From 08064f6ff303367fcf489a804e82d1b6837c32c8 Mon Sep 17 00:00:00 2001
From: gururaajar <r.gururaaja@gmail.com>
Date: Wed, 29 Jul 2026 14:13:53 -0400
Subject: [PATCH 1/6] Added cov_build.sh script

---
 cov_build.sh | 217 +++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 217 insertions(+)
 create mode 100644 cov_build.sh

diff --git a/cov_build.sh b/cov_build.sh
new file mode 100644
index 00000000..7e0a253c
--- /dev/null
+++ b/cov_build.sh
@@ -0,0 +1,217 @@
+#!/usr/bin/env bash
+#
+# cov_build.sh - Coverity-friendly reproduction of the libnm_proxy_l1_tests
+# GitHub Actions workflow (.github/workflows/libnm_proxy_L1_test.yml).
+#
+# Builds the Thunder ecosystem (ThunderTools, Thunder, ThunderInterfaces),
+# then networkmanager with the Gnome libnm proxy so that Coverity can capture
+# the compilation. Test execution, coverage and report upload steps from the
+# workflow are intentionally omitted - Coverity only needs the build.
+#
+# Usage:
+#   ./cov_build.sh
+#
+# Override any of the environment variables below on the command line, e.g.:
+#   THUNDER_REF=R4.4.3 ./cov_build.sh
+#
+
+# Re-exec under bash if started with a non-bash shell (e.g. `sh cov_build.sh`,
+# where sh is dash). This script relies on bash features such as `pipefail`
+# and ${BASH_SOURCE[0]}, which dash does not support.
+if [ -z "${BASH_VERSION:-}" ]; then
+  exec bash "$0" "$@"
+fi
+
+set -euo pipefail
+
+# ---------------------------------------------------------------------------
+# Configuration (mirrors the workflow `env:` block)
+# ---------------------------------------------------------------------------
+BUILD_TYPE="${BUILD_TYPE:-Debug}"
+THUNDER_REF="${THUNDER_REF:-R4.4.3}"
+THUNDERTOOLS_REF="${THUNDERTOOLS_REF:-${THUNDER_REF}}"
+INTERFACES_REF="${INTERFACES_REF:-${THUNDER_REF}}"
+# Optional cross-compile toolchain file (empty for native builds).
+TOOLCHAIN_FILE="${TOOLCHAIN_FILE:-}"
+
+# Root workspace directory. In CI this is ${{ github.workspace }}.
+# By default we use the parent of the networkmanager checkout so the layout
+# matches the workflow (Thunder/, ThunderTools/, install/, etc. live beside it).
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+WORKSPACE="${WORKSPACE:-$(cd "${SCRIPT_DIR}/.." && pwd)}"
+NETWORKMANAGER_DIR="${NETWORKMANAGER_DIR:-${SCRIPT_DIR}}"
+INSTALL_DIR="${WORKSPACE}/install/usr"
+MODULE_PATH="${WORKSPACE}/install/tools/cmake"
+
+NPROC="$(getconf _NPROCESSORS_ONLN 2>/dev/null || echo 4)"
+
+log() { printf '\n\033[1;34m==> %s\033[0m\n' "$*"; }
+
+# Use sudo only when it exists (CI build containers usually run as root and
+# do not ship sudo). Otherwise run the command directly.
+if command -v sudo >/dev/null 2>&1; then
+  SUDO="sudo"
+else
+  SUDO=""
+fi
+
+# ---------------------------------------------------------------------------
+# Install system packages
+# ---------------------------------------------------------------------------
+log "Installing system packages"
+${SUDO} apt-get update
+${SUDO} apt-get install -y \
+  build-essential \
+  cmake \
+  pkg-config \
+  libglib2.0-dev \
+  libnm-dev \
+  libcurl4-openssl-dev \
+  lcov \
+  ninja-build
+
+# ---------------------------------------------------------------------------
+# Install Python dependencies
+# ---------------------------------------------------------------------------
+log "Installing Python dependencies"
+if command -v pip >/dev/null 2>&1; then
+  pip install --break-system-packages jsonref || pip install jsonref || true
+elif command -v pip3 >/dev/null 2>&1; then
+  pip3 install --break-system-packages jsonref || pip3 install jsonref || true
+else
+  echo "pip not found; skipping jsonref install"
+fi
+
+# ---------------------------------------------------------------------------
+# Clone Thunder repositories
+# ---------------------------------------------------------------------------
+clone_repo() {
+  # clone_repo <url> <path> <ref>
+  local url="$1" path="$2" ref="$3"
+  if [ ! -d "${path}/.git" ]; then
+    log "Cloning ${url} (${ref}) into ${path}"
+    git clone --branch "${ref}" "${url}" "${path}"
+  else
+    log "Repository ${path} already present; fetching ${ref}"
+    git -C "${path}" fetch origin "${ref}"
+    git -C "${path}" checkout "${ref}"
+  fi
+}
+
+clone_repo "https://github.com/rdkcentral/ThunderTools" \
+  "${WORKSPACE}/ThunderTools" "${THUNDERTOOLS_REF}"
+clone_repo "https://github.com/rdkcentral/Thunder" \
+  "${WORKSPACE}/Thunder" "${THUNDER_REF}"
+clone_repo "https://github.com/rdkcentral/ThunderInterfaces" \
+  "${WORKSPACE}/ThunderInterfaces" "${INTERFACES_REF}"
+
+# ---------------------------------------------------------------------------
+# Apply Thunder SubscribeStub patch
+# ---------------------------------------------------------------------------
+log "Applying Thunder SubscribeStub patch"
+(
+  cd "${WORKSPACE}/Thunder"
+  git apply "${NETWORKMANAGER_DIR}/tests/patches/thunder/SubscribeStub.patch" 2>/dev/null \
+    || echo "Patch already applied or not needed"
+)
+
+# ---------------------------------------------------------------------------
+# Build ThunderTools
+# ---------------------------------------------------------------------------
+log "Building ThunderTools"
+cmake \
+  -S "${WORKSPACE}/ThunderTools" \
+  -B "${WORKSPACE}/build/ThunderTools" \
+  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
+  -DGENERIC_CMAKE_MODULE_PATH="${MODULE_PATH}"
+cmake --build "${WORKSPACE}/build/ThunderTools" --target install -j"${NPROC}"
+
+# ---------------------------------------------------------------------------
+# Build Thunder
+# ---------------------------------------------------------------------------
+log "Building Thunder"
+cmake \
+  -S "${WORKSPACE}/Thunder" \
+  -B "${WORKSPACE}/build/Thunder" \
+  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
+  -DBUILD_TYPE="${BUILD_TYPE}" \
+  -DBINDING=127.0.0.1 \
+  -DPORT=9998
+cmake --build "${WORKSPACE}/build/Thunder" --target install -j"${NPROC}"
+
+# ---------------------------------------------------------------------------
+# Build ThunderInterfaces
+# ---------------------------------------------------------------------------
+log "Building ThunderInterfaces"
+cmake \
+  -S "${WORKSPACE}/ThunderInterfaces" \
+  -B "${WORKSPACE}/build/ThunderInterfaces" \
+  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_MODULE_PATH="${MODULE_PATH}"
+cmake --build "${WORKSPACE}/build/ThunderInterfaces" --target install -j"${NPROC}"
+
+# ---------------------------------------------------------------------------
+# Install IPowerManager header into the Thunder interfaces include path
+# ---------------------------------------------------------------------------
+log "Installing IPowerManager header"
+IFACE_DIR="$(find "${INSTALL_DIR}/include" -maxdepth 2 -name "interfaces" -type d | head -1)"
+cp "${NETWORKMANAGER_DIR}/tests/mocks/thunder/IPowerManager.h" "${IFACE_DIR}/"
+
+# ---------------------------------------------------------------------------
+# Generate dependency files
+# ---------------------------------------------------------------------------
+log "Generating /etc/device.properties"
+${SUDO} bash -c 'echo "ETHERNET_INTERFACE=eth0
+WIFI_INTERFACE=wlan0
+DEFAULT_HOSTNAME=rdk_test_device " > /etc/device.properties'
+
+# ---------------------------------------------------------------------------
+# Generate IARM headers/stubs
+# ---------------------------------------------------------------------------
+log "Generating IARM headers"
+mkdir -p "${INSTALL_DIR}/lib"
+touch "${INSTALL_DIR}/lib/libIARMBus.so"
+touch "${INSTALL_DIR}/lib/libmfrlib.so"
+mkdir -p "${INSTALL_DIR}/include/rdk/iarmbus"
+mkdir -p "${INSTALL_DIR}/include/rdk/iarmmgrs-hal"
+touch "${INSTALL_DIR}/include/rdk/iarmbus/libIARM.h"
+touch "${INSTALL_DIR}/include/rdk/iarmmgrs-hal/mfrMgr.h"
+(
+  cd "${NETWORKMANAGER_DIR}/tests"
+  mkdir -p headers/rdk/iarmbus
+  mkdir -p headers/rdk/iarmmgrs-hal
+  touch headers/rdk/iarmmgrs-hal/mfrMgr.h
+  touch headers/rdk/iarmbus/libIARM.h headers/rdk/iarmbus/libIBus.h
+)
+
+# ---------------------------------------------------------------------------
+# Build networkmanager with Gnome libnm Proxy
+# ---------------------------------------------------------------------------
+log "Building networkmanager with Gnome libnm Proxy"
+NM_CXX_FLAGS=" -fprofile-arcs -ftest-coverage \
+-I ${NETWORKMANAGER_DIR}/tests/headers \
+-I ${NETWORKMANAGER_DIR}/tests/headers/rdk/iarmbus \
+-I ${NETWORKMANAGER_DIR}/tests/headers/rdk/iarmmgrs-hal \
+--include ${NETWORKMANAGER_DIR}/tests/mocks/Iarm.h \
+--include ${NETWORKMANAGER_DIR}/tests/mocks/mfrMgr.h "
+
+TOOLCHAIN_ARG=()
+if [ -n "${TOOLCHAIN_FILE}" ]; then
+  TOOLCHAIN_ARG=(-DCMAKE_TOOLCHAIN_FILE="${TOOLCHAIN_FILE}")
+fi
+
+cmake \
+  -S "${NETWORKMANAGER_DIR}" \
+  -B "${WORKSPACE}/build/networkmanager_libnm" \
+  "${TOOLCHAIN_ARG[@]}" \
+  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
+  -DCMAKE_CXX_FLAGS="${NM_CXX_FLAGS}" \
+  -DENABLE_GNOME_NETWORKMANAGER=ON \
+  -DENABLE_LEGACY_PLUGINS=OFF \
+  -DENABLE_UNIT_TESTING=ON \
+  -DENABLE_PLUGIN_CLI=OFF \
+  -DENABLE_MIGRATION_MFRMGR_SUPPORT=ON
+cmake --build "${WORKSPACE}/build/networkmanager_libnm" --target install -j"${NPROC}"

From 0e7b951eaf59b44f77015ccb462b51a1431d0def Mon Sep 17 00:00:00 2001
From: gururaajar <r.gururaaja@gmail.com>
Date: Wed, 29 Jul 2026 22:45:20 -0400
Subject: [PATCH 2/6] Added all the required files for coverity

---
 .github/workflows/native_full_build.yml |  23 +++
 build_dependencies.sh                   | 187 ++++++++++++++++++++++++
 cov_build.sh                            | 162 ++------------------
 3 files changed, 219 insertions(+), 153 deletions(-)
 create mode 100644 .github/workflows/native_full_build.yml
 create mode 100644 build_dependencies.sh

diff --git a/.github/workflows/native_full_build.yml b/.github/workflows/native_full_build.yml
new file mode 100644
index 00000000..c1080868
--- /dev/null
+++ b/.github/workflows/native_full_build.yml
@@ -0,0 +1,23 @@
+name: Build Component in Native Environment
+
+on:
+  push:
+    branches: [ main, develop, 'support/**', 'hotfix/**', 'topic/**' ]
+  pull_request:
+    branches: [ main, develop, 'support/**', 'hotfix/**', 'topic/**' ]
+
+jobs:
+  build-networkmanager:
+    name: Build networkmanager component in github rdkcentral
+    # Ubuntu 24.04 is required for libnm 1.46 (NetworkManagerPowerClient support).
+    runs-on: ubuntu-24.04
+
+    steps:
+
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: native build
+        run: |
+          sh -x build_dependencies.sh
+          sh -x cov_build.sh
diff --git a/build_dependencies.sh b/build_dependencies.sh
new file mode 100644
index 00000000..75449d3d
--- /dev/null
+++ b/build_dependencies.sh
@@ -0,0 +1,187 @@
+#!/usr/bin/env bash
+#
+# build_dependencies.sh - Install system packages and build the Thunder
+# ecosystem (ThunderTools, Thunder, ThunderInterfaces) plus the mock
+# dependency files required to build networkmanager for Coverity.
+#
+# This is the first half of the old cov_build.sh: everything that prepares
+# the environment. The component itself is built by cov_build.sh, which is
+# run afterwards from the same workspace.
+#
+# Usage:
+#   ./build_dependencies.sh
+#
+# Override any of the environment variables below on the command line, e.g.:
+#   THUNDER_REF=R4.4.3 ./build_dependencies.sh
+#
+
+# Re-exec under bash if started with a non-bash shell (e.g. `sh build_dependencies.sh`,
+# where sh is dash). This script relies on bash features such as `pipefail`
+# and ${BASH_SOURCE[0]}, which dash does not support.
+if [ -z "${BASH_VERSION:-}" ]; then
+  exec bash "$0" "$@"
+fi
+
+set -euo pipefail
+
+# ---------------------------------------------------------------------------
+# Configuration (mirrors the workflow `env:` block)
+# ---------------------------------------------------------------------------
+BUILD_TYPE="${BUILD_TYPE:-Debug}"
+THUNDER_REF="${THUNDER_REF:-R4.4.3}"
+THUNDERTOOLS_REF="${THUNDERTOOLS_REF:-${THUNDER_REF}}"
+INTERFACES_REF="${INTERFACES_REF:-${THUNDER_REF}}"
+
+# Root workspace directory. In CI this is ${{ github.workspace }}.
+# The Thunder repositories and install tree live inside the networkmanager
+# checkout so the layout is self-contained and shared with cov_build.sh.
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+WORKSPACE="${WORKSPACE:-${SCRIPT_DIR}}"
+NETWORKMANAGER_DIR="${NETWORKMANAGER_DIR:-${SCRIPT_DIR}}"
+INSTALL_DIR="${WORKSPACE}/install/usr"
+MODULE_PATH="${WORKSPACE}/install/tools/cmake"
+
+NPROC="$(getconf _NPROCESSORS_ONLN 2>/dev/null || echo 4)"
+
+log() { printf '\n\033[1;34m==> %s\033[0m\n' "$*"; }
+
+# Use sudo only when it exists (CI build containers usually run as root and
+# do not ship sudo). Otherwise run the command directly.
+if command -v sudo >/dev/null 2>&1; then
+  SUDO="sudo"
+else
+  SUDO=""
+fi
+
+# ---------------------------------------------------------------------------
+# Install system packages
+# ---------------------------------------------------------------------------
+log "Installing system packages"
+${SUDO} apt-get update
+${SUDO} apt-get install -y \
+  build-essential \
+  cmake \
+  pkg-config \
+  libglib2.0-dev \
+  libnm-dev \
+  libcurl4-openssl-dev \
+  lcov \
+  ninja-build
+
+# ---------------------------------------------------------------------------
+# Install Python dependencies
+# ---------------------------------------------------------------------------
+log "Installing Python dependencies"
+if command -v pip >/dev/null 2>&1; then
+  pip install --break-system-packages jsonref || pip install jsonref || true
+elif command -v pip3 >/dev/null 2>&1; then
+  pip3 install --break-system-packages jsonref || pip3 install jsonref || true
+else
+  echo "pip not found; skipping jsonref install"
+fi
+
+# ---------------------------------------------------------------------------
+# Clone Thunder repositories
+# ---------------------------------------------------------------------------
+clone_repo() {
+  # clone_repo <url> <path> <ref>
+  local url="$1" path="$2" ref="$3"
+  if [ ! -d "${path}/.git" ]; then
+    log "Cloning ${url} (${ref}) into ${path}"
+    git clone --branch "${ref}" "${url}" "${path}"
+  else
+    log "Repository ${path} already present; fetching ${ref}"
+    git -C "${path}" fetch origin "${ref}"
+    git -C "${path}" checkout "${ref}"
+  fi
+}
+
+clone_repo "https://github.com/rdkcentral/ThunderTools" \
+  "${WORKSPACE}/ThunderTools" "${THUNDERTOOLS_REF}"
+clone_repo "https://github.com/rdkcentral/Thunder" \
+  "${WORKSPACE}/Thunder" "${THUNDER_REF}"
+clone_repo "https://github.com/rdkcentral/ThunderInterfaces" \
+  "${WORKSPACE}/ThunderInterfaces" "${INTERFACES_REF}"
+
+# ---------------------------------------------------------------------------
+# Apply Thunder SubscribeStub patch
+# ---------------------------------------------------------------------------
+log "Applying Thunder SubscribeStub patch"
+(
+  cd "${WORKSPACE}/Thunder"
+  git apply "${NETWORKMANAGER_DIR}/tests/patches/thunder/SubscribeStub.patch" 2>/dev/null \
+    || echo "Patch already applied or not needed"
+)
+
+# ---------------------------------------------------------------------------
+# Build ThunderTools
+# ---------------------------------------------------------------------------
+log "Building ThunderTools"
+cmake \
+  -S "${WORKSPACE}/ThunderTools" \
+  -B "${WORKSPACE}/build/ThunderTools" \
+  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
+  -DGENERIC_CMAKE_MODULE_PATH="${MODULE_PATH}"
+cmake --build "${WORKSPACE}/build/ThunderTools" --target install -j"${NPROC}"
+
+# ---------------------------------------------------------------------------
+# Build Thunder
+# ---------------------------------------------------------------------------
+log "Building Thunder"
+cmake \
+  -S "${WORKSPACE}/Thunder" \
+  -B "${WORKSPACE}/build/Thunder" \
+  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
+  -DBUILD_TYPE="${BUILD_TYPE}" \
+  -DBINDING=127.0.0.1 \
+  -DPORT=9998
+cmake --build "${WORKSPACE}/build/Thunder" --target install -j"${NPROC}"
+
+# ---------------------------------------------------------------------------
+# Build ThunderInterfaces
+# ---------------------------------------------------------------------------
+log "Building ThunderInterfaces"
+cmake \
+  -S "${WORKSPACE}/ThunderInterfaces" \
+  -B "${WORKSPACE}/build/ThunderInterfaces" \
+  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_MODULE_PATH="${MODULE_PATH}"
+cmake --build "${WORKSPACE}/build/ThunderInterfaces" --target install -j"${NPROC}"
+
+# ---------------------------------------------------------------------------
+# Install IPowerManager header into the Thunder interfaces include path
+# ---------------------------------------------------------------------------
+log "Installing IPowerManager header"
+IFACE_DIR="$(find "${INSTALL_DIR}/include" -maxdepth 2 -name "interfaces" -type d | head -1)"
+cp "${NETWORKMANAGER_DIR}/tests/mocks/thunder/IPowerManager.h" "${IFACE_DIR}/"
+
+# ---------------------------------------------------------------------------
+# Generate dependency files
+# ---------------------------------------------------------------------------
+log "Generating /etc/device.properties"
+${SUDO} bash -c 'echo "ETHERNET_INTERFACE=eth0
+WIFI_INTERFACE=wlan0
+DEFAULT_HOSTNAME=rdk_test_device " > /etc/device.properties'
+
+# ---------------------------------------------------------------------------
+# Generate IARM headers/stubs
+# ---------------------------------------------------------------------------
+log "Generating IARM headers"
+mkdir -p "${INSTALL_DIR}/lib"
+touch "${INSTALL_DIR}/lib/libIARMBus.so"
+touch "${INSTALL_DIR}/lib/libmfrlib.so"
+mkdir -p "${INSTALL_DIR}/include/rdk/iarmbus"
+mkdir -p "${INSTALL_DIR}/include/rdk/iarmmgrs-hal"
+touch "${INSTALL_DIR}/include/rdk/iarmbus/libIARM.h"
+touch "${INSTALL_DIR}/include/rdk/iarmmgrs-hal/mfrMgr.h"
+(
+  cd "${NETWORKMANAGER_DIR}/tests"
+  mkdir -p headers/rdk/iarmbus
+  mkdir -p headers/rdk/iarmmgrs-hal
+  touch headers/rdk/iarmmgrs-hal/mfrMgr.h
+  touch headers/rdk/iarmbus/libIARM.h headers/rdk/iarmbus/libIBus.h
+)
+
+log "Dependencies ready. Run cov_build.sh to build networkmanager."
diff --git a/cov_build.sh b/cov_build.sh
index 7e0a253c..f00bfa93 100644
--- a/cov_build.sh
+++ b/cov_build.sh
@@ -1,14 +1,15 @@
 #!/usr/bin/env bash
 #
-# cov_build.sh - Coverity-friendly reproduction of the libnm_proxy_l1_tests
-# GitHub Actions workflow (.github/workflows/libnm_proxy_L1_test.yml).
+# cov_build.sh - Coverity-friendly build of networkmanager with the Gnome
+# libnm proxy.
 #
-# Builds the Thunder ecosystem (ThunderTools, Thunder, ThunderInterfaces),
-# then networkmanager with the Gnome libnm proxy so that Coverity can capture
-# the compilation. Test execution, coverage and report upload steps from the
-# workflow are intentionally omitted - Coverity only needs the build.
+# This is the second half of the original cov_build.sh: it builds only the
+# networkmanager component. The Thunder ecosystem and mock dependency files
+# it relies on are produced by build_dependencies.sh, which must be run first
+# from the same workspace.
 #
 # Usage:
+#   ./build_dependencies.sh
 #   ./cov_build.sh
 #
 # Override any of the environment variables below on the command line, e.g.:
@@ -25,20 +26,14 @@ fi
 set -euo pipefail
 
 # ---------------------------------------------------------------------------
-# Configuration (mirrors the workflow `env:` block)
+# Configuration (must match build_dependencies.sh so the paths line up)
 # ---------------------------------------------------------------------------
-BUILD_TYPE="${BUILD_TYPE:-Debug}"
-THUNDER_REF="${THUNDER_REF:-R4.4.3}"
-THUNDERTOOLS_REF="${THUNDERTOOLS_REF:-${THUNDER_REF}}"
-INTERFACES_REF="${INTERFACES_REF:-${THUNDER_REF}}"
 # Optional cross-compile toolchain file (empty for native builds).
 TOOLCHAIN_FILE="${TOOLCHAIN_FILE:-}"
 
 # Root workspace directory. In CI this is ${{ github.workspace }}.
-# By default we use the parent of the networkmanager checkout so the layout
-# matches the workflow (Thunder/, ThunderTools/, install/, etc. live beside it).
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-WORKSPACE="${WORKSPACE:-$(cd "${SCRIPT_DIR}/.." && pwd)}"
+WORKSPACE="${WORKSPACE:-${SCRIPT_DIR}}"
 NETWORKMANAGER_DIR="${NETWORKMANAGER_DIR:-${SCRIPT_DIR}}"
 INSTALL_DIR="${WORKSPACE}/install/usr"
 MODULE_PATH="${WORKSPACE}/install/tools/cmake"
@@ -47,145 +42,6 @@ NPROC="$(getconf _NPROCESSORS_ONLN 2>/dev/null || echo 4)"
 
 log() { printf '\n\033[1;34m==> %s\033[0m\n' "$*"; }
 
-# Use sudo only when it exists (CI build containers usually run as root and
-# do not ship sudo). Otherwise run the command directly.
-if command -v sudo >/dev/null 2>&1; then
-  SUDO="sudo"
-else
-  SUDO=""
-fi
-
-# ---------------------------------------------------------------------------
-# Install system packages
-# ---------------------------------------------------------------------------
-log "Installing system packages"
-${SUDO} apt-get update
-${SUDO} apt-get install -y \
-  build-essential \
-  cmake \
-  pkg-config \
-  libglib2.0-dev \
-  libnm-dev \
-  libcurl4-openssl-dev \
-  lcov \
-  ninja-build
-
-# ---------------------------------------------------------------------------
-# Install Python dependencies
-# ---------------------------------------------------------------------------
-log "Installing Python dependencies"
-if command -v pip >/dev/null 2>&1; then
-  pip install --break-system-packages jsonref || pip install jsonref || true
-elif command -v pip3 >/dev/null 2>&1; then
-  pip3 install --break-system-packages jsonref || pip3 install jsonref || true
-else
-  echo "pip not found; skipping jsonref install"
-fi
-
-# ---------------------------------------------------------------------------
-# Clone Thunder repositories
-# ---------------------------------------------------------------------------
-clone_repo() {
-  # clone_repo <url> <path> <ref>
-  local url="$1" path="$2" ref="$3"
-  if [ ! -d "${path}/.git" ]; then
-    log "Cloning ${url} (${ref}) into ${path}"
-    git clone --branch "${ref}" "${url}" "${path}"
-  else
-    log "Repository ${path} already present; fetching ${ref}"
-    git -C "${path}" fetch origin "${ref}"
-    git -C "${path}" checkout "${ref}"
-  fi
-}
-
-clone_repo "https://github.com/rdkcentral/ThunderTools" \
-  "${WORKSPACE}/ThunderTools" "${THUNDERTOOLS_REF}"
-clone_repo "https://github.com/rdkcentral/Thunder" \
-  "${WORKSPACE}/Thunder" "${THUNDER_REF}"
-clone_repo "https://github.com/rdkcentral/ThunderInterfaces" \
-  "${WORKSPACE}/ThunderInterfaces" "${INTERFACES_REF}"
-
-# ---------------------------------------------------------------------------
-# Apply Thunder SubscribeStub patch
-# ---------------------------------------------------------------------------
-log "Applying Thunder SubscribeStub patch"
-(
-  cd "${WORKSPACE}/Thunder"
-  git apply "${NETWORKMANAGER_DIR}/tests/patches/thunder/SubscribeStub.patch" 2>/dev/null \
-    || echo "Patch already applied or not needed"
-)
-
-# ---------------------------------------------------------------------------
-# Build ThunderTools
-# ---------------------------------------------------------------------------
-log "Building ThunderTools"
-cmake \
-  -S "${WORKSPACE}/ThunderTools" \
-  -B "${WORKSPACE}/build/ThunderTools" \
-  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
-  -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
-  -DGENERIC_CMAKE_MODULE_PATH="${MODULE_PATH}"
-cmake --build "${WORKSPACE}/build/ThunderTools" --target install -j"${NPROC}"
-
-# ---------------------------------------------------------------------------
-# Build Thunder
-# ---------------------------------------------------------------------------
-log "Building Thunder"
-cmake \
-  -S "${WORKSPACE}/Thunder" \
-  -B "${WORKSPACE}/build/Thunder" \
-  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
-  -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
-  -DBUILD_TYPE="${BUILD_TYPE}" \
-  -DBINDING=127.0.0.1 \
-  -DPORT=9998
-cmake --build "${WORKSPACE}/build/Thunder" --target install -j"${NPROC}"
-
-# ---------------------------------------------------------------------------
-# Build ThunderInterfaces
-# ---------------------------------------------------------------------------
-log "Building ThunderInterfaces"
-cmake \
-  -S "${WORKSPACE}/ThunderInterfaces" \
-  -B "${WORKSPACE}/build/ThunderInterfaces" \
-  -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
-  -DCMAKE_MODULE_PATH="${MODULE_PATH}"
-cmake --build "${WORKSPACE}/build/ThunderInterfaces" --target install -j"${NPROC}"
-
-# ---------------------------------------------------------------------------
-# Install IPowerManager header into the Thunder interfaces include path
-# ---------------------------------------------------------------------------
-log "Installing IPowerManager header"
-IFACE_DIR="$(find "${INSTALL_DIR}/include" -maxdepth 2 -name "interfaces" -type d | head -1)"
-cp "${NETWORKMANAGER_DIR}/tests/mocks/thunder/IPowerManager.h" "${IFACE_DIR}/"
-
-# ---------------------------------------------------------------------------
-# Generate dependency files
-# ---------------------------------------------------------------------------
-log "Generating /etc/device.properties"
-${SUDO} bash -c 'echo "ETHERNET_INTERFACE=eth0
-WIFI_INTERFACE=wlan0
-DEFAULT_HOSTNAME=rdk_test_device " > /etc/device.properties'
-
-# ---------------------------------------------------------------------------
-# Generate IARM headers/stubs
-# ---------------------------------------------------------------------------
-log "Generating IARM headers"
-mkdir -p "${INSTALL_DIR}/lib"
-touch "${INSTALL_DIR}/lib/libIARMBus.so"
-touch "${INSTALL_DIR}/lib/libmfrlib.so"
-mkdir -p "${INSTALL_DIR}/include/rdk/iarmbus"
-mkdir -p "${INSTALL_DIR}/include/rdk/iarmmgrs-hal"
-touch "${INSTALL_DIR}/include/rdk/iarmbus/libIARM.h"
-touch "${INSTALL_DIR}/include/rdk/iarmmgrs-hal/mfrMgr.h"
-(
-  cd "${NETWORKMANAGER_DIR}/tests"
-  mkdir -p headers/rdk/iarmbus
-  mkdir -p headers/rdk/iarmmgrs-hal
-  touch headers/rdk/iarmmgrs-hal/mfrMgr.h
-  touch headers/rdk/iarmbus/libIARM.h headers/rdk/iarmbus/libIBus.h
-)
-
 # ---------------------------------------------------------------------------
 # Build networkmanager with Gnome libnm Proxy
 # ---------------------------------------------------------------------------

From a33816916f170dd9d5f49d4ea2f9457353f4e92f Mon Sep 17 00:00:00 2001
From: gururaajar <r.gururaaja@gmail.com>
Date: Thu, 30 Jul 2026 11:26:32 -0400
Subject: [PATCH 3/6] Addressed copilot reported issues

---
 build_dependencies.sh | 14 ++++++++++----
 cov_build.sh          |  2 ++
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/build_dependencies.sh b/build_dependencies.sh
index 75449d3d..8aad62f3 100644
--- a/build_dependencies.sh
+++ b/build_dependencies.sh
@@ -155,23 +155,29 @@ cmake --build "${WORKSPACE}/build/ThunderInterfaces" --target install -j"${NPROC
 # ---------------------------------------------------------------------------
 log "Installing IPowerManager header"
 IFACE_DIR="$(find "${INSTALL_DIR}/include" -maxdepth 2 -name "interfaces" -type d | head -1)"
+if [ -z "${IFACE_DIR}" ] || [ ! -d "${IFACE_DIR}" ]; then
+   echo "Error: Thunder interfaces include dir not found under ${INSTALL_DIR}/include" >&2
+   exit 1
+fi
 cp "${NETWORKMANAGER_DIR}/tests/mocks/thunder/IPowerManager.h" "${IFACE_DIR}/"
 
 # ---------------------------------------------------------------------------
 # Generate dependency files
 # ---------------------------------------------------------------------------
 log "Generating /etc/device.properties"
-${SUDO} bash -c 'echo "ETHERNET_INTERFACE=eth0
+${SUDO} tee /etc/device.properties >/dev/null <<'EOF'
+ETHERNET_INTERFACE=eth0
 WIFI_INTERFACE=wlan0
-DEFAULT_HOSTNAME=rdk_test_device " > /etc/device.properties'
+DEFAULT_HOSTNAME=rdk_test_device
+EOF
 
 # ---------------------------------------------------------------------------
 # Generate IARM headers/stubs
 # ---------------------------------------------------------------------------
 log "Generating IARM headers"
 mkdir -p "${INSTALL_DIR}/lib"
-touch "${INSTALL_DIR}/lib/libIARMBus.so"
-touch "${INSTALL_DIR}/lib/libmfrlib.so"
+printf 'void __nm_cov_stub(void){}\n' | ${CC:-cc} -fPIC -shared -x c - -o "${INSTALL_DIR}/lib/libIARMBus.so"
+printf 'void __nm_cov_stub(void){}\n' | ${CC:-cc} -fPIC -shared -x c - -o "${INSTALL_DIR}/lib/libmfrlib.so"
 mkdir -p "${INSTALL_DIR}/include/rdk/iarmbus"
 mkdir -p "${INSTALL_DIR}/include/rdk/iarmmgrs-hal"
 touch "${INSTALL_DIR}/include/rdk/iarmbus/libIARM.h"
diff --git a/cov_build.sh b/cov_build.sh
index f00bfa93..1f2d2b2f 100644
--- a/cov_build.sh
+++ b/cov_build.sh
@@ -63,8 +63,10 @@ cmake \
   -B "${WORKSPACE}/build/networkmanager_libnm" \
   "${TOOLCHAIN_ARG[@]}" \
   -DCMAKE_INSTALL_PREFIX="${INSTALL_DIR}" \
+  -DCMAKE_PREFIX_PATH="${INSTALL_DIR}" \
   -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
   -DCMAKE_CXX_FLAGS="${NM_CXX_FLAGS}" \
+
   -DENABLE_GNOME_NETWORKMANAGER=ON \
   -DENABLE_LEGACY_PLUGINS=OFF \
   -DENABLE_UNIT_TESTING=ON \

From b1f36d17b9d5ca4e24deabcd7a75358996185f04 Mon Sep 17 00:00:00 2001
From: gururaajar <r.gururaaja@gmail.com>
Date: Thu, 30 Jul 2026 11:31:55 -0400
Subject: [PATCH 4/6] Addressed compilation issue

---
 cov_build.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/cov_build.sh b/cov_build.sh
index 1f2d2b2f..72c2222f 100644
--- a/cov_build.sh
+++ b/cov_build.sh
@@ -66,7 +66,6 @@ cmake \
   -DCMAKE_PREFIX_PATH="${INSTALL_DIR}" \
   -DCMAKE_MODULE_PATH="${MODULE_PATH}" \
   -DCMAKE_CXX_FLAGS="${NM_CXX_FLAGS}" \
-
   -DENABLE_GNOME_NETWORKMANAGER=ON \
   -DENABLE_LEGACY_PLUGINS=OFF \
   -DENABLE_UNIT_TESTING=ON \

From 307b6939cb41bb58ce2c39db846d0dedabdedc65 Mon Sep 17 00:00:00 2001
From: gururaajar <r.gururaaja@gmail.com>
Date: Thu, 30 Jul 2026 12:26:41 -0400
Subject: [PATCH 5/6] updated the comments

---
 .github/workflows/native_full_build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/native_full_build.yml b/.github/workflows/native_full_build.yml
index c1080868..b55b30fc 100644
--- a/.github/workflows/native_full_build.yml
+++ b/.github/workflows/native_full_build.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   build-networkmanager:
     name: Build networkmanager component in github rdkcentral
-    # Ubuntu 24.04 is required for libnm 1.46 (NetworkManagerPowerClient support).
+    # Ubuntu 24.04 provides libnm 1.46, closer to the version used in RDK(1.43.7).
     runs-on: ubuntu-24.04
 
     steps:

From 8e0eaf7a0242b8104ba89c330b639000f5aff396 Mon Sep 17 00:00:00 2001
From: gururaajar <r.gururaaja@gmail.com>
Date: Thu, 30 Jul 2026 12:30:25 -0400
Subject: [PATCH 6/6] Changed the permission of workflow to read only

---
 .github/workflows/native_full_build.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/native_full_build.yml b/.github/workflows/native_full_build.yml
index b55b30fc..c7a10413 100644
--- a/.github/workflows/native_full_build.yml
+++ b/.github/workflows/native_full_build.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main, develop, 'support/**', 'hotfix/**', 'topic/**' ]
 
+permissions:
+  contents: read
+
 jobs:
   build-networkmanager:
     name: Build networkmanager component in github rdkcentral