commissioning: the layer, the acceptance tests, the harness rule, the docs, and the bench drills

meta-forgefirm: the forgefirm-users init replays the account at boot;
sshd refuses root and empty passwords and runs only while the panel
turns it on; the release image keeps an empty root password for the
console; the console banner; avahi announces forgefirm.local; https in
libmicrohttpd and ulfius; the panel on 80 and 443; the license bundle on
the rootfs; release.sh checks the root policy on the built rootfs.

forgetest: the commission suites (commission, commission_dark,
commission_sheet: 23 cases); the runner turns cloud mode on with the
typed phrase for a test that declares it; the baseline's motor_lock is
0; the log-export test checks the bundle for the camera key; the record
helpers write bytes as given and join the daemon's paths as POSIX. The
stream harness gains rule 24: a hold verdict is held again after a
resume. Bench drills: lens_travel.py and lens_stop_accel.py.

Docs: BRINGUP carries the present state; CAMPAIGN-LOG carries the dated
record.

meta-forgefirm/recipes-forgefirm/forgefirm-banner/forgefirm-banner.bb

@@ -0,0 +1,30 @@
+SUMMARY = "ForgeFIRM console banner: the control panel addresses in /etc/issue"
+DESCRIPTION = "Keeps an address block in the serial-console login banner \
+(/etc/issue): the control panel by mDNS name and by every global address \
+of wlan0 and eth0. Refreshed at boot and on every DHCP lease event."
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302"
+
+SRC_URI = " \
+    file://forgefirm-banner \
+    file://forgefirm-banner.init \
+    file://60forgefirm-banner \
+"
+
+S = "${WORKDIR}"
+
+inherit update-rc.d
+
+INITSCRIPT_NAME = "forgefirm-banner"
+# 99: after networking (S01); an address the lease brings later arrives
+# through the udhcpc hook.
+INITSCRIPT_PARAMS = "start 99 2 3 4 5 ."
+
+do_install() {
+    install -Dm 0755 ${WORKDIR}/forgefirm-banner ${D}${sbindir}/forgefirm-banner
+    install -Dm 0755 ${WORKDIR}/forgefirm-banner.init ${D}${sysconfdir}/init.d/forgefirm-banner
+    # busybox udhcpc runs /etc/udhcpc.d/* (run-parts) on every lease event
+    install -Dm 0755 ${WORKDIR}/60forgefirm-banner ${D}${sysconfdir}/udhcpc.d/60forgefirm-banner
+}
+
+FILES:${PN} += "${sysconfdir}/udhcpc.d"