GitLab

The Fedora images in the Docker hub container registry are updated less
frequently and lag the ones from Fedora's offical repo.

In my experience, this often leads to periods where our CI testing is
broken on rawhide due to some short-lived issue that is already fixed in
current images.

So, change our Dockerfiles to pull specifically from the upstream
registry.fedoraproject.org instead.
Signed-off-by: Reza Arbab <arbab@linux.ibm.com>
Reviewed-by: Dan Horák <dan@danny.cz>
Reviewed-by: Abhishek Singh Tomar <abhishek@linux.ibm.com>

The links used to download Mambo have stopped working:

  Step 5/9 : RUN if [ `arch` = "x86_64" ]; then dnf -y install http://public.dhe.ibm.com/software/server/powerfuncsim/p9/packages/v1.1-0/systemsim-p9-1.1-0.f22.x86_64.rpm; fi
   ---> Running in 4676caeeb953
  Last metadata expiration check: 0:03:46 ago on Thu Jan 19 16:06:19 2023.
  [MIRROR] systemsim-p9-1.1-0.f22.x86_64.rpm: Curl error (56): Failure when receiving data from the peer for http://public.dhe.ibm.com/software/server/powerfuncsim/p9/packages/v1.1-0/systemsim-p9-1.1-0.f22.x86_64.rpm [Recv failure: Connection reset by peer]
  [MIRROR] systemsim-p9-1.1-0.f22.x86_64.rpm: Curl error (56): Failure when receiving data from the peer for http://public.dhe.ibm.com/software/server/powerfuncsim/p9/packages/v1.1-0/systemsim-p9-1.1-0.f22.x86_64.rpm [Recv failure: Connection reset by peer]
  [MIRROR] systemsim-p9-1.1-0.f22.x86_64.rpm: Curl error (56): Failure when receiving data from the peer for http://public.dhe.ibm.com/software/server/powerfuncsim/p9/packages/v1.1-0/systemsim-p9-1.1-0.f22.x86_64.rpm [Recv failure: Connection reset by peer]
  [MIRROR] systemsim-p9-1.1-0.f22.x86_64.rpm: Curl error (56): Failure when receiving data from the peer for http://public.dhe.ibm.com/software/server/powerfuncsim/p9/packages/v1.1-0/systemsim-p9-1.1-0.f22.x86_64.rpm [Recv failure: Connection reset by peer]
  [FAILED] systemsim-p9-1.1-0.f22.x86_64.rpm: Curl error (56): Failure when receiving data from the peer for http://public.dhe.ibm.com/software/server/powerfuncsim/p9/packages/v1.1-0/systemsim-p9-1.1-0.f22.x86_64.rpm [Recv failure: Connection reset by peer]
  Curl error (56): Failure when receiving data from the peer for http://public.dhe.ibm.com/software/server/powerfuncsim/p9/packages/v1.1-0/systemsim-p9-1.1-0.f22.x86_64.rpm

 [Recv failure: Connection reset by peer]

Oddly, this only happens with dnf. Using curl directly to fetch the
package works. Since the issue is isolated to http, let's just change
these links to https, which is probably a good idea regardless.
Signed-off-by: Reza Arbab <arbab@linux.ibm.com>

Testing on rawhide somehow vanished when we converted to github
actions. This patch cleans up the related CI files and re-enables it.
Signed-off-by: Frederic Barrat <fbarrat@linux.ibm.com>
Signed-off-by: Reza Arbab <arbab@linux.ibm.com>

Signed-off-by: Cédric Le Goater <clg@kaod.org>

openssl is needed by libstb.
Signed-off-by: Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
Reviewed-by: Dan Horák <dan@danny.cz>

Needed for the secvar unit tests.
Signed-off-by: Oliver O'Halloran <oohall@gmail.com>

Both F28 and Rawhide build their own dtc version. Rawhide was missing
the required build deps.
Signed-off-by: Joel Stanley <joel@jms.id.au>
Signed-off-by: Stewart Smith <stewart@linux.ibm.com>

ubuntu-latest was also missing clang, as ubuntu-latest is closer to
ubuntu 18.04 than 16.04
Signed-off-by: Stewart Smith <stewart@linux.ibm.com>

In today's lesson, Stewart learns shell.

Fixes: e101e85c

Reported-by: Joel Stanley <joel@jms.id.au>
Signed-off-by: Stewart Smith <stewart@linux.ibm.com>

Signed-off-by: Stewart Smith <stewart@linux.ibm.com>

At least on the IBM Travis Enterprise instance, we can now do
ppc64le builds!

We can only build a subset of our matrix due to availability of
ppc64le distros. The Dockerfiles need some tweaking to only
attempt to install (x86_64 only) Mambo binaries, as well as the
build scripts.
Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>
Signed-off-by: Stewart Smith <stewart@linux.ibm.com>

Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>

This adds support for writing all the public key and signature fields to the
container header, and for dumping the prefix and software headers so they may
may be signed, and for signing those headers with the imprint keys.
Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com>
[stewart@linux.vnet.ibm.com: fixup warnings&build, include openssl-devel in CI dockerfiles]
Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>

convert test cases to diff DTS rather than DTB.

This means we also have to build dtc on CentOS 7 to be able to run
the test suite.
Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>
[oohall@gmail.com moved the test cases into seperate patches]
Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>

Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>

Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>

Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>

Primarily this combats the long time it takes to build qemu in
our build scripts. Practically, cuts a couple of minutes from build.
Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>

This greatly simplifies the build process for travis, yet makes it more
powerful and increases coverage without increasing wall time to test.

Travis has the concept of a build matrix, and we want to ensure we continue
to build succesfully on a variety of platforms and compiler combinations.

We limit what we run on some OSs to conserve vital sanity.
Signed-off-by: Stewart Smith <stewart@linux.vnet.ibm.com>