meta-ti-bsp: mesa: drop unneeded bbappend

Latest TI graphics libraries for SGX and Rogue GPUs no longer include
Mesa pieces, but rather build on top of proper Mesa packages (although
patched). Remove local bbappend disabling GBM.

Bug-AGL: SPEC-4723

Change-Id: I8a4ba82d0e7540d6fe2da7efdcefab7a2dc77c6b
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28739
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

weston-ini-conf: Add grpc-shell-server to no-activate ini

This embeddeds the grpc-proxy configuration file into the no-activate
configuration file, rather than creating a new no-activate-grpc-proxy,
or no-activate-landscape-grpc-proxy.

The grpc-proxy.cfg file is just a rename of grpc-server.cfg from
meta-agl-demo/ tree, introduced with 1b347d8823, '[weston-ini-conf] Fix
dependency issue with grpc in meta-agl-core'.

Bug-AGL: SPEC-4776
Change-Id: Ie6183887cdb7b6e3f7cb431f01edb8da75e05946
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Suggested-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28738
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

files/group: add sgx group with static ID for new systemd

Yocto Project 4.0.9 now comes with systemd v250, which uses sgx group:

https://git.openembedded.org/openembedded-core/commit/?h=kirkstone&id=3fd47697df858d4093d9cb4c6a378fc07aa4d064

Note: here sgx is not related to Imagination PowerVR GPU, but rather
means Intel Software Guard Extensions:

https://en.wikipedia.org/wiki/Software_Guard_Extensions

Bug-AGL: SPEC-4768

Change-Id: I3f8656b5e859f1126388f52d9f8b54bfac0734a7
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28720
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Add templates for gitlab issues and merge requests

Notify users to use jira.automotivelinux.org and
gerrit.automotivelinux.org in the default messages.

Bug-AGL: SPEC-4774
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I05f485dd60d89839f6e64602b55f170fbbb58515
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28715
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

packagegroup-agl-core-devel: Add zstd

Add zstd as a development package, as it's required to decompress
coredumps on target with newer systemd.

Bug-AGL: SPEC-4736

Change-Id: I2dec559afd28c1b2c681ce4f918eeb640a79744a
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28707
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Convert AGLCI into AGL_FEATURE

Use AGL_FEATURES instead of DISTRO_FEATURES.

Change-Id: I9a866a4b921e2816613784768c60b874da28a16c
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28681
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

meta-agl-bsp: Add overrides to Kingfisher BSP changes

As was done in commit 32744858 for the plain h3ulcb/m3ulcb MACHINE
configuration, add rcar-gen3 overrides to the Kingfisher variable
tweaks to avoid unwanted side effects when building for other
MACHINEs when using multiconfigs.  This is needed to be able to
build the KVM demo image for h3ulcb-kf.

Bug-AGL: SPEC-4760

Change-Id: Ie52f0a4a586398875f88e558ef465162c9fdfec1
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28655
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

native-shell-client: update SRCREV

Update SRCREV to pick up:

c5a05b1 Bump agl-shell protocol version

Bug-AGL: SPEC-4735

Change-Id: Iaf48d6ef06d099d8193f0744b2c01428d630e927
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28654
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

applaunchd: bump SRCREV for "failed" signal handling

Bump SRCREV to include the latest fix for handling "failed" signal
when apps exit abnormally.

Bug-AGL: SPEC-4199

Change-Id: I6a4ce6755df65f43b53f61ca1873286f2218328e
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28646
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

bluetooth.conf: open secondary access to pipewire

with out having a secondary access to pipewire(export core), wireplumber creates
bluetooth device objects as well as access the existing pipewire objects using
the same pipewire connection, which can some times create race conditions.

Enable export core, so that wireplumber bluetooth monitor has access to both the
regular core and the export core.

Bug-AGL: SPEC-4750
Change-Id: I0db9b276ecd6972294c36722bf5a31c5ac00f186
Signed-off-by: Ashok Sidipotu <ashok.sidipotu@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28639
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

pipewire: Update pw to v0.3.67 and wp to v0.4.14

Highlights of Pipewire.
- The loopback module and other couples streams will now not randomly
  fail in some cases. (#3028).
- PipeWire can now generate a limits.d config file with our recommended
  settings for priorities and memlock.
- Add back the deprecated symbols but make sure a deprecated warning is
  emitted for them. This fixes compilation issues in bindings.
- Clear old buffer memory on ports to fix some SIGBUS errors.
- Fix a critical bug that causes audio distortion in some cases when using.
AVX2.

Highlights of Wireplumber.
- Added bluetooth SCO (HSP/HFP) hardware offload support, together with an
  example script that enables this functionality on the PinePhone.
- WirePlumber now maintains a stack of previously configured default nodes and
  prioritizes to one of those when the actively configured default node
  becomes unavailable, before calculating the next default using priorities
  (see !396).
- The libcamera monitor is now enabled by default, so if the libcamera source
  is enabled in PipeWire, cameras discovered with the libcamera API will be
  available out of the box. This is safe to use alongside V4L2, as long as
  the user does not try to use the same camera over different APIs at the same
  time.
- Added i18n support to be able to translate some user-visible strings.

Bug-AGL: SPEC-4732
Change-Id: Ie2f9cb99b4594d21e5c2acd092fe54e93d067410
Signed-off-by: Ashok Sidipotu <ashok.sidipotu@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28590
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-core/recipes-graphics/mesa: Backport a fix from 22.2.5

This adds
0001-virgl-don-t-a-use-staging-when-a-resources-created-w.patch which is
a backport from mesa 22.2.5 as a tentative fix for running on virgl on the x86
platform.

This issue seems have been fixed 22.2.4 and 22.2.5, but the original
change was initially quite a long time before in 22.0.X and we seem to
be using 22.0.3.

This also seems to affect Xen when updating it from 4.16 to 4.18.

Bug-AGL: SPEC-4724
Change-Id: I255e30d8e513b8f3bbfa720a24c1afcbd40af2c9
Reported-by: Rahul Kumar <Rahul.Kumar1@amd.com>
Tested-by: Rahul Kumar <Rahul.Kumar1@amd.com>
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28580
Tested-by: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-rcar-gen3/recipes-multimedia/gstreamer: Add gstreamer bbappends

This would fix fetch build failures with the gstreamer plugins which seems
to have been caused by a git to gitsm replacement in the original
recipes.

Bug-AGL: SPEC-4730
Change-Id: I4b1d700a6645d280b65f3f3202b76208d30061e7
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reported-by: Marius Vlad <marius.vlad@collabora.com>
Suggested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28583
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

agl-shell-activator_git: Bump SRCREV

This adds support for set_app_float, set_app_fullscreen and
set_app_normal for the gRPC interface.

In more detail this includes the following changes:

- d2dcfd079aa110 AglShellGrpcClient: Add set_app_fullscreen functionality
- 1542448f3084e7 src: add support for set_app_normal
- 5695439dc3b1a4 src: Add set_app_float request support
- 7d66c470049050 src: Fix iteration over actions

Bug-AGL: SPEC-4673
Change-Id: Ief168f7383f691271248234f68df7644b1b1057d
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28567
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-compositor_git: Bump SRCREV to latest

This SRCREV bump updates includes some minor fixes when hot-plugging the
connector, and includes set_app_float, set_app_normal and
set_app_fullscreen together with an implementation for deactivation of
windows using the gRPC API.

With this bump we also provide a versioned so libexec_compositor library
rather than a generic unversioned one.

In detail the following changes have been added:

- 4e4624dee9850b4a4e5 grpc-proxy: Add set_app_fullscreen functionality
- 9eb8ca6ac7473107ebe shell: Reset normal state when getting back to maximized
- 359a0612e48d7d21d52 protocol: Add set_app_normal request
- 4af44df30c1784a69b9 protocol, grpc-proxy: Add support for set_app_float
- 65fc5191f046ad8c7ba protocol/grpc-proxy: Add deactivate_app request
- 28ec0cff16d62260fb1 compositor: Added layout_save/layout_restore
- ee50083d93869aaa581 shell: Check for a valid ivi_surface
- 02fcb317161c08bcf02 shell: Check for invalid outputs passed on when activating
- d98b08f1fcb6ff6ccc7 compositor: Fix memleak when disabling the output
- 53a039ff1c4b05aaacc ivi-compositor: Add support for multiple app_ids
- ce8dd33f3762e0ec449 meson: Deprecate waltham and inform users of that
- 6fd11a88c4d3c82e33b meson: Bump to version 0.0.21
- 4003cfb04b7bae04c32 shell: Reset the area activation

Change-Id: I2a2ea18124a825e7e7709aab9c4a4285377a45b0
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28564
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Update scripts/run-yocto-check-layer

The added dependency to meta-oe masked the dependency issue. Remove it.

Bug-AGL: SPEC-4707
Change-Id: Ia9740769ea99fcd3c4ddeb66e497fc91ed9816e1
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28514
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Denys Dmytriyenko <denys@konsulko.com>

[agl-shell-activator] Decouple due to dependency on grpc

We also need to deal with DEPENDS and agl-shell-activator. The latter
is a pure grpc implementation, thus move it to a dynamic layer.

Bug-AGL: SPEC-4707

Change-Id: I308104b59333f69dfe416bd3721b11fb7e1b96c4
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28513
Reviewed-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

[weston-ini-conf] Fix dependency issue with grpc in meta-agl-core

grpc is not in the core layer but in meta-oe . Guard the dependency and only enable when
prerequisites are met. This also affects weston-ini-conf. We move this into meta-agl-demo.

Bug-AGL: SPEC-4707
Change-Id: Ia07cc8e32ac0c38586765985f367dae0cf8c429c
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28510
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Fix dependency issue with grpc in meta-agl-core

grpc is not in the core layer but in meta-oe . Guard the dependency and only enable when
prerequisites are met.

Bug-AGL: SPEC-4707
Change-Id: I922a846108ca13d8e6d50e79c3003b0b32a002a7
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28509
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

meta-agl-core: Centralize qtlocation tweaks

To avoid issues when combining the meta-agl-ic-container and
meta-agl-demo layers, move the meta-agl-demo qtlocation bbappend to
the pre-existing meta-qt5 dynamic-layers hierarchy in meta-agl-core.
This does have a minor side-effect of enabling more map plugins in
the QtLocation users in the meta-agl-ic-container guests, but seems
more robust overall with respect to future work on binary package
feeds.

Bug-AGL: SPEC-4703

Change-Id: I8244c7ac7a22b25d28da7b8ffbf2454b68bee591
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28473
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-agl-bsp: Fix rcar3 kernel module bbappends for linux-dummy

The usrmerge fixes added to the various rcar3 kernel bbappends turn
out to cause issues when using linux-dummy as the kernel as the
IC EG system containers do, add the required extra checking to avoid
issues.

Bug-AGL: SPEC-4703

Change-Id: I7749c9f921791a7c143a7003827939af64997a5c
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28472
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

bblayers.conf.sample: Add AGL_META_QT5 hook

Add AGL_META_QT5 to allow features to add meta-qt5 without duplicate
layer collisions.  This is needed for combining the agl-ic-container
and agl-demo features.

Bug-AGL: SPEC-4703

Change-Id: I8a7b0f35d4a59ffe1ba25c20d36887d3f4f1fc7e
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28471
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Prepare master for Prickly Pike

Update the distro manifest.

Change-Id: Ifbbab5b081f3de4e070aa3f106c46ff0656468df
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28459
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

weston-ini-conf/core.cfg: Bring in shell-ext-client

Rather than messing up the ini file, bring it in from the core
configuration file. This allows to start-up the gRPC proxy server at
start-up.

This is a follow from Revert "weston-ini-conf: Add agl-shell-grpc-server"
This reverts commit 2f40613cbf42fd378feea57ccefbb3215ecc1355.

Change-Id: I40ab339fe73efb07ac1e86e6778764a553a3cabe
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28441
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Prepare Optimistic Octopus Milestone 4

Update the distro manifest.

Bug-AGL: SPEC-4691
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I4bb2e97dc32c3da7e9d24c843e951a99383b4229
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28438
Tested-by: Jenkins Job builder account

qemu: add bbappend to tweak PACKAGECONFIG

Add a bbappend for qemu to tweak PACKAGECONFIG for target use to add
libusb support.  This is required for USB device passthrough for e.g.
touchscreen support.  Also enable libaio for potential performance
benefits and selinux support for investigation into leveraging it for
security improvement.

Bug-AGL: SPEC-4618

Change-Id: If9a52bad0657a04d7fc7da3ba15cd14be611ffd4
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
(cherry picked from commit cc422ba11f0a18b830422d41e47ba85481daa258)
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28420
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-agl-bsp: make sure weston user is in display group for rcar3

Add a meta-rcar-gen3 specific weston-init bbappend to add the
weston user to the display group.  This is preferable to unmasking
the bbappend in upstream meta-rcar-gen3, as we do not want any of
the other changes it contains (or may contain).  This change is a
bit of a stopgap required for running weston or agl-compositor as
the weston user without the agl-driver user session unit in e.g.
the agl-image-weston image or the KVM or IC host images.
Future work will try to align the required groups with upstream
systemd-udevd expectations.

Bug-AGL: SPEC-4618

Change-Id: I22e8aaa095114802242fb1ed150dec2a5055fda9
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
(cherry picked from commit c1b436f4882737ce0b9a95853954d0f4daab2d86)
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28419
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-agl-bsp: make meta-rcar-gen3 BBMASKs more specific

Update the BBMASK definitions for the rcar3 platforms in meta-agl-bsp
to include the meta-renesas/ component of the path so that they will
not mask out any of our files under meta-agl-bsp/meta-rcar-gen3.

Bug-AGL: SPEC-4618

Change-Id: I6434f54bb50784c0673b54648165e0c5118f0c7e
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
(cherry picked from commit b5001a4a5abbe8e7944446025dd63be725c491e4)
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28418
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

systemd: enable iptc PACKAGECONFIG

Add iptc to our systemd PACKAGECONFIG tweak so that bridging support
will be available in systemd-networkd.

Bug-AGL: SPEC-4618

Change-Id: I15d003ad69d6ca59613391beb2e78e3c5fe804cc
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
(cherry picked from commit 69e119b969baa88594b3264709e21037aa783bb7)
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28417
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

connman-conf: ignore tap interfaces

Add tap* interfaces to the list of interface names that connman
should ignore so that it will not conflict with the tap interfaces
qemu may set up.  This seems safe in general, as a usecase where it
makes sense for connman to assign an address to a tap interface is
not immediately obvious.

Bug-AGL: SPEC-4618

Change-Id: Ic9185e4f93a44c2d9e4265513afc04a2ec4c3d4a
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
(cherry picked from commit 29afa2ad9f9d04477c7a80d3a35e83fb6e5227dc)
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28416
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

weston-ini-conf: make remote output configuration dynamic

Rework things to also update the remote output configuration
fragment based on the value of TRANSMITTER_OUTPUT_HOST.  This
helps when using different IP addresses for e.g. the KVM demo
configuration.

Bug-AGL: SPEC-4618

Change-Id: I198ff3e6a30b3968b4749998354a39325c088933
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
(cherry picked from commit 39def8ebd98c98e67304517ab118f9bde4cdf8e7)
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28415
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Revert "weston-ini-conf: Add agl-shell-grpc-server"

This reverts commit 2f40613cbf42fd378feea57ccefbb3215ecc1355.

Reason for revert: This breaks the runtime with:
Jan 25 04:07:51 qemuarm agl-compositor[456]: malformed section header: [shell-client-ext]\ncommand=/usr/lib/agl-compositor/agl-shell-grpc-server\n
Jan 25 04:07:51 qemuarm agl-compositor[456]: [04:07:51.432] fatal: error opening or reading config file '/etc/xdg/weston/weston.ini'.

Change-Id: I09f74614a9d7ec55550d46224ec1c1b96528eb0b
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28354
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

weston-ini-conf: Add weston-ini-landscape-no-activate

This change adds an option to use a weston.ini config in landscape mode
with automatic activation disabled by default, to be used by wam.

Bug-AGL: SPEC-4647, SPEC-4528

Signed-off-by: Roger Zanoni <rzanoni@igalia.com>
Change-Id: Ibaeefc4cae07b3f4cb4bbc619bb068fd259d81fc
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28371
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Prepare Optimistic Octopus Milestone 3

Update the distro configuration.

Bug-AGL: SPEC-4677
Change-Id: If68d70f93ec35f9f921083f04779216ea33ca6e0
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28413
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

weston-ini-conf: Add agl-shell-grpc-server

Now that we have gRPC server implementation start the agl-shell-grpc
server by default.

Change-Id: I1d00b29306f90ababc5277ecb71a101eea1a46ca
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28364
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-shell-activator_git: Bump SRCREV

This SRCREV bump adds gRPC support and removes agl-shell-desktop
support.

Change-Id: I946a9563321a6d9b5c756a364726fd3037ba5b63
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28363
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-compositor_git: Bump agl-compositor SRCREV

This SRCREV bump includes the addition of agl-shell-grpc-server, an
interface to agl-shell-desktop protocol, but instead of using wayland
connection it uses Google's RPC. For the time being there's only a
client using it, and that is agl-shell-activator.

The plan is to phase out agl-shell-desktop entirely and use this
interface as a way to perform additional window management.

Further more this bump also includes a couple of connector hot-plug
fixes and renames hide-cursor to disable-cursor entry section to better
reflect its name.

In more detail the following changes have been added:

- 7ef34e0c465a7596 shell: Verify agl-shell version for bound_ok/bound_fail
- c01b90ece22cc587 shell: Add fallback agl-shell version 1
- 0907e87f1576f8ad input: Fix minor issue while reporting disable cursor
- c9d3edb4ee23a563 input: Rename hide-cursor to disable-cursor
- 76fa1b83638310c2 src: Verify if the output is present
- 79eac214d4866d84 src: Further hotplug connector fixes
- 59375972f5642b7e grpc-proxy: Init gRPC
- 0b766cf978b8b100 shell: Not not override the agl_shell interface resources
- c42f50b567a0d5ad shell: Add a wrappers for sending events with agl-shell
- 05bb0384732480a9 compositor: Allow to start other clients
- 14a1292a39377472 agl-shell.xml: Introduce a new interface
- 33997a7c96838795 compositor: Handle output destruction deferral

Change-Id: I6df1d7fcf6d5d3abcc3c1c2b8a0cf820368a26de
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28318
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Exempt nfsroot and nbdroot from systemd-networkd

We need to exempt these in our wired configuration is using nbdroot or nfsroot.

Likewise we can relax the connman settings again.

Change-Id: I10fb9c97db1aba04941bf33f3e9d8a06a963cfac
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28406
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

weston/0001-simple-touch-Add-maximized-fullscreen: Add maximized/fullscreen for simple-touch

simple-touch wasn't able to resize itself to max/fullscreen to this
patch adds support for that. It is quite useful to have this client
test out touch support, so we can re-use it whenever, for instance in
the virtio aarch64 machine to test if we have indeed or not a
touchscreen device.

Upstream-Status: Submitted
See: https://gitlab.freedesktop.org/wayland/weston/-/merge_requests/1095

Bug-AGL: SPEC-4656
Change-Id: I974b4c5ea8a85f1b3efe4a114f345de948441300
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28314
Tested-by: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

files/group: add render group with static ID for new systemd

Yocto Project 4.0.6 now comes with systemd v236, which uses render group:

https://git.openembedded.org/openembedded-core/commit/?h=kirkstone&id=f902338f312cf5c55b2857e5c7e980cb11a26a9c
https://git.openembedded.org/openembedded-core/commit/?h=kirkstone&id=ba1db7f9189526b02e3d75d375ece53953c2e942

Bug-AGL: SPEC-4668

Change-Id: I473644f4b9e57663f036b43a48a8319e4d664d65
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28369
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

virtualization-layer/recipes-graphics/mesa: Workaround for virgl

This is a just a workaround for the time being, to avoid some graphical
artefacts seen only when booting up for the first time the image.

Introduced with https://gitlab.freedesktop.org/mesa/mesa/-/commit/6f68cacf619f7f13bc870355709224c1f3e9bbd8.

Bug-AGL: SPEC-4651
Change-Id: Ie2ac5d170790293dc5860d5f27f26ee811f4a4b5
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28300
Reviewed-by: Scott Murray <scott.murray@konsulko.com>
Tested-by: Jenkins Job builder account

systemd-conf-canbus: Add link configuration

Add a .link file to set the transmit queue length to 1000 for physical
CAN devices.  This matches the default used for vcan devices, and in
testing fixes the transmit buffer overflows when running the simulator
script against an interface.

Bug-AGL: SPEC-4652

Change-Id: Icb190cdcbda9b09e337789d3a88e39f7288f34eb
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28291
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Prepare Optimistic Octopus Milestone 2

Update the distro configuration.

Bug-AGL: SPEC-4650
Change-Id: Ibf5234fb83798df32e4b0f9eccb19419a0740f82
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28298
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

linux: config: add systemd sandboxing fragment

Add a kernel config fragment that enables additional features needed for
systemd sandboxing support, using Classic BPF (Berkeley Packet Filter)
kernel framework. Eventually this will be extended with more advanced
features using eBPF (extended BPF), BTF (BPF Type Format) and LSM (Lunux
Security Module) frameworks.

Bug-AGL: SPEC-4627
Change-Id: I9ed21c654b2e0298be66073750dab6920e49b0c9
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28297
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

linux: config: move CONFIG_AUDIT* into own fragment

Enabling CONFIG_AUDIT* is needed by auditd and should be safe whether systemd
is used or not and is not specific to SELinux.

Note that systemd README has this old caveat mentioned

| Note that kernel auditing is broken when used with systemd's
| container code. When using systemd in conjunction with
| containers, please make sure to either turn off auditing at
| runtime using the kernel command line option "audit=0", or
| turn it off at kernel compile time using:
|   CONFIG_AUDIT=n
| If systemd is compiled with libseccomp support on
| architectures which do not use socketcall() and where seccomp
| is supported (this effectively means x86-64 and ARM, but
| excludes 32-bit x86!), then nspawn will now install a
| work-around seccomp filter that makes containers boot even
| with audit being enabled. This works correctly only on kernels
| 3.14 and newer though. TL;DR: turn audit off, still.

But that seems to only apply to nspawn usage in some specific cases and on
older kernels, plus there are even runtime workarounds available when needed,
so let's enable it by default.

Bug-AGL: SPEC-4627
Change-Id: I5fcd58ba41929d2966fadea27b6751e4fa6589c9
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28276
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

linux: config: enable kernel settings that systemd requires

Add kernel config fragment with all settings required by systemd.

Some more generic settings need to be explicitly set here as well to satisfy
necessary dependencies from systemd settings down the tree, otherwise some
BSPs would break.

Bug-AGL: SPEC-4627
Change-Id: I7a2796ea65da58a4f1fa0556cd94df67e7df7db9
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28275
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-app-framework: Add Flutter app icon installation

Add logic to agl-app.bbclass to install an icon for Flutter apps if
there is one present as ${AGL_APP_ID}.svg in a "package" directory
in their source repository.

Bug-AGL: SPEC-4634

Change-Id: If48cb5b085f74a713e293d6554c45d265f69f686
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28155
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Update cluster network configuration

Update configuration files as appropriate with the IVI board as
192.168.10.2 and the cluster as 192.168.10.3.

Bug-AGL: SPEC-4632

Change-Id: Idd41daa75fc6258d07d8f654848e78ced85dff35
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28154
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

systemd-conf-canbus: Add FD configuration

Add canbus-can-fd.network configuration that can be selected via
CANBUS_NETWORK_CONFIG.

Bug-AGL: SPEC-4633

Change-Id: Ic662be3e991910a4b35e114f144fe399a88ce477
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28153
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

libsdl2: PACKAGECONFIG tweaks

Add a couple of bbappends for libsdl2 to tweak its PACKAGECONFIG,
based on Panasonic QEMU+KVM documentation.

Bug-AGL: SPEC-4618

Change-Id: I7ceb4e46faa88f09311ad359a3b0b13a462f6cb2
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28192
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account

linux-yocto: Rework virtio-aarch64 kernel configuration

Changes:
- Appending the virtio kernel metadata to SRC_URI in the linux-yocto
  bbappend was having the side-effect of overriding a lot of the
  changes from the other AGL configuration fragments.  To avoid this,
  prepend the addition to AGL_KCONFIG_FRAGMENTS instead.
- Add the HDA sound driver config fragment for virtio machines to
  allow using the QEMU emulation.
- Add config fragment for the virtio kernel to ensure that
  CONFIG_DRM and the fbdev emulation are on.
- Add config fragment for the virtio kernel to turn on CONFIG_PCI,
  as there are some peripherals that we may need to expose to guests
  with it.  This and the DRM changes will be rationalized in the
  metadata repo once it's clear we do need them.

Bug-AGL: SPEC-4618

Change-Id: I453b84d9840498772afd01404dd374f5c1d245da
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28191
ci-image-build: Jenkins Job builder account
Tested-by: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

linux: config: move BBE-specific fragment from meta-agl-core to meta-agl-bsp

Commit d009fa0c42042a0b7d069779852953621e46469b as part of SPEC-4156 added a
kernel config fragment to disable CONFIG_RELAY. Since this fragment is only
applied to BBE, there's no need for it to reside in meta-agl-core and can be
moved to meta-agl-bsp/meta-sancloud.

Bug-AGL: SPEC-4156
Change-Id: I5da2632d6eb00bbf99ddb48cef861564d2ce868d
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28203
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

linux-agl-config: correct override syntax for virtualmachine

Commit dd6fc5dcaa0a027b7651bb365d5dd0f623498f8f as part of SPEC-4052 converted
all overrides to the new syntax, but missed the one used for "virtualmachine"

Bug-AGL: SPEC-4052
Change-Id: I1905c7e3b70b05c4ef06d8b4f240d0e144587fab
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28204
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Prepare Optimistic Octopus Milestone 1

Update the distro configuration.

Bug-AGL: SPEC-4616
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: Iba55e4e0e51bfec2a1949a0fc9775760a6a8732b
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28177
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

meta-agl-core: systemd: Disable `BitRate` setting for `can*` network for VIRTIO.

VIRTIO CAN [1] does not support bitrate configuration, it assumes
bitrate configuration is done on backend.

Fixes systemd-networkd failure:

    can0: Failed to set CAN interface configurations: Operation not supported

File `canbus-virtio-can.network` is copied from `canbus-can.network`
with `BitRate=` setting removed.

v2: rework patchset to use own systemd-conf-canbus package to
    avoid changes in main systemd package.

[1]: https://lists.oasis-open.org/archives/virtio-dev/202208/msg00159.html

Bug-AGL: SPEC-4597

Change-Id: Idb132203501bb99103e76098eea3bb6394b645da
Signed-off-by: Vasyl Vavrychuk <vasyl.vavrychuk@opensynergy.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28104
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

weston-ini-conf: add virtio-aarch64 configuration

Add a WESTON_DISPLAYS tweak for the virtio-aarch64 machine so the
demo platform image gets the required weston configuration when
built for it.

Bug-AGL: SPEC-4618

Change-Id: I90974a25d51fc3b4ad3d8e9450d98f8ae82f759a
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28187
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

native-shell-client: Add recipe

Add recipe for native-shell-client simple agl-shell protocol client.
It can be used for testing agl-compositor and also enables using it
in simple usecases such as displaying the output from guest VMs with
QEMU+KVM.

Bug-AGL: SPEC-4618

Change-Id: I16b7c8b703b2aa3c875b7ffd78b24021eafd3a7f
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28186
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-agl-bsp: Add overrides to rcar3 BSP changes

The various configuration changes done by the include files for the
rcar3 machines in meta-agl-bsp prove problematic when using a rcar3
machine in a multiconfig configuration with different machines in
other configs.  This can potentially be avoided in the future with
a significant rework of the local.conf generation in aglsetup.sh,
but for now, too avoid issues, add rcar-gen3 or h3ulcb overrides to
the variable changes in those files.  That ensures that the changes
will only apply to the specific machine being targeted.

So far this has only been tested with the h3ulcb, it is likely that
more fixes are required for other rcar3 machines, as well as the
machines from other BSPs.

Bug-AGL: SPEC-4618

Change-Id: Ifa6735337e673a92c56d5457b97d09a5b86cc0e1
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28185
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-compositor: RDEPENDS fixes

Changes:
- Add the required xkeyboard-config RDEPENDS to the agl-compositor
  recipe to avoid surprises if nothing else that pulls that in is
  in an image.
- Move the agl-compositor RDEPENDS on polkit directly into the
  recipe instead of getting indirectly via a meta-oe presence
  driven addition to packagegroup-agl-graphical-weston.  This is
  more correct, avoids surprises if that packagegroup happens to
  not be used, and will work better with a binary packagefeed.
  The RDEPENDS is still conditional on the presence of "polkit" in
  DISTRO_FEATURES, which seems a reasonable alternative to using
  dynamic-layers.

Bug-AGL: SPEC-4619

Change-Id: I595f55a9d598b4a15fe345f50d1a7a203616dd15
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28184
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-compositor: Bump SRCREV

Bump agl-compositor SRCREV to pick up:

adf173e layout: Allow background surface roles (to) be activated
77d94d8 agl-shell: Add support for defining an activation area

Bug-AGL: SPEC-4594

Change-Id: I4d003c4ce26fe3e6b3e3fe07b845538a5a9e508c
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28181
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Enable qemu and kvm user and group

This supports the meta-virtualization layer.

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I919f9669c0c9aff83d6f0b961d892eb6077902a6
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28055
Tested-by: Jenkins Job builder account

Exempt also nbd.server in connman service

This adds a check for the nbd.server kernel commandline and prevents
connman service from being started.

If nbdroot is set and the networkinterface is resetup, then the rootfs will fail.

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: Ic15fade35fd2c47b828e51692609d438225ef739
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28054
Tested-by: Jenkins Job builder account

meta-agl-bsp: Fix rc.pvr.service dependency for meta-rcar-gen3

Undo the out of date tweak of rc.pvr.service to make it a dependency
of weston@.service done in meta-rcar-gen3's gles-user-module recipe.
For now, just tweak the dependency back to weston.service in our
bbappend in meta-agl-bsp, this can be removed when meta-rcar-gen3
includes a fix.

Bug-AGL: SPEC-4607

Change-Id: I16ef13d2af9b2ed485ce8b98501f39bf96aba3e2
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28133
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-agl-core-test: delete the layer of meta-agl-core-test

'meta-agl-core-test' is no longer maintained. Some useful test sets
will be moved to 'meta-agl-devel/meta-agl-test' later.

Bug-AGL: SPEC-4345

Signed-off-by: duerpei <duep.fnst@fujitsu.com>
Change-Id: I5939157618f9817a06ef5e023b6e8e3ad5fc59af
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28058
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-compositor_git.bb: Bump SRCREV

This SRCREV bump update brings in a helpful way to designate a certain
area such that the compositor would use it when activating applications,
rather than using the entire output. When not having panels the
background surface would cover the entire output, making it
impossible to keep visible areas of the background surface and, in
the same time, display another's application surface.

While the solution would be use panels specifically designed to handle
this case, that's not always possible.  We circumvent that by having this
area specified manually in this update, with a direct follow-up to have
a request in the agl-shell protocol that specifies that area
programmatically.

Besides that change, a few more changes made it through, all of them being
added from upstream and adapted from weston to the AGL compositor,
mostly related to how we handle signals.

In detail the following changes made it through since the last SRCREV
bump update:

- 924473ef016b Add manual activation area configuration option
- 897449688a9c compositor: Use sigaction to trap SIGINT
- e8761762fcd0 compositor: Add missing SIGCHLD handler
- 315496ddbb9f compositor: Stop trapping SIGQUIT
- f980c0d90329 shell: Rewrite client_exec as client_launch
- edb6d397a4c6 process-util: Move Xwayland fork helpers to shared
- 86146a4e7455 shared: add str_printf()
- 1b93121761e1 shared: introduce os_fd_clear_cloexec()

Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Change-Id: I23e0aba9f2b77cab4fe81754a8feaeebb7cea340
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28056
ci-image-build: Jenkins Job builder account
Tested-by: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-app-framework: applaunchd: run under a separate user

Since applaunchd needs to start/stop systemd units, the user is granted
elevated systemd unit-management permissions via PolKit policy. If applaunchd
and all the apps run under the same agl-driver user, all the apps have these
elevated systemd permissions too. Separating them into different users allows
removing elevated systemd unit-management permission from individual apps, but
leaving such permission for applaunchd, which enhances overall security of
the system.

- add new applaunchd user and group
- switch applaunchd (gRPC) service to be started under new user
- since HTML5 apps haven't migrated to gRPC yet and still use D-Bus API,
  applaunchd-dbus gets activated by agl-session and runs under agl-driver
- temporarily add agl-driver user into the applaunchd group and switch
  PolKit policy to check for applaunchd group, instead of the user
- once D-Bus API is completely deprecated, agl-driver user can be removed
  from applaunchd group

Bug-AGL: SPEC-4579
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Change-Id: I75384177578bba6cb458a81df6a9dc1738c972e0
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28039
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Update bbe machine template for kirkstone

The meta-ti layer has now been split into two sub-layers so we need to
update BBLAYERS.

Signed-off-by: Paul Barker <paul.barker@sancloud.com>
Change-Id: Iacb6940d55cb4c8dc60b3caae124cd2cd3295abe
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28042
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Revert "meta-agl-bsp: meta-sancloud: Revert problematic kernel commit"

This reverts commit a12a83ebdfcd4287264e50edf3b11a156f418ae9. The patch
is no longer needed as the kernel version used by linux-bbe has been
updated.

Change-Id: I2ea6fd05b99018517fb2e1f3f03153dfd4ccd0e8
Signed-off-by: Paul Barker <paul.barker@sancloud.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28043
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

weston-ini-conf.bb: Change from append to an inline edit

We don't really support section entries with the same name, so rather
than appending a new key entry value under the same section, use sed to
edit the configuration file in place.

Fixes 6a8a33f99a66ae1

Bug-AGL: SPEC-4528
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Change-Id: I12b982dd7e6dd8d11e5fb373c8cba0b1e762c485
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28019
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Add openssh-sftp-server when agl-devel is on

For simplified development workflows on newer host distros add the sftp server.

Bug-AGL: SPEC-4443
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I580e5d342fb6afb286b00d41b03c98a9b936160f
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/28018
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>

virtualization/linux-yocto: Support linux-yocto-dev for VIRTIO.

Bug-AGL: SPEC-4453

Change-Id: Id4dd3c3543dedf15cf09956414f32face685e498
Signed-off-by: Vasyl Vavrychuk <vasyl.vavrychuk@opensynergy.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27881
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

virtualization/linux-yocto: For kernel metadata use git repository instead of local files.

This will allow using branches for supporting multiple kernel versions
more easily.

Note, that BSP description root file virtio-aarch64-standard.scc has to
be kept local withing a recipe. This is needed to add this scc file
explicitly to SRC_URI to have AGL VIRTIO patches applied during kernel
recipe build.

As explained in [1, 2], Yocto kernel metadata is commonly used for two
purposes:

1. To construct Yocto kernel git by committing patches listed in scc
files.
2. To configure Yocto kernel during Yocto build.

When scc file is not explicitly added to SRC_URI, then patch commands
will be ignored during Yocto build because it is assumed that patches
are already pre-applied during Yocto kernel git tree construction.

But, there is not AGL Linux kernel tree, only a repository for AGL
kernel metadata (this one). So, patches from this metadata repository
have to be applied during kernel recipe build.

On the other hand, to ignore patches from YP kernel metadata (which are
already pre-applied), standard.scc is included with `nopatch` keyword.

[1]: https://www.yoctoproject.org/pipermail/yocto/2019-October/046986.html
[2]: https://docs.yoctoproject.org/kernel-dev/maint-appx.html

Bug-AGL: SPEC-4452
Change-Id: Idde8e507eb18fa26e6a5b84ab8443576badb58bf
Signed-off-by: Vasyl Vavrychuk <vasyl.vavrychuk@opensynergy.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27878
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

weston-ini-conf: Add weston-ini-config-no-activate

This patch adds a way to tick dynamically activate-by-default to false,
and provide a safe migration towards disabling by default activation
entirely.

We do this with just only the Qt toolkit and will proceed with
WAM/chromium once that has support as well for this.

Bug-AGL: SPEC-4528
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Change-Id: I3573ea92d3ea865db223bd01e58b9ec202cfa7ae
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27990
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-compositor_git.bb: Bump SRCREV to grab latest changes

This SRCREV bump update for the AGL compositor includes two new protocol
updates, one that adds two new events, specifically bound_ok, bound_fail
which would allow clients to determine if they're in charge of managing
panels and background surfaces. The other protocol update fixes an issue
with activation by default of applications but also paves the way to
move out bits from the agl-shell-desktop protocol to just the agl-shell
protocol.

Note that the shell client supporting the latest change of the protocol
will need to add at least add stubs for the v2 of  the protocol, even if
v2 isn't required to be supported at all. Updates to version 3 of the
protocol will be required once we'll switch out from activation by
default from true to false and finally remove support from the
compositor entirely and let the shell client be the one in charge
for activation.

Additionally, this bump includes a few fixes, most notable handling
remote surface roles much better, including migration, in real time of
applications from one output to another, making possible a
back-and-forth movement of applications.

In more detail the following changes have been included:

- d08a5b2010f6e6 desktop: Do not attempt to send terminate event
- 0512e7251611e7 protocol/agl-shell.xml: Add an app_state event -- app state notification
- bb730ca304a5f6 layout: Handle dynamic application/surface movement between outputs
- b92397ef12626a shell: Remove the black curtain installed on outputs
- 372eb222b17bbc layout: Detect when an application should be migrated to other outputs
- 39c91d5ccae3b6 desktop: Avoid sending the dimensions for the first output
- a99d56dad0ad4a layout: State explicity the output
- fc783c19e6f6b9 layout: Use view's mapping once we placed the view in the hidden layer
- e1b15f95e834ac desktop: Install a black background for REMOTE roles
- bb79d12c92fa6e desktop: Include REMOTE role in initial configuration
- 3e72564852a6f3 agl-shell: Add bound_ok and bound_fail events and a default destructor

Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Change-Id: I25c53e9d69270651cd40c7ee9ec3edce28f899a6
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27989
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-app-framework: applaunchd: update for gRPC addition

Changes to facilitate building gRPC enabled versionm of applaunchd:
- Bump SRCREV to pick up gRPC changes
- Add required protobuf and gRPC dependencies to DEPENDS
- Add new systemd unit for standalone gRPC API daemon

Bug-AGL: SPEC-4559

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: I21778f27b2eabd952e983b4571de05ad5d6c5af2
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27984
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Change master branch name to octopus

Long live the new codename 'Optimistic Octopus'.

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I1f12f334a2082ffa813cb453aa976ef5f995732c
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27998
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

meta-agl-bsp: arm-trusted-firmware: Change the way how RCAR_BL33_EXECUTION_EL is set to not conflict with other layers.

Replace '0001-Boot-Normal-World-in-EL2.patch' which conflicts with:

    meta-agl-refhw/meta-agl-refhw-gen3/recipes-bsp/arm-trusted-firmware/files/0001-Boot-Normal-World-in-EL2.patch

Bug-AGL: SPEC-4532
Change-Id: Ia0291030748e7c7c51c4a706df1994275dffcdf7
Signed-off-by: Vasyl Vavrychuk <vasyl.vavrychuk@opensynergy.com>
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27938
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

weston_10.0_aglcore.inc: Update wl_output to version 4

This allows clients to query the output name and description name as
seen by the compositor. Previously this was only possible only with
xdg_output_manager extension but a recent update to the core wayland
protocol allows us to do just that.

Patch is posted upstream
https://gitlab.freedesktop.org/wayland/weston/-/merge_requests/987, but
will take some time to get in, as we're in the process of a release.

Bug-AGL: SPEC-4530
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Change-Id: I709b941a220e9906078944ee585435df7141d448
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27949
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

recipes-graphics/wayland/weston: Add tile orientation states

This was recently integrated into libweston 11 pre-release, and should
be removed once yocto updates its libweston version to at least 11.

For the time being we'll rely on these to have split type of windows.

Bug-AGL: SPEC-3906
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Change-Id: I7bc5caa6126d36d843d0f00cde56c020fa3f97dc
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27906
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

qtbase: Add backported patches for OpenSSL 3 support

To make QSslSocket work when building with OpenSSL 3.x, add two
backported patches pulled from the v5.15.3-lts-lgpl branch of the KDE
repo:

https://invent.kde.org/qt/qt/qtbase

This appears to be the minimal fix for e.g. QtLocation's SSL usage.

For more information on the KDE Qt5 patch collection, see:

https://community.kde.org/Qt5PatchCollection

Bug-AGL: SPEC-4395

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: I0bc3fe7c0726aaea71a2c162db040e57ac92a9db
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27902
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

[RCAR] Update kernel-module-vspm-if recipice name

* The last update of RCAR BSP has change the recipes name of the recipes kernel-module-vspm-if.
meta-agl must be updated too.

Bug-AGL: SPEC-4517

Signed-off-by: Ronan Le Martret <ronan.lemartret@iot.bzh>
Change-Id: I02f978c2ddca7e5a2d12e25145ea1cfad1be0a25
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27868
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Revert "meta-rcar-gen3: workaround recipe incompatibilities with YP 4.0.2"

This reverts commit d60a670349027852e93d006114b82a82cff5f27a.

Bug-AGL: SPEC-4517
Signed-off-by: Ronan Le Martret <ronan.lemartret@iot.bzh>
Change-Id: I2c8cffa37a99cefa80510998aae1920231006090
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27867
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Prepare Nifty Needlefish Milestone 3

Update the distro manifest.

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I8899b1140ddc2e12a025c2ba537852420dd6aedd
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27864
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

meta-app-framework: update Flutter app template

Update systemd template unit for Flutter based applications for the
embedder binary rename (to flutter-auto) and a required rename of the
application id command-line option (to --xdg-shell-app-id).

Bug-AGL: SPEC-4485

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: Icb03775f379929a852d3b270d52b3e88277aa3cc
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27862
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
ci-image-boot-test: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Add empty for append syntax

Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com>
Change-Id: I3a67f2dca0148be04d96e5261a4bef4030e93fbf
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27852
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Prepare Nifty Needlefish Milestone 2

Update the distro configuration.

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: Id87aff77dff68ff0bdd8fdac067ad0e7a40a38db
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27849
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Fix a dependency issue when building the SDK

When using -c populate_sdk, then the -dev packages are installed.
There is a hard dependency of the -dev package on the  package.
As we have multiple subtypes here and switch using ALTERNATIVES, this
collides in this corner case.
Fix it by not creating a -dev package in the first place as
it is not needed here anyway.

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I21326c9edc5cb7571ed94593eae1075cf56353db
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27841
Reviewed-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

meta-app-framework: add Flutter app template

Add a systemd template unit for Flutter based applications to the
applaunchd recipe.

Bug-AGL: SPEC-4466

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: Ia7cb24d27beebf7c7e4bcfb7a256bd45ffa432ce
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27838
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
ci-image-boot-test: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-app-framework: Update app template scheme

Changes to support the move to systemd unit based app enumeration in
applaunchd:
- Bump applaunchd SRCREV to pick up enumeration changes.
- Tweak the polkit rule to match agl-app* instead of agl-app@*
  to allow more flexibility with respect to different app templates.
- Tweak the Description field definition in the agl-app service
  template to just use the instance name, as that field is now used
  for the application display name by applaunchd.
- Add a agl-app-web service template for web apps.
- Add a agl-app.bbclass for use in application recipes to simplify
  installation of the now required systemd template instances and
  potential generation of override files to tweak application
  configuration.
- Split the agl-app and agl-app-web templates into their own packages
  in the applaunchd recipe so they can be depended on by applications
  as required.
- Move applaunchd installed systemd units and override files to
  /lib/systemd/system since that matches the upstream recommendation
  for units installed as part of the system installation.

Bug-AGL: SPEC-4466

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: I32ff6c9624850662856b79a2b14b33a05e7f9a65
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27835
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jose Dapena Paz <jdapena@igalia.com>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-agl-bsp: Pin i.MX platform kernels to 5.15 LTS

The recent bump of meta-freescale with the kirkstone 4.0.2 upgrade
brought an upgrade to 5.18 in the linux-fslc kernel, which breaks
sllin compilation.  Tweak the i.MX6 and i.MX8 machine templates to
use the 5.15 linux-fslc-lts kernel, which matches linux-yocto in
poky and seems a better choice going forward with kirkstone.

Bug-AGL: SPEC-4501

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: Ib75d8c844301c5ac902e18d02ff8ac6176f614c7
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27842
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

meta-netboot: Add SELinux support

Changes:
- Add logic to init.sh to handle autorelabeling the root filesystem
  if it is tagged as requiring it.  In practice this should only be
  required when booting images built on hosts that have xattr support,
  or if relabeling is manually triggered on subsequent boots.  There
  was a stated goal of avoiding the reboot from the later userspace
  handling of autorelabeling in CI, so this hook aims to enable that
  for the non-xattr build host corner case.
- Add a resolv-conf-relabel recipe that installs a systemd unit to
  relabel /etc/resolv.conf when netbooting.  This is required because
  the file always gets modified inside init.sh, and it does not seem
  worthwhile to always do the extra policy load required to relabel it
  in the initramfs.  This may need to be revisited if it proves
  difficult to handle denials in early booting when netbooting.
- Add the required extra packages for relabeling to IMAGE_INSTALL.

Bug-AGL: SPEC-4332

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: I26b27c1cea68a029264352bd206c160cac3d451e
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27791
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Add SELinux feature

Add agl-selinux feature to enable SELinux support.

Notes:
- SELinux is in permissive mode by default for now, and using the
  targeted policy by default.
- The linux-yocto specific bbappend in meta-selinux is masked out in
  favor of adding a more universal kernel configuration fragment with
  AGL's own scheme.
- SELinux specific recipes and bbappends are added via a meta-selinux
  dynamic-layers addition in meta-agl-core to keep using meta-selinux
  optional.  This will avoid issues with the Yocto autobuilder testing
  of meta-agl-core.
- To avoid the effectively hard-coded autorelabel on first boot, a
  bbappend is added to the selinux-autorelabel recipe to remove the
  flag creation.  In the off chance that a build happens on a filesystem
  without xattr support, the logic in the selinux-image bbclass will
  still touch the /.autorelabel flag and trigger relabeling.
- A systemd unit and script are added with a new systemd-selinux-relabel
  recipe to handle relabeling of some systemd generated files that do
  not get handled during root filesystem construction.  Some of these
  can be addressed by some upstream tweaks, but /etc/machine-id will
  always need special handling unless there is a shift to using
  read-only or stateless root by default.  With this workaround we still
  avoid doing a full relabel and reboot on first boot, which helps
  simplify CI.

Bug-AGL: SPEC-4332

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: Ibf469e11eb3a67709074cc6794b3d12cd5071a90
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27790
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

Fix reproducability issue reported by YP autobuilder

The main issue was the rewrite of CFLAGS that resulted in missing flags,
namely the DEBUG_PREFIX_MAP.

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: Ie4f939f4cb17ab13c6dc59b8d4c122f86d26b006
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27781
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Prepare Nifty Needlefish Milestone 1

Update the distro configuration for Nifty Needlefish Milestone 1.

Bug-AGL: SPEC-4476
Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: Iac9f7cfc57f83bdca34f752d2345b8f4d8aa7074
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27769
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account

Add feature for SPDX SBOM generation

We enable the built-in features of YP in kirkstone
to create an spdx file that can serve as SBOM.

Bug-AGL: SPEC-4384

Signed-off-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Change-Id: I98907fc07aee8c6eefbb6f0e12d30583268832d7
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27694
Tested-by: Jenkins Job builder account

meta-rcar-gen3: workaround recipe incompatibilities with YP 4.0.2

This adds a workaround for the strictly versioned gstreamer bbappends
until the BSP gets updated to be compatible with 4.0.2.

Bug-AGL: SPEC-4473

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Change-Id: Ie25b18779ac6fdb3efd9102317955342bd8e58af
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27766
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

applaunchd: update and install agl-app@ template and sandboxing configs

The new applaunchd adds systemd_manager that allows launching apps as systemd
services in a sandboxed environment. And dbus_activation_manager is deprecated.

* Update SRCREV for the new code
* Bump version to indicate a major change
* Install supporting config files
* Add build dependency on systemd
* Add runtime dependency on polkit rule to manage agl-app@ services

Bug-AGL: SPEC-4466
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Change-Id: I01b0247d18be8d97b4ea2866d161cffbda8f9155
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27752
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Reviewed-by: Scott Murray <scott.murray@konsulko.com>
Tested-by: Jenkins Job builder account

polkit: add rule to allow agl-driver to control agl-app@ systemd services

Bug-AGL: SPEC-4466
Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Change-Id: I8007aacc12f8b6bdfbca660c994d321ef1b5eca7
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27751
Reviewed-by: Scott Murray <scott.murray@konsulko.com>
Reviewed-by: Marius Vlad <marius.vlad@collabora.com>
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

agl-compositor_git: Bump SRCREV for AGL compositor

Most notable in this this bump update, is the ability to receive focus
(xdg-shell and input) even though there isn't any keyboard attached in the
system. More than that, this update also includes a few fixes related to
remote apps placement to different outputs and a fix on how we activate by
default applications, in various circumstances.

Specifically, this AGL compositor bump includes the following changes:

- 2cc479fd8f3e53265 layout: Add a wrapper for adding the view to the hidden layer
- baf8a28e6329fdb6c shell: Fix a typo when adding surface to pending list
- 1797ef75adcb4c586 compositor: Allow passing continue-without-input
- c859ca5a97d53a00c shell: Make sure that app_id is valid before checking it
- 89440e0ffdfea2568 layout: Keep track of popup state to handle activation
- 89f67c5cf793bc69c compositor: Perform activation from keybindings
- 8cc1032b2f5542028 compositor: Pass flags when adding keybindgs
- 9cccfe829aab45fd2 layout: Add a way common way activate views
- 394b5da7676612600 shell: Extract some common functions
- cac00851d454fcfe6 input: Migrate ivi_seat to ivi_compositor header
- 2844fde1df83707f3 input: Remove keyboard listener keyboard focus activation
- b4a52c732dbf3863b compositor: Properly dispose of fullscreen views at shutdown

Bug-AGL: SPEC-2982
Signed-off-by: Marius Vlad <marius.vlad@collabora.com>
Change-Id: I83fd9513114a6ffd4cb98a8506063544ccce377a
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27696
Tested-by: Jenkins Job builder account
ci-image-build: Jenkins Job builder account
ci-image-boot-test: Jenkins Job builder account
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>

bsp: Delete the patch not used any longer

The patch 0004-ADSP-enable-and-add-sound-hardware-abstraction_kf.patch
is no longer used in AGL.
So delete this unused patch.

Bug-AGL: SPEC-4434

Signed-off-by: Zhou Mingying <zhoumy@fujitsu.com>
Change-Id: I8489e24b9430a2769a10b90135add316042a2584
Reviewed-on: https://gerrit.automotivelinux.org/gerrit/c/AGL/meta-agl/+/27747
Reviewed-by: Jan-Simon Moeller <jsmoeller@linuxfoundation.org>
Tested-by: Jenkins Job builder account