build-pipeline-ci-test.yml

@@ -41,6 +41,7 @@ build:files:
     GIT_STRATEGY: none
   before_script:
     - !reference [.docker_check]
+    - !reference [.setup_ssh]
     - !reference [.setup_git_credentials]
     - !reference [.repo_checkout]
   script:
@@ -72,6 +73,7 @@ build:check-foo-branch:
     GIT_STRATEGY: none
   before_script:
     - !reference [.docker_check]
+    - !reference [.setup_ssh]
     - !reference [.setup_git_credentials]
     - !reference [.repo_checkout]
   script: |

build-pipeline-yocto.yml.jinja2

@@ -82,15 +82,17 @@ build-{{ machine }}:
     - source build.env
     # yamllint disable-line rule:line-length
 {%- if machine == "seco-mx6" %}
-    - export SUPPORTED_HARDWARE="     SANTARO,     SANTOKA,     SANTINO,     SANTINO LT,     SANTVEND, "
+    - export SUPPORTED_HARDWARE="     SANTARO,     SANTOKA,     SANTINO,     SANTINO-LT,     SANTVEND, "
 {%- elif machine == "seco-mx8mm" %}
     - export SUPPORTED_HARDWARE="     TANARO, "
+{%- elif machine == "seco-mx8mp" %}
+    - export SUPPORTED_HARDWARE="     SOM-Trizeps-VIII-MX8M-Plus, "
 {%- elif machine == "seco-mx93" %}
-    - export SUPPORTED_HARDWARE="     MAURY, "
-{%- elif machine == "seco-genio700" %}
-    - export SUPPORTED_HARDWARE="     SOM-SMARC-Genio700, "
+    - export SUPPORTED_HARDWARE="     SOM-SMARC-MX93, "
 {%- elif machine == "seco-genio510" %}
     - export SUPPORTED_HARDWARE="     SOM-SMARC-Genio510, "
+{%- elif machine == "seco-genio700" %}
+    - export SUPPORTED_HARDWARE="     SOM-SMARC-Genio700, "
 {%- endif %}
     - !reference [.save_build_env]
 
@@ -105,7 +107,7 @@ build-{{ machine }}:
 # Run platform tests for this machine which the yocto image
 # This is a little hacky as we need to match the machine name to
 # the available platforms
-# 
+#
 # @TODO: We don't have devices for the i.MX93 and Genio 700 in
 # LAVA yet. Enable the tests here, when the new devices have
 # been added.
@@ -121,14 +123,14 @@ build-{{ machine }}:
   {% set platforms = "tanaro" %}
   {% set lava_machine = "imx8mguf" %}
 #{% elif machine == 'seco-mx93' %}
-#  {% set platforms = "maury" %}
+#  {% set platforms = "som-smarc-mx93" %}
 #  {% set lava_machine = "mx93" %}
-#{% elif machine == 'seco-genio700' %}
-#  {% set platforms = "som-smarc-genio700" %}
-#  {% set lava_machine = "genio700" %}
 #{% elif machine == 'seco-genio510' %}
 #  {% set platforms = "som-smarc-genio510" %}
 #  {% set lava_machine = "genio510" %}
+#{% elif machine == 'seco-genio700' %}
+#  {% set platforms = "som-smarc-genio700" %}
+#  {% set lava_machine = "genio700" %}
 {% else %}
   {% set platforms = '' %}
   {% set lava_machine = '' %}

build-pipeline.yml

@@ -21,6 +21,30 @@ workflow:
         exit 1
     fi
 
+.setup_ssh: &setup_ssh
+  # Setup ssh key to access private repos
+  # https://docs.gitlab.com/ee/ci/ssh_keys/#ssh-keys-when-using-the-docker-executor
+  # An SSH keypair has been generated for the manifest's pipeline to be able to access
+  # all private repositories in the manifest. The private key has been stored in the
+  # CI/CD variable GITLAB_PRIVATE_KEY of the manifest repository. The public key has
+  # been added as a deploy key in GitLab's repository settings for all contained
+  # repositories.
+  - echo "Setup SSH"
+  - eval $(ssh-agent -s)
+  - echo "$GITLAB_PRIVATE_KEY" | tr -d '\r' | ssh-add -
+  - mkdir -p ~/.ssh
+  - chmod 700 ~/.ssh
+  # Add GitLab server to known hosts
+  # https://docs.gitlab.com/ee/ci/ssh_keys/#verifying-the-ssh-host-keys
+  # In order to access the private repositories via SSH, the GitLab server has to be
+  # added to the known_hosts file. The host keys were determined using the command
+  #   ssh-keyscan [-p port] <gitlab-server>
+  # and have been stored in the GITLAB_KNOWN_HOSTS CI/CD variable.
+  - echo "$GITLAB_KNOWN_HOSTS" >> ~/.ssh/known_hosts
+  - chmod 644 ~/.ssh/known_hosts
+  # Write SSH configuration from variable to config file
+  - echo "$SSH_CONFIG" > ~/.ssh/config
+
 .setup_git_credentials: &setup_git_credentials
   - echo "Setup Git Credentials Cache"
   - git config --global credential.helper 'cache --timeout 86400'
@@ -244,6 +268,7 @@ workflow:
     FNG_INSTALL_URL: "${JOB_URL}/artifacts/${IMAGE_PATH}/${INSTALL_SCRIPT}"
   before_script:
     - *docker_check
+    - *setup_ssh
     - *setup_git_credentials
     - *repo_checkout
     - *setup_build
@@ -321,6 +346,7 @@ workflow:
     reports:
       junit: results/results-*.xml
   before_script:
+    - !reference [.setup_ssh]
     - !reference [.setup_git_credentials]
   script:
     - .gitlab-ci/scripts/download_file_from_latest_job.py