Bugreport for Easy Installer v6: set capabilities not working anymore

[Mowlwurf]

Hello,

in this topic I descriped how it is possible to set capabilites for binaries located in /usr/bin when building a Torizon image with Yocto.

When flashing the image with Easy Installer v5.7.6+build.21 to a Verdin iMX8MM this solution works without problems.
But when I flash the very same image with the latest version of Easy Installer v6.8.1+build.9 then the capabilities are not set on the device.

Best regards,
Markus

[ToradexAI]

Hi, I’m the Toradex AI Assistant. The Toradex Support team will follow up with you shortly!

Did you like my answer?

---

Hello Markus,

Thank you for reaching out with your concern about setting capabilities on binaries when using different versions of the Toradex Easy Installer. It seems that the issue arises when using version 6.8.1 compared to version 5.7.6.

Here are some steps you can take to troubleshoot and potentially resolve this issue:

1. Verify Capabilities Setting Process: Double-check the process you use to set capabilities in your Yocto build. Ensure that the method is compatible with any changes in the newer Easy Installer version.

2. Compare Installer Logs: Use the serial console to access the Easy Installer’s shell and check the log file at /var/volatile/tezi.log for any errors or warnings that might indicate why capabilities are not being set. Compare logs from both versions to identify any differences.

3. Check for Changes in Easy Installer: Review the release notes or changelog for Toradex Easy Installer v6.8.1 to see if there are any documented changes related to file handling or capabilities that might affect your setup.

4. Test with a Minimal Image: Create a minimal image with just the necessary components and test if the capabilities are set correctly. This can help isolate the issue to specific changes in the installer or your image configuration.

5. Consult Documentation: Ensure that your method of setting capabilities aligns with the latest best practices as outlined in the Toradex documentation for the version of the Easy Installer you are using.

By following these steps, you should be able to identify the root cause of the issue and adjust your process accordingly.

Best regards,
Toradex AI Assistant

Please, also check if these links can help you solve your problem:

Torizon-minimal: use of capabilities

Hello, in the torizon-minimal image (no docker functionality) I want to set the Linux capabilities for an application located in /usr/bin. But since it’s a read-only filesystem the command setcap is not successful. Is there another way to set the capabilities? Maybe during build-time of the rootfs? Best regards, Markus

Run Toradex Easy Installer on Colibri iMX8X

Hello, my procedure for flashing a Linux image was the following on an iMX7D on Viola Board: Download Easy Installer and extract onto micro SD card Insert Sd card in the Viola Board and run the mmc-bootcmd to boot the Easy installer Then copy the desired image onto a USB stick, insert it and flash with the previously booted Easy installer Now I basically want to do the same on an iMX8DX on the same Viola Board. When I first received the module there was no Easy Installer per default, but the…

Apalis iMX8QP V1.0B HDMI problem.

[Mowlwurf]

Here are the logs of Easy Installer the @ToradexAI mentioned:

• v5.7.6.txt (5.4 KB)
• v6.8.1.txt (6.1 KB)

This line in the v6-log is interesting:

Write pipe stderr output: "tar: setxattrat: Cannot set 'security.capability' extended attribute for file './ostree/repo/objects/ba/a9696f81a5fd8f7b48f283ca2e4cf2804e5d6779afae8fb4910b07a4135a18.file': Operation not supported\ntar: setxattrat: Cannot set 'security.capability' extended attribute for file './ostree/repo/objects/06/a227df115030a4b6b79bf5fc7881f172c101871c36e49e438f72677d2a4706.file': Operation not supported\n"

It seems that the kernel of the v6 Easy Installer does not support the use of capabilities (CONFIG_EXT4_FS_SECURITY).

Best regards,
Markus

[bruno.tx]

Hello @Mowlwurf,

Thanks for bringing this up and providing the logs.

@Mowlwurf

It seems that the kernel of the v6 Easy Installer does not support the use of capabilities (CONFIG_EXT4_FS_SECURITY).

After looking into this, it appears that the missing CONFIG_EXT4_FS_SECURITY is the culprit.
I can also confirm that this is not a problem for the Toradex Easy Installer version 7.

I will bring this up internally and give updates here as we decide on how to proceed with this topic.

For now, my recommendation is that you either keep using Toradex Easy Installer 5.7 or move to Toradex Easy Installer 7.1 if possible.

Best Regards,
Bruno

[Mowlwurf]

Hello @bruno.tx,

where can I find the Easy Installer 7? On the official download site the last version offered is v6.8.1+build.9.

Best regards,
Markus

[bruno.tx]

Hello @Mowlwurf,

It seems that the developer website page has not been updated yet.

You can find it for all modules by navigating here: Index of tezi-oe-prod-frankfurt/scarthgap-7.x.y/release/3

For the Verdin iMX8MM, the download link is the following: https://tezi.toradex.com/artifactory/tezi-oe-prod-frankfurt/scarthgap-7.x.y/release/3/verdin-imx8mm/tezi/tezi-run/oedeploy/Verdin-iMX8MM_ToradexEasyInstaller_7.1.0+build.3.zip

Best Regards,
Bruno

[bruno.tx]

Hello @Mowlwurf,

This problem has been resolved.
The fix is available in the latest nightly 6.8 Toradex Easy Installer Images and will be part of the 6.8.2 release.

Best Regards,
Bruno