Merge pull request #522 from balena-os/run_flasher_w_default_jp6_efifw

Switch to direct booting of flasher images
balena-os · Dec 5, 2024 · db716d1 · db716d1
2 parents 590af37 + 631e1e9
commit db716d1
Show file tree

Hide file tree

Showing 40 changed files with 1,189 additions and 374 deletions.
diff --git a/.github/workflows/jetson-agx-orin-devkit-64gb.yml b/.github/workflows/jetson-agx-orin-devkit-64gb.yml
@@ -9,10 +9,10 @@ on:
       - master
       # ESR branches glob pattern
       #- 20[0-9][0-9].[0-1]?[1470].x
-  # pull_request_target:
-  #   branches:
-  #     - main
-  #     - master
+  pull_request_target:
+    branches:
+      - main
+      - master
   push:
     tags:
       # Semver tags glob pattern (includes ESR in format v20YY.MM.PATCH)
@@ -31,11 +31,17 @@ on:
         type: string
         default: balena-staging.com
 
+permissions:
+  id-token: write # This is required for requesting the JWT #https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#requesting-the-access-token
+  actions: read # We are fetching workflow run results of a merge commit when workflow is triggered by new tag, to see if tests pass
+  pull-requests: write # Read is required to fetch the PR that merged, in order to get the test results. Write is required to create PR comments for workflow approvals.
+  packages: read
+  contents: read
 
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@ded533f1b8c8ff983dbcff2d219851130f8bfc4d # v1.27.2
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@master
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while

diff --git a/.github/workflows/jetson-agx-orin-devkit.yml b/.github/workflows/jetson-agx-orin-devkit.yml
@@ -9,10 +9,10 @@ on:
       - master
       # ESR branches glob pattern
       #- 20[0-9][0-9].[0-1]?[1470].x
-  # pull_request_target:
-  #   branches:
-  #     - main
-  #     - master
+  pull_request_target:
+    branches:
+      - main
+      - master
   push:
     tags:
       # Semver tags glob pattern (includes ESR in format v20YY.MM.PATCH)
@@ -31,11 +31,17 @@ on:
         type: string
         default: balena-staging.com
 
+permissions:
+  id-token: write # This is required for requesting the JWT #https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#requesting-the-access-token
+  actions: read # We are fetching workflow run results of a merge commit when workflow is triggered by new tag, to see if tests pass
+  pull-requests: write # Read is required to fetch the PR that merged, in order to get the test results. Write is required to create PR comments for workflow approvals.
+  packages: read
+  contents: read
 
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@ded533f1b8c8ff983dbcff2d219851130f8bfc4d # v1.27.2
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@master
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while

diff --git a/.github/workflows/jetson-orin-nano-devkit-nvme.yml b/.github/workflows/jetson-orin-nano-devkit-nvme.yml
@@ -9,10 +9,10 @@ on:
       - master
       # ESR branches glob pattern
       #- 20[0-9][0-9].[0-1]?[1470].x
-  # pull_request_target:
-  #   branches:
-  #     - main
-  #     - master
+  pull_request_target:
+    branches:
+      - main
+      - master
   push:
     tags:
       # Semver tags glob pattern (includes ESR in format v20YY.MM.PATCH)
@@ -31,11 +31,17 @@ on:
         type: string
         default: balena-staging.com
 
+permissions:
+  id-token: write # This is required for requesting the JWT #https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#requesting-the-access-token
+  actions: read # We are fetching workflow run results of a merge commit when workflow is triggered by new tag, to see if tests pass
+  pull-requests: write # Read is required to fetch the PR that merged, in order to get the test results. Write is required to create PR comments for workflow approvals.
+  packages: read
+  contents: read
 
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@ded533f1b8c8ff983dbcff2d219851130f8bfc4d # v1.27.2
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@master
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while

diff --git a/.github/workflows/jetson-orin-nano-seeed-j3010.yml b/.github/workflows/jetson-orin-nano-seeed-j3010.yml
@@ -9,10 +9,10 @@ on:
       - master
       # ESR branches glob pattern
       #- 20[0-9][0-9].[0-1]?[1470].x
-  # pull_request_target:
-  #   branches:
-  #     - main
-  #     - master
+  pull_request_target:
+    branches:
+      - main
+      - master
   push:
     tags:
       # Semver tags glob pattern (includes ESR in format v20YY.MM.PATCH)
@@ -31,11 +31,17 @@ on:
         type: string
         default: balena-staging.com
 
+permissions:
+  id-token: write # This is required for requesting the JWT #https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#requesting-the-access-token
+  actions: read # We are fetching workflow run results of a merge commit when workflow is triggered by new tag, to see if tests pass
+  pull-requests: write # Read is required to fetch the PR that merged, in order to get the test results. Write is required to create PR comments for workflow approvals.
+  packages: read
+  contents: read
 
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@ded533f1b8c8ff983dbcff2d219851130f8bfc4d # v1.27.2
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@master
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while

diff --git a/.github/workflows/jetson-orin-nx-seeed-j4012.yml b/.github/workflows/jetson-orin-nx-seeed-j4012.yml
@@ -9,10 +9,10 @@ on:
       - master
       # ESR branches glob pattern
       #- 20[0-9][0-9].[0-1]?[1470].x
-  # pull_request_target:
-  #   branches:
-  #     - main
-  #     - master
+  pull_request_target:
+    branches:
+      - main
+      - master
   push:
     tags:
       # Semver tags glob pattern (includes ESR in format v20YY.MM.PATCH)
@@ -31,11 +31,17 @@ on:
         type: string
         default: balena-staging.com
 
+permissions:
+  id-token: write # This is required for requesting the JWT #https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#requesting-the-access-token
+  actions: read # We are fetching workflow run results of a merge commit when workflow is triggered by new tag, to see if tests pass
+  pull-requests: write # Read is required to fetch the PR that merged, in order to get the test results. Write is required to create PR comments for workflow approvals.
+  packages: read
+  contents: read
 
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@ded533f1b8c8ff983dbcff2d219851130f8bfc4d # v1.27.2
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@master
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while

diff --git a/.github/workflows/jetson-orin-nx-xavier-nx-devkit.yml b/.github/workflows/jetson-orin-nx-xavier-nx-devkit.yml
@@ -9,10 +9,10 @@ on:
       - master
       # ESR branches glob pattern
       #- 20[0-9][0-9].[0-1]?[1470].x
-  # pull_request_target:
-  #   branches:
-  #     - main
-  #     - master
+  pull_request_target:
+    branches:
+      - main
+      - master
   push:
     tags:
       # Semver tags glob pattern (includes ESR in format v20YY.MM.PATCH)
@@ -31,11 +31,17 @@ on:
         type: string
         default: balena-staging.com
 
+permissions:
+  id-token: write # This is required for requesting the JWT #https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services#requesting-the-access-token
+  actions: read # We are fetching workflow run results of a merge commit when workflow is triggered by new tag, to see if tests pass
+  pull-requests: write # Read is required to fetch the PR that merged, in order to get the test results. Write is required to create PR comments for workflow approvals.
+  packages: read
+  contents: read
 
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@ded533f1b8c8ff983dbcff2d219851130f8bfc4d # v1.27.2
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@master
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while

diff --git a/balena-yocto-scripts b/balena-yocto-scripts
diff --git a/contracts b/contracts
diff --git a/layers/meta-balena b/layers/meta-balena
diff --git a/layers/meta-balena-jetson/recipes-bsp/tegra-binaries/files/TEGRA_BL_3701_64.Cap.gz b/layers/meta-balena-jetson/recipes-bsp/tegra-binaries/files/TEGRA_BL_3701_64.Cap.gz
diff --git a/layers/meta-balena-jetson/recipes-bsp/tegra-binaries/files/boot0_agx_orin_devkit_64.img.gz b/layers/meta-balena-jetson/recipes-bsp/tegra-binaries/files/boot0_agx_orin_devkit_64.img.gz
diff --git a/layers/meta-balena-jetson/recipes-bsp/uefi/edk2-container_1.0.bb b/layers/meta-balena-jetson/recipes-bsp/uefi/edk2-container_1.0.bb
@@ -29,6 +29,7 @@ SRC_URI = " \
     file://0001-AGX-Orin-64GB-Integrate-with-balenaOS-on-L4T-36.3_patch.txt \
     file://0001-edk2-nvidia-Remove-pva-fw-from-required-list_patch.txt \
     file://0001-StandaloneMmOptee-Don-t-assert-if-var-store-integrit_patch.txt \
+    file://0001-TegraPlatformBootManager-TegraPlatformBootManagerDxe_patch.txt \
 "
 
 inherit deploy
+21 −0		.github/workflows/flowzone.yml
+7 −0		.github/workflows/genericx86-64-ext.yml
+53 −45		.github/workflows/yocto-build-deploy.yml
+211 −46		.versionbot/CHANGELOG.yml
+70 −0		CHANGELOG.md
+1 −1		VERSION
+82 −21		build/contracts/package-lock.json
+132 −17		.versionbot/CHANGELOG.yml
+46 −0		CHANGELOG.md
+2 −2		contracts/hw.device-type/beagleplay/contract.json
+38 −0		contracts/hw.device-type/iotdin-imx8p-d1d8/contract.json
+54 −0		contracts/hw.device-type/iotdin-imx8p-d1d8/iotdin-imx8p.svg
+38 −0		contracts/hw.device-type/iotdin-imx8p/contract.json
+54 −0		contracts/hw.device-type/iotdin-imx8p/iotdin-imx8p.svg
+3 −4		contracts/hw.device-type/jetson-agx-orin-devkit-64gb/contract.json
+1 −1		contracts/hw.device-type/jetson-orin-nano-seeed-j3010/contract.json
+1 −1		contracts/hw.device-type/jetson-orin-nx-seeed-j4012/contract.json
+2 −2		contracts/sw.os+hw.device-type/debian+jetson-agx-orin-devkit/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/debian+jetson-orin-nano-devkit-nvme/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/debian+jetson-orin-nano-seeed-j3010/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/debian+jetson-orin-nx-seeed-j4012/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/debian+jetson-orin-nx-xavier-nx-devkit/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/ubuntu+jetson-agx-orin-devkit/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/ubuntu+jetson-orin-nano-devkit-nvme/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/ubuntu+jetson-orin-nano-seeed-j3010/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/ubuntu+jetson-orin-nx-seeed-j4012/distro-config.tpl
+2 −2		contracts/sw.os+hw.device-type/ubuntu+jetson-orin-nx-xavier-nx-devkit/distro-config.tpl
+10 −0		contracts/sw.os+hw.device-type/ubuntu@noble+coral-dev/dependencies.tpl
+11 −0		contracts/sw.os+hw.device-type/ubuntu@noble+raspberry-pi2/dependencies.tpl
+11 −0		contracts/sw.os+hw.device-type/ubuntu@noble+raspberrypi0-2w-64/dependencies.tpl
+11 −0		contracts/sw.os+hw.device-type/ubuntu@noble+raspberrypi3-64/dependencies.tpl
+11 −0		contracts/sw.os+hw.device-type/ubuntu@noble+raspberrypi3/dependencies.tpl
+11 −0		contracts/sw.os+hw.device-type/ubuntu@noble+raspberrypi4-64/dependencies.tpl
+11 −0		contracts/sw.os+hw.device-type/ubuntu@noble+raspberrypi400-64/dependencies.tpl
+11 −0		contracts/sw.os+hw.device-type/ubuntu@noble+revpi-core-3/dependencies.tpl
+6 −2		contracts/sw.os/alpine/contract.json
+4 −2		contracts/sw.os/ubuntu/contract.json
+24 −6		contracts/sw.stack/dotnet/contract.json
+3 −1		contracts/sw.stack/golang/contract.json
+1 −0		contracts/sw.stack/openjdk/contract.json
+85 −30		contracts/sw.stack/python/contract.json
+2 −2		package.json
+336 −538		.versionbot/CHANGELOG.yml
+66 −0		CHANGELOG.md
+11 −0		README.md
+3 −2		meta-balena-common/classes/kernel-balena.bbclass
+4 −1		meta-balena-common/conf/distro/include/balena-os.inc
+1 −1		meta-balena-common/recipes-bsp/u-boot/patches/env_resin.h
+10 −0		meta-balena-common/recipes-core/initrdscripts/files/migrate
+5 −0		meta-balena-common/recipes-support/resin-init/resin-init-flasher/resin-init-flasher
+1 −1		tests/leviathan