Hi All,
I'm compiling OpenWRT for the Raspberry Pi 3B+. I'm creating an AARCH64 build and an Armv7 build.
AARCH64 build has this:
#
# Main target (bcm27xx)
#
CONFIG_TARGET_brcm2708=y
#
# Subtarget (bcm2709+ for RPi2 and up)
#
# CONFIG_TARGET_brcm2708_bcm2708 is not set
# CONFIG_TARGET_brcm2708_bcm2709 is not set
CONFIG_TARGET_brcm2708_bcm2710=y
#
# Profile (RPi 2+)
#
# CONFIG_TARGET_brcm2708_bcm2709_DEVICE_rpi is not set
# CONFIG_TARGET_brcm2708_bcm2709_DEVICE_rpi-2 is not set
CONFIG_TARGET_brcm2708_bcm2710_DEVICE_rpi-3=y
Armv7 build has this:
#
# Main target (bcm27xx)
#
CONFIG_TARGET_brcm2708=y
#
# Subtarget (bcm2709+ for RPi2 and up)
#
# CONFIG_TARGET_brcm2708_bcm2708 is not set
CONFIG_TARGET_brcm2708_bcm2709=y
# CONFIG_TARGET_brcm2709_bcm2710 is not set
#
# Profile (RPi 2+)
#
# CONFIG_TARGET_brcm2708_bcm2709_DEVICE_rpi is not set
CONFIG_TARGET_brcm2708_bcm2709_DEVICE_rpi-2=y
# CONFIG_TARGET_brcm2708_bcm2710_DEVICE_rpi-3 is not set
Problem I'm having is that when I look at zcat /proc/config.gz | grep SECCOMP the AARCH64 build has
CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
CONFIG_SECCOMP_FILTER=y
CONFIG_SECCOMP=y
When I look at the Armv7 build the same way I only see:
CONFIG_SECCOMP=y
The diff config I use for both architectures is:
# Shared configuration settings for all architectures
# CONFIG_TARGET_ROOTFS_SQUASHFS is not set
#
# These flags are required by greengrass
# (LXC_PATCH from blog post here: https://aws.amazon.com/blogs/iot/building-edge-solutions-on-openwrt-with-aws-iot-greengrass/)
#
CONFIG_KERNEL_BLK_CGROUP=y
CONFIG_KERNEL_CC_STACKPROTECTOR_REGULAR=y
CONFIG_KERNEL_CFQ_GROUP_IOSCHED=y
CONFIG_KERNEL_CGROUPS=y
CONFIG_KERNEL_CGROUP_CPUACCT=y
CONFIG_KERNEL_CGROUP_DEVICE=y
CONFIG_KERNEL_CGROUP_FREEZER=y
CONFIG_KERNEL_CGROUP_SCHED=y
CONFIG_KERNEL_CPUSETS=y
CONFIG_KERNEL_DEVPTS_MULTIPLE_INSTANCES=y
CONFIG_KERNEL_FREEZER=y
CONFIG_KERNEL_IOSCHED_DEADLINE=m
CONFIG_KERNEL_IPC_NS=y
CONFIG_KERNEL_LXC_MISC=y
CONFIG_KERNEL_MEMCG=y
CONFIG_KERNEL_MEMCG_SWAP=y
CONFIG_KERNEL_MM_OWNER=y
CONFIG_KERNEL_NAMESPACES=y
CONFIG_KERNEL_NETPRIO_CGROUP=y
CONFIG_KERNEL_NET_CLS_CGROUP=y
CONFIG_KERNEL_NET_NS=y
CONFIG_KERNEL_PID_NS=y
CONFIG_KERNEL_POSIX_MQUEUE=y
CONFIG_KERNEL_RESOURCE_COUNTERS=y
CONFIG_KERNEL_USER_NS=y
CONFIG_KERNEL_UTS_NS=y
CONFIG_KERNEL_SECCOMP_FILTER=y
CONFIG_KERNEL_SECCOMP=y
#
# Different doc mentions these kernel settings are also required but
# they are not listed in the above script.
#
CONFIG_KERNEL_KEYS=y
# Kernel configs from Diffconfig
CONFIG_KERNEL_BLK_DEV_THROTTLING=y
CONFIG_KERNEL_CGROUP_PIDS=y
#
# These kernel modules add functionality that we want.
#
CONFIG_PACKAGE_kmod-ikconfig=y
#
# This config fixes a shadow-utils problem by enabling secure crypt() methods
#
CONFIG_DEVEL=y
CONFIG_TOOLCHAINOPTS=y
CONFIG_MUSL_DISABLE_CRYPT_SIZE_HACK=y
Anyone know why I can't get SECCOMP_FILTER enabled?
Thanks!