On Mon, Dec 15, 2025 at 11:33:09AM -0500, Bruce Ashfield via lists.openembedded.org wrote: > On Mon, Dec 15, 2025 at 10:54 AM Kamel Bouhara via > lists.openembedded.org > <[email protected]> wrote: > > > > Hello, > > > > This series backports upstream commits that add support for exporting kernel > > configuration and PACKAGECONFIG features to SPDX 3.0 documents. > > >
Hi Bruce, > regardless of this being opt-in functionality, we should have extra > justification for > adding features to old releases (LTS or not). > > Apologies if I missed a discussion where this was already justified > and approved, > I just can't remember it. No worries the justification was discussed in the original upstream submission thread [1]. These patches address a real compliance and auditing need for tracking build-time configuration in SBOMs. Since Scarthgap is our LTS target for the next several years, having these features integrated rather than maintained as out-of-tree patches would significantly help our maintenance burden. > > This is something that could actually sit in a layer, and not in core, for > older > releases. > That's certainly an option I'm happy to pursue if maintainers prefer. However, given that: - The features are fully opt-in (both default to "0") - They're already accepted in master - Scarthgap is LTS with active maintenance - The backport is clean with no modifications needed I believe they fit the criteria for LTS backports. Regards, Kamel [1]: https://lists.openembedded.org/g/openembedded-core/topic/114181881#msg220705 > Bruce > > > Upstream commits: > > - 228a968e7c47 ("kernel.bbclass: Add task to export kernel configuration to > > SPDX") > > - 7ec61ac40345 ("spdx30_tasks: Add support for exporting PACKAGECONFIG to > > SPDX") > > - 2f0ab110d752 ("oeqa/selftest: oe-selftest: Add SPDX tests for kernel > > config and PACKAGECONFIG") > > > > Kamel Bouhara (Schneider Electric) (3): > > kernel.bbclass: Add task to export kernel configuration to SPDX > > spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX > > oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and > > PACKAGECONFIG > > > > meta/classes-recipe/kernel.bbclass | 64 ++++++++++++++++++++++++++++ > > meta/classes/create-spdx-3.0.bbclass | 11 +++++ > > meta/lib/oe/spdx30_tasks.py | 20 +++++++++ > > meta/lib/oeqa/selftest/cases/spdx.py | 57 +++++++++++++++++++++++++ > > 4 files changed, 152 insertions(+) > > > > -- > > 2.43.0 > > > > > > > > > > > -- > - Thou shalt not follow the NULL pointer, for chaos and madness await > thee at its end > - "Use the force Harry" - Gandalf, Star Trek II > > > -- Kamel Bouhara, Bootlin Embedded Linux and kernel engineering https://bootlin.com
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#227974): https://lists.openembedded.org/g/openembedded-core/message/227974 Mute This Topic: https://lists.openembedded.org/mt/116794215/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
