Page History

Benefits of Kirkstone:

• There are 93 Security Fixes
• Components where security fixes are added :- binutils, curl, epiphany, expat, ffmpeg, gcc, glibc, gmp, go, grub2, gzip, libarchive, libxml2, libxslt, lighttpd, linux-yocto, amdgpu, lua, openssl, qemu , rpm , seatd , speex , squashfs-tools , systemd , tiff , unzip , vim , virglrenderer , webkitgtk , xz , zlib
• There are 318 opensource component version upgrades
• Major opensource upgrades (Dunfell → Kirkstone) are :- GCC (9.3 → 11.3) , glibc (2.31 → 2.35) , glib-2.0 (2.62.4 → 2.72.3), systemd (244.3 → 250.5) , busybox (1.31.1 → 1.35.0)
• Netflix upgrade, youtube
• GCC compiler
• clang compiler, C++ 17 
• Maintainability - Dunfell 4 years ; Kirkstone 2 years ; CVE Dunfell is sill open (Refer Yocto mailing list), Upstream dunfell 3.1.24 has open CVE
• Build time - reduce number of default dependency (make build faster in first/second time)
• meta-rust is in core
• software bill of material (security infrastructure)
• share state - c standard. faster sstsate performance due to decompression standard cstd (twice faster than xz)
• license management tool improvement (more accurate license compliance)
• Kirkstone need minimum 4.x kernel (refer systemd)
• linux_kernel_header does not mandate

...

Migration Efforts:

To tackle the build issues from moving one version to another, we have decided to split the problem into different subtasks. So instead of building a complete image at one go, we have planned for the generation of the following images:

• core-minimal-image 
• rdk-generic-broadband-image

These images need to be tested in cmf, to ensure that nothing has broken the existing system.

In order to provide a smooth transition without disturbing the existing branch, we have created a branch called `feature-kirkstone` for non-OE layers and another branch called `rdk/kirkstone` for OE layers and 2.2 revision for bitbake

VM Setup Guidelines:

TBD