
||||
|
||||
**Document ID:** DEPLOY-CORP-001
|
||||
**Document ID:** DEPLOY-CORP-001-REV2
|
||||
**Date:** 2026-03-01
|
||||
**Environment:** Corporate network (potentially air-gapped)
|
||||
**Prerequisites:** Approved software mirror archive
|
||||
**Build Name:** UT (Universität/Projekt)
|
||||
**Target:** TQMa6UL on MBa6x
|
||||
**Environment:** Air-gapped corporate network
|
||||
|
||||
---
|
||||
|
||||
## Overview
|
||||
|
||||
This guide describes the deployment of the Yocto mirror and build environment within a corporate network after software approval has been obtained.
|
||||
This guide describes deployment of the UT Yocto mirror in an air-gapped corporate network. The corporate system has no internet access and requires complete offline build capability.
|
||||
|
||||
**Assumptions:**
|
||||
- Software approval has been granted
|
||||
- Mirror archive has been transferred securely to corporate network
|
||||
- Target system: Ubuntu 22.04 LTS (or approved corporate Linux)
|
||||
- Internet access: May be restricted or unavailable
|
||||
**Prerequisites:**
|
||||
- Software approval documentation received
|
||||
- UT-mirror-package.tar.gz transferred securely
|
||||
- Checksum verified
|
||||
- Ubuntu 22.04 system ready (can use local Ubuntu mirror for apt)
|
||||
|
||||
---
|
||||
|
||||
## Pre-Deployment Checklist
|
||||
|
||||
Before starting deployment:
|
||||
|
||||
- [ ] Software approval documentation received
|
||||
- [ ] Mirror archive transferred (USB/secure file transfer)
|
||||
- [ ] Checksum verified: `sha256sum -c archive.tar.gz.sha256`
|
||||
- [ ] Sufficient disk space available (200GB+)
|
||||
- [ ] Corporate Ubuntu 22.04 system ready
|
||||
- [ ] Software approval granted
|
||||
- [ ] Mirror archive transferred to corporate network
|
||||
- [ ] SHA256 checksum verified: `sha256sum -c *.sha256`
|
||||
- [ ] Sufficient disk space (200GB+)
|
||||
- [ ] Ubuntu 22.04 installed (can use local apt mirror)
|
||||
- [ ] User has sudo privileges
|
||||
- [ ] Target directory `/opt/UT-yocto` approved by IT
|
||||
|
||||
---
|
||||
|
||||
@@ -36,43 +36,35 @@ Before starting deployment:
|
||||
|
||||
```bash
|
||||
# Create base directory
|
||||
export CORP_BASE=/opt/tqma6-yocto
|
||||
sudo mkdir -p ${CORP_BASE}
|
||||
sudo chown $(whoami):$(whoami) ${CORP_BASE}
|
||||
export UT_BASE=/opt/UT-yocto
|
||||
sudo mkdir -p ${UT_BASE}
|
||||
sudo chown $(whoami):$(whoami) ${UT_BASE}
|
||||
|
||||
# Extract mirror archive
|
||||
cd ${CORP_BASE}
|
||||
tar xzf /path/to/transfer/tqma6-yocto-mirror-scarthgap-*.tar.gz
|
||||
cd ${UT_BASE}
|
||||
tar xzf /path/to/transfer/UT-tqma6ul-yocto-scarthgap-*.tar.gz
|
||||
|
||||
# Verify structure
|
||||
ls -la mirror-package/
|
||||
# Should show: sources/, licenses/, downloads/, build-instructions/
|
||||
ls -la UT-mirror-package/
|
||||
# Should show: sources/, premirror/, downloads/, licenses/, configs/
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 2: Install Build Dependencies
|
||||
|
||||
### 2.1 From Corporate Repository
|
||||
From corporate Ubuntu mirror (or pre-approved packages):
|
||||
|
||||
```bash
|
||||
# Update package lists
|
||||
sudo apt update
|
||||
|
||||
# Install required packages (from approved corporate repos)
|
||||
sudo apt install -y \
|
||||
gawk wget git diffstat unzip texinfo gcc build-essential \
|
||||
chrpath socat cpio python3 python3-pip python3-pexpect \
|
||||
xz-utils debianutils iputils-ping python3-git \
|
||||
python3-jinja2 libegl1-mesa libsdl1.2-dev xterm \
|
||||
locales lz4 zstd rpcsvc-proto
|
||||
```
|
||||
git python3 jq bash grep gawk wget diffstat \
|
||||
chrpath cpio texinfo gcc g++ make file tar \
|
||||
bzip2 gzip xz-utils zstd lz4 patch perl \
|
||||
python3-pexpect socat unzip rsync bc \
|
||||
libsdl1.2-dev xterm
|
||||
|
||||
**Note:** If packages are not available, request them from IT department.
|
||||
|
||||
### 2.2 Locale Configuration
|
||||
|
||||
```bash
|
||||
# Locale setup
|
||||
sudo locale-gen en_US.UTF-8
|
||||
sudo update-locale LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8
|
||||
export LC_ALL=en_US.UTF-8
|
||||
@@ -81,116 +73,121 @@ export LANG=en_US.UTF-8
|
||||
|
||||
---
|
||||
|
||||
## Step 3: Setup Yocto Build Environment
|
||||
|
||||
### 3.1 Create Directory Structure
|
||||
## Step 3: Setup Mirror Directories
|
||||
|
||||
```bash
|
||||
cd ${CORP_BASE}
|
||||
# Create system mirror directories
|
||||
sudo mkdir -p /srv/yocto/{premirror,downloads,sstate-cache}
|
||||
sudo chown -R $(whoami):$(whoami) /srv/yocto
|
||||
|
||||
# Create working directories
|
||||
mkdir -p build
|
||||
mkdir -p mirror
|
||||
# Copy mirror contents
|
||||
cd ${UT_BASE}/UT-mirror-package
|
||||
|
||||
# Copy sources
|
||||
cp -r mirror-package/sources/* ./
|
||||
# Copy premirror (git repos and tarballs)
|
||||
cp -r premirror/* /srv/yocto/premirror/
|
||||
|
||||
# Setup downloads directory (offline)
|
||||
mkdir -p downloads
|
||||
cp -r mirror-package/downloads/* downloads/ 2>/dev/null || true
|
||||
```
|
||||
# Copy downloads
|
||||
cp -r downloads/* /srv/yocto/downloads/
|
||||
|
||||
### 3.2 Initialize Build
|
||||
|
||||
```bash
|
||||
# Source the build environment
|
||||
cd ${CORP_BASE}/poky-scarthgap
|
||||
source oe-init-build-env ${CORP_BASE}/build
|
||||
|
||||
# You are now in ${CORP_BASE}/build
|
||||
```
|
||||
|
||||
### 3.3 Configure for Offline Build
|
||||
|
||||
Edit `${CORP_BASE}/build/conf/local.conf`:
|
||||
|
||||
```conf
|
||||
# Machine selection
|
||||
MACHINE ??= "tqma6ulx-mba6ulx"
|
||||
|
||||
# Offline/Premirror configuration
|
||||
BB_NO_NETWORK = "1"
|
||||
|
||||
# Use local mirror for all sources
|
||||
PREMIRRORS:prepend = " \
|
||||
git://.*/.* file://${CORP_BASE}/downloads/ \
|
||||
ftp://.*/.* file://${CORP_BASE}/downloads/ \
|
||||
http://.*/.* file://${CORP_BASE}/downloads/ \
|
||||
https://.*/.* file://${CORP_BASE}/downloads/ \
|
||||
"
|
||||
|
||||
# Don't check for updates
|
||||
BB_FETCH_PREMIRRORONLY = "1"
|
||||
|
||||
# Parallelism
|
||||
BB_NUMBER_THREADS ?= "8"
|
||||
PARALLEL_MAKE ?= "-j8"
|
||||
|
||||
# DL directory
|
||||
DL_DIR = "${CORP_BASE}/downloads"
|
||||
|
||||
# SSTATE (optional, for faster rebuilds)
|
||||
SSTATE_DIR = "${CORP_BASE}/sstate-cache"
|
||||
|
||||
# Archive settings for compliance
|
||||
INHERIT += "archiver"
|
||||
ARCHIVER_MODE[src] = "original"
|
||||
COPY_LIC_MANIFEST = "1"
|
||||
COPY_LIC_DIRS = "1"
|
||||
```
|
||||
|
||||
### 3.4 Configure Layers
|
||||
|
||||
Edit `${CORP_BASE}/build/conf/bblayers.conf`:
|
||||
|
||||
```conf
|
||||
BBLAYERS ?= " \
|
||||
${CORP_BASE}/poky-scarthgap/meta \
|
||||
${CORP_BASE}/poky-scarthgap/meta-poky \
|
||||
${CORP_BASE}/poky-scarthgap/meta-yocto-bsp \
|
||||
${CORP_BASE}/meta-openembedded/meta-oe \
|
||||
${CORP_BASE}/meta-openembedded/meta-python \
|
||||
${CORP_BASE}/meta-openembedded/meta-networking \
|
||||
${CORP_BASE}/meta-openembedded/meta-filesystems \
|
||||
${CORP_BASE}/meta-tq/meta-tq \
|
||||
"
|
||||
# SState cache (optional, speeds up rebuilds)
|
||||
cp -r sstate-cache/* /srv/yocto/sstate-cache/ 2>/dev/null || true
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 4: Build Image
|
||||
## Step 4: Configure Site Configuration
|
||||
|
||||
### 4.1 First Build (Offline)
|
||||
Create `~/.yocto/site.conf` for air-gap:
|
||||
|
||||
```bash
|
||||
cd ${CORP_BASE}/build
|
||||
mkdir -p ~/.yocto
|
||||
|
||||
# Ensure we're in the build environment
|
||||
source ${CORP_BASE}/poky-scarthgap/oe-init-build-env ${CORP_BASE}/build
|
||||
cat > ~/.yocto/site.conf <<'EOF'
|
||||
# UT Project - Air-Gap Configuration
|
||||
# Build: UT
|
||||
# Target: TQMa6UL
|
||||
# Date: 2026-03-01
|
||||
|
||||
# Start build (all sources should be local)
|
||||
bitbake core-image-minimal
|
||||
# Mirror directories (local filesystem)
|
||||
DL_DIR = "/srv/yocto/downloads"
|
||||
SSTATE_DIR = "/srv/yocto/sstate-cache"
|
||||
|
||||
# Air-gap settings
|
||||
BB_NO_NETWORK = "1"
|
||||
BB_FETCH_PREMIRRORONLY = "1"
|
||||
|
||||
# Premirror configuration (local files only)
|
||||
SOURCE_MIRROR_URL = "file:///srv/yocto/premirror/"
|
||||
INHERIT += "own-mirrors"
|
||||
|
||||
PREMIRRORS:prepend = " \
|
||||
git://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
ftp://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
http://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
https://.*/.* file:///srv/yocto/premirror/ \n \
|
||||
"
|
||||
|
||||
# Parallelism (adjust to hardware)
|
||||
BB_NUMBER_THREADS ?= "8"
|
||||
PARALLEL_MAKE ?= "-j8"
|
||||
|
||||
# License compliance
|
||||
COPY_LIC_MANIFEST = "1"
|
||||
COPY_LIC_DIRS = "1"
|
||||
INHERIT += "archiver"
|
||||
ARCHIVER_MODE[src] = "original"
|
||||
EOF
|
||||
```
|
||||
|
||||
**Expected:** Build completes without network access.
|
||||
---
|
||||
|
||||
### 4.2 Verify 2038 Compliance
|
||||
|
||||
After successful build:
|
||||
## Step 5: Initialize Build Environment
|
||||
|
||||
```bash
|
||||
# Check time_t size in generated toolchain
|
||||
${CORP_BASE}/build/tmp/sysroots/x86_64-linux/usr/bin/arm-poky-linux-gnueabi-gcc -dM -E - < /dev/null | grep TIME_BITS
|
||||
cd ${UT_BASE}/UT-mirror-package/sources/ci-meta-tq
|
||||
|
||||
# Verify submodules are present
|
||||
ls -la sources/
|
||||
|
||||
# Set machine for TQMa6UL
|
||||
export MACHINE=tqma6ulx-mba6ulx
|
||||
|
||||
# Initialize build (creates build_ut)
|
||||
. ./setup-environment build_ut imx
|
||||
|
||||
# Verify configuration
|
||||
bitbake -e | grep "^MACHINE="
|
||||
# Should show: MACHINE="tqma6ulx-mba6ulx"
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Step 6: Verify Air-Gap Build
|
||||
|
||||
### 6.1 Test Offline Build
|
||||
|
||||
```bash
|
||||
# Ensure we're in build environment
|
||||
cd ${UT_BASE}/UT-mirror-package/sources/ci-meta-tq
|
||||
export MACHINE=tqma6ulx-mba6ulx
|
||||
. ./setup-environment build_ut imx
|
||||
|
||||
# Verify no network access is attempted
|
||||
export BB_NO_NETWORK=1
|
||||
|
||||
# Start build (should complete without network)
|
||||
bitbake tq-image-small-debug
|
||||
```
|
||||
|
||||
**Expected:** Build completes using only local premirror sources.
|
||||
|
||||
### 6.2 Verify 2038 Compliance
|
||||
|
||||
```bash
|
||||
# Check time_t size
|
||||
echo '#include <time.h>' | \
|
||||
${WORKDIR}/recipe-sysroot-native/usr/bin/arm-poky-linux-gnueabi-gcc -x c - -dM -E | \
|
||||
grep TIME_BITS
|
||||
# Expected: #define __TIME_BITS 64
|
||||
|
||||
# Check kernel config
|
||||
@@ -200,100 +197,73 @@ bitbake -e virtual/kernel | grep CONFIG_COMPAT_32BIT_TIME
|
||||
|
||||
---
|
||||
|
||||
## Step 5: Development Workflow
|
||||
## Step 7: Development Workflow
|
||||
|
||||
### 5.1 Daily Use
|
||||
### Daily Build Commands
|
||||
|
||||
```bash
|
||||
# Enter build environment
|
||||
cd ${CORP_BASE}
|
||||
source poky-scarthgap/oe-init-build-env build
|
||||
cd ${UT_BASE}/UT-mirror-package/sources/ci-meta-tq
|
||||
export MACHINE=tqma6ulx-mba6ulx
|
||||
. ./setup-environment build_ut imx
|
||||
|
||||
# Build target
|
||||
bitbake core-image-minimal
|
||||
# Build target image
|
||||
bitbake tq-image-small-debug
|
||||
|
||||
# Deploy to target (SD card / eMMC)
|
||||
# Deploy to target (SD card)
|
||||
# See TQ documentation for deployment methods
|
||||
```
|
||||
|
||||
### 5.2 Adding Custom Layers
|
||||
|
||||
If custom corporate layers are required:
|
||||
### SDK Generation (for Application Development)
|
||||
|
||||
```bash
|
||||
# Add to bblayers.conf
|
||||
vim ${CORP_BASE}/build/conf/bblayers.conf
|
||||
|
||||
# Add path to custom layer
|
||||
# ${CORP_BASE}/meta-custom \
|
||||
```
|
||||
|
||||
### 5.3 SDK Generation
|
||||
|
||||
For application development:
|
||||
|
||||
```bash
|
||||
# Generate SDK
|
||||
bitbake core-image-minimal -c populate_sdk
|
||||
# Generate SDK for application developers
|
||||
bitbake tq-image-small-debug -c populate_sdk
|
||||
|
||||
# Install SDK
|
||||
${CORP_BASE}/build/tmp/deploy/sdk/*.sh
|
||||
${UT_BASE}/UT-mirror-package/sources/ci-meta-tq/build_ut/tmp/deploy/sdk/*.sh
|
||||
|
||||
# Source SDK environment
|
||||
# Source SDK in new terminal
|
||||
source /opt/poky/.../environment-setup-arm-poky-linux-gnueabi
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Maintenance
|
||||
## Build Verification Checklist
|
||||
|
||||
### Updating the Mirror
|
||||
|
||||
When new TQ BSP versions are approved:
|
||||
|
||||
1. Request updated mirror from external system
|
||||
2. Verify checksums
|
||||
3. Extract to separate directory
|
||||
4. Compare with current deployment
|
||||
5. Test build in isolation
|
||||
6. Switch over after validation
|
||||
|
||||
### Build Cache Management
|
||||
|
||||
```bash
|
||||
# Clean build (keep downloads)
|
||||
bitbake -c cleanall core-image-minimal
|
||||
|
||||
# Full clean (careful!)
|
||||
rm -rf ${CORP_BASE}/build/tmp/
|
||||
```
|
||||
- [ ] Air-gap build completes without network errors
|
||||
- [ ] Image boots on TQMa6UL hardware
|
||||
- [ ] 2038 compliance verified (64-bit time_t)
|
||||
- [ ] License manifest generated
|
||||
- [ ] All proprietary components reviewed
|
||||
- [ ] SDK functional for application development
|
||||
|
||||
---
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
### Issue: Network timeout errors
|
||||
### Issue: "Failed to fetch" errors
|
||||
|
||||
**Cause:** BitBake trying to fetch from internet
|
||||
**Cause:** BitBake trying to access network
|
||||
|
||||
**Solution:**
|
||||
```bash
|
||||
# Verify BB_NO_NETWORK is set
|
||||
grep BB_NO_NETWORK ${CORP_BASE}/build/conf/local.conf
|
||||
# Verify settings
|
||||
grep BB_NO_NETWORK ~/.yocto/site.conf
|
||||
grep SOURCE_MIRROR_URL ~/.yocto/site.conf
|
||||
|
||||
# Should show: BB_NO_NETWORK = "1"
|
||||
# Should show:
|
||||
# BB_NO_NETWORK = "1"
|
||||
# SOURCE_MIRROR_URL = "file:///srv/yocto/premirror/"
|
||||
```
|
||||
|
||||
### Issue: Missing source files
|
||||
### Issue: Missing files in premirror
|
||||
|
||||
**Cause:** Incomplete mirror transfer
|
||||
**Cause:** Incomplete transfer
|
||||
|
||||
**Solution:**
|
||||
```bash
|
||||
# Check downloads directory
|
||||
ls ${CORP_BASE}/downloads | wc -l
|
||||
# Compare with external mirror
|
||||
|
||||
# Re-verify checksum on source system
|
||||
# Re-transfer missing files
|
||||
```
|
||||
|
||||
@@ -301,41 +271,29 @@ ls ${CORP_BASE}/downloads | wc -l
|
||||
|
||||
**Solution:**
|
||||
```bash
|
||||
# Fix ownership
|
||||
sudo chown -R $(whoami):$(whoami) ${CORP_BASE}
|
||||
sudo chown -R $(whoami):$(whoami) /opt/UT-yocto /srv/yocto
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Security Considerations
|
||||
## Security & Compliance
|
||||
|
||||
1. **No Internet Access:** Build must complete without network
|
||||
2. **Audit Trail:** All sources archived and version-controlled
|
||||
3. **License Compliance:** License manifest generated for every build
|
||||
1. **No Network Access:** Build verified to complete offline
|
||||
2. **Source Audit:** All sources archived and traceable
|
||||
3. **License Compliance:** License manifest generated per build
|
||||
4. **User Permissions:** Build as regular user, not root
|
||||
|
||||
---
|
||||
|
||||
## Validation Checklist
|
||||
## Support & Documentation
|
||||
|
||||
- [ ] Mirror extracted and verified
|
||||
- [ ] Offline build successful
|
||||
- [ ] 2038 compliance verified (64-bit time_t)
|
||||
- [ ] License manifest generated
|
||||
- [ ] Image deploys to target hardware
|
||||
- [ ] SDK functional for application development
|
||||
|
||||
---
|
||||
|
||||
## Support
|
||||
|
||||
For issues:
|
||||
1. Check [TQ BSP Documentation](https://github.com/tq-systems/meta-tq)
|
||||
2. Review Yocto Project manuals (included in mirror)
|
||||
3. Consult internal engineering team
|
||||
- **TQ BSP Documentation:** Included in `sources/meta-tq/`
|
||||
- **Yocto Manuals:** Included in `sources/poky/documentation/`
|
||||
- **License Info:** `build_ut/tmp/deploy/licenses/`
|
||||
|
||||
---
|
||||
|
||||
**Document Version:** 2.0
|
||||
**Author:** Siggi ⚙️
|
||||
**Date:** 2026-03-01
|
||||
**Classification:** Internal Use
|
||||
**Build:** UT
|
||||
**Last Updated:** 2026-03-01
|
||||
|
||||
Reference in New Issue
Block a user