WIP: Podman flavour with support for toolbox

COPYING.MIT → LICENSE

@@ -1,17 +1,23 @@
+The MIT License (MIT)
+
+Copyright (c) Common Horizon Community and Contributors
+
+All rights reserved.
+
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,46 @@
+# Common Torizon OS
+
+![Common Torizon cover image](https://github.com/commontorizon/Documentation/blob/main/assets/img/commonTorizonCore800.png?raw=true)
+
+Common Torizon OS is an embedded Linux distribution for the [Torizon Cloud](https://app.torizon.io/). It
+features, among other essential services, a container runtime and components
+for secure remote over-the-air (OTA) updates.
+
+This layer provides the necessary metadata to build the Common Torizon OS Linux
+distribution.
+
+> ⚠️ **DISCLAIMER:** this is a derivative work from Torizon OS open source project. Torizon™ is a registered trademark of Toradex Group AG. This derivative work have not been reviewed or approved by Toradex. Common Torizon community does not talk on behalf of Toradex.
+>
+>⚠️ **This software is provided experimentally as-is.**
+
+## Building
+
+General documentation for the community can be found here: <https://github.com/commontorizon/Documentation>
+
+## Feature Support
+
+Our goal is to have Common Torizon OS in feature parity with Torizon OS. The table below shows the current status of each key feature:
+
+| Feature                      | Toradex SoM | Rpi3 | Rpi4 | Nezha D1 | x86-64 | Beagle Bone Black |
+| ---------------------------- | ----------- | ---- | ---- | -------- | ------ | ----------------- |
+| OTA Update OS Image          | ✅           |      | ✅     |          |        |                  |
+| OTA Update Container App     | ✅           | ✅    | ✅    | ✅        | ✅      | ✅                 |
+| OTA Update Bootloader        | ✅           |      |      |          |        |                   |
+| Device Monitoring            | ✅           | ✅    | ✅    | ✅        | ✅      | ✅                 |
+| LTS Hardware & BSP           | ✅           |      |      |          |        |                   |
+| Free Technical Support       | ✅           |      |      |          |        |                   |
+| Prebuilt Torizon OS Image   | ✅           | ✅    | ✅    | ✅        | ✅      | ✅                 |
+| QA Approved Releases         | ✅           |      |      |          |        |                   |
+| Provisioning with TEZI*      | ✅           |      |      |          |        |                   |
+| Image Customizing with TCB** | ✅           |      |      |          |        |                   |
+| VS Code extension 2 support  | ✅           | ✅    | ✅    | ⚠️***    | ⚠️***  | ✅                 |
+
+> ⚠️* **TEZI**: Toradex Easy Installer
+⚠️** **TCB**: TorizonCore Builder
+⚠️*** **VS Code Extension**: are not all the templates that support RISC-V and x86-64 architectures
+
+## License
+
+All metadata is [MIT licensed](./LICENSE) unless otherwise stated. Source code and
+binaries included in tree for individual recipes is under the LICENSE
+stated in each recipe unless otherwise stated.

classes/image_type_torizon.bbclass

@@ -28,7 +28,7 @@ EXTRA_IMAGECMD:ota-ext4:qemuarm64 = "-O ^64bit,^metadata_csum -L otaroot -i 4096
 
 IMAGE_CMD:ota:prepend() {
 	if [ "${OSTREE_BOOTLOADER}" = "u-boot" ]; then
-		cp -a ${DEPLOY_DIR_IMAGE}/boot.scr-${MACHINE} ${OTA_SYSROOT}/boot.scr
+        cp -a ${DEPLOY_DIR_IMAGE}/boot.scr-${MACHINE} ${OTA_SYSROOT}/boot.scr
 	fi
 }
 do_image_ota[depends] += "${@'u-boot-default-script:do_deploy' if d.getVar('OSTREE_BOOTLOADER') == 'u-boot' else ''}"
@@ -39,7 +39,8 @@ def get_tdx_ostree_purpose(purpose):
 TDX_OSTREE_PURPOSE ?= "${@get_tdx_ostree_purpose(d.getVar('TDX_PURPOSE'))}"
 
 # Use new branch naming
-OSTREE_BRANCHNAME = "${TDX_MAJOR}/${MACHINE}/${DISTRO}/${IMAGE_BASENAME}/${TDX_OSTREE_PURPOSE}"
+OSTREE_BRANCHNAME = "${TDX_RELEASE}-${MACHINE}"
+GARAGE_TARGET_VERSION = "${TDX_RELEASE}"
 
 # Force ostree summary to be updated
 OSTREE_UPDATE_SUMMARY = "1"
@@ -182,6 +183,22 @@ ROOTFS_POSTPROCESS_COMMAND += "tweak_os_release_variant;"
 tweak_os_release_variant () {
 	if [ -n "${IMAGE_VARIANT}" ]; then
 		sed -i -e "s/^VARIANT=.*$/VARIANT=\"${IMAGE_VARIANT}\"/g" ${IMAGE_ROOTFS}${sysconfdir}/os-release
+
+		if [ "${IMAGE_VARIANT}" = "Docker" ]; then
+			# We build docker-compose as a standalone binary in docker-compose recipe,
+			# which is installed as ${bindir}/docker-compose, but we'd also like to
+			# allow it to be run as a docker plugin 'docker compose', create the link
+			# to support that.
+			install -d ${IMAGE_ROOTFS}${nonarch_libdir}/docker/cli-plugins
+			ln -sf ${bindir}/docker-compose ${IMAGE_ROOTFS}${nonarch_libdir}/docker/cli-plugins/docker-compose
+		fi
+
+		if [ "${IMAGE_VARIANT}" = "Podman" ]; then
+			# Allow torizon user to execute podman without password
+			echo >> ${IMAGE_ROOTFS}${sysconfdir}/sudoers.d/50-torizon
+			echo "# torizon user can execute podman without password" >> ${IMAGE_ROOTFS}${sysconfdir}/sudoers.d/50-torizon
+			echo "torizon ALL=(ALL) NOPASSWD:/usr/bin/podman" >> ${IMAGE_ROOTFS}${sysconfdir}/sudoers.d/50-torizon
+		fi
 	else
 		bbwarn "IMAGE_VARIANT is missing, would be better to define it for a TorizonCore image recipe."
 	fi
@@ -494,7 +511,7 @@ get_torizon_prov_data2() {
     # but may have different permissions; make sure they are correct.
     chmod 0750 "${destdir}/import/repo" || true
     chmod 0750 "${destdir}/import/director" || true
-    
+
     if [ "${TORIZON_SOTA_PROV_MODE}" = "online" ]; then
         tmp="${destdir}/tmp/provision.json"
         dst="${destdir}/auto-provisioning.json"