intel-iot-refkit: pull in latest changes

* bitbake 2d0203f...8a60106 (31):
  > main: Attempt to gain bitbake.lock rather than just waiting
  > process: Clean up connection retry logic
  > fetch2: don't mandate path element in encodeurl()
  > bitbake: ui: Sort 'Dependent tasks' in taskexp
  > toaster: support custom Layer Index URL and fixture override
  > Toaster: custom start and stop actions
  > toaster: custom image updates and original creation
  > process: Ensure we call select() to know which fds to read
  > process: Increase server startup timeout
  > process: Improve client disconnects
  > cooker: Ignore common bitbake files for the parse cache invalidation
  > cooker: Improve inotify overflow handling
  > cooker: Ensure we handle inotify before running the next command
  > cooker: Track directories searched for bbappend/bb files
  > server/process: Ensure we don't loop on client EOFError
  > cooker/siggen: Reset siggen when reparsing
  > main: Handle BB_SERVER_TIMEOUT = -1 for no server timeout
  > process: Fix disconnect when BB_SERVER_TIMEOUT
  > main: Remove unneeded float()
  > Revert "tinfoil: fix duplication of log messages"
  > daemonize: Always print any remaning UI events at exit
  > cooker: Ensure all tasks are shown in task dependency tree
  > daemonize: clean up code
  > daemonize: Ensure child process exits safely
  > process: Add some extra server startup logs
  > process: Reorder server command processing and handle EOFError
  > wget: fix FusionForge workaround
  > toaster: move to new bitbake xmlrpc default
  > toaster: enable remote HTTP API for status aggregation
  > runqueue: Tweak debug message to make it more readable/diffable
  > fetch2: fix checkstatus fallback to MIRRORS

* meta-intel fe6f23e...e6d3676 (33):
  > lms: use sh instead of bash in notifyDesktop.sh
  > linux-intel: Update SRCREV
  > conf/machine/intel-*: move core-image-minimal-initramfs PACKAGE_INSTALL
  > images: add core-image-minimal-initramfs bbappend
  > sbsigntool: depend on openssl10
  > sbsigntool: port "sbsigntool: stop using gitsm fetcher" from refkit
  > efilinux: Enable muslx32 build
  > linux-yocto: Drop 4.1 kernel bbappends
  > linux-firmware: install iwlwifi LinuxCore driver firmware blobs
  > xf86-video-mga: upgrade 1.6.4 -> 1.6.5
  > dpdk-dev-libibverbs: Fix additional warnings
  > libyami-utils: Fix build with clang
  > efilinux: Fix build warnings
  > libyami: Fix build with musl/clang
  > linux-intel: Update SRCREVs
  > iwlwifi: skip host install scripts
  > dpdk: Fix build error on the core2-64
  > Revert "iwlwifi_git.bb: run make_scripts earlier"
  > iwlwifi: Fix install_append for usrmerge
  > dpdk: Link examples with BFD linker
  > dpdk: Fix build with examples
  > qat16: Fix build when ld-is-gold is set in DISTRO_FEATURES
  > libyami: Rename the file to be checked with LIC_FILES_CHKSUM
  > disable_skylake_sound: Temp disable config for core2-32
  > linux-intel: Add linux-intel to files search path
  > linux-intel: Update SRCREV for 4.9.35
  > dpdk: upgrade to version 17.05
  > linux-intel: refactor and remove iwlwifi modules for out of tree enablement
  > intel-common-pkgarch: Add out of tree modules
  > iwlwifi_git.bb: run make_scripts earlier
  > iwlwifi: Clean-up and use module_install
  > iwlwifi: include iwlwifi OOT driver in meta-intel layer.
  > intel-microcode: Upgrade recipe version

* meta-intel-realsense 7468b0c...211ce75 (3):
  > ReadMe: Fix layer name in Wind River instructions
  > Merge branch 'master' of https://github.com/IntelRealSense/meta-intel-realsense
  > ReadMe: Update supported Yocto versions

* meta-security 89683b4...25b8f02 (8):
  > apparmor: Additional runtime fixes
  > libmhash: add new recipe
  > libgssglue: add new recipe
  > nmap: upgrade to 7.50
  > keynote: add new recipe
  > tpm2.0-tools: update to 2.0.0 plus
  > xmlsec1: add new recipe
  > apparmor: Rework such that the utilities are functional by default

* meta-yocto 76dd79e...a09b543 (10):
  > maintainers.inc: assign newly added recipes
  > maintainers.inc: fix pn- override
  > conf-notes.txt: add shell environment header
  > linux-yocto: Drop 4.1 kernel appends
  > poky: bump poky lsb to linux 4.9
  > poky: bump preferred version of linux-yocto to 4.12
  > poky: Add nios2 to list of qemu targets
  > poky.conf: Enable vulkan by default
  > maintainers.inc: assign newly added recipes
  > poky-world-exclude.inc: remove recipes from meta-qt4

* openembedded-core a2ab288..a8b89b3 (308):
  > default-providers: Add entries for pkgconfig (due to pkg-conf being added)
  > populate_sdk_ext: Add BB_SERVER_TIMEOUT to SDK_LOCAL_CONF_BLACKLIST
  > boost: add python to default PACKAGECONFIG options
  > kernel-yocto: relax BSP definition test
  > acl_2.25: improve reproducibility
  > attr: improve reproducibility
  > initramfs-framework/setup-live: quote bootparam_root variable
  > webkitgtk: disable gobject-introspection on armv7a
  > core/target/ssh.py: use reader to handle partial data
  > libinput: remove obsolete touchpad patch
  > gpg_sign: depress the owership warnings on homedir
  > kernel-yocto: fix typo in error message
  > vulkan: Only build when 'vulkan' distro flag is set
  > buildhistory.bbclass: add ptest
  > testimage.bbclass: update comments
  > buildhistory.bbclass: print message when no commit
  > core/target/ssh.py: replace decode errors
  > utils/logparser.py: fix section check
  > runtime/cases/_ptest.py: rename it to ptest.py
  > runtime/cases/_ptest.py: add skip status
  > oeqa/utils/logparser.py: add skip status
  > runtime/cases/_ptest.py: revive it
  > bmap-tools: add "python-mmap" to RDEPENDS
  > libva-utils: add opengl to REQUIRED_DISTRO_FEATURES
  > staging: add missing import errno to staging_populate_sysroot_dir
  > recipetool: create: fix npm license code regression
  > recipetool: create: fix broken import in npm module
  > runqemu: Use virtio to mount cdrom drives
  > oeqa/parselogs: Ignore device node warnings on mips
  > systemd-machine-units: import last recipe from meta-systemd
  > systemd: add dependency on initscripts-sushell for selinux
  > initscripts: split sushell into sub package
  > linux-firmware: package ibt-firmware
  > linux-firmware: package iwlfifi-3160-[10-17] firmware
  > valgrind: improvements for run-ptest
  > pkgconf: add recipe
  > meta: move some text from oe-setup-builddir to conf-notes.txt
  > build-appliance-image: include proxy on pip3 installation
  > oe/path.py: copyhardlinktree: don't overwrite existing symlinks
  > kernel.bbclass: external toolchain fix
  > python2.7: improve reproducibility
  > linux-yocto/4.10: CVE & misc fixes
  > kernel-yocto: ensure that only valid BSPs are built
  > qemu: bump default version to 4.12
  > libc-headers: update to 4.12
  > linux-yocto: remove 4.1 recipes
  > linux-yocto: introduce 4.12 recipes
  > linux-yocto: add usb-net configs by default
  > linux-yocto/4.1: fix fsl-ls10xx sdhci
  > kernel-yocto: configuration updates: x86 features
  > ghostscript: CVE-2017-9727, -9835, -11714
  > ghostscript: fix several CVEs by adding bounds checking
  > grub2: fix build on gcc where _FORTIFY_SOURCE is defined
  > tiff: Security fixes
  > machine-sdk: oldest kernel for x86/x86_64 is 3.2.0 now
  > libcheck: fix file-rdeps QA issue
  > squashfs: fix build with glibc-2.26
  > apt: Upgrade to 1.2.24
  > dpkg: Upgrade to 1.18.24
  > strace: 4.17 -> 4.18
  > e2fsprogs: 1.43.4 -> 1.43.5
  > tcl: 8.6.6 -> 0.8.7
  > libbsd: 0.8.5 -> 0.8.6
  > git: 2.13.2 -> 2.13.3
  > kernel-module-split: rrecommend kernel-image instead of rdepend
  > connman: Fix for CVE-2017-12865
  > gnupg: 2.1.20 -> 2.1.23
  > gdk-pixbuf: fix ptest RDEPENDS for multilib build
  > recipetool: allow plugins to set LICENSE and LIC_FILES_CHKSUM
  > recipetool: allow plugins to set PN / PV more easily
  > devtool: import: new plugin to import the devtool workspace
  > devtool: append md5sum only if not already present
  > devtool: export: new plugin to export the devtool workspace
  > devtool: upgrade: enable branch checking when revision is provided
  > recipetool: create: replacing PV in SRCURI
  > recipetool: create: handle git URLs specifying only a tag
  > recipetool: create: being able to set branch when revision is provided
  > recipetool: create: disable PREMIRRORS and MIRRORS by default
  > devtool/copy_buildsystem: adds meta-skeleton layer in the eSDK installation.
  > initramfs-framework/setup-live: also boot live image if root=/dev/ram0
  > openssl10: rename back to openssl and make it the default via PREFERRED_VERSION
  > prelink: Change the behavior to avoid checking USER_CLASSES
  > qemu conf: replace deprecated option with new option
  > qemu: backport patches to fix boot failure
  > ruby: fix CVE-2017-922{6-9}
  > dnf: fix "Unable to detect release version" warning
  > cve-check-tool: Fix progress bar patch for curl 7.55
  > mesa: update to 17.1.6
  > webkitgtk: Add a recommends on shared-mime-info.
  > mpg123: upgrade to 1.25.6
  > oeqa: increase verbosity of dnf commands in dnf packagefeed test
  > perl: Don't change /usr/include references in docs to sysroot paths
  > libtool: remove /absolute/path/to/host references
  > valgrind: disable build for muslx32
  > goarch: Disable build for muslx32
  > openssl10: modified the define cryptodev
  > mesa: Fix build with llvmpipe enabled on musl
  > rootfs-postcommands.bbclass: Filter out dangling symlinks in ssh_allow_empty_password()
  > cairo: Fix CVE-2017-9814
  > libsndfile1: Fix CVE-2017-8363
  > libsndfile1: Fix CVE-2017-8362
  > libsndfile1: Fix CVE-2017-8361 and CVE-2017-8365
  > wget: Security fix CVE-2017-6508
  > xserver-xorg: Fix CVE-2017-10971
  > rootfs-postcommands.bbclass: Prevent linking testdata to itself
  > qemuboot.bbclass: Prevent creating a link loop
  > copy_buildsystem: include layer tree during build structure creation
  > report-error: provide distro identifier string in case of uninative build
  > sign_rpm: Allow pkg signing by chunks through RPM_GPG_SIGN_CHUNK
  > systemd-boot: Move adjacent to systemd
  > logrotate: fix systemd service not found while multilib
  > bash: 4.3.30 -> 4.4
  > gpgme: remove local m4/python.m4
  > gpgme: 1.8.0 -> 1.9.0
  > build-appliance-image: Don't use COREBASE/LICENSE for checksumming
  > mc: unify curses initialization
  > connman: Remove musl patch that's no longer needed
  > packagefeed-stability.bbclass: change another bb.plain to bb.note
  > sqlite3: upgrade to 3.2.0
  > ncurses: 6.0+20161126 -> 6.0+20170715
  > libgcrypt: 1.7.8 -> 1.8.0
  > elfutils: 0.168 -> 0.170
  > dhcp: 4.3.5 -> 4.3.6
  > apr-util: 1.5.4 -> 1.6.0
  > cross-canadian.bbclass: add ilp32 support
  > package.bbclass: support persistent /var/log
  > initscripts: support persistent /var/log
  > base-files: respect VOLATILE_LOG_DIR
  > bitbake.conf: add VOLATILE_LOG_DIR variable
  > shadow: fix CVE-2017-12424
  > nss: 3.30.2 -> 3.31.1
  > harfbuzz: upgrade to 1.4.8
  > screen: upgrade to 4.6.1
  > ruby: fix CVE-2017-9224
  > python3-native: Add python3-misc-native to RPROVIDES
  > mkelfimage: Make -fno-stack-protector effective
  > rpm: Disable perl dependency generation
  > package.bbclass: Restore functionality to detect RPM dependencies
  > ltp: Skip the filedependency scan
  > openssl: Add missing bash/python rdepends for ptest
  > bind: Use correct python interpreter path
  > image.bbclass: drop initramfs bundle related code
  > qemu: upgrade to 2.10-rc2
  > gmp: improve reproducibility
  > cairo: Add pkgconfig for opengl support
  > musl: Update to latest master
  > gstreamer1.0-plugins-bad: do not provide a fallback to openssl 1.0
  > gst-player: remove workaround which disable visualizations
  > libva: upgrade to 1.8.3
  > libva-utils: add recipe
  > libarchive: Remove xz packageconfig --with-lzmadec option
  > liburi-perl: Upgrade to 1.72
  > llvm: Swith to ARM ISA on armv5 and armv4t
  > package_rpm.bbclass: Filter out unwanted file deps for nativesdk packages
  > texinfo: Avoid a problem with a dependency on perl(Locale::gettext_xs)
  > git: Do not install git cvsserver and git svn by default
  > rpm: Add dependencies on bash, perl and python3-core
  > gpg_sign: perform rpm signing serially
  > packagegroup-self-hosted: include missing (pod2man scp ssh) RPEDENDS packages
  > systemd: Fix rootfs transaction error when PACKAGECONFIG has polkit
  > openssl10: Fix conflict between openssl and openssl10 man pages.
  > syslinux: Update HOMEPAGE
  > recipetool: create: fix incorrect URL variable usage
  > libx11: Add patch to fix hanging issue in _XReply
  > libtasn1: CVE-2017-10790
  > nspr: 4.14 -> 4.16
  > iproute2: add tipc support
  > gcc: Upgrade to 7.2.0 release
  > gdk-pixbuf: Upgrade 2.36.6 -> 2.36.8
  > glib-2.0: Upgrade 2.52.2 -> 2.52.3
  > fontconfig: Upgrade 2.12.1 -> 2.12.4
  > cairo: Upgrade 1.14.8 -> 1.14.10
  > dnf: expand dnf selftest to test signed package feeds
  > oeqa: fix temp file handling in dnf package feed test
  > oeqa: fix dnf tests
  > package_manager.py: enable dnf's repo_gpgcheck if feed signing is enabled
  > sign_package_feed.bbclass: install signing key into rootfs
  > signing-keys: delete unused tasks
  > dnf: rrecommend gnupg
  > lib/oe/package_manager: re-implement rpm feed signing
  > util-linux-native: Avoid use of getrandom
  > python3-native: Avoid use of getentropy/getrandom
  > packagefeed-stability.bbclass: change a bb.plain to bb.note
  > selftest/tinfoil: Filter LogRecords in test_event_wait
  > expat: Don't use getrandom() in the -native case
  > site/ix86-common: Drop ac_cv_sizeof_ino_t as it can be incorrect with large file support
  > image.bbclass: support binary reproducibility
  > kernel.bbclass: improve reproducibility
  > image-prelink.bbclass: support binary reproducibility
  > busybox.inc: improve reproducibility
  > python3: improve reproducibility
  > u-boot: update nios2 device tree for 10m50 board
  > e2fsprogs-doc: binary reproducible
  > python3-docutils: update to 0.14
  > python*-setuptools: update to 36.2.7
  > sysstat: fix creating configuration file for /var/log/sa
  > externalsrc: Handle .git not being a directory
  > expat: Upgrade to 2.2.3
  > ltp: upgrade to upstream latest commit on 20170804
  > mesa: Fix build with vulkan on non-x86
  > image.bbclass: delete DATE variable too
  > run-postinsts: do not reload daemon configuration
  > opkg-configure: do not reload daemon configuration
  > dpkg-configure: do not reload daemon configuration
  > rm_work: fix build break for do_image_complete
  > musl: Build only in ARM mode when using clang
  > gstreamer1.0-python: upgrade to version 1.12.2
  > gstreamer1.0-vaapi: upgrade to version 1.12.2
  > gstreamer1.0-libav: upgrade to version 1.12.2
  > gstreamer1.0-omx: upgrade to version 1.12.2
  > gstreamer1.0-rtsp-server: upgrade to version 1.12.2
  > gstreamer1.0-plugins-ugly: upgrade to version 1.12.2
  > gstreamer1.0-plugins-bad: upgrade to version 1.12.2
  > gstreamer1.0-plugins-good: upgrade to version 1.12.2
  > gstreamer1.0-plugins-base: upgrade to version 1.12.2
  > gstreamer1.0: upgrade to version 1.12.2
  > selftest: fix distrodata.py to use per-recipe UPSTREAM_VERSION_UNKNOWN setting
  > pax-utils: check upstream version from debian servers
  > v86d: take tarball from debian
  > assimp: fix upstream version check
  > distrodata.bbclass: add UPSTREAM_VERSION_UNKNOWN and UPSTREAM_CHECK_UNRELIABLE
  > populate_sdk_base.bbclass: add handling package exclusions to do_populate_sdk
  > binutils: Upgrade to 2.29
  > image-prelink: Disable for musl images
  > python-numpy: Upgrade to 1.13.1
  > gstreamer-plugins-bad: replace openssl dependency with nettle for hls plugin
  > qemu: apic: fallthrough to PIC
  > musl: Drop the protected symbol optimization at configure time
  > sstatetests: limit the number of signature comparisons when differ
  > cryptodev-tests: depend on openssl 1.0
  > openssh: depend on openssl 1.0
  > openssl: add a 1.1 version
  > ca-certificates: update to 20170717
  > insane: remove last remnants of unsafe-references-in-binaries check
  > insane: remove unsafe-references-in-scripts check
  > oeqa/buildoptions: remove unsafe-references-in-script test
  > gcc7: fix potential segmentation fault
  > btrfs-tools: update to 4.12
  > gptfdisk: update to 1.0.3
  > babeltrace: update to 1.5.3
  > ffmpeg: update to 3.3.3
  > libdnf: update to 0.9.3
  > dnf: update to 2.6.3
  > python2/python3: fix multiprocessing.BoundedSemaphore not work on qemux86/qemuarm
  > recipes-kernel: linux-dummy: provide dummy vmlinux package
  > context: Include a command line argument to run all except certain tests
  > oeqa/runtime_test: use subtests in test_postinst_rootfs_and_boot
  > glibc: Upgrade to 2.26 final release
  > llvm: Keep llvm-native dependency with clang toolchain
  > valgrind: enable on mips soft-float
  > openssl: Support musl-x32 build
  > wayland-protocols: upgrade to 1.10
  > eudev: Remove udev-cache
  > slang: fix terminfo related problems
  > systemd: update to 234
  > libid3tag: fix build with gperf 3.1
  > libcap: fix build with gperf 3.1
  > gperf: upgrade to 3.1
  > libinput: Upgrade 1.7.3 -> 1.8.1
  > checkpkg_exceptions: add LLVM
  > llvm: Raise SkipRecipe exception for unsupported architectures
  > mesa, llvm: Use native version of llvm-config
  > mesa: Depend on llvm-native
  > mesa: Use chrpath to delete rpaths
  > action: new bitbake-layer plugin to create a simple layer
  > scripts/oe-publish-sdk: use hook to call git update-server-info
  > devtool: sdk-update: fix pulling updates from git
  > package_manager: Fix support for NO_RECOMMENDATONS
  > gtk-icon-utils-native: 3.22.16 -> 3.22.17
  > gtk+3: 3.22.16 -> 3.22.17
  > x86-base.inc: enable live image type
  > chrpath: use https for SRC_URI
  > initramfs-framework/setup-live: remove superfluous break
  > automake: Add missing libtool tag for cppasm language
  > libpng: upgrade to 1.6.31
  > gettext.bbclass: also search for files in target sysroot
  > webkitgtk: Do not use -isystem forcibly
  > python3-pycairo: Pass -fPIC via CFLAGS
  > go: Remove -fPIE -pie from SECURITY_PIE_CFLAGS
  > kexec-tools: Remove -fPIE -pie from SECURITY_PIE_CFLAGS
  > libsdl: Pass --tag option to libtool invocation
  > libproxy: Remove PIE flags from SECURITY_PIE_CFLAGS
  > ossp-uuid, libffi, libgcrypt: Pass --tag=CC option to libtool
  > devtool: fix handling of errors during task execution
  > bitbake.conf: whitelist BB_SERVER_TIMEOUT from config hash
  > terminal: wait for terminal task to finish before procedding
  > Revert "cml1.bbclass: wait until menuconfig terminal finishes"
  > sstatetests: Use python function instead of bitbake-diffsigs script
  > diffstat: exclude aclocal
  > diffstat: use HTTP mirror for SRC_URI
  > qemux86 qemux86-64: Enable pci
  > librsvg: 2.40.17 -> 2.40.18
  > python: don't include -tests with modules
  > wic: improve generating disk system identifier
  > meta: drop do_bootdirectdisk do_vmimg references
  > autoconf-archive: GPLv3 + autoconf exception
  > re2c: fix build race
  > uninative: Allow a local own-mirror to work with uninative
  > mesa: Fix build when building with llvmpipe
  > llvm: Add recipe for 5.0
  > re2c: Transfer recipe from meta-oe and upgrade to 0.16
  > ninja: Add recipe
  > image: Make do_image_qa a dummy sstate task to match do_image_complete
  > image/rm_work: Promote do_image_complete to be more sstate like
  > image: Drop before do_build from do_rootfs and do_image
  > sstate: Improve SSTATE_SKIP_CREATION
  > rm_work: Improve handling for addto_recipe_sysroot
  > libpng: fix MIRRORS usage

* meta-ros 8dcc2ba...14d4596 (1):
  > Merge pull request #546 from rojkov/binutils-workaround

* meta-openembedded ac2a6d2...28d2c9b (75):
  > iproute2: Move append to meta-networking layer
  > multipath-tools: RDEPEND on bash
  > python-beautifulsoup4: add new recipe for both python2 and python3
  > python-webencodings: add Python3 support
  > python-html5lib: add Python3 support
  > libreport: fix typo of SRC_URI
  > wvstreams: Fix parallel build
  > evolution-data-server: Fix build with clang
  > libhugetlbfs: Define HUGETLB_LDSCRIPT_PATH
  > python-paho-mqtt: fix downloading during do_compile
  > python-paho-mqtt: licensing improvements
  > libbonobo: Pass PERL_PATH to do_configure
  > udevil: Add missing rdep on bash
  > enscript: Define PERL variable
  > mpich: Define PERL variable and pass to configure
  > python*-astroid: use SPDX compatible license identifier
  > python*-pylint: upgrade to v1.7.2 and fix qa error
  > xorg-fonts-100dpi: unblacklist recipe
  > openldap: fix native LDFLAGS build error
  > logwarn: set correct paths and add missing dependency
  > python-pycrypto: Security fix CVE-2013-7459
  > logcheck: update to 1.3.18 and move to meta-perl
  > gflags: add runtime dependency on bash
  > gperftools: fixup HOMEPAGE
  > collectd: 5.7.1 -> 5.7.2
  > gnulib: upgrade to 2017-08-20.18
  > vim: update to 8.0.0983
  > python-markupsafe: Extend to build native version too
  > webmin: add systemd service file
  > iperf3: 3.1.3 -> 3.2
  > adduser: use get_perl_version instead of PERLVERSION
  > mozjs: customize HOST_CFLAGS
  > makedumpfile: update to 1.6.2
  > Dhrystone: add recipe 2.1
  > postgresql: update to 9.4.13
  > glibmm: fix perl path
  > sthttpd: update to 2.27.1
  > python-requests: Update to version 2.18.4
  > pcsc-lite: Update to 1.8.22
  > phpmyadmin: upgrade to 4.7.3
  > xmlrpc-c: add perl to RDEPENDS
  > python3-pykickstart: tweak shebang to python3
  > multipath-tools: add bash to RDEPENDS
  > python*-pexpect: add v4.2.1
  > python*-ptyprocess: add v0.5.2
  > gd: update to 2.2.4
  > libvpx: upgrade to 1.6.1
  > rsyslog: install logrotate configuration file into correct location
  > rsyslog: fix CVE-2017-12588
  > tipcutils: add runtime dependency for iproute2-tipc
  > iproute2: add bbappend for supporting tipc tool
  > openwsman: rename to 2.6.3
  > openobex: disable building documentation
  > python-chardet: Extend to native and nativesdk
  > start-stop-daemon: Only create a link in ${base_sbindir} if necessary
  > fontforge: update to 20170731 to fix CVEs
  > vlock: add new recipe
  > php: disable this version by default
  > mailx: Force mailx to build with openssl10
  > mailcap: upgrade to 2.1.48
  > caps: Mark ARCH empty
  > gsoap: Upgrade to 2.8.51
  > php: move to version 7.1.8 from 7.1.7
  > python-pyro4: update to version 4.61
  > python-pytest: update to version 3.2.1
  > python-sqlalchemy: update to version 1.1.13
  > python-cmd2: update to version 0.7.6
  > python-wrapt: update to version 1.10.11
  > geany-plugins: update 1.30 -> 1.31
  > geany: update 1.30.1 -> 1.31
  > upower: update 0.99.4 -> 0.99.5
  > librcf: Add -latomic to LDFLAGS
  > python3-blivetgui: add recipe 2.1.5
  > python3-blivet: add recipe 2.2.0
  > mpv: Update to version 0.26.0.

The following changes were needed to get the submodule update building:
  > one of the OE-core qemu patches was renamed. adapt to that in the bbappend
  > polkitd static IDs added to adapt to a systemd change that added
    USERDADD_PARAMS
  > BBMASK meta-security's linux-yocto_4.1.bbappend (patch submitted upstream)
  > add new group 'kvm' needed by systemd 234
  > change --autologin regexp to accommodate changes in systemd 234
  > add rpath-link to iotivity LINKFLAGS
  > install libva-utils (a newly added recipe) to get 'vainfo' needed by testing
  > blacklist snd-soc-skl module that fails on linux-intel 4.9.40
  > drop linux-firmware-iwlwifi dependency from iwlwifi kernel module as the
    license checker won't work with that

Signed-off-by: Mikko Ylinen <mikko.ylinen@linux.intel.com>

meta-refkit-computervision/recipes-computervision/packagegroups/packagegroup-computervision-test.bb

@@ -4,6 +4,7 @@ LICENSE = "MIT"
 inherit packagegroup
 
 RDEPENDS_${PN} = " \
+    libva-utils \
     opencv-samples \
     python3-opencv \
     librealsense-examples \

meta-refkit-core/bbappends/meta-intel/common/recipes-kernel/iwlwifi/iwlwifi_%.bbappend

@@ -0,0 +1 @@
+RDEPENDS_${PN}_remove_df-refkit-config = "linux-firmware-iwlwifi"

meta-refkit-core/bbappends/meta-intel/common/recipes-kernel/linux/linux-intel_4.9.bbappend

@@ -0,0 +1,16 @@
+# snd-soc-skl module init fails with an error:
+#
+#    snd_soc_skl 0000:00:0e.0: ipc: set large config fail, err: -110
+#
+# but the module remains loaded. An alternative driver 'snd-hda-intel'
+# is also loaded but snd-soc-skl is "used".
+#
+# The end result is soundcards are missing (due to the failure)
+# on, e.g., Intel 570x/Joule.
+#
+# As snd-soc-skl is known to be problematic, let's blacklist that
+#and prefer snd-hda-intel to get audio working.
+#
+# Submitted to meta-intel.
+KERNEL_MODULE_PROBECONF_df-refkit-config += "snd-soc-skl"
+module_conf_snd-soc-skl_df-refkit-config = "blacklist snd-soc-skl"

meta-refkit-core/bbappends/meta-oic/recipes-core/iotivity/iotivity_%.bbappend

@@ -0,0 +1,7 @@
+# iotivity fails to link with binutils 2.29 that changes -rpath behaviour
+# to search under sysroot only so we add the build workdir to cross-linkers
+# path with -rpath-link.
+#
+# Upstream bug reported: https://jira.iotivity.org/browse/IOT-2651
+
+TARGET_LDFLAGS_append_df-refkit-config = " -Wl,-rpath-link=${S}/out/yocto/${IOTIVITY_TARGET_ARCH}/release"

meta-refkit-core/bbappends/openembedded-core/meta/recipes-devtools/qemu/qemu_%.bbappend

@@ -5,7 +5,7 @@ SRC_URI_remove_df-refkit-config = " \
     file://0001-Provide-support-for-the-CUSE-TPM.patch \
     file://0002-Introduce-condition-to-notify-waiters-of-completed-c.patch \
     file://0003-Introduce-condition-in-TPM-backend-for-notification.patch \
-    file://0004-Add-support-for-VM-suspend-resume-for-TPM-TIS.patch \
+    file://0004-Add-support-for-VM-suspend-resume-for-TPM-TIS-v2.9.patch \
 "
 SRC_URI_append_df-refkit-config = " \
     file://0001-tpm-backend-Remove-unneeded-member-variable-from-bac.patch \

meta-refkit-core/classes/refkit-image.bbclass

@@ -438,6 +438,7 @@ REFKIT_LOCAL_GETTY ?= " \
 local_autologin () {
     for service in ${REFKIT_LOCAL_GETTY}; do
         if [ -f $service ]; then
+            sed -i -e "s/ -o '[^']*'//" $service
             sed -i -e 's/^\(ExecStart *=.*getty \)/\1--autologin root /' $service
         else
             bbfatal "systemd service file $service (from REFKIT_LOCAL_GETTY) not found"

meta-refkit/conf/distro/include/refkit-group

@@ -12,13 +12,15 @@ foodine-pythontest:x:1002:
 input:x:982:
 iodine-nodetest:x:1001:
 kmem:x:988:
+kvm:x:36:
 lock:x:997:
 lp:x:981:
 messagebus:x:998:
 netdev:x:999:
 nobody:x:65534:
 nogroup:x:65533:
 pulse:x:1122:
+polkitd:x:1200:
 restful:x:991:
 root:x:0:
 sshd:x:992:

meta-refkit/conf/distro/include/refkit-passwd

@@ -6,6 +6,7 @@ iodine-nodetest:x:1001:1001::/home/iodine-nodetest:/sbin/nologin
 messagebus:x:998:998::/var/lib/dbus:/bin/false
 nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
 pulse:x:1122:1122::/var/run/pulse:/sbin/nologin
+polkitd:x:1200:1200::/:/bin/nologin
 restful:x:991:991::/home/restful:/bin/false
 root:x:0:0:root:/home/root:/bin/sh
 sshd:x:992:992::/var/run/sshd:/bin/false

meta-refkit/conf/distro/include/refkit-supported-recipes.txt

@@ -264,6 +264,7 @@ libunwind@core
 liburcu@core
 libusb1@core
 libva-intel-driver@intel
+libva-utils@core
 libva@core
 libvorbis@core
 libwebp@core

meta-refkit/conf/distro/refkit.conf

@@ -183,6 +183,7 @@ INHERIT += "supported-recipes"
 # want to take from the layer that normally would be chosen.
 BBMASK += " \
     meta-oe/recipes-graphics/xorg-driver/xf86-video-mga \
+    meta-security/recipes-kernel/linux/linux-yocto_4.1.bbappend \
 "
 
 # IoT Reference OS Kit removes certain packages from images because the components are known

meta-refkit/lib/oeqa/selftest/cases/refkit_poky.py

@@ -147,6 +147,7 @@ class TestRefkitPokyBase(OESelftestTestCase, RefkitLayers):
         'PRSERV_HOST',
         'SUPPORTED_RECIPES',
         'QEMU_USE_KVM',
+        'BBMASK',
         )
 
     @classmethod