LuminaSensum/buildroot-MynaPlayer at 375c7857661639aeebd7d1c5773863e82946b639


board/ myna-player-odyssey	Merge branch 'WIP_rauc_fixup' into TMP_jookia	3 years ago
buildroot-patches	buildroot-patches: Add patches needed for Buildroot	3 years ago
configs	board/MynaPlayer odyssey: only copy machine-id into the target with postbuild scripts. Use a device table file to alter its permissions later -- this avoids getting a permission denied error if you have to run the postbuild script multiple times e.g: build errors with trying multiple fixes.	3 years ago
packages	Merge branch 'WIP_SPDX' into TMP_jookia	3 years ago
scripts	Add SPDX-License-Identifier to scripts	3 years ago
.gitignore	Reworked certificates handling. The certs.sh.example contains a full example of this, and must be copied to certs.sh, and modified accordingly to reflect the real paths where the certificates are stored. A script that can be called by any board is creating symlinks from the real paths to corresponding statics targets for usage in genimage and postbuild scripts. The certs folder in the external tree must never be distributed in the repository, and is hence ignored via .gitignore.	3 years ago
COPYRIGHT.md	COPYRIGHT -> COPYRIGHT.md	3 years ago
Config.in	Add SPDX-License-Identifier to scripts	3 years ago
LICENSE	Added LICENSE file. This work is entirely under the GPL 3.0 or later, except where otherwise noted (third party code).	3 years ago
README.md	Merge branch 'WIP_COPYRIGHT' into TMP_jookia	3 years ago
changelog.md	Release 2020-08-06	3 years ago
external.desc	Initial commit.	3 years ago
external.mk	Merge branch 'WIP_rauc_fixup' into TMP_jookia	3 years ago

This is the external Buildroot repository used to build system images and updates for the MynaPlayer project.

BUILDING

Building MynaPlayer is a process, though it requires decent hardware.

Set up the required source code:

mkdir MYNA && cd MYNA
git clone -b v3.0.7 'https://github.com/OpenVPN/easy-rsa'
git clone -b 2020.05.x 'https://git.buildroot.net/buildroot'
git clone 'https://git.lumina-sensum.com/git/LuminaSensum/buildroot-MynaPlayer.git'
export BR2_EXTERNAL="$PWD/buildroot-MynaPlayer"
cd buildroot
git am ../buildroot-MynaPlayer/buildroot-patches/*.patch
cd ..

Create keys for RAUC updates:

cd easy-rsa
sed -i "s/extendedKeyUsage/#extendedKeyUsage/g" easy-rsa/easyrsa3/x509-types/code-signing
./easyrsa3/easyrsa init-pki
./easyrsa3/easyrsa build-ca
./easyrsa3/easyrsa gen-req rauc
./easyrsa3/easyrsa sign-req code-signing rauc
cd ..
cat >buildroot-MynaPlayer/scripts/certs.sh <<EOF
#!/bin/sh
RAUC_CERTIFICATE_AUTHORITY="$PWD/easy-rsa/pki/ca.crt"
RAUC_PRIVATE_KEY="$PWD/easy-rsa/pki/private/rauc.key"
RAUC_PUBLIC_KEY="$PWD/easy-rsa/pki/issued/rauc.crt"
EOF

Build the image:

cd buildroot
utils/brmake O=output_initramfs myna_player_odyssey_initramfs_defconfig
utils/brmake O=output_initramfs toolchain
utils/brmake O=output_initramfs -j8
# If you get errors, run 'make O=output_initramfs -j1' to see the messages
utils/brmake O=output_rootfs myna_player_odyssey_defconfig
utils/brmake O=output_rootfs toolchain
utils/brmake O=output_rootfs -j8
# If you get errors, run 'make O=output_rootfs -j1' to see the messages
cd ..

Copy RAUC bundles and keys to a server (jookia.org in this example):

ls buildroot/output_rootfs/images/
# Find the file ending in *.raucb
# You can also just flash MynaPlayer.img using dd but it takes a long time
mv buildroot/output_rootfs/images/bundle-MynaPlayer-2020-08-06.fe2ca3ce-be36-4f33-94d4-e295cd0518be.raucb /usr/local/webapps/jookia/
cp $PWD/easy-rsa/pki/ca.crt /usr/local/webapps/jookia

Install the update on the device from the server (jookia.org in this example):

wget 'https://www.jookia.org/ca.crt'
cp /etc/rauc/keyring.pem{,.bak}
mv ca.crt /etc/rauc/keyring.pem
rauc install https://www.jookia.org/bundle-MynaPlayer-2020-08-06.6d113d3a-f77f-447a-ad7d-b8d605824c00.raucb
mv /etc/rauc/keyring.pem{.bak,}
reboot

Future updates won't need to copy the keyring, a single 'rauc install' invocation should download and install the image without trouble.

You should now be running a system you've just built (check the kernel build date):

uname -a
# Linux MynaPlayer 5.8.0 #3 SMP PREEMPT Thu Aug 6 03:21:30 EDT 2020 armv7l GNU/Linux

LICENSING

Copyright 2020 Xogium and other contributors This project is licensed under the GNU GPL version 3 or later. Some portions are licensed under the CC0. This project includes third party works as-is or modified. These works are authored by others and available under open source licenses. See 'COPYRIGHT.md' for full details.