libvirt: Try to fix selinux/securityfs mount handling in LXC

The current behavior for libvirt containers is to
configure a set of "basic" mounts in the new container
environment by default. Some of these mounts, such as
securityfs or selinux, might not have kernel support on
all running platforms. The added patchset implements
proper handling for this case and makes some additional
cleanups and refactoring.

The patchset is taken from the upstream libvirt mailing
list. Please refer to:

https://www.redhat.com/archives/libvir-list/2013-October/msg00270.html

Signed-off-by: Bogdan Purcareata <bogdan.purcareata@freescale.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: add INSANE_SKIP flag 'already-stripped' to silence QA warnings about stripped qemu binaries.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: Add sdl support by including dependency for libsdl.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen-image-minimal: break out arguments for xen and linux kernel as variables SYSLINUX_XEN_ARGS and SYSLINUX_KERNEL_ARGS to allow modification/overwriting.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
linux-yocto/xen: update fragment to support both dom0 and typical xen guests.

Updated linux kernel fragment to match defaults as defined in the 3.10 kernel's Kconfig files.  If defaults were not specified, modules were were used unless required by another built-in option.  As such, The core frontend drivers are included by default and the backend drivers are built as modules.

This allows privileged, PV, HVM, and PVHVM guests to work properly without additional kernel configuration or modules required in initramfs (from a Xen support perspective).

This also removes CONFIG_KVM_GUEST which was erroneously included previously.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen-image-minimal: update image installed modules to reflect xen fragment changes.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen-guest-image-minimal: add minimal xen guest image.

Signed-off-by: Chris Patterson <cjp256@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
conf/layer.conf: fix "No newline at end of file"

The last line lacked a newline (usually '\n', aka CR or CRLF) in the
end, so there was a warning from git diff:

\ No newline at end of file

The last byte of the file should be a newline.

Note:
It seems that nothing is changed in this commit, but it does change the
end of the last line.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
conf/layer.conf: add LAYERVERSION and LAYERDEPENDS

Add LAYERVERSION and LAYERDEPENDS, it needs depend on oe-core and
meta-networking layer.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
libvirt: Fix wrong depend for libxl

xen is not the right dependency for --with-libxl/--without-libxl, replace
it to libxl.

Signed-off-by: Yang Shi <yang.shi@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: avoid installing flask policy file as '/boot'

Upstream patch to fix race condition between creating /boot and
installing the XSM policy. Race would cause policy to be written
to /boot instead of into the /boot directory if it didn't already
exist.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: build xsm policy when 'xsm' DISTRO_FEATURE is present

This pulls in a dependency on the checkpolicy compiler (native)
and adds --enable-xsmpolicy in do_configure when 'xsm'
DISTRO_FEATURE is present.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: Add note about dependency on meta-selinux to README.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
libvirt: cleanup: remove old RRECOMMENDS

All of the old RRECOMMENDS are confirmed to be handled via PACKAGECONFIG,
so we can clean up the recipe and remove commented out reference to the
old values.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
lxc: fixed URL for tarball

Signed-off-by: Jonatan Pålsson <jonatan.palsson@pelagicore.com>
openvswitch: fix RDEPENDS issue for installers.

Make sure openvswitch has all the runtime dependencies defined.
Without e.g. sed, an installer may calculate dependencies and order
packages based on the deps, which may install openvswitch before sed.
This would result in an install failure, when the post install step
calls ovs-pki, which uses sed.

Signed-off-by: Paul Barrette <paul.barrette@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: convert direct call to ./configure with oe_runconf and EXTRA_OECONF

enable/disable stuff will eventually be replaced with appropriate
use of PACKAGECONFIG.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
xen: Use PACKAGECONFIG to deal with XSM policy.

Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
initscripts: add warning and begin functions to lsb_log_message

Some init scripts call a "begin" or "warning" function to log early init
phase messages, e.g. openvswitch-controller.  These functions are not
part of the default /etc/init.d/functions script, which is provided by
oe-core's lsb pkg.  Append these two missing commands to
/etc/init.d/functions during the install phase.

Signed-off-by: Paul Barrette <paul.barrette@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
libvirt: add PACKAGECONFIG for sasl

We don't want to leave build order dictating whether or not we get
sasl support in libvirt so add a PACKAGECONFIG for sasl. I have not
added sasl as a default PACKAGECONFIG since out of the box you would
not normally get sasl being built so this mimics this behavior. I have
listed a RDEPENDS in the PACKAGECONFIG as older Yocto builds for some
reason are not picking up the required runtime dependency.

Signed-off-by: Mark Asselstine <asselsm@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>