BFE EngineeringandClaude Fable 5
2756de0b46
CI/pipeline: - KERNEL_TARBALL passed as a YAML env literal '~' was never tilde-expanded and would have failed every hosted kernel-build dispatch; the path is now exported from the shell. Verified reproducible before the fix. - Every job gets timeout-minutes; boot smoke uses timeout -k so a wedged qemu is SIGKILLed instead of holding the job. - Tarball fetch + fail-closed sha256 verification deduplicated into build/fetch-kernel-tarball.sh (with curl retries), used by build-kernel.sh and both CI jobs. busybox fetch gains retries too. - ccache layer for kernel-build (cache keyed on defconfig+patches) recovers the incremental-compile speed the ephemeral-runner move cost. - build-kernel.sh now asserts every fragment option survived olddefconfig — merge_config -m pastes text and Kconfig silently drops unmet symbols. rs485-bridge: - pending-buffer cap (2x max RTU ADU) instead of unbounded growth; explicit accept-loop error handling with backoff instead of .flatten(); per-arm inline bounds instead of the string-keyed lookup whose default would have mis-bounded a future get-input; control-socket cleanup errors surfaced; flag-shaped values rejected in arg parsing; doc example uses a private mktemp dir. Test timing margins widened for contended runners (gap 25->120ms, 60x margin on the split-frame test). VM harness: - stage-1/stage-2 boot scripts share one validated slot parser and one by-name populator (qemu/rootfs/etc/warden-lib.sh) — the duplicated parser had already diverged on validation; userdata/oem mount failures now fail fast with a greppable sentinel; udhcpc fallback keys off the interface actually having an address; switch_root applet guarded. - boot-smoke delegates the qemu invocation to run.sh (machine shape lives in ONE place); run.sh port 0 disables a hostfwd. - mkimage: unknown partition names fail at build time; DISK_END is a max, not last-entry; --state keys validated as filenames. - portal-scenario: mock readiness is asserted (no silent fall-through), hostfwd port collisions retried, mount-failure sentinel fails fast. - ui-shot: fixed sleeps replaced with bounded screendump polling; the repaint assertion is real and documented as such. qmp.py loses its module-global and gains argv validation. Docs/scrub: bench-host paths and the site AP name removed from six more port docs and two evidence tables; path-bearing build artifacts (.elf, .map) untracked (the 154-byte firmware .bin is path-free and stays); ADR-0003 marked visibility-superseded by ADR-0007; stale section cross-reference fixed; flare-edge noted as private for outside readers; stale root-level review report removed per the new workspace rule. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018HUayid7W5w7jBdb9Rrj1K
80 lines
2.8 KiB
Bash
80 lines
2.8 KiB
Bash
# shellcheck shell=bash
|
|
# Shared helpers for the qemu/ device-sim build scripts. Sourced, not executed.
|
|
# Callers must run under `set -euo pipefail` and define QEMU_DIR (the qemu/ dir).
|
|
|
|
BB_VER=1.31.0
|
|
BB_URL="https://busybox.net/downloads/binaries/${BB_VER}-defconfig-multiarch-musl/busybox-armv7l"
|
|
|
|
qemu_log() { printf '\033[36m== %s\033[0m\n' "$*"; }
|
|
|
|
# Fetch (or accept via $BUSYBOX) the pinned static armv7 busybox and verify it
|
|
# against qemu/busybox.sha256. FAILS CLOSED: a missing pin refuses to build,
|
|
# never silently skips verification — mirroring build/build-kernel.sh's
|
|
# tarball handling. Sets $BB to the verified binary's path.
|
|
qemu_get_busybox() {
|
|
local sha_file="$QEMU_DIR/busybox.sha256"
|
|
local out="${OUT:-$QEMU_DIR/out}"
|
|
mkdir -p "$out"
|
|
BB="${BUSYBOX:-$out/busybox-armv7l}"
|
|
if [ ! -f "$BB" ]; then
|
|
qemu_log "downloading $BB_URL"
|
|
curl --retry 3 --retry-delay 5 -fSL "$BB_URL" -o "$BB"
|
|
fi
|
|
[ -f "$sha_file" ] || {
|
|
echo "FATAL: no pinned sha256 for busybox (expected $sha_file) — refusing to build from an unverified binary" >&2
|
|
exit 1
|
|
}
|
|
local want got
|
|
want="$(cat "$sha_file")"
|
|
got="$(sha256sum "$BB" | awk '{print $1}')"
|
|
[ "$want" = "$got" ] || { echo "busybox sha256 mismatch: want $want got $got" >&2; exit 1; }
|
|
qemu_log "busybox sha256 verified"
|
|
}
|
|
|
|
# Stage the shared rootfs skeleton (qemu/rootfs/ + busybox) into $1.
|
|
# Requires qemu_get_busybox to have run (uses $BB).
|
|
qemu_stage_rootfs() {
|
|
local root="$1"
|
|
mkdir -p "$root/bin" "$root/sbin" "$root/dev" "$root/proc" "$root/sys" \
|
|
"$root/etc" "$root/tmp" "$root/mnt" "$root/userdata" "$root/oem" \
|
|
"$root/usr/bin" "$root/usr/share/udhcpc"
|
|
install -m 0755 "$BB" "$root/bin/busybox"
|
|
cp -a "$QEMU_DIR/rootfs/." "$root/"
|
|
chmod 0755 "$root/init" "$root/sbin/init" "$root/etc/rc" \
|
|
"$root/usr/share/udhcpc/default.script"
|
|
}
|
|
|
|
# Parse a "SIZE[@OFFSET](NAME)" blkdevparts entry list (without the "vda:"
|
|
# prefix) and invoke a callback `$1 name offset_bytes size_bytes` per entry.
|
|
qemu_each_partition() {
|
|
local cb="$1" parts entry size_s off_s name size off
|
|
parts="${WARDEN_BLKDEVPARTS#*:}"
|
|
off=0
|
|
local IFS=','
|
|
for entry in $parts; do
|
|
name="${entry##*(}"; name="${name%)}"
|
|
size_s="${entry%%(*}"
|
|
if [ "${size_s#*@}" != "$size_s" ]; then
|
|
off_s="${size_s#*@}"; size_s="${size_s%@*}"
|
|
off="$(qemu_to_bytes "$off_s")"
|
|
fi
|
|
size="$(qemu_to_bytes "$size_s")"
|
|
"$cb" "$name" "$off" "$size"
|
|
off=$((off + size))
|
|
done
|
|
}
|
|
|
|
qemu_to_bytes() {
|
|
local v="$1" n mult=1
|
|
case "$v" in
|
|
*K) n="${v%K}"; mult=1024 ;;
|
|
*M) n="${v%M}"; mult=1048576 ;;
|
|
*G) n="${v%G}"; mult=1073741824 ;;
|
|
*) n="$v" ;;
|
|
esac
|
|
case "$n" in
|
|
''|*[!0-9]*) echo "FATAL: bad blkdevparts size/offset token: '$v'" >&2; exit 1 ;;
|
|
esac
|
|
echo $((n * mult))
|
|
}
|