Changelog¶

[1.6.0] - 2025-12-04¶

Added¶

• meta-welma-intel: Add secure boot on x86 machines
• meta-welma-stm32mp2: Add secure boot on stm32mp13-disco-welma

Fixed¶

• meta-welma-sm2s-imx9: fix typos
• data-store: fix dbus interface (align implementation with documentation) and fix segmentation fault and buffer overflow on 32-bit processors

Changed¶

• welma-signing-tools: stm32mp2-* tools renamed to stm32mp-* (stm32mp-sign, stm32mp-pkhth-gen, ...), and support for stm32mp13

[1.5.1] - 2025-10-22¶

Added¶

• Add variable WELMA_UPDATE_BUNDLE to select which packages shall be packed together.

• Support for machines hbjc386f951t-x86, k393x-mini-x86 and de-next-rap8-x86 on branch scarthgap.

Changed¶

• swu: modified command line arguments and ability to add multiple images in same swu package

• sm2s-imx93-mbep5: Production and development images for imx-boot and u-boot

[1.5.0] - 2025-09-30¶

Added¶

• Data provisioning
• Support for machine stm32mp13-disco-welma (branch scarthgap)
• raspberrypi4-64-welma: secure boot
• imx-sign: support pkcs11 backend

Fixed¶

• sm2s-imx93-mbep5: bad task dependencies for imx-boot:do_reinject_pubkey
• stm32mp25-disco-welma: do_rootfs: FileExistsError on u-boot mkimage
• imx-sign: error when --output argument is a relative path

Changed¶

• Upgrade to poky scarthgap 5.0.12
• In mender-connected mode, the testing private key is no longer installed (package keys-mender). The key /var/lib/mender/mender-agent.pem gets generated randomly at first boot.

[1.4.2] - 2025-07-11¶

Added¶

• Support for LVDS ama-101a01 display on machine sm2s-imx93-mbep5

Fixed¶

• Branch kirkstone: bitbake fetch error on welma-signing-tools (bad WELMA_GIT_NAMESPACE)

[1.4.1] - 2025-07-07¶

Added¶

• Support for machines imx8mm-cgt-sx8m-rev-a, qemuarm-welma and raspberrypi4-64-welma on branch scarthgap.

Changed¶

• Upgrade poky version to kirkstone-4.0.28 and scarthgap-5.0.10.

[1.4.0] - 2025-06-16¶

Added¶

• Generic partitioning
• Single update: non A/B partitions can be updated (eg: bootloader, etc.)
• welma-update-gen: support vfat filesystems

Fixed¶

• stm32mp15-disco-welma: fix non-determinist mmc enumeration (/dev/mmcblk0)

Changed¶

• Partitions mapping files/partitions-${MACHINE}.conf replaced by split/welma.part. See Upgrade from Welma 1.3.0.
• Because of changes in /dev/disk/ symbolic links created by the initramfs, upgrading from welma 1.3.0 to this release requires upgrading both BOOT and SYSRO together.
• coreutils removed from development image
• raspberrypi4-64-welma: upgrade to kernel 6.1 (kirkstone)

[1.3.0] - 2025-04-22¶

Added¶

• Support for machine stm32mp25-disco-welma on branch scarthgap, with secure boot and secure storage
• Support for machine sm2s-imx93-mbep5 on branch scarthgap, with secure boot
• Machine sm2s-imx8plus-mbep5 compatible with branch scarthgap

Fixed¶

• Bitbake error: 'imgconf/image.signkey: No such file or directory' when SWK1 and SWK2 are not defined.
• Branch scarthgap: journal logs not persistent across reboot

Changed¶

• Added in development images: gdb, gdbserver, lsof
• Branch kirkstone: upgrade to poky version 4.0.24
• updated: state can be retrieved while an installation is in progress

Removed¶

• Support for stm32mp25-eval-welma is deprecated and will be removed in a next release
• Support for sm2s-imx93-mbep1 is discontinued
• Support for raspberrypi3-64-welma is discontinued

[1.2.0] - 2024-12-16¶

Added¶

• welma-session-starter: a daemon that helps starting a user session
• Support for machine sm2s-imx93-mbep1, new layer meta-welma-sm2s-imx9
• stm32mp25-eval-welma:
  • Secure boot, active by default, using development keys
  • Compatible with Yocto branch scarthgap

Changed¶

• Watchdog: /dev/watchdog0 is no longer serviced by the kernel after initramfs. A userspace program must take over (by default systemd does it).
• welma-signing-tools: imx tools for secure boot renamed to imx-sign and imx-srk-table-gen
• Distro welma-eglfs removed
• New bbclass welma-imx-boot

Removed¶

• Support for Raspberry Pi 3 is deprecated and will be removed in a next release

[1.1.0] - 2024-09-16¶

Added¶

• Secure OP-TEE keystore (imx8 machines)
• Support for machine stm32mp25-eval-welma, new layer meta-welma-stm32mp25
• Support for machine maaxboard-8ulp, new layer meta-welma-maaxboard

Fixed¶

• swupdate: fix sporadic install error
• qemuarm: qt6: fix qtwayland errors

Changed¶

• The filesystem extension was put back for BOOT, SYSRO, APPRO, SYSRW images. You should update your WKS descriptions accordingly (add .vfat or .ext4). Eg:

  -part / --source rawcopy --sourceparams="file=${IMGDEPLOYDIR}/${IMAGE_LINK_NAME}.sysro"
  +part / --source rawcopy --sourceparams="file=${IMGDEPLOYDIR}/${IMAGE_LINK_NAME}.sysro.ext4"
  

• bbclass image_types_split replaced by image-split
• meta-welma-stm32mp15: ACCEPT_EULA moved to templates

[1.0.2] - 2024-08-22¶

Added¶

• Support for machines hbjc386f951t-x86 and k393x-mini-x86, new layer meta-welma-intel

Fixed¶

• setup-build-env: fix compatibility with zsh
• meta-welma-qemuarm: fix qt6/qtwayland build error
• meta-welma-stm32mp15: fix qt6/qtwayland build error

Changed¶

• /var mounted in initramfs
• Package updated moved to its own repository updated
• meta-welma-sm2s-imx8:
  • ACCEPT_FSL_EULA moved to templates
  • Align with Avnet LDK LOL99_20230718_V1_11_0
  • package optee-client added in default welma image

[1.0.1] - 2024-06-21¶

Added¶

• Support for machine tungsten-700-smarc-welma, new layer meta-welma-boundary-mtk
• Support for machine imx8mm-cgt-sx8m-rev-a, new layer meta-welma-congatec-imx

Fixed¶

• BAW-603 welma-partitions: verity config not updated after modification of WELMA_SECURE_BOOT
• BAW-602 imx-boot: u-boot not rebuilt when WELMA_SECURE_BOOT changed

Changed¶

• Bitbake templates moved to meta-welma-* machine layers. The script setup-build-env has a slightly modified command line interface.

[1.0.0] - 2024-05-31¶

Added¶

• sm2s-imx8plus-mbep5: Secure boot (authentication of imx-boot, partitions BOOT, SYSRO, APPRO). Active by default, using development keys.

• Secure update: modules are authenticated before installation (mender, swupdate). Active by default, using development keys.

Fixed¶

• BAW-328 sm2s-imx8plus-mbep5: kernel random freeze at startup

Changed¶

• The filesystem extension was removed from BOOT, SYSRO, APPRO, SYSRW images. You should update your WKS descriptions accordingly. Eg:

  -part / --source rawcopy --sourceparams="file=${IMGDEPLOYDIR}/${IMAGE_LINK_NAME}.sysro.ext4"
  +part / --source rawcopy --sourceparams="file=${IMGDEPLOYDIR}/${IMAGE_LINK_NAME}.sysro${IMAGE_FILE_SUFFIX}"
  

• Swupdate and Mender modules have the inner image compressed (gz).

• sm2s-imx8plus-mbep5:

  • Layer meta-sm2s-imx8-welma removed (merged into meta-welma-sm2s-imx8)
  • Main ethernet interface renamed to "eno0"

• Mender: /data/mender moved to /var/lib/mender

[0.9.2] - 2024-02-15¶

Changed¶

• Machine support moved out of meta-welma into dedicated layer repositories:

  • meta-welma-sm2s-imx8
  • meta-welma-qemuarm
  • meta-welma-raspberrypi
  • meta-welma-stm32mp15

• systemd user:

  • Removed /home from SYSTEMD_UNIT_PATH of user manager
  • systemd-user.bbclass installs activation symlinks in /app

• bootflags/u-boot: usb support

• mender: variable MENDER_ARTIFACT_PREFIX for mender artifact names

[0.9.1] - 2024-02-02¶

Added¶

• Partition BOOT: FIT image with kernel and minimal initramfs
• systemd: add /app/lib/systemd/user to SYSTEMD_UNIT_PATH

Fixed¶

• BAW-334 SW update incorrect behavior when updating slot by slot
• BAW-405 swupdate-client install error: libgcc_s.so.1 must be installed for pthread_exit to work

Changed¶

• Reference partitioning: BOOT, SYSRO, APPRO, SYSRW
• Toolchain: gcc-11.4

[0.9.0] - 2023-12-22¶

Added¶

meta-welma:

• Compatible with Yocto branch Kirkstone
• Minimal Linux distribution, based on Poky, with systemd, dbus
• Software update mechanisms: swupdate, mender, mender-connected
• Reference partitioning: SYSRO, APPRO, SYSRW
• Available DISTRO: welma, welma-eglfs, welma-wayland, welma-x11
• Supported MACHINE: qemuarm-welma, raspberrypi3-64-welma, raspberrypi4-64-welma, sm2s-imx8plus-mbep5, stm32mp15-disco-welma
• Default users: root, user
• Production image / development image
• License Digest
• Kernel 5.10 (5.15 on machine stm32mp15-disco-welma)
• Default users: root, user
• Toolchain: gcc-11.3

ci:

• Build Welma
• Run CVEScan
• Execute tests on qemuarm-welma, raspberrypi3-64-welma, sm2s-imx8plus-mbep5 stm32mp15-disco-welma

welma-test:

• Test swupdate update
• Test mender update