using SELinux in yocto/poky - yocto

Setup: I am running Ubuntu 16.04 and I am trying to build an image that includes some recipes from meta-selinux. I have tried to follow the READMEs and other help, but I am pretty stuck.
Here are the layers that I have:
drwxrwxr-x 19 ubuntu ubuntu 4096 Oct 3 18:31 meta/
drwxrwxr-x 14 ubuntu ubuntu 4096 Oct 3 22:49 meta-openembedded/
drwxrwxr-x 5 ubuntu ubuntu 4096 Oct 3 18:31 meta-poky/
drwxrwxr-x 8 ubuntu ubuntu 4096 Oct 3 18:31 meta-selftest/
drwxrwxr-x 16 ubuntu ubuntu 4096 Oct 3 22:51 meta-selinux/
drwxrwxr-x 7 ubuntu ubuntu 4096 Oct 3 18:31 meta-skeleton/
drwxrwxr-x 15 ubuntu ubuntu 4096 Oct 3 22:19 meta-virtualization/
drwxrwxr-x 9 ubuntu ubuntu 4096 Oct 3 18:31 meta-yocto-bsp/
drwxrwxr-x 7 ubuntu ubuntu 4096 Oct 3 23:12 openembedded-core/
My bblayers.conf file has:
# POKY_BBLAYERS_CONF_VERSION is increased each time build/conf/bblayers.conf
# changes incompatibly
POKY_BBLAYERS_CONF_VERSION = "2"
BBPATH = "${TOPDIR}"
BBFILES ?= ""
BBLAYERS ?= " \
/yocto/poky/meta \
/yocto/poky/meta-poky \
/yocto/poky/meta-yocto-bsp \
/yocto/poky/meta-openembedded/meta-python \
/yocto/poky/meta-selinux \
"
When I try to do a bitbake core-image-minimal I get:
ERROR: Layer 'meta-python' depends on layer 'openembedded-layer', but this layer is not enabled in your configuration
So, I add that layer to bblayers.conf.
BBLAYERS ?= " \
/yocto/poky/meta \
/yocto/poky/meta-poky \
/yocto/poky/meta-yocto-bsp \
/yocto/poky/meta-trio \
/yocto/poky/meta-openembedded \
/yocto/poky/meta-openembedded/meta-python \
/yocto/poky/meta-selinux \
"
and now I get
ERROR: Unable to start bitbake server
ERROR: Last 10 lines of server log for this session (/yocto/poky/build/bitbake-cookerdaemon.log):
return bb.parse.handle(fn, data, include)
File "/yocto/poky/bitbake/lib/bb/parse/__init__.py", line 117, in handle
return h['handle'](fn, data, include)
File "/yocto/poky/bitbake/lib/bb/parse/parse_py/ConfHandler.py", line 134, in handle
abs_fn = resolve_file(fn, data)
File "/yocto/poky/bitbake/lib/bb/parse/__init__.py", line 140, in resolve_file
raise IOError(errno.ENOENT, "file %s not found" % fn)
FileNotFoundError: [Errno 2] file /yocto/poky/meta-openembedded/conf/layer.conf not found
I am not sure where to go here. meta-openebedded was cloned from the repo, I did not remove the /conf/layer.conf that the error message mentions.

in my bblayers.conf, I should have had
/yocto/poky/meta-openembedded/meta-oe \
instead of
/yocto/poky/meta-openembedded \

Related

CentOs 7, "Tesseract couldn't load any languages!" however: "List of available languages (2): eng, spa"

this is CentOs 7
when I run tesseract --list-langs
[root#cia tessdata]# tesseract --list-langs
Error opening data file /usr/local/share/tessdata/eng.traineddata
Please make sure the TESSDATA_PREFIX environment variable is set to your "tessdata" directory.
Failed loading language 'eng'
Tesseract couldn't load any languages!
List of available languages (2):
eng
spa
[root#cia tessdata]#
however when I run
[root#cia tessdata]# ls -l /usr/local/share/tessdata/
total 328
drwxr-xr-x. 2 root root 4096 Nov 17 23:28 configs
-rw-r--r--. 1 root root 164228 Nov 18 06:11 eng.traineddata
-rw-r--r--. 1 root root 572 Nov 17 23:28 pdf.ttf
-rw-r--r--. 1 root root 157745 Nov 18 06:11 spa.traineddata
drwxr-xr-x. 2 root root 98 Nov 17 23:28 tessconfigs
[root#cia tessdata]#
I get eng.traineddata and spa.traineddata in this form:
cd /usr/local/share/tessdata
wget https://github.com/tesseract-ocr/tessdata/blob/main/eng.traineddata
wget https://github.com/tesseract-ocr/tessdata/blob/main/spa.traineddata
:::::::::::::::::::::::::::::::::::::::::::
allways I install languages with:
wget https://github.com/tesseract-ocr/tessdata/raw/master/eng.traineddata
wget https://github.com/tesseract-ocr/tessdata/raw/master/spa.traineddata
then allways tesseract work fine, but now this return 404
how I can fix?

Cannot create odoo-8(openerp) service in ubuntu 16.04

I want to create an odoo instance version 8 in ubuntu 16.
Config and service files are created, i am adding permission of files below.
drwxr-xr-x 6 root root 4096 May 24 18:40 .
drwxr-xr-x 3 sic sic 4096 May 24 17:40 ..
drwxr-xr-x 8 sic sic 4096 Apr 11 08:54 odoo
-rw-r--r-- 1 root root 319123456 May 24 18:38 odoo_sic.tar
drwxrwxrwx 23 sic sic 4096 May 24 17:40 orchid_addons
drwxrwxrwx 9 sic sic 4096 May 24 17:40 orchid_excel_reports
Config file:
- -rw-r----- 1 sic sic 311 May 25 10:12 001-sic-live-server.conf
Init file:
- -rwxr-xr-x 1 sic sic 2219 May 25 10:16 001-sic-live-server
when i try to start the service log file is not created, also no service started message
Follow My steps:
1 Create conf file
sudo nano /etc/odoo8.conf
2 Create conf file data
[options]
admin_passwd = your_strong_admin_password
db_host = False
db_port = False
db_user = odoo8
db_password = False
addons_path = /opt/odoo8/addons
logfile = /var/log/odoo8.log
xmlrpc_port = 8010
3 Create service
sudo nano /lib/systemd/system/odoo8.service
4
[Unit]
Description=Odoo 8
Requires=postgresql.service
After=postgresql.service
[Service]
Type=simple
PermissionsStartOnly=true
User=odoo8
Group=odoo8
SyslogIdentifier=odoo8
ExecStart=/opt/odoo8/venv/bin/python2 /opt/odoo8/odoo-bin -c /etc/odoo8.conf
[Install]
WantedBy=multi-user.target
Then enable service.
sudo systemctl enable odoo8.service

Concourse Worker Failure on Ubuntu 14.04

After configuring a standalone Concourse 2.4.0 per the instructions, everything seems to be up and running. However, when trying to run the "hello world" example, I can see the following error in the Concourse UI:
runc create: exit status 1: rootfs ("/volumes/live/a72f9a0d-3506-489b-5b9b-168744b892c1/volume") does not exist
"web" start command:
./concourse web \
--basic-auth-username admin \
--basic-auth-password admin \
--session-signing-key session_signing_key \
--tsa-host-key host_key \
--tsa-authorized-keys authorized_worker_keys \
--external-url http://myconcoursedomain:8080 \
--postgres-data-source postgres://user:pass#mydbserver/concourse
"worker" start command:
./concourse worker \
--work-dir worker \
--tsa-host 127.0.0.1 \
--tsa-public-key host_key.pub \
--tsa-worker-private-key worker_key
I'm wondering if the problem occurs since the "missing" directory is created in the directory specified in the "start worker" command, instead of at the actual root directory:
~/concourse# ls -la worker
total 145740
drwxr-xr-x 5 root root 4096 Nov 15 23:07 .
drwxr-xr-x 3 root root 4096 Nov 15 23:07 ..
drwxr-xr-x 3 root root 4096 Nov 15 23:07 2.4.0
drwxr-xr-x 2 root root 4096 Nov 15 23:09 depot
drwxr-xr-x 1 root root 24 Nov 15 23:07 volumes
-rw-r--r-- 1 root root 42142052352 Nov 15 23:15 volumes.img
Concourse is installed on Ubuntu 14.04:
uname -r
4.4.0-47-generic
uname -a
Linux ubuntu-2gb-nyc3-01 4.4.0-47-generic #68~14.04.1-Ubuntu SMP Wed Oct 26 19:42:11 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
For reasons that I still do not understand, it appears that if you specify the --work-dir value to be /opt/concourse/worker, then the worker will work with this kernel version without issue.
I was using a relative path to a worker directory within a dir in my user folder as my --work-dir value.

vagrant synced_folder file permissions

Vagrant Version 1.6.3
Virtual Box 4.3.12
VBoxGuestAdditions-4.3.2
Host OS -> Windows 8
Guest OS -> CentOS 6.4
This is the content of my Vagrantfile ( where developer is userName )
config.vm.synced_folder ".", "/vagrant", disabled: true
config.vm.synced_folder ".", "/var/www"
# # comments-> I tried many combinations
# :owner=> 'developer',
# :group=> 'developer'
# :mount_options=> ['dmode=777', 'fmode=777']
Now when I try to change the access permissions of the synced_folder(/var/www) or sub directories or files of synced_folder by chmod command,the result is not as expected
For example
1) vim testFile.php
2) ls -al testFile.php
-rwxrwxrwx 1 developer developer 12 Sep 23 15:52 testFile.php
3) chmod 700 testFile.php
-rwxrwxrwx 1 developer developer 12 Sep 23 15:52 testFile.php
4) chmod 000 testFile.php
-r-xr-xr-x 1 developer developer 12 Sep 23 15:52 testFile.php
5) chmod 111 testFile.php
-r-xr-xr-x 1 developer developer 12 Sep 23 15:52 testFile.php
6) chmod 077 testFile.php
-rwxrwxrwx 1 developer developer 12 Sep 23 15:52 testFile.php
Basically the file is always readable and executable by "owner" , "group" and "others".
The question is why it is so ? Is there any solution for this? I want the synced_folder to behave according to centOS access permissions.
I am really stuck here for past few days.Please help.
Thank you
The guest OS normally preserves host's persmissions. Try adding permissions for other users on Windows.

custom yum repo not showing rpm

I have a yum repository I've set up where I store custom rpms.
I have no problem finding information about other packages that were built and stored in this custom repo.
#yum --disablerepo=rhui-us-east-rhel-server-1y,epel,epel-testing --enablerepo=customrepo install php53-pecl-xdebug
php53-pecl-xdebug x86_64 2.2.1-2 customrepo 132 k
No problem.
Now I drop somerpm.rpm in centos/repo/5/noarch, run createrepo --update . in this directory and try the same command, and yet it shows no results.
I tried running createrepo --update in the root of the repo as well, but that did not work either (I'm actually not sure where to run it and if it needs a repodata directory in each subdir).
[root#reposerver mnt]# ls -l /var/www/repo/
total 12
-rw-r--r-- 1 root root 203 Jun 8 00:13 REPO_README
drwxr-xr-x 3 root root 4096 Jun 10 2011 centos
drwxr-xr-x 2 root root 4096 Oct 18 20:02 repodata
[root#reposerver mnt]# ls -l /var/www/repo/centos/5/
SRPMS/ i386/ noarch/ repodata/ x86_64/
[root#reposerver mnt]# ls -l /var/www/repo/centos/5/noarch/
total 7324
-rw-r--r-- 1 root root 1622 Jun 28 2011 compat-php-5.1.6-1.noarch.rpm
drwxr-xr-x 2 root root 4096 Oct 18 19:55 repodata
-rw-r--r-- 1 root root 1066928 Oct 18 19:54 salt-0.10.3-1.noarch.rpm
-rw-r--r-- 1 root root 6363197 Oct 18 19:54 salt-0.10.3-1.src.rpm
-rw-r--r-- 1 root root 21822 Oct 18 19:54 salt-master-0.10.3-1.noarch.rpm
-rw-r--r-- 1 root root 14294 Oct 18 19:54 salt-minion-0.10.3-1.noarch.rpm
I also tried adding the exactarch=0 flag to my repo config to ignore arch restrictions and this did not work either, it was a shot in the dark, since my rpm is noarch, it should show regardless.
# cat /etc/yum.repos.d/mycompany.repo
[mycompany]
name=mycompany custom repo
baseurl=http://config/repo/centos/5/$basearch
enabled=1
exactarch=0
I'm at a loss at this point. Usually createrepo --update does the trick, but for some reason it cannot find the new rpms.
repo]# find . -type f -name "*.gz" | xargs zcat | grep salt-minion
returns results as well, so it's definitely in the repo data.
yum clean all on the server I was trying to install on worked.
Also make sure to do createrepo --update on the specific subdir instead of the root of the repo.