2032 Commits

Author SHA1 Message Date
Stefan Agner
689089a949
Linux: Update kernel 6.1.21 (#2423) 2023-03-23 21:45:43 +01:00
Stefan Agner
75dcb932f8
Use zswap instead of swap in zram (#2420)
* Use zswap instead of swap in zram

This requires a swap file which will get generated automatically on
startup.

* Fix file size and free disk space comparison

* Set zswap factor to 33%

* Set vm.swappiness to 1

Decrease swapping to a minimum. This is also recommended for database
work loads by the MariaDB documentation. In practice it causes the least
amount of writes to disk when under memory pressure, while still making
swap available when needed.
2023-03-22 11:08:05 +01:00
Stefan Agner
5c6330f70f
Bump U-Boot for ODROID-M1 to 2023.04-rc4 (#2419) 2023-03-17 17:14:42 +01:00
Stefan Agner
5cf2a0b052
Linux: Update kernel 6.1.20 (#2418) 2023-03-17 14:54:05 +01:00
Stefan Agner
c804b6b68d
Linux: Update kernel 6.1.19 for Raspberry Pi systems (#2417) 2023-03-17 00:37:38 +01:00
Stefan Agner
3de96587b7
Bump HAOS Agent to 1.5.1 (#2416) 2023-03-17 00:37:27 +01:00
Stefan Agner
787fc22f83
Avoid moving data to same device (#2412)
* Avoid moving data to same device

When a data disk move is triggered when the data disk is already in use
the script currently renames that only data disk, rendering the system
unusable.

Don't continue if source and destination happens to be the same device.

* On failure rename to hassos-data-fail

The label hassos-data-failed is too long.
2023-03-15 22:47:31 +01:00
Stefan Agner
c8438faab5
Linux: Update kernel 6.1.19 (#2411) 2023-03-15 14:16:22 +01:00
Stefan Agner
5200096c4e
Deactivate any external data disk device on first boot (#2390) (#2410)
* Deactivate any external data disk device on first boot (#2390)

* Use lsblk to determine the underlying device file

Comparing major number is not reliable, e.g. virtio disks have the same
major number despite being different devices. Use lsblk to find the
underlying device, and compare the device name instead.
2023-03-15 14:16:11 +01:00
Stefan Agner
24f3efdbe3
Support systemd ConditionFirstBoot (#2409)
By default ConditionFirstBoot is ankered to the presence of
/etc/machine-id. However, in our case /etc/machine-id is a bind mount,
which makes the first boot condition non-working.

Since machine-id is stored by the bootloader on HAOS, use the boot
loaders knowledge and pass the information to systemd.
2023-03-15 14:14:47 +01:00
Stefan Agner
2b0187604b
Choose Security Module using Kernel configuration (#2407) 2023-03-14 18:29:01 +01:00
Stefan Agner
1d2de24cbe
Capitalize ODROID as used by Hardkernel (#2406) 2023-03-14 00:45:39 +01:00
Stefan Agner
8531abcbeb
Bump buildroot (#2404)
* buildroot 0a6be061e0...2ccc4c3f04 (1):
  > package/gptfdisk: fix another runtime failure with popt 1.19
2023-03-14 00:19:06 +01:00
Stefan Agner
29a740353a
Fix U-Boot environment size for ODROID-M1 (#2403) 2023-03-14 00:18:54 +01:00
Stefan Agner
2f9ce078ee
Add ODROID-M1 to documentation (#2402)
* Add ODROID-M1 to documentation

While at it, also use the new writing style for all Hardkernel boards by
changing Odroid to ODROID.

* Add ODROID-M1 board specific documentation

* Add NVMe information

* Apply suggestions from code review

Co-authored-by: c0ffeeca7 <38767475+c0ffeeca7@users.noreply.github.com>
2023-03-14 00:18:39 +01:00
Stefan Agner
6914f92e59
Linux: Update kernel 6.1.18 (#2401) 2023-03-13 10:27:00 +01:00
Stefan Agner
8eef678e48
Add Multi-Gen LRU but disabled by default (#2400)
It seems that Raspberry Pi enabled Multi-Gen LRU by default. By my
testing, it performs worse in some situation. Add it by default for all
platforms, but disable it by default for now.
2023-03-13 00:53:33 +01:00
Stefan Agner
f48b00cb7f
Bump buildroot (#2399)
* buildroot c8916b6ec3...0a6be061e0 (1):
  > Merge tag '2023.02' into 2023.02.x-haos
2023-03-13 00:52:45 +01:00
Stefan Agner
b0d9496595
Add ODROID-M1 support (#2387)
* Add ODROID-M1 board support

* Add Rockchip kernel config for ODROID-M1

Kernel defconfig for Rockchip is based on Armbian kernel defconfig
from config/kernel/linux-rk3568-odroid-edge.config (git hash
95c829f9e664).

* Add U-Boot/Kernel patches

* Add Rockchip blob support

Add package which provides Rockchip TPL and ATF firmware binaries.

* Use latest U-Boot for ODROID-M1

* Fix Rockchip blob support

* Update defconfig

* Use GPT by default

* Create uboot partition to support non-recovery boot

* Enable eMMC boot in U-Boot SPL

* Drop unnecessary mmc device selection

Distro boot already activates the right mmc device. The extra selection
seems to actually cause problems for eMMC boot.

* Make sure driver for eMMC is built-in

* Use odroid-m1 as Supervisor machine

* Add ODROID-M1 to CI pipeline and issue template

* Bump to Linux 6.1.16
2023-03-10 19:44:50 +01:00
Stefan Agner
c03236f937
Linux: Update kernel 6.1.16 (#2396) 2023-03-10 19:42:13 +01:00
Stefan Agner
7b17c2eff0
Bump buildroot (#2393)
* buildroot f757263ae4...c8916b6ec3 (2):
  > Merge tag '2023.02-rc3' into 2023.02.x-haos
  > boot/uboot: Hacky support binary files for Rockchip ATF/TPL
2023-03-09 16:32:52 +01:00
Stefan Agner
7c105f553f
Bump QEMU guest agent to 7.2.0 (#2391) 2023-03-09 09:32:31 +01:00
Stefan Agner
a93781c360
Add libseccomp (#2389)
* Add security library libseccomp

Enable libseccomp to activate seccomp support in HAOS. This will compile
systemd and Docker with seccomp support.

Note: Traditionally Supervisor required to disable seccomp. This seems
no longer to be the case with current Supervisor, but it needs further
testing. All containers started by Supervisor get currently started with
seccomp disabled.

* Enable seccomp in the kernel
2023-03-08 00:38:28 +01:00
Stefan Agner
448c85788c
Add label action for new features (#2388) 2023-03-07 08:21:08 +01:00
Stefan Agner
9ce0766353
Avoid custom GPT location (#2386)
Currently the only board supporting GPT partition table and SPL is the
ASUS Tinker board. Its Rockchip boot loader is stored at LBA 0x40 (64)
which is well past the last LBA of a regular GPT partition table which
is at LBA 33). Therefor a custom GPT main partition table location (via
sgdisk -j, --adjust-main-table=sector) is not necessary.

Technically we could copy anything after LBA 34 from the SPL image, but
since we don't support a board which needs that space for its SPL let's
stick with the well aligned Rockchip start at LBA 64.

Note: To preserve the layout we still add the SPL size to the regular
offset. Technically we could start the boot partition at LBA 16384, but
this would mean a different partition table compared to before and
different offset of subsequent partitions compared to other GPT
platforms.
2023-03-07 00:52:16 +01:00
Stefan Agner
923c22ff9e
Support custom sized SPL/raw boot region (#2385)
* Support custom sized SPL/raw boot region

This is required for Rockchip which by default stores the U-Boot FIT
image at the 8MiB offset.

* Ignore shellcheck warning
2023-03-06 23:06:45 +01:00
Stefan Agner
eb3e2ab003
Linux: Update kernel 6.1.15 (#2383) 2023-03-03 18:10:36 +01:00
Stefan Agner
ca6bccbfa9
Use new containerd.sock location of Docker 23.0 (#2382) 2023-03-03 18:07:29 +01:00
Stefan Agner
a35ed97167
Enable Microsoft HyperV integration services (#2381) 2023-03-02 17:01:01 +01:00
Stefan Agner
239337b406
Use Network device naming scheme v250 (#2380)
The new systemd version v252 brings a new naming scheme, in particular
it seems that on device tree based systems (e.g. Raspberry Pis) the
Ethernet device name changes from eth0 to end0.

This breaks a previously made configuration.

Even worse, it seems that the default NetworkManager behavior is to only
configure a network device if there is no profile. But since profiles
are configured on a typical installation, NetworkManager doesn't bring
up any of the network interface, leaving the user stranded on an
unconnected system.

Ideally, we should have a plan how to migrate from one naming scheme to
the next. For now, just stick with the naming scheme HAOS 9.x has been
using.
2023-03-02 17:00:28 +01:00
Stefan Agner
78c5d40bb0
Enable NetworkManager command line utility nmcli explicitly (#2379)
With the Buildroot update 2023.02 nmcli is not enabled by default.
Enable it explicitly.
2023-03-02 17:00:19 +01:00
Stefan Agner
2081d3f7ed
Bump buildroot (#2377)
* buildroot 4832525e6c...f757263ae4 (3):
  > package/docker-engine: bump version to v23.0.1
  > package/docker-engine: remove non-existing build tags
  > package/{bluez5_utils, bluez5_utils-headers}: bump to version 5.66
2023-03-02 00:06:52 +01:00
Stefan Agner
a69f94803b
Increase net.core.optmem_max for OTBR (#2375)
The OTBR install scripts by default increases the net.core.optmem_max
ancillary buffer size to 64KiB to allow for a larger number of multicast
groups. Arch Linux as well recommends this size for high speed network
links.
2023-03-02 00:06:42 +01:00
Stefan Agner
7806f973bb
Bump buildroot to 2023.02-rc2 (#2374)
* Update config for Buildroot 2023.02

* Use Buildroot's version of the rtl8821cu package

Buildroot provides a newer driver for the RTL8821CU based chipsets
provided by https://github.com/morrownr/8821cu-20210118.

* Pass argument when verifying partition table

This also avoids running into a segmentation fault in the current
version of sgdisk.

* Remove obsolte GRUB2/NetworkManager patches

* Bump buildroot

* buildroot 90aa1a6daa...4832525e6c (4596):
  > package/runc: add support for CGroup device permission updates
  > package/network-manager: fix build with -Dmodem_manager=false
  > package/dbus-broker: bump to release 33
  > package/iptables: Allow to use iptables with nf_tables backend
  > package/brcmfmac_sdio-firmware-rpi: bump to latest version
  > package/linux-firmware: Deploy fewer Intel WiFi 22000 series variants
  > package/linux-firmware: Add more Intel WiFi 22000 series variants
  > package/linux-firmware: Add Broadcom BNX2 firmware
  > package/rpi-firmware: bump version to 1.20230106
  > Update for 2023.02-rc2

* Use Ubuntu 22.04 for CI checks

* Bump xe-guest-utilities to 7.33.0

* Remove unnecessary shellcheck ignore for xe-guest-utilities

* Address new buildroot check-packages issues
2023-03-01 00:36:32 +01:00
Stefan Agner
b8a00ecbfa
Symlink firmware update directory to Supervisor writeable location (#2225) 2023-03-01 00:36:22 +01:00
Stefan Agner
fd6bae5dc1
Linux: Update kernel 6.1.13 for Raspberry Pi systems (#2373) 2023-02-27 23:58:02 +01:00
Adam Duff
6f44dcf010
Enable CONFIG_UHID for generic x86-64 based installs (#2369) 2023-02-27 23:09:54 +01:00
Stefan Agner
c9fcf91a0d
Linux: Update kernel 6.1.14 (#2372) 2023-02-27 23:07:54 +01:00
Jens Maus
acec461b62
updated generic-raw-uart to correctly reference the sub-directory commit (#2368)
id and updated also the rpi-rf-mod package to reference the latest
changes for kernel 6.1 compatibility.
2023-02-27 11:45:17 +01:00
Stefan Agner
9bd101431e
Revert bridge support (#2345)
The bridge support is not complete and causes issues in Supervisor.
Supervisor first needs proper support for it before we can deploy it in
Operating System.

See also: https://github.com/home-assistant/supervisor/pull/4133
2023-02-22 12:08:13 +01:00
Stefan Agner
74ccbb8953
Fix rtl8821cu build for Linux 5.15 (#2360) 2023-02-16 18:51:55 +01:00
Stefan Agner
25c672a27f
Linux: Update kernel 6.1.12 for non-Raspberry Pi systems (#2358)
* Linux: Update kernel 6.1.12

* Update generic_raw_uart to build with Linux 6.1

* Update Realtek rtl8821cu/rtl88x2bu to build with Linux 6.1

* Bump buildroot

* buildroot 43f82f01b9...90aa1a6daa (1):
  > rtl8812au-aircrack-ng: bump to latest rev d98018

* Fix eq3_char_loop to build with Linux 6.1

* rtl8821cu: make sure -Werror is disabled for the kernel build

* generic_raw_uart: make sure -Werror is disabled for the kernel build
2023-02-16 14:53:38 +01:00
Stefan Agner
26757f17e8
Linux: Update kernel 5.15.94 (#2356) 2023-02-15 11:01:50 +01:00
Stefan Agner
dddbf25228
Bump U-Boot to v2023.01 for ODROID/Tinker/VIM3 (#2355) 2023-02-15 11:01:40 +01:00
Stefan Agner
0786ef2641
Bump buildroot (#2354)
* buildroot c33bc08c0b...43f82f01b9 (1):
  > package/pkg-golang: disable version control information
2023-02-14 11:04:00 +01:00
Stefan Agner
0a9517f121
Linux: Update kernel 5.15.93 (#2351) 2023-02-13 21:23:21 +01:00
Stefan Agner
f4f1fd2a58
NetworkManager: DHCPv4 handle lease NAK properly (#2341) (#2346)
Backport bug fix which handles a failed lease properly.
2023-02-13 21:23:11 +01:00
Stefan Agner
0867e3c70c
Linux: Update kernel 5.15.92 (#2343)
* Linux: Update kernel 5.15.92

* Drop patch which has been applied upstream
2023-02-06 12:28:58 +01:00
Stefan Agner
078c38c20c
Bump buildroot (#2340)
* buildroot 14dcc6f72e...c33bc08c0b (1):
  > package/dbus-broker: bump to release 33
2023-02-06 12:03:26 +01:00
Stefan Agner
a14902002a
Linux: Update kernel 5.15.91 (#2339) 2023-02-06 12:03:16 +01:00