Hi, it will not miss any installed package that Yocto knows about, i.e it will be exact compared to the rootfs.manifest and so on. There are of course ways to "fool" it like bundling a copy of a library in another project and similar things. And I think statically linked libraries are not really handled by Yocto here either, they don't show up in the rootfs.manifest or the COPY_LIC_* stuff either for example.
Regards //Ernst PS. My patch didn't show up on Patchwork? Den ons 25 maj 2022 kl 11:42 skrev Marta Rybczynska <[email protected]>: > On Tue, May 24, 2022 at 1:50 PM Ernst Sjöstrand <[email protected]> wrote: > > > > Before this the rootfs manifest and the summary were identical. > > We should separate the summary and rootfs manifest more clearly, > > now the summary is for all CVEs and the rootfs manifest is only for > > things in that image. This is even more useful if you build multiple > > images. > > > > Signed-off-by: Ernst Sjöstrand <[email protected]> > > > + for pkg in list(image_list_installed_packages(d)): > > Thank you for submitting a new version of this patch. The references > posted on IRC suggested that using this way may cause us to skip > packages that should be included. Or I did misunderstand? > > Kind regards, > Marta >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#166112): https://lists.openembedded.org/g/openembedded-core/message/166112 Mute This Topic: https://lists.openembedded.org/mt/91309222/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
