in this topic I descriped how it is possible to set capabilites for binaries located in /usr/bin when building a Torizon image with Yocto.
When flashing the image with Easy Installer v5.7.6+build.21 to a Verdin iMX8MM this solution works without problems.
But when I flash the very same image with the latest version of Easy Installer v6.8.1+build.9 then the capabilities are not set on the device.
Hi, I’m the Toradex AI Assistant. The Toradex Support team will follow up with you shortly!
Did you like my answer?
Hello Markus,
Thank you for reaching out with your concern about setting capabilities on binaries when using different versions of the Toradex Easy Installer. It seems that the issue arises when using version 6.8.1 compared to version 5.7.6.
Here are some steps you can take to troubleshoot and potentially resolve this issue:
Verify Capabilities Setting Process: Double-check the process you use to set capabilities in your Yocto build. Ensure that the method is compatible with any changes in the newer Easy Installer version.
Compare Installer Logs: Use the serial console to access the Easy Installer’s shell and check the log file at /var/volatile/tezi.log for any errors or warnings that might indicate why capabilities are not being set. Compare logs from both versions to identify any differences.
Check for Changes in Easy Installer: Review the release notes or changelog for Toradex Easy Installer v6.8.1 to see if there are any documented changes related to file handling or capabilities that might affect your setup.
Test with a Minimal Image: Create a minimal image with just the necessary components and test if the capabilities are set correctly. This can help isolate the issue to specific changes in the installer or your image configuration.
Consult Documentation: Ensure that your method of setting capabilities aligns with the latest best practices as outlined in the Toradex documentation for the version of the Easy Installer you are using.
By following these steps, you should be able to identify the root cause of the issue and adjust your process accordingly.
Best regards,
Toradex AI Assistant
Please, also check if these links can help you solve your problem:
Write pipe stderr output: "tar: setxattrat: Cannot set 'security.capability' extended attribute for file './ostree/repo/objects/ba/a9696f81a5fd8f7b48f283ca2e4cf2804e5d6779afae8fb4910b07a4135a18.file': Operation not supported\ntar: setxattrat: Cannot set 'security.capability' extended attribute for file './ostree/repo/objects/06/a227df115030a4b6b79bf5fc7881f172c101871c36e49e438f72677d2a4706.file': Operation not supported\n"
It seems that the kernel of the v6 Easy Installer does not support the use of capabilities (CONFIG_EXT4_FS_SECURITY).
Thanks for bringing this up and providing the logs.
After looking into this, it appears that the missing CONFIG_EXT4_FS_SECURITY is the culprit.
I can also confirm that this is not a problem for the Toradex Easy Installer version 7.
I will bring this up internally and give updates here as we decide on how to proceed with this topic.
For now, my recommendation is that you either keep using Toradex Easy Installer 5.7 or move to Toradex Easy Installer 7.1 if possible.