[OE-core] [PATCH] gnutls: Added fips support option.
Signed-off-by: Lei Maohui --- meta/recipes-support/gnutls/gnutls_3.7.4.bb | 17 + 1 file changed, 17 insertions(+) diff --git a/meta/recipes-support/gnutls/gnutls_3.7.4.bb b/meta/recipes-support/gnutls/gnutls_3.7.4.bb index b34eb7f..5a34805 100644 --- a/meta/recipes-support/gnutls/gnutls_3.7.4.bb +++ b/meta/recipes-support/gnutls/gnutls_3.7.4.bb @@ -15,6 +15,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=71391c8e0c1cfe68077e7fce3b586283 \ file://doc/COPYING.LESSER;md5=a6f89e2100d9b6cdffcea4f398e37343" DEPENDS = "nettle gmp virtual/libiconv libunistring" +DEPENDS:append:class-target = " gnutls-native" DEPENDS:append:libc-musl = " argp-standalone" SHRT_VER = "${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}" @@ -36,6 +37,7 @@ PACKAGECONFIG[libidn] = "--with-idn,--without-idn,libidn2" PACKAGECONFIG[libtasn1] = "--with-included-libtasn1=no,--with-included-libtasn1,libtasn1" PACKAGECONFIG[p11-kit] = "--with-p11-kit,--without-p11-kit,p11-kit" PACKAGECONFIG[tpm] = "--with-tpm,--without-tpm,trousers" +PACKAGECONFIG[fips] = "--enable-fips140-mode,--disable-fips140-mode" EXTRA_OECONF = " \ --enable-doc \ @@ -59,6 +61,21 @@ do_configure:prepend() { done } +do_compile:prepend:class-target () { +if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', d)}; then + sed -i -e "s#\$(builddir)/fipshmac#${STAGING_DIR_NATIVE}${libdir}/fipshmac#g" ${B}/lib/Makefile +fi +} + +do_install:append:class-native() { +if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', d)}; then + install -d ${D}${libdir} + install -d ${D}${libdir}/.libs + install -m 0755 ${B}/lib/fipshmac ${D}${libdir}/ + install -m 0755 ${B}/lib/.libs/fipshmac ${D}${libdir}/.libs/ +fi +} + PACKAGES =+ "${PN}-openssl ${PN}-xx" FILES:${PN}-dev += "${bindir}/gnutls-cli-debug" -- 1.8.3.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164933): https://lists.openembedded.org/g/openembedded-core/message/164933 Mute This Topic: https://lists.openembedded.org/mt/90748530/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] cve_check: skip remote patches that haven't been fetched when searching for CVE tags
On Wed, Apr 27, 2022 at 1:43 PM Ross Burton wrote: > If a remote patch is compressed we need to have run the unpack task for > the file to exist locally. Currently cve_check only depends on fetch so > instead of erroring out, emit a warning that this file won't be scanned > for CVE references. > > Typically, remote compressed patches won't contain our custom tags, so > this is unlikely to be an issue. > > Signed-off-by: Ross Burton > --- > meta/lib/oe/cve_check.py | 5 +++-- > 1 file changed, 3 insertions(+), 2 deletions(-) > > diff --git a/meta/lib/oe/cve_check.py b/meta/lib/oe/cve_check.py > index e445b7a6ae..dc7d2e2826 100644 > --- a/meta/lib/oe/cve_check.py > +++ b/meta/lib/oe/cve_check.py > @@ -89,9 +89,10 @@ def get_patched_cves(d): > for url in oe.patch.src_patches(d): > patch_file = bb.fetch.decodeurl(url)[2] > > +# Remote compressed patches may not be unpacked, so silently > ignore them > if not os.path.isfile(patch_file): > -bb.error("File Not found: %s" % patch_file) > -raise FileNotFoundError > +bb.warn("%s does not exist, cannot extract CVE list" % > patch_file) > +continue > > # Check patch file name for CVE ID > fname_match = cve_file_name_match.search(patch_file) > -- > 2.25.1 > > Tested-by: Marta Rybczynska -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164934): https://lists.openembedded.org/g/openembedded-core/message/164934 Mute This Topic: https://lists.openembedded.org/mt/90728421/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] gnutls: Added fips support option.
What do those do_compile/do_install tweaks do, and why are they necessary? Please explain, it seems like there might be a better way to do this. Alex On Thu, 28 Apr 2022 at 09:34, leimaohui wrote: > > Signed-off-by: Lei Maohui > --- > meta/recipes-support/gnutls/gnutls_3.7.4.bb | 17 + > 1 file changed, 17 insertions(+) > > diff --git a/meta/recipes-support/gnutls/gnutls_3.7.4.bb > b/meta/recipes-support/gnutls/gnutls_3.7.4.bb > index b34eb7f..5a34805 100644 > --- a/meta/recipes-support/gnutls/gnutls_3.7.4.bb > +++ b/meta/recipes-support/gnutls/gnutls_3.7.4.bb > @@ -15,6 +15,7 @@ LIC_FILES_CHKSUM = > "file://LICENSE;md5=71391c8e0c1cfe68077e7fce3b586283 \ > > file://doc/COPYING.LESSER;md5=a6f89e2100d9b6cdffcea4f398e37343" > > DEPENDS = "nettle gmp virtual/libiconv libunistring" > +DEPENDS:append:class-target = " gnutls-native" > DEPENDS:append:libc-musl = " argp-standalone" > > SHRT_VER = > "${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}" > @@ -36,6 +37,7 @@ PACKAGECONFIG[libidn] = "--with-idn,--without-idn,libidn2" > PACKAGECONFIG[libtasn1] = > "--with-included-libtasn1=no,--with-included-libtasn1,libtasn1" > PACKAGECONFIG[p11-kit] = "--with-p11-kit,--without-p11-kit,p11-kit" > PACKAGECONFIG[tpm] = "--with-tpm,--without-tpm,trousers" > +PACKAGECONFIG[fips] = "--enable-fips140-mode,--disable-fips140-mode" > > EXTRA_OECONF = " \ > --enable-doc \ > @@ -59,6 +61,21 @@ do_configure:prepend() { > done > } > > +do_compile:prepend:class-target () { > +if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', > d)}; then > + sed -i -e > "s#\$(builddir)/fipshmac#${STAGING_DIR_NATIVE}${libdir}/fipshmac#g" > ${B}/lib/Makefile > +fi > +} > + > +do_install:append:class-native() { > +if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', > d)}; then > + install -d ${D}${libdir} > + install -d ${D}${libdir}/.libs > + install -m 0755 ${B}/lib/fipshmac ${D}${libdir}/ > + install -m 0755 ${B}/lib/.libs/fipshmac ${D}${libdir}/.libs/ > +fi > +} > + > PACKAGES =+ "${PN}-openssl ${PN}-xx" > > FILES:${PN}-dev += "${bindir}/gnutls-cli-debug" > -- > 1.8.3.1 > > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164935): https://lists.openembedded.org/g/openembedded-core/message/164935 Mute This Topic: https://lists.openembedded.org/mt/90748530/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] cve-check: no need to depend on the fetch task
On Wed, Apr 27, 2022 at 3:22 PM Ross Burton wrote: > The only part of the cve-check task which needs files is the patch > examination, and typically these patches are local so fetch isn't needed. > > Signed-off-by: Ross Burton > --- > meta/classes/cve-check.bbclass | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/meta/classes/cve-check.bbclass > b/meta/classes/cve-check.bbclass > index 78516d0bb6..7cf206299b 100644 > --- a/meta/classes/cve-check.bbclass > +++ b/meta/classes/cve-check.bbclass > @@ -126,7 +126,7 @@ python do_cve_check () { > > } > > -addtask cve_check before do_build after do_fetch > +addtask cve_check before do_build > do_cve_check[depends] = "cve-update-db-native:do_fetch" > do_cve_check[nostamp] = "1" > > -- > 2.25.1 > > A side-effect of this change is that we seem to not be downloading the NVD database anymore... This is probably not exactly what we want right now. Kind regards, Marta -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164936): https://lists.openembedded.org/g/openembedded-core/message/164936 Mute This Topic: https://lists.openembedded.org/mt/90730270/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] Git and pseudo
Hi, Richard Purdie escreveu no dia quarta, 27/04/2022 à(s) 11:56: > On Wed, 2022-04-27 at 11:37 +0100, Jose Quaresma wrote: > > Hi, > > > > Richard Purdie escreveu no dia > quarta, > > 27/04/2022 à(s) 11:22: > > > On Wed, 2022-04-27 at 08:47 +0200, Stefano Babic wrote: > > > > > > > > > > > > > https://git.yoctoproject.org/poky/commit/?id=5bca57859b280f73b23247aac7dec6b05f48fde8 > > > > > > > > > The change that introduces the intercept script [1] Is > partially reversed with > > [2] > > With this approach using the environment we don't need the intercept > script > > anymore or I am missing something? > > > > [1] > > > https://git.yoctoproject.org/poky/commit/?id=21559199516a31c7635c5f2d874eaa4a92fff0e5 > > [2] > > > https://git.yoctoproject.org/poky/commit/?id=5546a868b52400ed1487b2ac7149f3a9e7293bd2 > > The devshell experience is better with the intercept as it means things > like the > user's HOMEDIR is used for their gitconfig for things like user and email > when > writing commits. I've therefore chosen to leave that in master. We may or > may > not backport those pieces, I don't have any strong preference. > I agree that the intercept will improve the devshell user experience and it was this part that was escaping me. Thanks Jose > The other commit from Ross solves the major issue we care about build wide > outside devshell. > > Cheers, > > Richard > > > > -- Best regards, José Quaresma -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164937): https://lists.openembedded.org/g/openembedded-core/message/164937 Mute This Topic: https://lists.openembedded.org/mt/90680045/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] cve-check: no need to depend on the fetch task
> On 28 Apr 2022, at 09:16, Marta Rybczynska wrote: > A side-effect of this change is that we seem to not be downloading the NVD > database > anymore... This is probably not exactly what we want right now. That’s unexpected, as the NVD fetch is in another recipe entirely. Note that the NVD fetch only happens once a day, so it’s possible it just executed very fast. Ross -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164938): https://lists.openembedded.org/g/openembedded-core/message/164938 Mute This Topic: https://lists.openembedded.org/mt/90730270/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH] base-passwd: Disable shell for default users
Change the shell of all global static users other than root (which retains /bin/sh) and sync (as /bin/sync is rather harmless) to /sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] Signed-off-by: Jiaqing Zhao --- .../base-passwd/disable-shell.patch | 57 +++ .../base-passwd/base-passwd_3.5.29.bb | 1 + 2 files changed, 58 insertions(+) create mode 100644 meta/recipes-core/base-passwd/base-passwd/disable-shell.patch diff --git a/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch new file mode 100644 index 00..dddc93ca35 --- /dev/null +++ b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch @@ -0,0 +1,57 @@ +From 91e0db96741359173ddf2be083aafcc1a3c32472 Mon Sep 17 00:00:00 2001 +From: Jiaqing Zhao +Date: Mon, 18 Apr 2022 11:22:43 +0800 +Subject: [PATCH] Disable shell for default users + +Change the shell of all global static users other than root (which +retains /bin/sh) and sync (as /bin/sync is rather harmless) to +/sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) + +Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] +Signed-off-by: Jiaqing Zhao +--- + passwd.master | 32 + 1 file changed, 16 insertions(+), 16 deletions(-) + +diff --git a/passwd.master b/passwd.master +index e1c32ff..0cd5ffd 100644 +--- a/passwd.master b/passwd.master +@@ -1,18 +1,18 @@ + root::0:0:root:/root:/bin/sh +-daemon:*:1:1:daemon:/usr/sbin:/bin/sh +-bin:*:2:2:bin:/bin:/bin/sh +-sys:*:3:3:sys:/dev:/bin/sh ++daemon:*:1:1:daemon:/usr/sbin:/sbin/nologin ++bin:*:2:2:bin:/bin:/sbin/nologin ++sys:*:3:3:sys:/dev:/sbin/nologin + sync:*:4:65534:sync:/bin:/bin/sync +-games:*:5:60:games:/usr/games:/bin/sh +-man:*:6:12:man:/var/cache/man:/bin/sh +-lp:*:7:7:lp:/var/spool/lpd:/bin/sh +-mail:*:8:8:mail:/var/mail:/bin/sh +-news:*:9:9:news:/var/spool/news:/bin/sh +-uucp:*:10:10:uucp:/var/spool/uucp:/bin/sh +-proxy:*:13:13:proxy:/bin:/bin/sh +-www-data:*:33:33:www-data:/var/www:/bin/sh +-backup:*:34:34:backup:/var/backups:/bin/sh +-list:*:38:38:Mailing List Manager:/var/list:/bin/sh +-irc:*:39:39:ircd:/var/run/ircd:/bin/sh +-gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh +-nobody:*:65534:65534:nobody:/nonexistent:/bin/sh ++games:*:5:60:games:/usr/games:/sbin/nologin ++man:*:6:12:man:/var/cache/man:/sbin/nologin ++lp:*:7:7:lp:/var/spool/lpd:/sbin/nologin ++mail:*:8:8:mail:/var/mail:/sbin/nologin ++news:*:9:9:news:/var/spool/news:/sbin/nologin ++uucp:*:10:10:uucp:/var/spool/uucp:/sbin/nologin ++proxy:*:13:13:proxy:/bin:/sbin/nologin ++www-data:*:33:33:www-data:/var/www:/sbin/nologin ++backup:*:34:34:backup:/var/backups:/sbin/nologin ++list:*:38:38:Mailing List Manager:/var/list:/sbin/nologin ++irc:*:39:39:ircd:/var/run/ircd:/sbin/nologin ++gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/sbin/nologin ++nobody:*:65534:65534:nobody:/nonexistent:/sbin/nologin +-- +2.32.0 + diff --git a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb index 9a27ad3ab5..6f688681df 100644 --- a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb +++ b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb @@ -14,6 +14,7 @@ SRC_URI = "https://launchpad.net/debian/+archive/primary/+files/${BPN}_${PV}.tar file://input.patch \ file://disable-docs.patch \ file://kvm.patch \ + file://disable-shell.patch \ " SRC_URI[md5sum] = "6beccac48083fe8ae5048acd062e5421" -- 2.34.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164939): https://lists.openembedded.org/g/openembedded-core/message/164939 Mute This Topic: https://lists.openembedded.org/mt/90749484/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH v2] base-passwd: Disable shell for default users
Change the shell of all global static users other than root (which retains /bin/sh) and sync (as /bin/sync is rather harmless) to /sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] Signed-off-by: Jiaqing Zhao --- v2: Fix indentation in bbfile. --- .../base-passwd/disable-shell.patch | 57 +++ .../base-passwd/base-passwd_3.5.29.bb | 1 + 2 files changed, 58 insertions(+) create mode 100644 meta/recipes-core/base-passwd/base-passwd/disable-shell.patch diff --git a/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch new file mode 100644 index 00..dddc93ca35 --- /dev/null +++ b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch @@ -0,0 +1,57 @@ +From 91e0db96741359173ddf2be083aafcc1a3c32472 Mon Sep 17 00:00:00 2001 +From: Jiaqing Zhao +Date: Mon, 18 Apr 2022 11:22:43 +0800 +Subject: [PATCH] Disable shell for default users + +Change the shell of all global static users other than root (which +retains /bin/sh) and sync (as /bin/sync is rather harmless) to +/sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) + +Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] +Signed-off-by: Jiaqing Zhao +--- + passwd.master | 32 + 1 file changed, 16 insertions(+), 16 deletions(-) + +diff --git a/passwd.master b/passwd.master +index e1c32ff..0cd5ffd 100644 +--- a/passwd.master b/passwd.master +@@ -1,18 +1,18 @@ + root::0:0:root:/root:/bin/sh +-daemon:*:1:1:daemon:/usr/sbin:/bin/sh +-bin:*:2:2:bin:/bin:/bin/sh +-sys:*:3:3:sys:/dev:/bin/sh ++daemon:*:1:1:daemon:/usr/sbin:/sbin/nologin ++bin:*:2:2:bin:/bin:/sbin/nologin ++sys:*:3:3:sys:/dev:/sbin/nologin + sync:*:4:65534:sync:/bin:/bin/sync +-games:*:5:60:games:/usr/games:/bin/sh +-man:*:6:12:man:/var/cache/man:/bin/sh +-lp:*:7:7:lp:/var/spool/lpd:/bin/sh +-mail:*:8:8:mail:/var/mail:/bin/sh +-news:*:9:9:news:/var/spool/news:/bin/sh +-uucp:*:10:10:uucp:/var/spool/uucp:/bin/sh +-proxy:*:13:13:proxy:/bin:/bin/sh +-www-data:*:33:33:www-data:/var/www:/bin/sh +-backup:*:34:34:backup:/var/backups:/bin/sh +-list:*:38:38:Mailing List Manager:/var/list:/bin/sh +-irc:*:39:39:ircd:/var/run/ircd:/bin/sh +-gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh +-nobody:*:65534:65534:nobody:/nonexistent:/bin/sh ++games:*:5:60:games:/usr/games:/sbin/nologin ++man:*:6:12:man:/var/cache/man:/sbin/nologin ++lp:*:7:7:lp:/var/spool/lpd:/sbin/nologin ++mail:*:8:8:mail:/var/mail:/sbin/nologin ++news:*:9:9:news:/var/spool/news:/sbin/nologin ++uucp:*:10:10:uucp:/var/spool/uucp:/sbin/nologin ++proxy:*:13:13:proxy:/bin:/sbin/nologin ++www-data:*:33:33:www-data:/var/www:/sbin/nologin ++backup:*:34:34:backup:/var/backups:/sbin/nologin ++list:*:38:38:Mailing List Manager:/var/list:/sbin/nologin ++irc:*:39:39:ircd:/var/run/ircd:/sbin/nologin ++gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/sbin/nologin ++nobody:*:65534:65534:nobody:/nonexistent:/sbin/nologin +-- +2.32.0 + diff --git a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb index 9a27ad3ab5..ef7792ae49 100644 --- a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb +++ b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb @@ -14,6 +14,7 @@ SRC_URI = "https://launchpad.net/debian/+archive/primary/+files/${BPN}_${PV}.tar file://input.patch \ file://disable-docs.patch \ file://kvm.patch \ + file://disable-shell.patch \ " SRC_URI[md5sum] = "6beccac48083fe8ae5048acd062e5421" -- 2.34.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164940): https://lists.openembedded.org/g/openembedded-core/message/164940 Mute This Topic: https://lists.openembedded.org/mt/90749534/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] kmod: Enable xz support by default
On Thu, 28 Apr 2022, at 07:26, Khem Raj wrote: > RPi kernel has started building compressed kernel modules by default > starting 5.15, currenrly therefore meta-raspberrypi kernels are unable > to load kernel modules since kmod and kmod-native do not entertain xz > compressed modules. There is a fix proposed in meta-raspberrypi [1] > but the fix is needed for native and nativesdk recipes as well, perhaps > its best to enable it here for best out of box experience with > meta-raspberrypi > > [1] https://github.com/agherzan/meta-raspberrypi/pull/1056 > > Signed-off-by: Khem Raj I don't see any reason not to do this and it does help with the BSPs using this compression requirement. So here is my +1. Would it be reasonable to propose to have it in kirkstone too? Otherwise, @khem, I'd need to drop compression or downgrade the kernel in kirkstone rpi (or make some yocto incompatible changes - which I'd rather not). Andrei -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164941): https://lists.openembedded.org/g/openembedded-core/message/164941 Mute This Topic: https://lists.openembedded.org/mt/90747997/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] cve-check: no need to depend on the fetch task
On Thu, Apr 28, 2022 at 11:17 AM Ross Burton wrote: > > > > On 28 Apr 2022, at 09:16, Marta Rybczynska wrote: > > A side-effect of this change is that we seem to not be downloading the > NVD database > > anymore... This is probably not exactly what we want right now. > > > That’s unexpected, as the NVD fetch is in another recipe entirely. > > Note that the NVD fetch only happens once a day, so it’s possible it just > executed very fast. > This patch is fine. The error I'm seeing is a different one: the condition of one hour between the fetches does not always work. Under debug right now, will post a fix when I have it. Marta -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164942): https://lists.openembedded.org/g/openembedded-core/message/164942 Mute This Topic: https://lists.openembedded.org/mt/90730270/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH] scripts/contrib/oe-build-perf-report-email.py: remove obsolete check for phantomjs and optipng
From: Steve Sakoman Use of those tools was removed in b5c131006e3fad0a15e6cdf81f71dc1e96647028 perf-build-test/report: Drop phantomjs and html email reports support Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie --- scripts/contrib/oe-build-perf-report-email.py | 13 - 1 file changed, 13 deletions(-) diff --git a/scripts/contrib/oe-build-perf-report-email.py b/scripts/contrib/oe-build-perf-report-email.py index c900720f6e1..7192113c281 100755 --- a/scripts/contrib/oe-build-perf-report-email.py +++ b/scripts/contrib/oe-build-perf-report-email.py @@ -27,17 +27,6 @@ logging.basicConfig(level=logging.INFO, format="%(levelname)s: %(message)s") log = logging.getLogger('oe-build-perf-report') -def check_utils(): -"""Check that all needed utils are installed in the system""" -missing = [] -for cmd in ('phantomjs', 'optipng'): -if not shutil.which(cmd): -missing.append(cmd) -if missing: -log.error("The following tools are missing: %s", ' '.join(missing)) -sys.exit(1) - - def parse_args(argv): """Parse command line arguments""" description = """Email build perf test report""" @@ -101,8 +90,6 @@ def main(argv=None): if args.debug: log.setLevel(logging.DEBUG) -check_utils() - if args.outdir: outdir = args.outdir if not os.path.exists(outdir): -- 2.32.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164943): https://lists.openembedded.org/g/openembedded-core/message/164943 Mute This Topic: https://lists.openembedded.org/mt/90751523/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH 1/2] sstate: add a LockedSet class to be used on the mirror thread pool
On Tue, 2022-04-19 at 10:46 +0100, Jose Quaresma wrote: > The python set() is not thread safe and we use it on the ThreadedPool. > With this LockedSet python class we can call the 'add' and 'remove' > safely inside the ThreadedPool. > > This piece of code is taken from the stackoverflow > https://stackoverflow.com/questions/13610654/how-to-make-built-in-containers-sets-dicts-lists-thread-safe > > May be related with [YOCTO #14775] -- > https://bugzilla.yoctoproject.org/show_bug.cgi?id=14775 > > Signed-off-by: Jose Quaresma For info, https://autobuilder.yoctoproject.org/typhoon/#/builders/74/builds/5083 was a failure with master-next which included the changes in this discussion. It doesn't seem to address that issue :( Cheers, Richard -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164944): https://lists.openembedded.org/g/openembedded-core/message/164944 Mute This Topic: https://lists.openembedded.org/mt/90558156/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 2/2] musl-locales: explicitly depend on gettext-native
The gettext class is designed for use by applications with optional NLS support: depending on the value of USE_NLS it will either depend on gettext-minimal-native (just the autoconf macros) or gettext-native, and will pass --enable-nls/--disable-nls as appropriate. However, musl-locales specifically needs to run msgfmt at runtime, so explicitly depend on gettext-native instead. Also remove the redundant EXTRA_OECMAKE assignment. Signed-off-by: Ross Burton --- meta/recipes-core/musl/musl-locales_git.bb | 6 ++ 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/meta/recipes-core/musl/musl-locales_git.bb b/meta/recipes-core/musl/musl-locales_git.bb index fa814d2bd9..40b20e250d 100644 --- a/meta/recipes-core/musl/musl-locales_git.bb +++ b/meta/recipes-core/musl/musl-locales_git.bb @@ -14,14 +14,12 @@ SRCREV = "1101fb2bcdd189cd9415b8bd1c775eb43527d25c" S = "${WORKDIR}/git" -DEPENDS = "virtual/libintl" +DEPENDS = "virtual/libintl gettext-native" PROVIDES = "virtual/libc-locale" -inherit cmake gettext +inherit cmake -EXTRA_OECMAKE = "" -# # We will skip parsing for non-musl systems python () { if d.getVar('TCLIBC') != "musl": -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164946): https://lists.openembedded.org/g/openembedded-core/message/164946 Mute This Topic: https://lists.openembedded.org/mt/90752096/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 1/2] distro/poky-tiny: don't put translations into images
IMAGE_LINGUAS has a default value, "en-us en-gb" in default-distrovars.inc and "de-de fr-fr en-gb" in image.bbclass. However, poky-tiny sets USE_NLS=no so IMAGE_LINGUAS can't really be used in a tiny context, and previously musl hasn't supported locales so this hasn't been a problem. However, now that musl-locales exists, poky-tiny images will try to pull in translations. As we've disabled NLS these simply take up disk space and cannot be used, and currently musl-locales fails to build if USE_NLS=no. Set IMAGE_LINGUAS to "" in poky-tiny.conf so that images don't have locales added. Signed-off-by: Ross Burton --- meta-poky/conf/distro/poky-tiny.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-poky/conf/distro/poky-tiny.conf b/meta-poky/conf/distro/poky-tiny.conf index 9c9f6f192f..2fe0d478ff 100644 --- a/meta-poky/conf/distro/poky-tiny.conf +++ b/meta-poky/conf/distro/poky-tiny.conf @@ -63,6 +63,8 @@ ENABLE_WIDEC:class-native = "true" # Drop native language support. This removes the # eglibc->bash->gettext->libc-posix-clang-wchar dependency. USE_NLS="no" +# As we don't have native language support, don't install locales into images +IMAGE_LINGUAS = "" # Comment out any of the lines below to disable them in the build # DISTRO_FEATURES options: -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164945): https://lists.openembedded.org/g/openembedded-core/message/164945 Mute This Topic: https://lists.openembedded.org/mt/90752095/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH v2] base-passwd: Disable shell for default users
> -Original Message- > From: openembedded-core@lists.openembedded.org c...@lists.openembedded.org> On Behalf Of Jiaqing Zhao > Sent: den 28 april 2022 11:50 > To: openembedded-core@lists.openembedded.org > Cc: Jiaqing Zhao > Subject: [OE-core] [PATCH v2] base-passwd: Disable shell for default users > > Change the shell of all global static users other than root (which > retains /bin/sh) and sync (as /bin/sync is rather harmless) to > /sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) > > Upstream-Status: Backport > [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] Since Kirkstone is out the door, is there any reason to not update the version of base-passwd instead? //Peter > Signed-off-by: Jiaqing Zhao > --- > v2: > Fix indentation in bbfile. > --- > .../base-passwd/disable-shell.patch | 57 +++ > .../base-passwd/base-passwd_3.5.29.bb | 1 + > 2 files changed, 58 insertions(+) > create mode 100644 meta/recipes-core/base-passwd/base-passwd/disable- > shell.patch > > diff --git a/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch > b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch > new file mode 100644 > index 00..dddc93ca35 > --- /dev/null > +++ b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch > @@ -0,0 +1,57 @@ > +From 91e0db96741359173ddf2be083aafcc1a3c32472 Mon Sep 17 00:00:00 2001 > +From: Jiaqing Zhao > +Date: Mon, 18 Apr 2022 11:22:43 +0800 > +Subject: [PATCH] Disable shell for default users > + > +Change the shell of all global static users other than root (which > +retains /bin/sh) and sync (as /bin/sync is rather harmless) to > +/sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) > + > +Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base- > passwd/3.5.30] > +Signed-off-by: Jiaqing Zhao > +--- > + passwd.master | 32 > + 1 file changed, 16 insertions(+), 16 deletions(-) > + > +diff --git a/passwd.master b/passwd.master > +index e1c32ff..0cd5ffd 100644 > +--- a/passwd.master > b/passwd.master > +@@ -1,18 +1,18 @@ > + root::0:0:root:/root:/bin/sh > +-daemon:*:1:1:daemon:/usr/sbin:/bin/sh > +-bin:*:2:2:bin:/bin:/bin/sh > +-sys:*:3:3:sys:/dev:/bin/sh > ++daemon:*:1:1:daemon:/usr/sbin:/sbin/nologin > ++bin:*:2:2:bin:/bin:/sbin/nologin > ++sys:*:3:3:sys:/dev:/sbin/nologin > + sync:*:4:65534:sync:/bin:/bin/sync > +-games:*:5:60:games:/usr/games:/bin/sh > +-man:*:6:12:man:/var/cache/man:/bin/sh > +-lp:*:7:7:lp:/var/spool/lpd:/bin/sh > +-mail:*:8:8:mail:/var/mail:/bin/sh > +-news:*:9:9:news:/var/spool/news:/bin/sh > +-uucp:*:10:10:uucp:/var/spool/uucp:/bin/sh > +-proxy:*:13:13:proxy:/bin:/bin/sh > +-www-data:*:33:33:www-data:/var/www:/bin/sh > +-backup:*:34:34:backup:/var/backups:/bin/sh > +-list:*:38:38:Mailing List Manager:/var/list:/bin/sh > +-irc:*:39:39:ircd:/var/run/ircd:/bin/sh > +-gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh > +-nobody:*:65534:65534:nobody:/nonexistent:/bin/sh > ++games:*:5:60:games:/usr/games:/sbin/nologin > ++man:*:6:12:man:/var/cache/man:/sbin/nologin > ++lp:*:7:7:lp:/var/spool/lpd:/sbin/nologin > ++mail:*:8:8:mail:/var/mail:/sbin/nologin > ++news:*:9:9:news:/var/spool/news:/sbin/nologin > ++uucp:*:10:10:uucp:/var/spool/uucp:/sbin/nologin > ++proxy:*:13:13:proxy:/bin:/sbin/nologin > ++www-data:*:33:33:www-data:/var/www:/sbin/nologin > ++backup:*:34:34:backup:/var/backups:/sbin/nologin > ++list:*:38:38:Mailing List Manager:/var/list:/sbin/nologin > ++irc:*:39:39:ircd:/var/run/ircd:/sbin/nologin > ++gnats:*:41:41:Gnats Bug-Reporting System > (admin):/var/lib/gnats:/sbin/nologin > ++nobody:*:65534:65534:nobody:/nonexistent:/sbin/nologin > +-- > +2.32.0 > + > diff --git a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb > b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb > index 9a27ad3ab5..ef7792ae49 100644 > --- a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb > +++ b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb > @@ -14,6 +14,7 @@ SRC_URI = > "https://launchpad.net/debian/+archive/primary/+files/${BPN}_${PV}.tar > file://input.patch \ > file://disable-docs.patch \ > file://kvm.patch \ > + file://disable-shell.patch \ > " > > SRC_URI[md5sum] = "6beccac48083fe8ae5048acd062e5421" > -- > 2.34.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164947): https://lists.openembedded.org/g/openembedded-core/message/164947 Mute This Topic: https://lists.openembedded.org/mt/90749534/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 00/15] kernel-yocto: consolidated pull request
From: Bruce Ashfield Richard, This is mainly a resend of the pull request that I sent just before the release builds. At that time, there was a ppc boot issue, which I've fixed. There was also a ptest warning, which I couldn't reproduce, so let's see if it pops back up on the AB. There is also a known issue with some of the arm reorganization done for the -tiny cleaup. Jon has been working on fixes to that series, and I've cc'd him here so he can add context. It was some boot issues, even in the -standard kernel for sato (last I checked). The issue with the ARM changes is that they've already been pushed to my repos, so everything stacks on top. If we can't get them fixed shortly, I can temporarily revert and do a new patch on top. Khem has also indicated that the 5.15.36 -stable has all of the changes required for gcc12, so it would be a good bump to get under test. Cheers, Bruce The following changes since commit 5639708757faa00de1bc64b01220a5f7232818fb: set_versions: update for 4.0 release (2022-04-26 10:56:47 +0100) are available in the Git repository at: git://git.yoctoproject.org/poky-contrib zedd/kernel http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=zedd/kernel Bruce Ashfield (15): linux-yocto/5.15: arm: poky-tiny cleanup and fixes linux-yocto/5.15: update to v5.15.33 linux-yocto/5.10: update to v5.10.110 linux-yocto/5.10: base: enable kernel crypto userspace API linux-yocto/5.15: base: enable kernel crypto userspace API linux-yocto/5.15: kasan: fix BUG: sleeping function called from invalid context kernel-yocto: allow patch author date to be commit date linux-yocto/5.15: fix ppc boot linux-yocto/5.15: netfilter: conntrack: avoid useless indirection during conntrack destruction linux-yocto/5.10: update to v5.10.112 linux-yocto/5.15: update to v5.15.35 linux-yocto/5.15: Fix CVE-2022-28796 linux-yocto: enable powerpc debug fragment linux-yocto/5.15: fix -standard kernel build issue linux-yocto/5.15: update to v5.15.36 meta/classes/kernel-yocto.bbclass | 6 +++- .../kern-tools/kern-tools-native_git.bb | 2 +- .../linux/linux-yocto-rt_5.10.bb | 6 ++-- .../linux/linux-yocto-rt_5.15.bb | 6 ++-- .../linux/linux-yocto-tiny_5.10.bb| 8 +++--- .../linux/linux-yocto-tiny_5.15.bb| 6 ++-- meta/recipes-kernel/linux/linux-yocto_5.10.bb | 26 + meta/recipes-kernel/linux/linux-yocto_5.15.bb | 28 ++- 8 files changed, 48 insertions(+), 40 deletions(-) -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164948): https://lists.openembedded.org/g/openembedded-core/message/164948 Mute This Topic: https://lists.openembedded.org/mt/90753174/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 06/15] linux-yocto/5.15: kasan: fix BUG: sleeping function called from invalid context
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/5.15: 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h Link: https://lkml.kernel.org/r/20210913112609.2651084-1-el...@google.com Link: https://lkml.kernel.org/r/20210913112609.2651084-2-el...@google.com Signed-off-by: Paul Gortmaker Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_5.15.bb | 2 +- .../linux/linux-yocto-tiny_5.15.bb| 2 +- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 20 +-- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index dc9b5dd266..bba1200fe7 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,7 +11,7 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "21c75f01103d61c2382d334b3ffbfe99dda7e262" +SRCREV_machine ?= "85ebb3e98ee184fad92eedd79f006df9809f01ff" SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 14279920ba..27373660c7 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -14,7 +14,7 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "ea49628781d5a5e42616c73f0dbf2d02d533f29b" +SRCREV_machine ?= "41f36834f2236bd22ab8c33ad1908da029bef79d" SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 0ca177cc8b..62b16e4f9e 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -13,16 +13,16 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "43ff86b464fcc7b5050a727052321c11aeae68ab" -SRCREV_machine:qemuarm64 ?= "2f91a381a2c207975c082737b94f18e908e94243" -SRCREV_machine:qemumips ?= "f2bb2fd873acd46e19acaafcd64b0f3e81afb979" -SRCREV_machine:qemuppc ?= "2d8f15356671a566aac072dadbb9757046fc8acc" -SRCREV_machine:qemuriscv64 ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" -SRCREV_machine:qemuriscv32 ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" -SRCREV_machine:qemux86 ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" -SRCREV_machine:qemux86-64 ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" -SRCREV_machine:qemumips64 ?= "6aa2697e458c5a67404566ddbb3027a48593a7bc" -SRCREV_machine ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" +SRCREV_machine:qemuarm ?= "8f765250a60ba7a94935709d4d0f0edffd366990" +SRCREV_machine:qemuarm64 ?= "35a6bda405ab207447b0e088b71fd8a9dab566e4" +SRCREV_machine:qemumips ?= "d413054d21fe14e8111ee2396e07b4c15e0a2e77" +SRCREV_machine:qemuppc ?= "33bdc98e5f267d7715cc1eb6d9c461616c0b" +SRCREV_machine:qemuriscv64 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" +SRCREV_machine:qemuriscv32 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" +SRCREV_machine:qemux86 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" +SRCREV_machine:qemux86-64 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" +SRCREV_machine:qemumips64 ?= "19d4c0deafc3b5359ab9af9d092a36feee0d891b" +SRCREV_machine ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164954): https://lists.openembedded.org/g/openembedded-core/message/164954 Mute This Topic: https://lists.ope
[OE-core] [PATCH 01/15] linux-yocto/5.15: arm: poky-tiny cleanup and fixes
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/.: 20dcef87913 versatile: restore explicit CONFIG_ARM 8e63ec2fc66 qemuarm64: cleanup for tiny enablement fa720c009a8 arm-versatile-926ejs: reorg for tiny and preempt-rt 7febff689a8 qemuarma15: fix tiny and preempt-rt 7720c50d622 tiny: make more generic f052e84eafa pci: remove CONFIG_PCI_MMCONFIG 917043019b4 virtio: Add prereqs for tiny da919d67b1a common-pc: add CONFIG_ISA_DMA_API for tiny 1a3a497c472 x2apic: enable iommu for tiny 63e25b57177 features/security: Move x86_64 configs to separate file Signed-off-by: Jon Mason Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb | 2 +- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 87ccfc1f45..b7949e3b85 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -12,7 +12,7 @@ python () { } SRCREV_machine ?= "29d051cc421a76432897019edc33edae35b16e39" -SRCREV_meta ?= "63e25b5717751b4b33685bd5991d10c52934a4c6" +SRCREV_meta ?= "20dcef879138eeb57347b35d2250a432ee23d927" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 43a5ad728a..129b70cb24 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -15,7 +15,7 @@ KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" SRCREV_machine ?= "c3d54a67cbf3fb8e6df2d88c80e9d2c74f69aba4" -SRCREV_meta ?= "63e25b5717751b4b33685bd5991d10c52934a4c6" +SRCREV_meta ?= "20dcef879138eeb57347b35d2250a432ee23d927" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 5cfa0c37d7..cfdce6ea97 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -23,7 +23,7 @@ SRCREV_machine:qemux86 ?= "c9f3902d8069e32a8928153a38d8f6115194d128" SRCREV_machine:qemux86-64 ?= "c9f3902d8069e32a8928153a38d8f6115194d128" SRCREV_machine:qemumips64 ?= "a4805fe749c9c56d18a60b5378674760ef0e85ed" SRCREV_machine ?= "c9f3902d8069e32a8928153a38d8f6115194d128" -SRCREV_meta ?= "63e25b5717751b4b33685bd5991d10c52934a4c6" +SRCREV_meta ?= "20dcef879138eeb57347b35d2250a432ee23d927" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164949): https://lists.openembedded.org/g/openembedded-core/message/164949 Mute This Topic: https://lists.openembedded.org/mt/90753177/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 03/15] linux-yocto/5.10: update to v5.10.110
From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: 3238bffaf992 Linux 5.10.110 cf342cbfb37f PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" a25864c5bc20 arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones 558564db4475 coredump: Use the vma snapshot in fill_files_note b7933f145ad3 coredump/elf: Pass coredump_params into fill_note_info b043ae637a83 coredump: Remove the WARN_ON in dump_vma_snapshot 936c8be4d144 coredump: Snapshot the vmas in do_coredump 5318cdf4fd83 can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path 869016a2938a can: m_can: m_can_tx_handler(): fix use after free of skb e90518d10c7d KVM: x86/mmu: do compare-and-exchange of gPTE via the user address e36c45263a30 openvswitch: Fixed nd target mask field in the flow dump. 415edc68b652 docs: sysctl/kernel: add missing bit to panic_print 272c74323dcc um: Fix uml_mconsole stop/go c0a6a547388e ARM: dts: spear13xx: Update SPI dma properties ea3912af8b8a ARM: dts: spear1340: Update serial node properties 74f7971985bd ASoC: topology: Allow TLV control to be either read or write 3ca47556d920 ubi: fastmap: Return error code if memory allocation fails in add_aeb() 7704f243cbbd dt-bindings: spi: mxic: The interrupt property is not mandatory 648ab1dcc119 dt-bindings: mtd: nand-controller: Fix a comment in the examples 71917e45e1aa dt-bindings: mtd: nand-controller: Fix the reg property description 73f2f37417b0 bpf: Fix comment for helper bpf_current_task_under_cgroup() 90805175a206 bpf: Adjust BPF stack helper functions to accommodate skip > 0 86489492e876 mm/usercopy: return 1 from hardened_usercopy __setup() handler 81a04b9a32e4 mm/memcontrol: return 1 from cgroup.memory __setup() handler f321621f5c84 ARM: 9187/1: JIVE: fix return value of __setup handler d57feed3b114 mm/mmap: return 1 from stack_guard_gap __setup() handler 73f7cbb15191 batman-adv: Check ptr for NULL before reducing its refcnt f6da750bfaf4 ASoC: soc-compress: Change the check for codec_dai d3f786b7cf81 staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet 12e380bb6f16 proc: bootconfig: Add null pointer check 90ec1b1538d4 can: isotp: restore accidentally removed MSG_PEEK feature 16960ac92b84 platform/chrome: cros_ec_typec: Check for EC device e5b681822cac ACPI: CPPC: Avoid out of bounds access when parsing _CPC data 785a53373c22 riscv module: remove (NOLOAD) b27de7011cb3 io_uring: fix memory leak of uid in files registration 20499ed3c041 ARM: iop32x: offset IRQ numbers by 1 432b057f8e84 ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl f28a857a61eb ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs ecfc3f8a6350 pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() 503868a7c006 pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() d9afc5146bd3 watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function 402b53dc7c46 pinctrl: pinconf-generic: Print arguments for bias-pull-* 7169f6011091 watch_queue: Free the page array when watch_queue is dismantled e64dc94990fd crypto: arm/aes-neonbs-cbc - Select generic cbc and aes a16f5ae8ade1 mailbox: imx: fix wakeup failure from freeze mode 051360e51341 rxrpc: Fix call timer start racing with call destruction a94d98e06eba net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware c73af4bc8a91 gfs2: Make sure FITRIM minlen is rounded up to fs block size 33c204266c12 rtc: check if __rtc_read_time was successful 381636f33fe4 XArray: Update the LRU list in xas_split() 3b9fabe8f6e8 can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value ef0acc514123 can: mcba_usb: properly check endpoint type 0801a51d7938 can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path 1ac49c8fd49f XArray: Fix xas_create_range() when multi-order entry present 49f77ab50a31 wireguard: socket: ignore v6 endpoints when ipv6 is disabled 096f9d35cac0 wireguard: socket: free skb in send6 when ipv6 is disabled cd032f218c02 wireguard: queueing: use CFI-safe ptr_ring cleanup function 8a0c70c238c5 ubifs: rename_whiteout: correct old_dir size computing c34ae24a2590 ubifs: Fix to add refcount once page is set private 07a209fadee7 ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() d07a24216931 ubifs: setflags: Make dirtied_ino_d 8 bytes aligned 13b2a8151e3b ubifs: Add missing iput if do_tmpfile() failed in rename whiteout 83e42a78428f ubifs: Fix deadlock in concurrent rename whiteout and inode writeback a90e2dbe66d2 ubifs: rename_whiteout: Fix double free for whiteout_ui->data 0c307349fe06 ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM 0fb470eb4889 KVM: SVM:
[OE-core] [PATCH 08/15] linux-yocto/5.15: fix ppc boot
From: Bruce Ashfield The 5.15-stable series pulled in the following commit: commit c894ac44786cfed383a6c6b20c1bfb12eb96018a Author: Thomas Zimmermann Date: Tue Jan 25 10:12:18 2022 +0100 fbdev: Hot-unplug firmware fb devices on forced removal commit 27599aacbaefcbf2af7b06b0029459bbf682000d upstream. Hot-unplug all firmware-framebuffer devices as part of removing them via remove_conflicting_framebuffers() et al. Releases all memory regions to be acquired by native drivers. Firmware, such as EFI, install a framebuffer while posting the computer. After removing the firmware-framebuffer device from fbdev, a native driver takes over the hardware and the firmware framebuffer becomes invalid. Firmware-framebuffer drivers, specifically simplefb, don't release their device from Linux' device hierarchy. It still owns the firmware framebuffer and blocks the native drivers from loading. This has been observed in the vmwgfx driver. [1] Initiating a device removal (i.e., hot unplug) as part of remove_conflicting_framebuffers() removes the underlying device and returns the memory range to the system. [1] https://lore.kernel.org/dri-devel/20220117180359.18114-1-z...@kde.org/ v2: * rename variable 'dev' to 'device' (Javier) Signed-off-by: Thomas Zimmermann Reported-by: Zack Rusin Reviewed-by: Javier Martinez Canillas Reviewed-by: Zack Rusin Reviewed-by: Hans de Goede CC: sta...@vger.kernel.org # v5.11+ Link: https://patchwork.freedesktop.org/patch/msgid/20220125091222.21457-2-tzimmerm...@suse.de Signed-off-by: Greg Kroah-Hartman And this is causing qemuppc to panic during boot when manipulating the fbdev. Reverting it fixes the problem, and won't cause issues for other platforms, so we revert it. Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_5.15.bb | 4 ++-- .../linux/linux-yocto-tiny_5.15.bb| 4 ++-- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 22 +-- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index bba1200fe7..d7250ca4d5 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,8 +11,8 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "85ebb3e98ee184fad92eedd79f006df9809f01ff" -SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" +SRCREV_machine ?= "ec729d37e4036fe80d0294684aa779c091466307" +SRCREV_meta ?= "71a82e181708bc619684cc9f1eea01ec2595c2ff" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 27373660c7..2de1be9e46 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "41f36834f2236bd22ab8c33ad1908da029bef79d" -SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" +SRCREV_machine ?= "9f43f6966b7ef3cc76c465e1f53fe353740155df" +SRCREV_meta ?= "71a82e181708bc619684cc9f1eea01ec2595c2ff" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 62b16e4f9e..83e484693b 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -13,17 +13,17 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "8f765250a60ba7a94935709d4d0f0edffd366990" -SRCREV_machine:qemuarm64 ?= "35a6bda405ab207447b0e088b71fd8a9dab566e4" -SRCREV_machine:qemumips ?= "d413054d21fe14e8111ee2396e07b4c15e0a2e77" -SRCREV_machine:qemuppc ?= "33bdc98e5f267d7715cc1eb6d9c461616c0b" -SRCREV_machine:qemuriscv64 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" -SRCREV_machine:qemuriscv32 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" -SRCREV_machine:qemux86 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" -SRCREV_machine:qemux86-64 ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" -SRCREV_machine:qemumips64 ?= "19d4c0deafc3b5359ab9af9d092a36feee0d891b" -SRCREV_machine ?= "7ba4cb36fd4f3da81698b3e519e763aaa142659f" -SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" +SRCREV_machine:qemuarm ?= "5c287562703770d5e466893c53bb9fca16b16fe8" +SRCREV_machine:qemuarm64 ?= "158f38930aa53b07009980cf417fbcddea58807d" +SRCREV_machine:qemumip
[OE-core] [PATCH 07/15] kernel-yocto: allow patch author date to be commit date
From: Bruce Ashfield In situations where a buid needs to be reproducible, it is sometimes desireable to use a patches author date, versus the time when it is applied. This generates a consistent hash between different patch applications. We leverage the existing KERNEL_DEBUG_TIMESTAMPS to trigger the use of a new option to kgit-s2q. This allows us to use the author date in a reproducible configuration, but disable it if we need the current time/date. Signed-off-by: Bruce Ashfield --- meta/classes/kernel-yocto.bbclass | 6 +- meta/recipes-kernel/kern-tools/kern-tools-native_git.bb | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/meta/classes/kernel-yocto.bbclass b/meta/classes/kernel-yocto.bbclass index 4cb638864c..fb30c7cc05 100644 --- a/meta/classes/kernel-yocto.bbclass +++ b/meta/classes/kernel-yocto.bbclass @@ -320,7 +320,11 @@ do_patch() { meta_dir=$(kgit --meta) (cd ${meta_dir}; ln -sf patch.queue series) if [ -f "${meta_dir}/series" ]; then - kgit-s2q --gen -v --patches .kernel-meta/ + kgit_extra_args="" + if [ "${KERNEL_DEBUG_TIMESTAMPS}" != "1" ]; then + kgit_extra_args="--commit-sha author" + fi + kgit-s2q --gen -v $kgit_extra_args --patches .kernel-meta/ if [ $? -ne 0 ]; then bberror "Could not apply patches for ${KMACHINE}." bbfatal_log "Patch failures can be resolved in the linux source directory ${S})" diff --git a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb index a6ab9ca56d..11613ab3b6 100644 --- a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb +++ b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb @@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "\ DEPENDS = "git-native" -SRCREV = "90598a5fae1172e3f7782a1b02f7b7518efd32c8" +SRCREV = "f70b1d52f4706a263ae22e2c61039ccd875e97b6" PV = "0.3+git${SRCPV}" inherit native -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164955): https://lists.openembedded.org/g/openembedded-core/message/164955 Mute This Topic: https://lists.openembedded.org/mt/90753188/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 05/15] linux-yocto/5.15: base: enable kernel crypto userspace API
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/.: 645b337371e base.cfg: enable kernel crypto userspace API Signed-off-by: Alexander Kanavin Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb | 2 +- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index d9ec799d7a..dc9b5dd266 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -12,7 +12,7 @@ python () { } SRCREV_machine ?= "21c75f01103d61c2382d334b3ffbfe99dda7e262" -SRCREV_meta ?= "34f5ef44b9aca6708c44d0fb652ec9a4ccc2d13b" +SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 94911d309d..14279920ba 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -15,7 +15,7 @@ KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" SRCREV_machine ?= "ea49628781d5a5e42616c73f0dbf2d02d533f29b" -SRCREV_meta ?= "34f5ef44b9aca6708c44d0fb652ec9a4ccc2d13b" +SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 8035a87c57..0ca177cc8b 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -23,7 +23,7 @@ SRCREV_machine:qemux86 ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" SRCREV_machine:qemux86-64 ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" SRCREV_machine:qemumips64 ?= "6aa2697e458c5a67404566ddbb3027a48593a7bc" SRCREV_machine ?= "2fa9f5b7eded592b4a38e505f914971e48601e00" -SRCREV_meta ?= "34f5ef44b9aca6708c44d0fb652ec9a4ccc2d13b" +SRCREV_meta ?= "645b337371e7e080e71f7d7f2435326242451a95" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164953): https://lists.openembedded.org/g/openembedded-core/message/164953 Mute This Topic: https://lists.openembedded.org/mt/90753183/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 09/15] linux-yocto/5.15: netfilter: conntrack: avoid useless indirection during conntrack destruction
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/5.15: 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_5.15.bb | 4 ++-- .../linux/linux-yocto-tiny_5.15.bb| 4 ++-- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 22 +-- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index d7250ca4d5..9910ea023c 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,8 +11,8 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "ec729d37e4036fe80d0294684aa779c091466307" -SRCREV_meta ?= "71a82e181708bc619684cc9f1eea01ec2595c2ff" +SRCREV_machine ?= "a5e556295fd7c0ec6095e12c0960d4313587e2e0" +SRCREV_meta ?= "cb8938bc9d6b4575a1cd0072106b9720648ed0ab" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 2de1be9e46..96f09f3839 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "9f43f6966b7ef3cc76c465e1f53fe353740155df" -SRCREV_meta ?= "71a82e181708bc619684cc9f1eea01ec2595c2ff" +SRCREV_machine ?= "57d9f612e60a3b73774df1046dc3e3f7c17fbf49" +SRCREV_meta ?= "cb8938bc9d6b4575a1cd0072106b9720648ed0ab" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 83e484693b..22b4a790fd 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -13,17 +13,17 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "5c287562703770d5e466893c53bb9fca16b16fe8" -SRCREV_machine:qemuarm64 ?= "158f38930aa53b07009980cf417fbcddea58807d" -SRCREV_machine:qemumips ?= "2ebd4e128f3f0ad1bff5677f593a545053f9ff91" -SRCREV_machine:qemuppc ?= "566f4e67a086fbdeb17ebe3b7537f9f345001cd0" -SRCREV_machine:qemuriscv64 ?= "4e7122625996261d870160dfd2096108742f1009" -SRCREV_machine:qemuriscv32 ?= "4e7122625996261d870160dfd2096108742f1009" -SRCREV_machine:qemux86 ?= "4e7122625996261d870160dfd2096108742f1009" -SRCREV_machine:qemux86-64 ?= "4e7122625996261d870160dfd2096108742f1009" -SRCREV_machine:qemumips64 ?= "2aafd732abb0b9011e2041c7c5c9ab3f475dedd1" -SRCREV_machine ?= "4e7122625996261d870160dfd2096108742f1009" -SRCREV_meta ?= "71a82e181708bc619684cc9f1eea01ec2595c2ff" +SRCREV_machine:qemuarm ?= "2c5f632df378c23226fdb89fe36ad83c05d8da01" +SRCREV_machine:qemuarm64 ?= "4a6d3cff7783b6d6f0c8c09de3158cffe8fa97af" +SRCREV_machine:qemumips ?= "b8cca873d9d28cb48884ce4aa69983fe36867309" +SRCREV_machine:qemuppc ?= "b0a8af64b0b46184583f8eb05a3c7b038d5484bf" +SRCREV_machine:qemuriscv64 ?= "07a63f760793c64abe99674f067ae0643fdd2314" +SRCREV_machine:qemuriscv32 ?= "07a63f760793c64abe99674f067ae0643fdd2314" +SRCREV_machine:qemux86 ?= "07a63f760793c64abe99674f067ae0643fdd2314" +SRCREV_machine:qemux86-64 ?= "07a63f760793c64abe99674f067ae0643fdd2314" +SRCREV_machine:qemumips64 ?= "6456900204c039e30e383eebb27b97cffacf420a" +SRCREV_machine ?= "07a63f760793c64abe99674f067ae0643fdd2314" +SRCREV_meta ?= "cb8938bc9d6b4575a1cd0072106b9720648ed0ab" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164957): https://lists.openembedded.org/g/openembedded-core/message/164957 Mute This Topic: https://lists.openembedded.org/mt/90753190/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 04/15] linux-yocto/5.10: base: enable kernel crypto userspace API
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/.: bddb0e4921f base.cfg: enable kernel crypto userspace API Signed-off-by: Alexander Kanavin Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb | 2 +- meta/recipes-kernel/linux/linux-yocto_5.10.bb | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb index b8a280a615..9731a738b3 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb @@ -12,7 +12,7 @@ python () { } SRCREV_machine ?= "c11f8738640c3c52f4ffc2adf9aa8f6c097e4a4e" -SRCREV_meta ?= "0959fd4d1eeb5312233be7a3c1f9a97104163f90" +SRCREV_meta ?= "bddb0e4921f541bafa595986f16cff5390d01f40" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb index bafa486d23..f75c0d70d2 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb @@ -17,7 +17,7 @@ KCONF_BSP_AUDIT_LEVEL = "2" SRCREV_machine:qemuarm ?= "3851408a9f5d9d4531f29340056a1089debd5b58" SRCREV_machine ?= "0a47fd76cb0f7e22d47afcb88bf884c750ba5d92" -SRCREV_meta ?= "0959fd4d1eeb5312233be7a3c1f9a97104163f90" +SRCREV_meta ?= "bddb0e4921f541bafa595986f16cff5390d01f40" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb index a0b7bbe48a..127763e972 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb @@ -23,7 +23,7 @@ SRCREV_machine:qemux86 ?= "a275cd6839513c72ceae989a575b6accbb262016" SRCREV_machine:qemux86-64 ?= "a275cd6839513c72ceae989a575b6accbb262016" SRCREV_machine:qemumips64 ?= "36a2d17167ee66a2feda5fb1efee0a2ee2dc4740" SRCREV_machine ?= "a275cd6839513c72ceae989a575b6accbb262016" -SRCREV_meta ?= "0959fd4d1eeb5312233be7a3c1f9a97104163f90" +SRCREV_meta ?= "bddb0e4921f541bafa595986f16cff5390d01f40" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164952): https://lists.openembedded.org/g/openembedded-core/message/164952 Mute This Topic: https://lists.openembedded.org/mt/90753182/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 10/15] linux-yocto/5.10: update to v5.10.112
From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: 1052f9bce629 Linux 5.10.112 5c62d3bf1410 ax25: Fix UAF bugs in ax25 timers f934fa478dd1 ax25: Fix NULL pointer dereferences in ax25 timers 145ea8d213e8 ax25: fix NPD bug in ax25_disconnect a4942c6fea87 ax25: fix UAF bug in ax25_send_control() b20a5ab0f5fb ax25: Fix refcount leaks caused by ax25_cb_del() 57cc15f5fd55 ax25: fix UAF bugs of net_device caused by rebinding operation 5ddae8d06441 ax25: fix reference count leaks of ax25_dev 5ea00fc60676 ax25: add refcount in ax25_dev to avoid UAF bugs 361288633bfa scsi: iscsi: Fix unbound endpoint error handling 129db30599bc scsi: iscsi: Fix endpoint reuse regression 26f827e095ab dma-direct: avoid redundant memory sync for swiotlb 9a5a4d23e24d timers: Fix warning condition in __run_timers() 84837f43e56f i2c: pasemi: Wait for write xfers to finish 89496d80bf84 smp: Fix offline cpu check in flush_smp_call_function_queue() cd02b2687d66 dm integrity: fix memory corruption when tag_size is less than digest size 0a312ec66a03 ARM: davinci: da850-evm: Avoid NULL pointer dereference 0806f1930562 tick/nohz: Use WARN_ON_ONCE() to prevent console saturation 0275c75955d1 genirq/affinity: Consider that CPUs on nodes can be unbalanced 1fcfe37d170a drm/amdgpu: Enable gfxoff quirk on MacBook Pro 68ae52efa132 drm/amd/display: don't ignore alpha property on pre-multiplied mode a263712ba8c9 ipv6: fix panic when forwarding a pkt with no in6 dev 659214603bf2 nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size 912797e54c99 ALSA: pcm: Test for "silence" field in struct "pcm_format_data" 48d070ca5e7e ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers 163e16247130 ALSA: hda/realtek: Add quirk for Clevo PD50PNT 5e4dd1799883 btrfs: mark resumed async balance as writing 1d2eda18f6ff btrfs: fix root ref counts in error handling in btrfs_get_root_ref 9b7ec35253c9 ath9k: Fix usage of driver-private space in tx_info 0f65cedae500 ath9k: Properly clear TX status area before reporting to mac80211 cc21ae932656 gcc-plugins: latent_entropy: use /dev/urandom c089ffc846c8 memory: renesas-rpc-if: fix platform-device leak in error path 342454231ee5 KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded 06c348fde545 mm: kmemleak: take a full lowmem check in kmemleak_*_phys() 20ed94f8181a mm: fix unexpected zeroed page mapping with zram swap 192e507ef894 mm, page_alloc: fix build_zonerefs_node() 000b3921b4d5 perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant ca24c5e8f0ac drivers: net: slip: fix NPD bug in sl_tx_timeout() e8cf1e4d953d scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan 5b7ce74b6bc8 scsi: mvsas: Add PCI ID of RocketRaid 2640 4b44cd584057 drm/amd/display: Fix allocate_mst_payload assert on resume 34ea097fb63d drm/amd/display: Revert FEC check in validation fa5ee7c4232c myri10ge: fix an incorrect free for skb in myri10ge_sw_tso d90df6da50c5 net: usb: aqc111: Fix out-of-bounds accesses in RX fixup 9c12fcf1d864 net: axienet: setup mdio unconditionally b643807a735e tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry 98973d2bdd4a arm64: alternatives: mark patch_alternative() as `noinstr` 2462faffbfa5 regulator: wm8994: Add an off-on delay for WM8994 variant aa8cdedaf760 gpu: ipu-v3: Fix dev_dbg frequency output 150fe861c57c ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs 1ff5359afa5e net: micrel: fix KS8851_MLL Kconfig d3478709edf2 scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 b9a110fa755b scsi: lpfc: Fix queue failures when recovering from PCI parity error aec36b98a1bb scsi: target: tcmu: Fix possible page UAF 43666798059c Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer 1d7a5aae884c drm/amdkfd: Check for potential null return of kmalloc_array() e5afacc826a8 drm/amdgpu/vcn: improve vcn dpg stop procedure d2e0931e6d84 drm/amdkfd: Fix Incorrect VMIDs passed to HWS 7fc0610ad818 drm/amd/display: Update VTEM Infopacket definition 6906e05cf3ad drm/amd/display: FEC check in timing validation 756c61c1680f drm/amd/display: fix audio format not updated after edid updated 76e086ce7b2d btrfs: do not warn for free space inode in cow_file_range 217190dc66ef btrfs: fix fallocate to use file_modified to update permissions consistently 9b5d1b3413d7 drm/amd: Add USBC connector ID 6f9c06501d28 net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" 504c15f07f54 dm mpath: only use ktime_get_ns() in historical selector 4e166a41180b cifs: potential buffer overflow in handling symlinks 67677050cecb nfc: nci: add flush_workqueue to prevent uaf bfba9722cf2e perf tools: Fix misleading add event
[OE-core] [PATCH 02/15] linux-yocto/5.15: update to v5.15.33
From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 06f50ca83ace Linux 5.15.33 541b7456fc4d PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" 39fd0cc079c9 coredump: Use the vma snapshot in fill_files_note cabd69640957 coredump/elf: Pass coredump_params into fill_note_info 7ba958df6449 coredump: Remove the WARN_ON in dump_vma_snapshot f6ca862806df coredump: Snapshot the vmas in do_coredump 57c04fac8023 iommu/dma: Account for min_align_mask w/swiotlb 3e44e136560c swiotlb: Support aligned swiotlb buffers 52d23f5f0915 iommu/dma: Check CONFIG_SWIOTLB more broadly bc05d84824c0 iommu/dma: Fold _swiotlb helpers into callers c3841d020b82 iommu/dma: Skip extra sync during unmap w/swiotlb 8771d9673e0b KVM: x86/mmu: do compare-and-exchange of gPTE via the user address b0e8e828acb5 mmc: rtsx: Fix build errors/warnings for unused variable 8af04b6aa02b mmc: rtsx: Let MMC core handle runtime PM a9bbdeef768f n64cart: convert bi_disk to bi_bdev->bd_disk fix build 2a710a5c59e9 torture: Make torture.sh help message match reality acabfc943245 openvswitch: Fixed nd target mask field in the flow dump. 3fc38521fc30 docs: sysctl/kernel: add missing bit to panic_print 166abd13eab0 um: Fix uml_mconsole stop/go 94a53804ec3a arm64: dts: ls1046a: Update i2c node dma properties 32820c358d1b arm64: dts: ls1043a: Update i2c dma properties 28a020859c00 ARM: dts: spear13xx: Update SPI dma properties 7aa9bba18f80 ARM: dts: spear1340: Update serial node properties dd8772224c19 spi: mediatek: support tick_delay without enhance_timing 2a6e0695ddd5 media: ov6650: Fix crop rectangle affected by set format 3995d4cf529c media: ov6650: Add try support to selection API operations 8f5e6110e108 perf vendor events: Update metrics for SkyLake Server b0e5c18317f7 ASoC: topology: Allow TLV control to be either read or write 678b6901d00b ASoC: SOF: Intel: Fix build error without SND_SOC_SOF_PCI_DEV ba8260872dd5 ubi: fastmap: Return error code if memory allocation fails in add_aeb() 666176d0f9bb dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example e918b36600d6 dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167 b2b85196a31a dt-bindings: spi: mxic: The interrupt property is not mandatory c19a9d307844 dt-bindings: mtd: nand-controller: Fix a comment in the examples 716a77f8460d dt-bindings: mtd: nand-controller: Fix the reg property description 8ec990990be3 mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM 50c906a6977f bpf: Fix comment for helper bpf_current_task_under_cgroup() 398ac11f4425 bpf: Adjust BPF stack helper functions to accommodate skip > 0 21b6b8d43d87 af_unix: Support POLLPRI for OOB. 260daa256d30 mm/usercopy: return 1 from hardened_usercopy __setup() handler c9acbcd636ab mm/memcontrol: return 1 from cgroup.memory __setup() handler 48ddbd8b4e42 ARM: 9187/1: JIVE: fix return value of __setup handler 6795b20d4b2c mm/mmap: return 1 from stack_guard_gap __setup() handler 23629b673b78 net: preserve skb_end_offset() in skb_unclone_keeptruesize() 51e458fc0ca6 net: add skb_set_end_offset() helper 14d552ab31ed tracing: Have type enum modifications copy the strings 7007c894631c Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" 63351e2e1362 ASoC: soc-compress: Change the check for codec_dai 7ed3cce2fe68 arm64: mm: Drop 'const' from conditional arm64_dma_phys_limit definition 5ab0f5e238b9 staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet 0e39097efcb5 scsi: qla2xxx: Add qla2x00_async_done() for async routines b9cf1208af36 drm/connector: Fix typo in documentation 5b422da35c15 proc: bootconfig: Add null pointer check f78f56488cd3 can: isotp: restore accidentally removed MSG_PEEK feature 3fc81968625a platform/chrome: cros_ec_typec: Check for EC device 8c1c3c00dceb spi: Fix Tegra QSPI example 7480cc0240eb vhost: handle error while adding split ranges to iotlb 97b5593fd1b1 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data dae252901378 riscv module: remove (NOLOAD) 0853bd6885c2 io_uring: fix memory leak of uid in files registration 5b9ac3727e4a block: Fix the maximum minor value is blk_alloc_ext_minor() 21cfddd5e0f6 ARM: iop32x: offset IRQ numbers by 1 1a3f1cf87054 ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl 619709f0c608 ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs d509d41d89c5 pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() 3e51c3023228 pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() b603cbe08b0b net: sparx5: uses, depends on BRIDGE or !BRIDGE 84817c83c0e7 watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function d02ca80ec735 pinctrl: pinconf-gener
[OE-core] [PATCH 11/15] linux-yocto/5.15: update to v5.15.35
From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 81d8d30c35ed Linux 5.15.35 85f25bb9a005 ax25: Fix UAF bugs in ax25 timers 43c107021d91 ax25: Fix NULL pointer dereferences in ax25 timers da6509fba636 ax25: fix NPD bug in ax25_disconnect 1bf8946d5826 ax25: fix UAF bug in ax25_send_control() 452ae92b9906 ax25: Fix refcount leaks caused by ax25_cb_del() b982492ec3a1 ax25: fix UAF bugs of net_device caused by rebinding operation bc706d89199b ax25: fix reference count leaks of ax25_dev 9af0fd5c4453 ax25: add refcount in ax25_dev to avoid UAF bugs de6a76eea645 cpufreq: intel_pstate: ITMT support for overclocked system 74d23d422556 net: ipa: fix a build dependency 1648c7b450d8 soc: qcom: aoss: Fix missing put_device call in qmp_get d712aea3cd81 cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state 14785927a1d4 drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL 4ef9951d0252 dma-direct: avoid redundant memory sync for swiotlb 111becd63e37 timers: Fix warning condition in __run_timers() cbdd7a33c533 dt-bindings: net: snps: remove duplicate name 83a4c1080e09 i2c: pasemi: Wait for write xfers to finish 44981e4cde68 smp: Fix offline cpu check in flush_smp_call_function_queue() 2f345bb14ad4 i2c: dev: check return value when calling dev_set_name() 6b4bf97587ef dm integrity: fix memory corruption when tag_size is less than digest size 0940795c6834 ARM: davinci: da850-evm: Avoid NULL pointer dereference 68a38b07f125 tick/nohz: Use WARN_ON_ONCE() to prevent console saturation c11ef9ded22e genirq/affinity: Consider that CPUs on nodes can be unbalanced c61d929944c9 x86/tsx: Disable TSX development mode at boot aaf27fcaefc1 x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits 2dd7d2eddf8e drm/amdgpu: Enable gfxoff quirk on MacBook Pro 804c096d640e drm/amd/display: don't ignore alpha property on pre-multiplied mode adee01bbf6cb ipv6: fix panic when forwarding a pkt with no in6 dev cab64cb82fe1 nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size 63038f6e96a7 ALSA: pcm: Test for "silence" field in struct "pcm_format_data" a53062c94b8c ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers 0349df521528 ALSA: hda/realtek: Add quirk for Clevo PD50PNT 3680b48533ae btrfs: mark resumed async balance as writing 252db93fd0bd btrfs: fix root ref counts in error handling in btrfs_get_root_ref 9b81c2c147e1 ath9k: Fix usage of driver-private space in tx_info 3386927f436e ath9k: Properly clear TX status area before reporting to mac80211 7a509a9f2bb7 cifs: verify that tcon is valid before dereference in cifs_kill_sb bd17422b9b67 gcc-plugins: latent_entropy: use /dev/urandom 05d1824a7fb4 memory: renesas-rpc-if: fix platform-device leak in error path f5e13d700a4d SUNRPC: Fix NFSD's request deferral on RDMA transports 00715427ea77 KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded 70ea5e7b38c3 mm: kmemleak: take a full lowmem check in kmemleak_*_phys() 12ba1d38115a mm: fix unexpected zeroed page mapping with zram swap bb7645c33869 mm, page_alloc: fix build_zonerefs_node() b6d17c67885a mm/secretmem: fix panic when growing a memfd_secret 4cdf0e7a5be8 perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant b8ed0f7531f3 io_uring: use nospec annotation for more indexes 5218d5cc0283 io_uring: zero tag on rsrc removal efb020924a71 drivers: net: slip: fix NPD bug in sl_tx_timeout() e455d7510db7 scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan f1933d9ee745 scsi: mvsas: Add PCI ID of RocketRaid 2640 389f37e46bdd scsi: mpt3sas: Fail reset operation if config request timed out 184b4fad0872 drbd: set QUEUE_FLAG_STABLE_WRITES 6a03581ccffa drm/amd/display: Fix allocate_mst_payload assert on resume ac2eb310af05 drm/amd/display: Revert FEC check in validation eab8e585840f drm/amd/display: Enable power gating before init_pipes d8860f1f9e41 spi: cadence-quadspi: fix protocol setup for non-1-1-X operations 6d48df738272 myri10ge: fix an incorrect free for skb in myri10ge_sw_tso b416898442f2 net: usb: aqc111: Fix out-of-bounds accesses in RX fixup c3f86aef97cf Drivers: hv: balloon: Disable balloon and hot-add accordingly 1c9fdb9587e0 net: axienet: setup mdio unconditionally 61dd8bef80c2 tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry ed2711c696ce arm64: alternatives: mark patch_alternative() as `noinstr` cfd24b14eb2d regulator: wm8994: Add an off-on delay for WM8994 variant 86d1cdf56fc5 gpu: ipu-v3: Fix dev_dbg frequency output 4583205048ae ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs 6eecc4811a47 net: micrel: fix KS8851_MLL Kconfig 9e60a788a3f7 scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 026083cb43a4 scsi:
[OE-core] [PATCH 12/15] linux-yocto/5.15: Fix CVE-2022-28796
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/5.15: 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_5.15.bb | 2 +- .../linux/linux-yocto-tiny_5.15.bb| 2 +- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 20 +-- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index f503df6404..5cc1bdbff9 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,7 +11,7 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "5a5ffe1f47ec90c9778697a0b8dcc3145859fe61" +SRCREV_machine ?= "21f94b6c9601dbb03036d539482471ddbe753626" SRCREV_meta ?= "178b786485dfb3edb05af51f0ba9195ffa07e358" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 9a80353ee2..9c9d513f83 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -14,7 +14,7 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "c1ea4d56b597a4740b655e3535157fd3248b6dde" +SRCREV_machine ?= "2521f8951adffad70d844209b73cd8d8878710f1" SRCREV_meta ?= "178b786485dfb3edb05af51f0ba9195ffa07e358" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index fbb953f559..d9b09660c2 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -13,16 +13,16 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "3954bbe99f0b517dafa413d88609d0c6f28e9790" -SRCREV_machine:qemuarm64 ?= "e0f74df7acce2888931dbd6800b1503244155879" -SRCREV_machine:qemumips ?= "8b632ac1df6b6f9dd61bce1479f6b48847326bee" -SRCREV_machine:qemuppc ?= "ff7d30e3eabd702f870e10be7411d8dadb7bfdf8" -SRCREV_machine:qemuriscv64 ?= "a2cf1b2c0fab8c9907b50a5fab4f0757bc236afe" -SRCREV_machine:qemuriscv32 ?= "a2cf1b2c0fab8c9907b50a5fab4f0757bc236afe" -SRCREV_machine:qemux86 ?= "a2cf1b2c0fab8c9907b50a5fab4f0757bc236afe" -SRCREV_machine:qemux86-64 ?= "a2cf1b2c0fab8c9907b50a5fab4f0757bc236afe" -SRCREV_machine:qemumips64 ?= "5a1907849e651536a7eef3e1d5bc1a51f5cebb7a" -SRCREV_machine ?= "a2cf1b2c0fab8c9907b50a5fab4f0757bc236afe" +SRCREV_machine:qemuarm ?= "5dab48a9c4bb681646b06004bc081cc5b4e65285" +SRCREV_machine:qemuarm64 ?= "fc0cae7371697d26cda76f46d352648a0d8a8fd8" +SRCREV_machine:qemumips ?= "58617a04ab52b58a5393b5088a3199c3d28b7a15" +SRCREV_machine:qemuppc ?= "fdf86234f2a35c3fe2457ee02847b4351fdeb08b" +SRCREV_machine:qemuriscv64 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" +SRCREV_machine:qemuriscv32 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" +SRCREV_machine:qemux86 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" +SRCREV_machine:qemux86-64 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" +SRCREV_machine:qemumips64 ?= "0294ba0989f839fb11c41fb887707cb49d20143e" +SRCREV_machine ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" SRCREV_meta ?= "178b786485dfb3edb05af51f0ba9195ffa07e358" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164960): https://lists.openembedded.org/g/openembedded-core/message/164960 Mute This Topic: https://lists.openembedded.org/mt/90753195/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 13/15] linux-yocto: enable powerpc debug fragment
From: Bruce Ashfield gcc12 generates some warnings with arch/powerpc, and we know that these warnings are understood/non-fatal at runtime. This fragment allows testing to continue, while upstream powerpc looks at removing warnings. We only enable it for 5.10/5.15 standard kernels for now, since this gets us enough coverage to continue working with gcc12. Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb | 2 +- meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb | 2 +- meta/recipes-kernel/linux/linux-yocto_5.10.bb | 4 +++- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 4 +++- 6 files changed, 10 insertions(+), 6 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb index 3048a3e66b..4c55a27abf 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb @@ -12,7 +12,7 @@ python () { } SRCREV_machine ?= "bd6e7290bc766ef13e42a1e37f75e6e708b4e317" -SRCREV_meta ?= "2311a54750b6d9e0315e4f316b640e4e73945342" +SRCREV_meta ?= "19e7547dd6617760d6094b7a42da1a718b5a96ee" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 5cc1bdbff9..d3d277b172 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -12,7 +12,7 @@ python () { } SRCREV_machine ?= "21f94b6c9601dbb03036d539482471ddbe753626" -SRCREV_meta ?= "178b786485dfb3edb05af51f0ba9195ffa07e358" +SRCREV_meta ?= "7e73214eee6728b7984d12bead8ad3af2ce06db9" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb index d37d39488e..42d5c105b7 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb @@ -17,7 +17,7 @@ KCONF_BSP_AUDIT_LEVEL = "2" SRCREV_machine:qemuarm ?= "ab911ca906ec6d1551ba12373d4133ccaf7f83cc" SRCREV_machine ?= "aadc46b05e5c77328bd3461578c770af3efa8944" -SRCREV_meta ?= "2311a54750b6d9e0315e4f316b640e4e73945342" +SRCREV_meta ?= "19e7547dd6617760d6094b7a42da1a718b5a96ee" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 9c9d513f83..afb330e922 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -15,7 +15,7 @@ KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" SRCREV_machine ?= "2521f8951adffad70d844209b73cd8d8878710f1" -SRCREV_meta ?= "178b786485dfb3edb05af51f0ba9195ffa07e358" +SRCREV_meta ?= "7e73214eee6728b7984d12bead8ad3af2ce06db9" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb index 19ac04ae48..b60f3e0773 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb @@ -23,7 +23,7 @@ SRCREV_machine:qemux86 ?= "6cf7dea05bd756513cf58c5ced8c6bf1d1f23c15" SRCREV_machine:qemux86-64 ?= "6cf7dea05bd756513cf58c5ced8c6bf1d1f23c15" SRCREV_machine:qemumips64 ?= "a005c07acd278c86ddab4cd8bc7a1bfae4638414" SRCREV_machine ?= "6cf7dea05bd756513cf58c5ced8c6bf1d1f23c15" -SRCREV_meta ?= "2311a54750b6d9e0315e4f316b640e4e73945342" +SRCREV_meta ?= "19e7547dd6617760d6094b7a42da1a718b5a96ee" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" @@ -50,6 +50,8 @@ KERNEL_FEATURES:append = " ${KERNEL_EXTRA_FEATURES}" KERNEL_FEATURES:append:qemuall=" cfg/virtio.scc features/drm-bochs/drm-bochs.scc" KERNEL_FEATURES:append:qemux86=" cfg/sound.scc cfg/paravirt_kvm.scc" KERNEL_FEATURES:append:qemux86-64=" cfg/sound.scc cfg/paravirt_kvm.scc" +KERNEL_FEATURES:append:powerpc =" arch/powerpc/powerpc-debug.scc" +KERNEL_FEATURES:append:powerpc64 =" arch/powerpc/powerpc-debug.scc" KERNEL_FEATURES:append = " ${@bb.utils.contains("TUNE_FEATURES", "mx32", " cfg/x32.scc", "", d)}" KERNEL_FEATURES:append = " ${@bb.utils.contains("DISTRO_FEATURES", "ptest", " features/scsi/scsi-debug.scc", "", d)}" KERNEL_FEATURES:append = " ${@bb.utils.contains("DISTRO_FEATURES", "ptest", " features/gpio/mockup.scc", "", d)}" diff --git a
[OE-core] [PATCH 14/15] linux-yocto/5.15: fix -standard kernel build issue
From: Bruce Ashfield Integrating the following commit(s) to linux-yocto/5.15: 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" The revert of commit [fbdev: Hot-unplug firmware fb devices on forced removal] was done to fix powerpc fbdev issues. Upstream went in a different direction, which means that our fbdev routines have conflicts with -stable updates. The fix for the fbdev is in -stable, so we drob our reverted commit, such that 5.15 builds again, and fbdev is functional. Signed-off-by: Bruce Ashfield --- .../linux/linux-yocto-rt_5.15.bb | 4 ++-- .../linux/linux-yocto-tiny_5.15.bb| 4 ++-- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 22 +-- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index d3d277b172..fe1c7fb533 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,8 +11,8 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "21f94b6c9601dbb03036d539482471ddbe753626" -SRCREV_meta ?= "7e73214eee6728b7984d12bead8ad3af2ce06db9" +SRCREV_machine ?= "4648820c6ca4146a3dbb4eb6a5b4ac93401f9596" +SRCREV_meta ?= "a43150cc38bed6bf82d9217335348855c1d7eab8" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index afb330e922..3f4509c921 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "2521f8951adffad70d844209b73cd8d8878710f1" -SRCREV_meta ?= "7e73214eee6728b7984d12bead8ad3af2ce06db9" +SRCREV_machine ?= "7505af5d55038e463bf45794603b6efabb655817" +SRCREV_meta ?= "a43150cc38bed6bf82d9217335348855c1d7eab8" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index bf4ea952cf..02b16b5f25 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -13,17 +13,17 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "5dab48a9c4bb681646b06004bc081cc5b4e65285" -SRCREV_machine:qemuarm64 ?= "fc0cae7371697d26cda76f46d352648a0d8a8fd8" -SRCREV_machine:qemumips ?= "58617a04ab52b58a5393b5088a3199c3d28b7a15" -SRCREV_machine:qemuppc ?= "fdf86234f2a35c3fe2457ee02847b4351fdeb08b" -SRCREV_machine:qemuriscv64 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" -SRCREV_machine:qemuriscv32 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" -SRCREV_machine:qemux86 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" -SRCREV_machine:qemux86-64 ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" -SRCREV_machine:qemumips64 ?= "0294ba0989f839fb11c41fb887707cb49d20143e" -SRCREV_machine ?= "5df6d1b00f95b5bce43bb208b87b182b0656dfed" -SRCREV_meta ?= "7e73214eee6728b7984d12bead8ad3af2ce06db9" +SRCREV_machine:qemuarm ?= "2d10943aa7855dc5bbe2c74c6f05ef2e4eb39e3a" +SRCREV_machine:qemuarm64 ?= "b623e8d1eaacbeee250ea37328a9b566ca52f890" +SRCREV_machine:qemumips ?= "7e897b81f922149be5edaab68eb8034a75899ce7" +SRCREV_machine:qemuppc ?= "c3db8eb7b0a5b171ac4c0c6def487b5572a7b3f9" +SRCREV_machine:qemuriscv64 ?= "4eba9348d3e2eeb1070f07bf360a9e404aceb25b" +SRCREV_machine:qemuriscv32 ?= "4eba9348d3e2eeb1070f07bf360a9e404aceb25b" +SRCREV_machine:qemux86 ?= "4eba9348d3e2eeb1070f07bf360a9e404aceb25b" +SRCREV_machine:qemux86-64 ?= "4eba9348d3e2eeb1070f07bf360a9e404aceb25b" +SRCREV_machine:qemumips64 ?= "9868746e0736d8659374e93129cca9d3413a7918" +SRCREV_machine ?= "4eba9348d3e2eeb1070f07bf360a9e404aceb25b" +SRCREV_meta ?= "a43150cc38bed6bf82d9217335348855c1d7eab8" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same -- 2.19.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164962): https://lists.openembedded.org/g/openembedded-core/message/164962 Mute This Topic: https://lists.openembedded.org/mt/90753197/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 15/15] linux-yocto/5.15: update to v5.15.36
From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 45451e8015a9 Linux 5.15.36 bb906d15a99e arm64: dts: qcom: add IPA qcom,qmp property 1ea01e64632f block/compat_ioctl: fix range check in BLKGETSIZE 6a3c609feb11 spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller b1b8f39c2475 jbd2: fix a potential race while discarding reserved buffers after an abort 2e25c46c6eef netfilter: nft_ct: fix use after free when attaching zone template 2b273d1fd18e ext4: force overhead calculation if the s_overhead_cluster makes no sense 52ca84a3edd1 ext4: fix overhead calculation to account for the reserved gdt blocks 6b952563934c ext4, doc: fix incorrect h_reserved size 9b90003771e5 ext4: limit length to bitmap_maxbytes - blocksize in punch_hole e3912775b476 ext4: fix use-after-free in ext4_search_dir 8bb5676b49d3 ext4: fix symlink file size not match to file content ba50ea456f49 ext4: fix fallocate to use file_modified to update permissions consistently 67e4860eeed8 netfilter: conntrack: avoid useless indirection during conntrack destruction bcba40bd36d7 netfilter: conntrack: convert to refcount_t api 4bbd693d9f0a KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs 8b2da9690489 KVM: nVMX: Defer APICv updates while L2 is active until L1 is active a41b3243a6de KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race 2b4417acd3c6 KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog 87d95ff0ca27 arm_pmu: Validate single/group leader events 4d98fbb26683 ARC: entry: fix syscall_trace_exit argument 7b69c07beb23 e1000e: Fix possible overflow in LTR decoding 73a0b4c5c0bd ASoC: soc-dapm: fix two incorrect uses of list iterator 571a67b0d8a4 gpio: Request interrupts after IRQ is initialized e411af98013d openvswitch: fix OOB access in reserve_sfa_size() bac4cadeb718 xtensa: fix a7 clobbering in coprocessor context load/store 91335ca9ebe7 xtensa: patch_text: Fixup last cpu should be master 49952e31e50d perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event 04ecea282b42 perf script: Always allow field 'data_src' for auxtrace a92335b4b189 powerpc/perf: Fix power10 event alternatives 7a56867c5ef3 powerpc/perf: Fix power9 event alternatives 53c4a9ff225b drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage 9dc46d2e3723 KVM: PPC: Fix TCE handling for VFIO 76614b111867 drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare 7981351a916e drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised 56637084e8a5 perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled b1b929468229 sched/pelt: Fix attach_entity_load_avg() corner case 914473a07088 scsi: sr: Do not leak information in ioctl f0cfae3e0d3a Input: omap4-keypad - fix pm_runtime_get_sync() error checking 232541989a1a net: atlantic: invert deep par in pm functions, preventing null derefs 6b8af9f96749 dmaengine: imx-sdma: fix init of uart scripts 1a8d1665cff1 dma: at_xdmac: fix a missing check on list iterator d10a711d4db6 ata: pata_marvell: Check the 'bmdma_addr' beforing reading 48b2ab1a960a mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() 41ba681c6373 oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup 9dcb65cdf312 mm, hugetlb: allow for "high" userspace addresses 07bdd207774c memcg: sync flush only if periodic flush is delayed 9c71b29d55d4 mm/memory-failure.c: skip huge_zero_page in memory_failure() b81291922f8b EDAC/synopsys: Read the error count from the correct register 87dd813bd2c3 nvme-pci: disable namespace identifiers for Qemu controllers dab2f477e15a nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 25f37ed22a9e nvme: add a quirk to disable namespace identifiers 4a9f9f1791f3 VFS: filename_create(): fix incorrect intent. 773ca67ffc96 stat: fix inconsistency between struct stat and struct compat_stat 80c713a894c3 scsi: qedi: Fix failed disconnect handling c7f4f3016fea scsi: iscsi: Fix NOP handling during conn recovery e4efe868aa14 scsi: iscsi: Merge suspend fields 740411ee2f94 scsi: iscsi: Release endpoint ID when its freed 123a52eb610d net: macb: Restart tx only if queue pointer is lagging bc663ff8cae3 drm/msm/mdp5: check the return of kzalloc() 5fe864539caf dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() 48e1db2c3d42 brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant e25b350e2521 mt76: Fix undefined behavior due to shift overflowing the constant a7a651d5a525 net: atlantic: Avoid out-of-bounds indexing 213330bafd02 cifs: Check the IOCB_DIRECT flag, not O_DIRECT 6085e24fd972 vxlan: fix error return code in vxlan_fd
[OE-core] [honister][PATCH 2/2] knotty: reduce keep-alive timeout from 5000s (83 minutes) to 10 minutes
From: Ross Burton The keep alive timeout is excessively long at 83 minutes (5000 seconds), reduce this to 10 minutes: this should be long enough that it rarely triggers in normal builds, but when it does it has useful information. Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Peter Kjellerstedt --- bitbake/lib/bb/ui/knotty.py | 7 --- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/bitbake/lib/bb/ui/knotty.py b/bitbake/lib/bb/ui/knotty.py index 64e33d81a6..3ba5579ca4 100644 --- a/bitbake/lib/bb/ui/knotty.py +++ b/bitbake/lib/bb/ui/knotty.py @@ -607,7 +607,8 @@ def main(server, eventHandler, params, tf = TerminalFilter): warnings = 0 taskfailures = [] -printinterval = 5000 +printintervaldelta = 10 * 60 # 10 minutes +printinterval = printintervaldelta lastprint = time.time() termfilter = tf(main, helper, console_handlers, params.options.quiet) @@ -617,7 +618,7 @@ def main(server, eventHandler, params, tf = TerminalFilter): try: if (lastprint + printinterval) <= time.time(): termfilter.keepAlive(printinterval) -printinterval += 5000 +printinterval += printintervaldelta event = eventHandler.waitEvent(0) if event is None: if main.shutdown > 1: @@ -648,7 +649,7 @@ def main(server, eventHandler, params, tf = TerminalFilter): if isinstance(event, logging.LogRecord): lastprint = time.time() -printinterval = 5000 +printinterval = printintervaldelta if event.levelno >= bb.msg.BBLogFormatter.ERROR: errors = errors + 1 return_value = 1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164965): https://lists.openembedded.org/g/openembedded-core/message/164965 Mute This Topic: https://lists.openembedded.org/mt/90753609/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [honister][PATCH 1/2] knotty: display active tasks when printing keepAlive() message
From: Ross Burton In interactive bitbake sessions it is obvious what tasks are running when one of them hangs or otherwise takes a long time. However, in non-interactive sessions (such as automated builds) bitbake just prints a message saying that it is "still alive" with no clues as to what tasks are active still. By simply listing the active tasks when printing the keep alive message, we don't need to parse the bitbake log to identify which of the tasks is still active and has presumably hung. Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Peter Kjellerstedt --- bitbake/lib/bb/ui/knotty.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bitbake/lib/bb/ui/knotty.py b/bitbake/lib/bb/ui/knotty.py index 484545a684..64e33d81a6 100644 --- a/bitbake/lib/bb/ui/knotty.py +++ b/bitbake/lib/bb/ui/knotty.py @@ -228,7 +228,9 @@ class TerminalFilter(object): def keepAlive(self, t): if not self.cuu: -print("Bitbake still alive (%ds)" % t) +print("Bitbake still alive (no events for %ds). Active tasks:" % t) +for t in self.helper.running_tasks: +print(t) sys.stdout.flush() def updateFooter(self): -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164964): https://lists.openembedded.org/g/openembedded-core/message/164964 Mute This Topic: https://lists.openembedded.org/mt/90753608/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH] curl: Update to 7.83.0
This is a minor feature and bugfix release. Changes include: * curl: add %header{name} experimental support in -w handling * curl: add %{header_json} experimental support in -w handling * curl: add --no-clobber * curl: add --remove-on-error * header api: add curl_easy_header and curl_easy_nextheader * msh3: add support for QUIC and HTTP/3 using msh3 Full changelog at: https://curl.se/changes.html#7_83_0 Signed-off-by: Robert Joslyn --- meta/recipes-support/curl/{curl_7.82.0.bb => curl_7.83.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/curl/{curl_7.82.0.bb => curl_7.83.0.bb} (97%) diff --git a/meta/recipes-support/curl/curl_7.82.0.bb b/meta/recipes-support/curl/curl_7.83.0.bb similarity index 97% rename from meta/recipes-support/curl/curl_7.82.0.bb rename to meta/recipes-support/curl/curl_7.83.0.bb index 23bd7eaa52..07027a2f31 100644 --- a/meta/recipes-support/curl/curl_7.82.0.bb +++ b/meta/recipes-support/curl/curl_7.83.0.bb @@ -10,7 +10,7 @@ LICENSE = "MIT-open-group" LIC_FILES_CHKSUM = "file://COPYING;md5=190c514872597083303371684954f238" SRC_URI = "https://curl.se/download/${BP}.tar.xz"; -SRC_URI[sha256sum] = "0aaa12d7bd04b0966254f2703ce80dd5c38dbbd76af0297d3d690cdce58a583c" +SRC_URI[sha256sum] = "bbff0e6b5047e773f3c3b084d80546cc1be4e354c09e419c2d0ef6116253511a" # Curl has used many names over the years... CVE_PRODUCT = "haxx:curl haxx:libcurl curl:curl curl:libcurl libcurl:libcurl daniel_stenberg:curl" -- 2.35.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164966): https://lists.openembedded.org/g/openembedded-core/message/164966 Mute This Topic: https://lists.openembedded.org/mt/90753826/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH] lib/sstatesig: Fix find_siginfo to match sstate filename generation
sstate filename generation was changed a while ago and taskname has to be passed into core functions for the correct filename to be generated. Update find_siginfo to match those changes and pass in taskname via SSTATE_CURRTASK. Thanks to Gregory Lumen for spotting. [YOCTO #14774] Signed-off-by: Richard Purdie --- meta/lib/oe/sstatesig.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/lib/oe/sstatesig.py b/meta/lib/oe/sstatesig.py index 2cf858e201d..7150bd09290 100644 --- a/meta/lib/oe/sstatesig.py +++ b/meta/lib/oe/sstatesig.py @@ -382,13 +382,13 @@ def find_siginfo(pn, taskname, taskhashlist, d): localdata.setVar('PV', '*') localdata.setVar('PR', '*') localdata.setVar('BB_TASKHASH', hashval) +localdata.setVar('SSTATE_CURRTASK', taskname[3:]) swspec = localdata.getVar('SSTATE_SWSPEC') if taskname in ['do_fetch', 'do_unpack', 'do_patch', 'do_populate_lic', 'do_preconfigure'] and swspec: localdata.setVar('SSTATE_PKGSPEC', '${SSTATE_SWSPEC}') elif pn.endswith('-native') or "-cross-" in pn or "-crosssdk-" in pn: localdata.setVar('SSTATE_EXTRAPATH', "${NATIVELSBSTRING}/") -sstatename = taskname[3:] -filespec = '%s_%s.*.siginfo' % (localdata.getVar('SSTATE_PKG'), sstatename) +filespec = '%s.siginfo' % localdata.getVar('SSTATE_PKG') matchedfiles = glob.glob(filespec) for fullpath in matchedfiles: -- 2.32.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164967): https://lists.openembedded.org/g/openembedded-core/message/164967 Mute This Topic: https://lists.openembedded.org/mt/90753839/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] kmod: Enable xz support by default
On Thu, Apr 28, 2022 at 4:27 AM Andrei Gherzan wrote: > > On Thu, 28 Apr 2022, at 07:26, Khem Raj wrote: > > RPi kernel has started building compressed kernel modules by default > > starting 5.15, currenrly therefore meta-raspberrypi kernels are unable > > to load kernel modules since kmod and kmod-native do not entertain xz > > compressed modules. There is a fix proposed in meta-raspberrypi [1] > > but the fix is needed for native and nativesdk recipes as well, perhaps > > its best to enable it here for best out of box experience with > > meta-raspberrypi > > > > [1] https://github.com/agherzan/meta-raspberrypi/pull/1056 > > > > Signed-off-by: Khem Raj > > I don't see any reason not to do this and it does help with the BSPs using > this compression requirement. So here is my +1. Would it be reasonable to > propose to have it in kirkstone too? Otherwise, @khem, I'd need to drop > compression or downgrade the kernel in kirkstone rpi (or make some yocto > incompatible changes - which I'd rather not). > Its already in staging for master [1] so hope to land it in master soon. kirkstone is something from Steve to cherry-pick CCing Steve here [1] https://git.yoctoproject.org/poky-contrib/log/?h=lucaceresoli/master-next -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164968): https://lists.openembedded.org/g/openembedded-core/message/164968 Mute This Topic: https://lists.openembedded.org/mt/90747997/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core][kirkstone 00/26] Pull request (cover letter only)
The following changes since commit d2ba3b8850d461bc7b773240cdf15b22b31a3f9e: lua: fix CVE-2022-28805 (2022-04-19 14:02:08 +0100) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib stable/kirkstone-next http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-next Alexander Kanavin (1): webkitgtk: adjust patch status Davide Gardenal (1): create-spdx: fix error when symlink cannot be created Ferry Toth (2): apt: add apt selftest to test signed package feeds package_manager: fix missing dependency on gnupg when signing deb package feeds Jon Mason (1): qemuarm64: use virtio pci interfaces Kai Kang (1): update_udev_hwdb: fix multilib issue with systemd Khem Raj (5): babeltrace: Disable warnings as errors xserver-xorg: Fix build with gcc12 systemtap: Fix build with gcc-12 gnupg: Disable FORTIFY_SOURCES on mips mdadm: Drop clang specific cflags Konrad Weihmann (2): git: correct license ncurses: use COPYING file Martin Jansa (1): systemd-boot: remove outdated EFI_LD comment Paulo Neves (1): selftest/lic_checksum: Add test for filename containing space Peter Kjellerstedt (2): u-boot: Correct the SRC_URI u-boot: Inherit pkgconfig Richard Purdie (1): buildtools-tarball: Only add cert envvars if certs are included wangmy (5): linux-firmware: upgrade 20220310 -> 20220411 libsoup: upgrade 3.0.5 -> 3.0.6 apt: upgrade 2.4.3 -> 2.4.4 libusb1: upgrade 1.0.25 -> 1.0.26 libgit2: upgrade 1.4.2 -> 1.4.3 zhengruoqin (3): wireless-regdb: upgrade 2022.02.18 -> 2022.04.08 git: upgrade 2.35.2 -> 2.35.3 ruby: upgrade 3.1.1 -> 3.1.2 meta/classes/create-spdx.bbclass | 10 +-- meta/classes/sign_package_feed.bbclass| 1 + meta/conf/machine/qemuarm64.conf | 8 +- meta/lib/oeqa/runtime/cases/apt.py| 38 ++-- meta/lib/oeqa/selftest/cases/lic_checksum.py | 18 meta/lib/oeqa/selftest/cases/runtime_test.py | 38 meta/recipes-bsp/u-boot/u-boot-common.inc | 6 +- meta/recipes-core/meta/buildtools-tarball.bb | 6 +- meta/recipes-core/ncurses/ncurses.inc | 2 +- .../systemd/systemd-boot_250.4.bb | 1 - meta/recipes-core/systemd/systemd_250.4.bb| 5 -- meta/recipes-core/udev/eudev_3.2.10.bb| 4 - .../apt/{apt_2.4.3.bb => apt_2.4.4.bb}| 2 +- .../git/{git_2.35.2.bb => git_2.35.3.bb} | 15 +++- .../ruby/{ruby_3.1.1.bb => ruby_3.1.2.bb} | 2 +- meta/recipes-extended/mdadm/mdadm_4.2.bb | 2 - .../0001-render-Fix-build-with-gcc-12.patch | 90 +++ .../xorg-xserver/xserver-xorg_21.1.3.bb | 1 + ...20220310.bb => linux-firmware_20220411.bb} | 4 +- .../recipes-kernel/lttng/babeltrace2_2.0.4.bb | 2 +- ...ility-re-tweak-for-rhel6-use-functio.patch | 49 ++ .../recipes-kernel/systemtap/systemtap_git.bb | 3 +- 02.18.bb => wireless-regdb_2022.04.08.bb} | 2 +- ...spection.cmake-prefix-variables-obta.patch | 5 +- meta/recipes-support/gnupg/gnupg_2.3.4.bb | 3 + .../{libgit2_1.4.2.bb => libgit2_1.4.3.bb}| 2 +- .../{libsoup_3.0.5.bb => libsoup_3.0.6.bb}| 2 +- .../{libusb1_1.0.25.bb => libusb1_1.0.26.bb} | 2 +- scripts/postinst-intercepts/update_udev_hwdb | 5 +- 29 files changed, 279 insertions(+), 49 deletions(-) rename meta/recipes-devtools/apt/{apt_2.4.3.bb => apt_2.4.4.bb} (97%) rename meta/recipes-devtools/git/{git_2.35.2.bb => git_2.35.3.bb} (86%) rename meta/recipes-devtools/ruby/{ruby_3.1.1.bb => ruby_3.1.2.bb} (97%) create mode 100644 meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-render-Fix-build-with-gcc-12.patch rename meta/recipes-kernel/linux-firmware/{linux-firmware_20220310.bb => linux-firmware_20220411.bb} (99%) create mode 100644 meta/recipes-kernel/systemtap/systemtap/0001-gcc12-c-compatibility-re-tweak-for-rhel6-use-functio.patch rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2022.02.18.bb => wireless-regdb_2022.04.08.bb} (94%) rename meta/recipes-support/libgit2/{libgit2_1.4.2.bb => libgit2_1.4.3.bb} (91%) rename meta/recipes-support/libsoup/{libsoup_3.0.5.bb => libsoup_3.0.6.bb} (94%) rename meta/recipes-support/libusb/{libusb1_1.0.25.bb => libusb1_1.0.26.bb} (94%) -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164969): https://lists.openembedded.org/g/openembedded-core/message/164969 Mute This Topic: https://lists.openembedded.org/mt/90755825/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH 10/18] go: update 1.18 -> 1.18.1
This appears to be a security/bug fix release. Do you think it is suitable for kirkstone? Steve On Tue, Apr 26, 2022 at 10:40 PM Alexander Kanavin wrote: > > Do not version patch directories; we carry only one version of go. > > Signed-off-by: Alexander Kanavin > --- > meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} | 4 ++-- > .../{go-binary-native_1.18.bb => go-binary-native_1.18.1.bb} | 4 ++-- > ...{go-cross-canadian_1.18.bb => go-cross-canadian_1.18.1.bb} | 0 > .../go/{go-cross_1.18.bb => go-cross_1.18.1.bb} | 0 > .../go/{go-crosssdk_1.18.bb => go-crosssdk_1.18.1.bb} | 0 > .../go/{go-native_1.18.bb => go-native_1.18.1.bb} | 0 > .../go/{go-runtime_1.18.bb => go-runtime_1.18.1.bb} | 0 > ...cmd-go-make-content-based-hash-generation-less-pedan.patch | 0 > ...0001-exec.go-do-not-write-linker-flags-into-buildids.patch | 0 > ...src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch | 0 > ...-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch | 0 > .../0004-ld-add-soname-to-shareable-objects.patch | 0 > ...make.bash-override-CC-when-building-dist-and-go_boot.patch | 0 > .../0006-cmd-dist-separate-host-and-target-builds.patch | 0 > .../0007-cmd-go-make-GOROOT-precious-by-default.patch | 0 > meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} | 0 > 16 files changed, 4 insertions(+), 4 deletions(-) > rename meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} (82%) > rename meta/recipes-devtools/go/{go-binary-native_1.18.bb => > go-binary-native_1.18.1.bb} (83%) > rename meta/recipes-devtools/go/{go-cross-canadian_1.18.bb => > go-cross-canadian_1.18.1.bb} (100%) > rename meta/recipes-devtools/go/{go-cross_1.18.bb => go-cross_1.18.1.bb} > (100%) > rename meta/recipes-devtools/go/{go-crosssdk_1.18.bb => > go-crosssdk_1.18.1.bb} (100%) > rename meta/recipes-devtools/go/{go-native_1.18.bb => go-native_1.18.1.bb} > (100%) > rename meta/recipes-devtools/go/{go-runtime_1.18.bb => go-runtime_1.18.1.bb} > (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0001-exec.go-do-not-write-linker-flags-into-buildids.patch (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0003-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0004-ld-add-soname-to-shareable-objects.patch (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0005-make.bash-override-CC-when-building-dist-and-go_boot.patch (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0006-cmd-dist-separate-host-and-target-builds.patch (100%) > rename meta/recipes-devtools/go/{go-1.18 => > go}/0007-cmd-go-make-GOROOT-precious-by-default.patch (100%) > rename meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} (100%) > > diff --git a/meta/recipes-devtools/go/go-1.18.inc > b/meta/recipes-devtools/go/go-1.18.1.inc > similarity index 82% > rename from meta/recipes-devtools/go/go-1.18.inc > rename to meta/recipes-devtools/go/go-1.18.1.inc > index 54e241af10..64426471df 100644 > --- a/meta/recipes-devtools/go/go-1.18.inc > +++ b/meta/recipes-devtools/go/go-1.18.1.inc > @@ -1,6 +1,6 @@ > require go-common.inc > > -FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go-1.18:" > +FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go:" > > LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" > > @@ -14,4 +14,4 @@ SRC_URI += "\ > file://0001-exec.go-do-not-write-linker-flags-into-buildids.patch \ > file://0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch \ > " > -SRC_URI[main.sha256sum] = > "38f423db4cc834883f2b52344282fa7a39fbb93650dc62a11fdf0be6409bdad6" > +SRC_URI[main.sha256sum] = > "efd43e0f1402e083b73a03d444b7b6576bb4c539ac46208b63a916b69aca4088" > diff --git a/meta/recipes-devtools/go/go-binary-native_1.18.bb > b/meta/recipes-devtools/go/go-binary-native_1.18.1.bb > similarity index 83% > rename from meta/recipes-devtools/go/go-binary-native_1.18.bb > rename to meta/recipes-devtools/go/go-binary-native_1.18.1.bb > index 500bb4ddcc..da9f39f428 100644 > --- a/meta/recipes-devtools/go/go-binary-native_1.18.bb > +++ b/meta/recipes-devtools/go/go-binary-native_1.18.1.bb > @@ -8,8 +8,8 @@ LIC_FILES_CHKSUM = > "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" > PROVIDES = "go-native" > > SRC_URI = > "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"; > -SRC_URI[go_linux_amd64.sha256sum] = > "e85278e98f57cdb150fe8409e6e5df5343ecb13cebf03a5d5ff12bd55a80264f" > -SRC_URI[go_linux_arm64.sha256sum] = > "7ac7b396a691e588c5fb57687759e6c4db84a2a3bbebb0765f4b38e5b1c5b00e" > +SRC_URI[go_linux_amd64.sha256sum] = > "
Re: [OE-core] [PATCH 10/18] go: update 1.18 -> 1.18.1
On Thu, Apr 28, 2022 at 9:22 AM Steve Sakoman wrote: > > This appears to be a security/bug fix release. Do you think it is > suitable for kirkstone? > I think so. > Steve > > On Tue, Apr 26, 2022 at 10:40 PM Alexander Kanavin > wrote: > > > > Do not version patch directories; we carry only one version of go. > > > > Signed-off-by: Alexander Kanavin > > --- > > meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} | 4 ++-- > > .../{go-binary-native_1.18.bb => go-binary-native_1.18.1.bb} | 4 ++-- > > ...{go-cross-canadian_1.18.bb => go-cross-canadian_1.18.1.bb} | 0 > > .../go/{go-cross_1.18.bb => go-cross_1.18.1.bb} | 0 > > .../go/{go-crosssdk_1.18.bb => go-crosssdk_1.18.1.bb} | 0 > > .../go/{go-native_1.18.bb => go-native_1.18.1.bb} | 0 > > .../go/{go-runtime_1.18.bb => go-runtime_1.18.1.bb} | 0 > > ...cmd-go-make-content-based-hash-generation-less-pedan.patch | 0 > > ...0001-exec.go-do-not-write-linker-flags-into-buildids.patch | 0 > > ...src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch | 0 > > ...-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch | 0 > > .../0004-ld-add-soname-to-shareable-objects.patch | 0 > > ...make.bash-override-CC-when-building-dist-and-go_boot.patch | 0 > > .../0006-cmd-dist-separate-host-and-target-builds.patch | 0 > > .../0007-cmd-go-make-GOROOT-precious-by-default.patch | 0 > > meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} | 0 > > 16 files changed, 4 insertions(+), 4 deletions(-) > > rename meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} (82%) > > rename meta/recipes-devtools/go/{go-binary-native_1.18.bb => > > go-binary-native_1.18.1.bb} (83%) > > rename meta/recipes-devtools/go/{go-cross-canadian_1.18.bb => > > go-cross-canadian_1.18.1.bb} (100%) > > rename meta/recipes-devtools/go/{go-cross_1.18.bb => go-cross_1.18.1.bb} > > (100%) > > rename meta/recipes-devtools/go/{go-crosssdk_1.18.bb => > > go-crosssdk_1.18.1.bb} (100%) > > rename meta/recipes-devtools/go/{go-native_1.18.bb => go-native_1.18.1.bb} > > (100%) > > rename meta/recipes-devtools/go/{go-runtime_1.18.bb => > > go-runtime_1.18.1.bb} (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0001-exec.go-do-not-write-linker-flags-into-buildids.patch (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0003-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0004-ld-add-soname-to-shareable-objects.patch (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0005-make.bash-override-CC-when-building-dist-and-go_boot.patch (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0006-cmd-dist-separate-host-and-target-builds.patch (100%) > > rename meta/recipes-devtools/go/{go-1.18 => > > go}/0007-cmd-go-make-GOROOT-precious-by-default.patch (100%) > > rename meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} (100%) > > > > diff --git a/meta/recipes-devtools/go/go-1.18.inc > > b/meta/recipes-devtools/go/go-1.18.1.inc > > similarity index 82% > > rename from meta/recipes-devtools/go/go-1.18.inc > > rename to meta/recipes-devtools/go/go-1.18.1.inc > > index 54e241af10..64426471df 100644 > > --- a/meta/recipes-devtools/go/go-1.18.inc > > +++ b/meta/recipes-devtools/go/go-1.18.1.inc > > @@ -1,6 +1,6 @@ > > require go-common.inc > > > > -FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go-1.18:" > > +FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go:" > > > > LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" > > > > @@ -14,4 +14,4 @@ SRC_URI += "\ > > file://0001-exec.go-do-not-write-linker-flags-into-buildids.patch \ > > file://0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch > > \ > > " > > -SRC_URI[main.sha256sum] = > > "38f423db4cc834883f2b52344282fa7a39fbb93650dc62a11fdf0be6409bdad6" > > +SRC_URI[main.sha256sum] = > > "efd43e0f1402e083b73a03d444b7b6576bb4c539ac46208b63a916b69aca4088" > > diff --git a/meta/recipes-devtools/go/go-binary-native_1.18.bb > > b/meta/recipes-devtools/go/go-binary-native_1.18.1.bb > > similarity index 83% > > rename from meta/recipes-devtools/go/go-binary-native_1.18.bb > > rename to meta/recipes-devtools/go/go-binary-native_1.18.1.bb > > index 500bb4ddcc..da9f39f428 100644 > > --- a/meta/recipes-devtools/go/go-binary-native_1.18.bb > > +++ b/meta/recipes-devtools/go/go-binary-native_1.18.1.bb > > @@ -8,8 +8,8 @@ LIC_FILES_CHKSUM = > > "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" > > PROVIDES = "go-native" > > > > SRC_URI = > > "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOT
Re: [OE-core] [master][kirkstone][PATCH] license_image.bbclass: Make QA errors fail the build
I haven't seen this patch hit master or master-next yet. Were there issues with it? Just want to make sure I don't miss anything requested for kirkstone. Steve On Thu, Apr 21, 2022 at 11:11 AM Peter Kjellerstedt wrote: > > If, e.g., license-file-missing is added to ERROR_QA, then the build > should fail if any licenses are missing. > > Signed-off-by: Peter Kjellerstedt > --- > meta/classes/license_image.bbclass | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/meta/classes/license_image.bbclass > b/meta/classes/license_image.bbclass > index 7e1d0e08a9..3213ea758e 100644 > --- a/meta/classes/license_image.bbclass > +++ b/meta/classes/license_image.bbclass > @@ -104,6 +104,8 @@ def write_license_files(d, license_manifest, pkg_dic, > rootfs=True): > "The license listed %s was not in the > "\ > "licenses collected for recipe %s" > % (lic, pkg_dic[pkg]["PN"]), d) > +oe.qa.exit_if_errors(d) > + > # Two options here: > # - Just copy the manifest > # - Copy the manifest and the license directories > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164972): https://lists.openembedded.org/g/openembedded-core/message/164972 Mute This Topic: https://lists.openembedded.org/mt/90615582/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH 10/18] go: update 1.18 -> 1.18.1
On Thu, Apr 28, 2022 at 7:04 AM Khem Raj wrote: > > On Thu, Apr 28, 2022 at 9:22 AM Steve Sakoman wrote: > > > > This appears to be a security/bug fix release. Do you think it is > > suitable for kirkstone? > > > > I think so. Ah, my bad! Kirkstone is at version 17.8. I was confused by autocompletion of the go-1.18 subdirectory in the go directory when checking the version and assumed that it was 1.18. So this upgrade is of course not suitable for kirkstone. Which begs the question, what is a go-1.18 directory doing there when we are at 1.17.8? But from reading the recipe it seems to be intentional, so I'll move on :-) Steve > > On Tue, Apr 26, 2022 at 10:40 PM Alexander Kanavin > > wrote: > > > > > > Do not version patch directories; we carry only one version of go. > > > > > > Signed-off-by: Alexander Kanavin > > > --- > > > meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} | 4 ++-- > > > .../{go-binary-native_1.18.bb => go-binary-native_1.18.1.bb} | 4 ++-- > > > ...{go-cross-canadian_1.18.bb => go-cross-canadian_1.18.1.bb} | 0 > > > .../go/{go-cross_1.18.bb => go-cross_1.18.1.bb} | 0 > > > .../go/{go-crosssdk_1.18.bb => go-crosssdk_1.18.1.bb} | 0 > > > .../go/{go-native_1.18.bb => go-native_1.18.1.bb} | 0 > > > .../go/{go-runtime_1.18.bb => go-runtime_1.18.1.bb} | 0 > > > ...cmd-go-make-content-based-hash-generation-less-pedan.patch | 0 > > > ...0001-exec.go-do-not-write-linker-flags-into-buildids.patch | 0 > > > ...src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch | 0 > > > ...-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch | 0 > > > .../0004-ld-add-soname-to-shareable-objects.patch | 0 > > > ...make.bash-override-CC-when-building-dist-and-go_boot.patch | 0 > > > .../0006-cmd-dist-separate-host-and-target-builds.patch | 0 > > > .../0007-cmd-go-make-GOROOT-precious-by-default.patch | 0 > > > meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} | 0 > > > 16 files changed, 4 insertions(+), 4 deletions(-) > > > rename meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} (82%) > > > rename meta/recipes-devtools/go/{go-binary-native_1.18.bb => > > > go-binary-native_1.18.1.bb} (83%) > > > rename meta/recipes-devtools/go/{go-cross-canadian_1.18.bb => > > > go-cross-canadian_1.18.1.bb} (100%) > > > rename meta/recipes-devtools/go/{go-cross_1.18.bb => go-cross_1.18.1.bb} > > > (100%) > > > rename meta/recipes-devtools/go/{go-crosssdk_1.18.bb => > > > go-crosssdk_1.18.1.bb} (100%) > > > rename meta/recipes-devtools/go/{go-native_1.18.bb => > > > go-native_1.18.1.bb} (100%) > > > rename meta/recipes-devtools/go/{go-runtime_1.18.bb => > > > go-runtime_1.18.1.bb} (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0001-exec.go-do-not-write-linker-flags-into-buildids.patch (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0003-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0004-ld-add-soname-to-shareable-objects.patch (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0005-make.bash-override-CC-when-building-dist-and-go_boot.patch (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0006-cmd-dist-separate-host-and-target-builds.patch (100%) > > > rename meta/recipes-devtools/go/{go-1.18 => > > > go}/0007-cmd-go-make-GOROOT-precious-by-default.patch (100%) > > > rename meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} (100%) > > > > > > diff --git a/meta/recipes-devtools/go/go-1.18.inc > > > b/meta/recipes-devtools/go/go-1.18.1.inc > > > similarity index 82% > > > rename from meta/recipes-devtools/go/go-1.18.inc > > > rename to meta/recipes-devtools/go/go-1.18.1.inc > > > index 54e241af10..64426471df 100644 > > > --- a/meta/recipes-devtools/go/go-1.18.inc > > > +++ b/meta/recipes-devtools/go/go-1.18.1.inc > > > @@ -1,6 +1,6 @@ > > > require go-common.inc > > > > > > -FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go-1.18:" > > > +FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go:" > > > > > > LIC_FILES_CHKSUM = "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" > > > > > > @@ -14,4 +14,4 @@ SRC_URI += "\ > > > file://0001-exec.go-do-not-write-linker-flags-into-buildids.patch \ > > > > > > file://0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch \ > > > " > > > -SRC_URI[main.sha256sum] = > > > "38f423db4cc834883f2b52344282fa7a39fbb93650dc62a11fdf0be6409bdad6" > > > +SRC_URI[main.sha256sum] = > > > "efd43e0f1402e083b73a03d444b7b6576bb4c539ac46208b63a916b69aca4088" > > > diff --git a/meta/recipes-devtools/go/go-binary-nati
Re: [OE-core] [PATCH] wic: Add dependencies for erofs-utils
- Ursprüngliche Mail - > Von: "Sean Anderson" > In order to build erofs filesystems, wic must have the erofs-utils > package installed into its sysroot. > > Fixes: 30375ce97 ("Add support for erofs filesystems") > Signed-off-by: Sean Anderson Reviewed-by: Richard Weinberger Thanks, //richard -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164974): https://lists.openembedded.org/g/openembedded-core/message/164974 Mute This Topic: https://lists.openembedded.org/mt/90715295/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH 10/18] go: update 1.18 -> 1.18.1
On Thu, Apr 28, 2022 at 11:00 AM Steve Sakoman wrote: > > On Thu, Apr 28, 2022 at 7:04 AM Khem Raj wrote: > > > > On Thu, Apr 28, 2022 at 9:22 AM Steve Sakoman wrote: > > > > > > This appears to be a security/bug fix release. Do you think it is > > > suitable for kirkstone? > > > > > > > I think so. > > Ah, my bad! Kirkstone is at version 17.8. I was confused by > autocompletion of the go-1.18 subdirectory in the go directory when > checking the version and assumed that it was 1.18. So this upgrade is > of course not suitable for kirkstone. yeah I think we left out 1.18 out of main release intentionally IIRC so perhaps if needed we will do a mixin layer perhaps in coming times > > Which begs the question, what is a go-1.18 directory doing there when > we are at 1.17.8? thats a typo I think 1.17.8 became 1.18 :) > > But from reading the recipe it seems to be intentional, so I'll move on :-) > > Steve > > > > On Tue, Apr 26, 2022 at 10:40 PM Alexander Kanavin > > > wrote: > > > > > > > > Do not version patch directories; we carry only one version of go. > > > > > > > > Signed-off-by: Alexander Kanavin > > > > --- > > > > meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} | 4 ++-- > > > > .../{go-binary-native_1.18.bb => go-binary-native_1.18.1.bb} | 4 ++-- > > > > ...{go-cross-canadian_1.18.bb => go-cross-canadian_1.18.1.bb} | 0 > > > > .../go/{go-cross_1.18.bb => go-cross_1.18.1.bb} | 0 > > > > .../go/{go-crosssdk_1.18.bb => go-crosssdk_1.18.1.bb} | 0 > > > > .../go/{go-native_1.18.bb => go-native_1.18.1.bb} | 0 > > > > .../go/{go-runtime_1.18.bb => go-runtime_1.18.1.bb} | 0 > > > > ...cmd-go-make-content-based-hash-generation-less-pedan.patch | 0 > > > > ...0001-exec.go-do-not-write-linker-flags-into-buildids.patch | 0 > > > > ...src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch | 0 > > > > ...-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch | 0 > > > > .../0004-ld-add-soname-to-shareable-objects.patch | 0 > > > > ...make.bash-override-CC-when-building-dist-and-go_boot.patch | 0 > > > > .../0006-cmd-dist-separate-host-and-target-builds.patch | 0 > > > > .../0007-cmd-go-make-GOROOT-precious-by-default.patch | 0 > > > > meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} | 0 > > > > 16 files changed, 4 insertions(+), 4 deletions(-) > > > > rename meta/recipes-devtools/go/{go-1.18.inc => go-1.18.1.inc} (82%) > > > > rename meta/recipes-devtools/go/{go-binary-native_1.18.bb => > > > > go-binary-native_1.18.1.bb} (83%) > > > > rename meta/recipes-devtools/go/{go-cross-canadian_1.18.bb => > > > > go-cross-canadian_1.18.1.bb} (100%) > > > > rename meta/recipes-devtools/go/{go-cross_1.18.bb => > > > > go-cross_1.18.1.bb} (100%) > > > > rename meta/recipes-devtools/go/{go-crosssdk_1.18.bb => > > > > go-crosssdk_1.18.1.bb} (100%) > > > > rename meta/recipes-devtools/go/{go-native_1.18.bb => > > > > go-native_1.18.1.bb} (100%) > > > > rename meta/recipes-devtools/go/{go-runtime_1.18.bb => > > > > go-runtime_1.18.1.bb} (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch > > > > (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0001-exec.go-do-not-write-linker-flags-into-buildids.patch (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0001-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch > > > > (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0003-allow-GOTOOLDIR-to-be-overridden-in-the-environment.patch > > > > (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0004-ld-add-soname-to-shareable-objects.patch (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0005-make.bash-override-CC-when-building-dist-and-go_boot.patch > > > > (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0006-cmd-dist-separate-host-and-target-builds.patch (100%) > > > > rename meta/recipes-devtools/go/{go-1.18 => > > > > go}/0007-cmd-go-make-GOROOT-precious-by-default.patch (100%) > > > > rename meta/recipes-devtools/go/{go_1.18.bb => go_1.18.1.bb} (100%) > > > > > > > > diff --git a/meta/recipes-devtools/go/go-1.18.inc > > > > b/meta/recipes-devtools/go/go-1.18.1.inc > > > > similarity index 82% > > > > rename from meta/recipes-devtools/go/go-1.18.inc > > > > rename to meta/recipes-devtools/go/go-1.18.1.inc > > > > index 54e241af10..64426471df 100644 > > > > --- a/meta/recipes-devtools/go/go-1.18.inc > > > > +++ b/meta/recipes-devtools/go/go-1.18.1.inc > > > > @@ -1,6 +1,6 @@ > > > > require go-common.inc > > > > > > > > -FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go-1.18:" > > > > +FILESEXTRAPATHS:prepend := "${FILE_DIRNAME}/go:" > > > > > > > > LIC_FILES_CHKSUM = > > > > "file://LICENSE;md5=5d4950ecb7b26d2c5e4e7b4e0dd74707" > > > > > > > > @@ -14,4 +14
Re: [OE-core] [PATCH 00/15] kernel-yocto: consolidated pull request
On Thu, Apr 28, 2022 at 9:48 AM Bruce Ashfield via lists.openembedded.org wrote: > > From: Bruce Ashfield > > Richard, > > This is mainly a resend of the pull request that I sent just before > the release builds. > > At that time, there was a ppc boot issue, which I've fixed. There was > also a ptest warning, which I couldn't reproduce, so let's see if it > pops back up on the AB. As a follow up, I'm re-testing the ppc boot issue now. It was a regression in the fb hotplug, which conflicted with subsequent -stable updates. I haven't done a full series of test on PPC, so it could be that it is undone by those updates. Bruce > > There is also a known issue with some of the arm reorganization done > for the -tiny cleaup. Jon has been working on fixes to that series, and > I've cc'd him here so he can add context. It was some boot issues, > even in the -standard kernel for sato (last I checked). > > The issue with the ARM changes is that they've already been pushed > to my repos, so everything stacks on top. If we can't get them fixed > shortly, I can temporarily revert and do a new patch on top. > > Khem has also indicated that the 5.15.36 -stable has all of the changes > required for gcc12, so it would be a good bump to get under test. > > Cheers, > > Bruce > > The following changes since commit 5639708757faa00de1bc64b01220a5f7232818fb: > > set_versions: update for 4.0 release (2022-04-26 10:56:47 +0100) > > are available in the Git repository at: > > git://git.yoctoproject.org/poky-contrib zedd/kernel > http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=zedd/kernel > > Bruce Ashfield (15): > linux-yocto/5.15: arm: poky-tiny cleanup and fixes > linux-yocto/5.15: update to v5.15.33 > linux-yocto/5.10: update to v5.10.110 > linux-yocto/5.10: base: enable kernel crypto userspace API > linux-yocto/5.15: base: enable kernel crypto userspace API > linux-yocto/5.15: kasan: fix BUG: sleeping function called from > invalid context > kernel-yocto: allow patch author date to be commit date > linux-yocto/5.15: fix ppc boot > linux-yocto/5.15: netfilter: conntrack: avoid useless indirection > during conntrack destruction > linux-yocto/5.10: update to v5.10.112 > linux-yocto/5.15: update to v5.15.35 > linux-yocto/5.15: Fix CVE-2022-28796 > linux-yocto: enable powerpc debug fragment > linux-yocto/5.15: fix -standard kernel build issue > linux-yocto/5.15: update to v5.15.36 > > meta/classes/kernel-yocto.bbclass | 6 +++- > .../kern-tools/kern-tools-native_git.bb | 2 +- > .../linux/linux-yocto-rt_5.10.bb | 6 ++-- > .../linux/linux-yocto-rt_5.15.bb | 6 ++-- > .../linux/linux-yocto-tiny_5.10.bb| 8 +++--- > .../linux/linux-yocto-tiny_5.15.bb| 6 ++-- > meta/recipes-kernel/linux/linux-yocto_5.10.bb | 26 + > meta/recipes-kernel/linux/linux-yocto_5.15.bb | 28 ++- > 8 files changed, 48 insertions(+), 40 deletions(-) > > -- > 2.19.1 > > > > -- - Thou shalt not follow the NULL pointer, for chaos and madness await thee at its end - "Use the force Harry" - Gandalf, Star Trek II -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164976): https://lists.openembedded.org/g/openembedded-core/message/164976 Mute This Topic: https://lists.openembedded.org/mt/90753174/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-Core][PATCH] eudev: Remove unused files
These files appear to have been first commented out from do_install in 14cba802f2dd ("udev: Add 141") and then removed completely in 54daad852fc3 ("udev: remove commented code from init script (no code changes)"). Signed-off-by: Alex Kiernan Signed-off-by: Alex Kiernan --- meta/recipes-core/udev/eudev/devfs-udev.rules | 108 --- meta/recipes-core/udev/eudev/links.conf | 21 --- .../recipes-core/udev/eudev/permissions.rules | 131 -- meta/recipes-core/udev/eudev/run.rules| 14 -- meta/recipes-core/udev/eudev/udev.rules | 116 meta/recipes-core/udev/eudev_3.2.10.bb| 5 - 6 files changed, 395 deletions(-) delete mode 100644 meta/recipes-core/udev/eudev/devfs-udev.rules delete mode 100644 meta/recipes-core/udev/eudev/links.conf delete mode 100644 meta/recipes-core/udev/eudev/permissions.rules delete mode 100644 meta/recipes-core/udev/eudev/run.rules delete mode 100644 meta/recipes-core/udev/eudev/udev.rules diff --git a/meta/recipes-core/udev/eudev/devfs-udev.rules b/meta/recipes-core/udev/eudev/devfs-udev.rules deleted file mode 100644 index 0ba1ad4e7f0e.. --- a/meta/recipes-core/udev/eudev/devfs-udev.rules +++ /dev/null @@ -1,108 +0,0 @@ -# The use of these rules is not recommended or supported. -# In a world where devices can come and go at any time, the devfs scheme -# of simple device enumeration does not help _anything_. Just forget about -# it. Use custom rules to name your device or look at the persistent device -# naming scheme, which is implemented for disks and add your subsystem. - -# ide block devices -BUS="ide", KERNEL="hd*", PROGRAM="/etc/udev/ide-devfs.sh %k %b %n", NAME="%k", SYMLINK="%c{1} %c{2}" - -# md block devices -KERNEL="md[0-9]*", NAME="md/%n" - -# floppy devices -KERNEL="fd[0-9]*", NAME="floppy/%n" - -# tty devices -KERNEL="tty[0-9]*",NAME="vc/%n", SYMLINK="%k" -KERNEL="ttyS[0-9]*", NAME="tts/%n", SYMLINK="%k" -KERNEL="ttyUSB[0-9]*", NAME="tts/USB%n" - -# vc devices -KERNEL="vcs",NAME="vcc/0" -KERNEL="vcs[0-9]*", NAME="vcc/%n" -KERNEL="vcsa", NAME="vcc/a0" -KERNEL="vcsa[0-9]*", NAME="vcc/a%n" - -# v4l devices -KERNEL="video[0-9]*", NAME="v4l/video%n" -KERNEL="radio[0-9]*", NAME="v4l/radio%n" -KERNEL="vbi[0-9]*", NAME="v4l/vbi%n" -KERNEL="vtx[0-9]*", NAME="v4l/vtx%n" - -# dm devices (ignore them) -KERNEL="dm-[0-9]*", NAME="" - -# i2c devices -KERNEL="i2c-[0-9]*", NAME="i2c/%n", SYMLINK="%k" - -# loop devices -KERNEL="loop[0-9]*", NAME="loop/%n", SYMLINK="%k" - -# ramdisks -KERNEL="ram[0-9]*", NAME="rd/%n", SYMLINK="%k" - -# framebuffer devices -KERNEL="fb[0-9]*", NAME="fb/%n", SYMLINK="%k" - -# misc -KERNEL="rtc", NAME="misc/%k", SYMLINK="%k" -KERNEL="psaux", NAME="misc/%k", SYMLINK="%k" -KERNEL="agpgart", NAME="misc/%k", SYMLINK="%k" -KERNEL="rtc", NAME="misc/%k", SYMLINK="%k" -KERNEL="psaux", NAME="misc/%k", SYMLINK="%k" -KERNEL="uinput", NAME="misc/%k", SYMLINK="%k" - -# alsa devices -KERNEL="controlC[0-9]*", NAME="snd/%k" -KERNEL="hw[CD0-9]*", NAME="snd/%k" -KERNEL="pcm[CD0-9cp]*", NAME="snd/%k" -KERNEL="midi[CD0-9]*", NAME="snd/%k" -KERNEL="timer", NAME="snd/%k" -KERNEL="seq",NAME="snd/%k" - -# oss devices -KERNEL="audio*", NAME="sound/%k", SYMLINK="%k" -KERNEL="dmmidi", NAME="sound/%k", SYMLINK="%k" -KERNEL="dsp*", NAME="sound/%k", SYMLINK="%k" -KERNEL="midi*", NAME="sound/%k", SYMLINK="%k" -KERNEL="mixer*", NAME="sound/%k", SYMLINK="%k" -KERNEL="sequencer*", NAME="sound/%k", SYMLINK="%k" - -# input devices -KERNEL="mice", NAME="input/%k" -KERNEL="mouse*", NAME="input/%k" -KERNEL="event*", NAME="input/%k" -KERNEL="js*",NAME="input/%k" -KERNEL="ts*", NAME="input/%k" - -# USB devices -KERNEL="hiddev*", NAME="usb/%k" -KERNEL="auer*",NAME="usb/%k" -KERNEL="legousbtower*",NAME="usb/%k" -KERNEL="dabusb*", NAME="usb/%k" -BUS="usb", KERNEL="lp[0-9]*", NAME="usb/%k" - -# netlink devices -KERNEL="route",NAME="netlink/%k" -KERNEL="skip", NAME="netlink/%k" -KERNEL="usersock", NAME="netlink/%k" -KERNEL="fwmonitor",NAME="netlink/%k" -KERNEL="tcpdiag", NAME="netlink/%k" -KERNEL="nflog",NAME="netlink/%k" -KERNEL="xfrm", NAME="netlink/%k" -KERNEL="arpd", NAME="netlink/%k" -KERNEL="route6", NAME="netlink/%k" -KERNEL="ip6_fw", NAME="netlink/%k" -KERNEL="dnrtmsg", NAME="netlink/%k" -KERNEL="tap*", NAME="netlink/%k" - -# CAPI devices -KERNEL="capi", NAME="capi20", SYMLINK="isdn/capi20" -KERNEL="capi*",NAME="capi/%n" - -# Network devices -KERNEL="tun", NAME="net/%k" - -# raw devices -KERNEL="raw[0-9]*", NAME="raw/%k" diff --git a/meta/recipes-core/udev/eudev/links.conf b/meta/recipes-core/udev/eudev/links.conf deleted file mode 100644 index 8fff922db6c0.. --- a/meta/recipes-core/udev/eudev/links.conf +++ /dev/null @@ -1,21 +0,0 @@
[OE-core][dunfell 0/6] Patch review
Please review this set of patches for dunfell and have comments back by end of day Monday. Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/3587 The following changes since commit 8e81d38048c953d0823abf04d5b2506cd988f0bb: build-appliance-image: Update to dunfell head revision (2022-04-25 15:58:54 +0100) are available in the Git repository at: git://git.openembedded.org/openembedded-core-contrib stable/dunfell-nut http://cgit.openembedded.org/openembedded-core-contrib/log/?h=stable/dunfell-nut Dmitry Baryshkov (1): linux-firmware: correct license for ar3k firmware Marta Rybczynska (1): cve-check: add json format Richard Purdie (1): perf-build-test/report: Drop phantomjs and html email reports support Ross Burton (1): boost: don't specify gcc version Steve Sakoman (1): scripts/contrib/oe-build-perf-report-email.py: remove obsolete check for phantomjs and optipng sana kazi (1): tiff: Fix CVE-2022-0891 meta/classes/cve-check.bbclass| 144 +++- meta/lib/oe/cve_check.py | 16 ++ .../linux-firmware/linux-firmware_20220411.bb | 4 +- .../libtiff/files/CVE-2022-0891.patch | 217 ++ meta/recipes-multimedia/libtiff/tiff_4.1.0.bb | 1 + meta/recipes-support/boost/boost.inc | 2 +- scripts/contrib/build-perf-test-wrapper.sh| 15 +- scripts/contrib/oe-build-perf-report-email.py | 167 +- 8 files changed, 388 insertions(+), 178 deletions(-) create mode 100644 meta/recipes-multimedia/libtiff/files/CVE-2022-0891.patch -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164978): https://lists.openembedded.org/g/openembedded-core/message/164978 Mute This Topic: https://lists.openembedded.org/mt/90764062/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core][dunfell 1/6] tiff: Fix CVE-2022-0891
From: sana kazi Fix CVE-2022-0891 for tiff Link: https://sources.debian.org/src/tiff/4.1.0+git191117-2%7Edeb10u4/debian/patches/CVE-2022-0891.patch/ Signed-off-by: Sana Kazi Signed-off-by: Sana Kazi Signed-off-by: Steve Sakoman --- .../libtiff/files/CVE-2022-0891.patch | 217 ++ meta/recipes-multimedia/libtiff/tiff_4.1.0.bb | 1 + 2 files changed, 218 insertions(+) create mode 100644 meta/recipes-multimedia/libtiff/files/CVE-2022-0891.patch diff --git a/meta/recipes-multimedia/libtiff/files/CVE-2022-0891.patch b/meta/recipes-multimedia/libtiff/files/CVE-2022-0891.patch new file mode 100644 index 00..e2f1bd3056 --- /dev/null +++ b/meta/recipes-multimedia/libtiff/files/CVE-2022-0891.patch @@ -0,0 +1,217 @@ +From 232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c Mon Sep 17 00:00:00 2001 +From: Su Laus +Date: Tue, 8 Mar 2022 17:02:44 + +Subject: [PATCH] tiffcrop: fix issue #380 and #382 heap buffer overflow in + extractImageSection + +CVE: CVE-2022-0891 +Upstream-Status: Backport [https://sources.debian.org/src/tiff/4.1.0+git191117-2%7Edeb10u4/debian/patches/CVE-2022-0891.patch/] +Comment: No change in any hunk +Signed-off-by: Sana Kazi +--- + tools/tiffcrop.c | 92 +++- + 1 file changed, 36 insertions(+), 56 deletions(-) + +diff --git a/tools/tiffcrop.c b/tools/tiffcrop.c +index f2e5474a..e62bcc71 100644 +--- a/tools/tiffcrop.c b/tools/tiffcrop.c +@@ -105,8 +105,8 @@ + *of messages to monitor progess without enabling dump logs. + */ + +-static char tiffcrop_version_id[] = "2.4"; +-static char tiffcrop_rev_date[] = "12-13-2010"; ++static char tiffcrop_version_id[] = "2.4.1"; ++static char tiffcrop_rev_date[] = "03-03-2010"; + + #include "tif_config.h" + #include "tiffiop.h" +@@ -6670,10 +6670,10 @@ extractImageSection(struct image_data *image, struct pageseg *section, + #ifdef DEVELMODE + uint32img_length; + #endif +- uint32j, shift1, shift2, trailing_bits; ++ uint32j, shift1, trailing_bits; + uint32row, first_row, last_row, first_col, last_col; + uint32src_offset, dst_offset, row_offset, col_offset; +- uint32offset1, offset2, full_bytes; ++ uint32offset1, full_bytes; + uint32sect_width; + #ifdef DEVELMODE + uint32sect_length; +@@ -6683,7 +6683,6 @@ extractImageSection(struct image_data *image, struct pageseg *section, + #ifdef DEVELMODE + int k; + unsigned char bitset; +- static char *bitarray = NULL; + #endif + + img_width = image->width; +@@ -6701,17 +6700,12 @@ extractImageSection(struct image_data *image, struct pageseg *section, + dst_offset = 0; + + #ifdef DEVELMODE +- if (bitarray == NULL) +-{ +-if ((bitarray = (char *)malloc(img_width)) == NULL) +- { +- TIFFError ("", "DEBUG: Unable to allocate debugging bitarray"); +- return (-1); +- } +-} ++ char bitarray[39]; + #endif + +- /* rows, columns, width, length are expressed in pixels */ ++ /* rows, columns, width, length are expressed in pixels ++ * first_row, last_row, .. are index into image array starting at 0 to width-1, ++ * last_col shall be also extracted. */ + first_row = section->y1; + last_row = section->y2; + first_col = section->x1; +@@ -6721,9 +6715,14 @@ extractImageSection(struct image_data *image, struct pageseg *section, + #ifdef DEVELMODE + sect_length = last_row - first_row + 1; + #endif +- img_rowsize = ((img_width * bps + 7) / 8) * spp; +- full_bytes = (sect_width * spp * bps) / 8; /* number of COMPLETE bytes per row in section */ +- trailing_bits = (sect_width * bps) % 8; ++/* The read function loadImage() used copy separate plane data into a buffer as interleaved ++ * samples rather than separate planes so the same logic works to extract regions ++ * regardless of the way the data are organized in the input file. ++ * Furthermore, bytes and bits are arranged in buffer according to COMPRESSION=1 and FILLORDER=1 ++ */ ++img_rowsize = (((img_width * spp * bps) + 7) / 8);/* row size in full bytes of source image */ ++full_bytes = (sect_width * spp * bps) / 8;/* number of COMPLETE bytes per row in section */ ++trailing_bits = (sect_width * spp * bps) % 8; /* trailing bits within the last byte of destination buffer */ + + #ifdef DEVELMODE + TIFFError ("", "First row: %d, last row: %d, First col: %d, last col: %d\n", +@@ -6736,10 +6735,9 @@ extractImageSection(struct image_data *image, struct pageseg *section, + + if ((bps % 8) == 0) + { +-col_offset = first_col * spp * bps / 8; ++col_offset = (first_col * spp * bps) / 8; + for (row = first_row; row <= last_row; row++) + { +- /* row_offset = row * img_width * spp * bps / 8; */ + row_offset = row * img_rowsize; + src_offset = row_offset + col_offset; + +@@ -6752,14 +6750,12 @@ extractImageSection(struct image_data *image, struct pages
[OE-core][dunfell 2/6] boost: don't specify gcc version
From: Ross Burton There's no need to specify an ancient GCC version here as Boost will probe it. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Tim Orling Signed-off-by: Steve Sakoman --- meta/recipes-support/boost/boost.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/boost/boost.inc b/meta/recipes-support/boost/boost.inc index 829e728b6d..1c13fb3599 100644 --- a/meta/recipes-support/boost/boost.inc +++ b/meta/recipes-support/boost/boost.inc @@ -165,7 +165,7 @@ do_configure() { # D2194:Fixing the failure of "error: duplicate initialization of gcc with the following parameters" during compilation. rm -f ${WORKDIR}/user-config.jam - echo 'using gcc : 4.3.1 : ${CXX} : "${CFLAGS}" "${CXXFLAGS}" "${LDFLAGS}" ;' >> ${WORKDIR}/user-config.jam + echo 'using gcc : : ${CXX} : "${CFLAGS}" "${CXXFLAGS}" "${LDFLAGS}" ;' >> ${WORKDIR}/user-config.jam # If we want Python then we need to tell Boost *exactly* where to find it if ${@bb.utils.contains('BOOST_LIBS', 'python', 'true', 'false', d)}; then -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164980): https://lists.openembedded.org/g/openembedded-core/message/164980 Mute This Topic: https://lists.openembedded.org/mt/90764064/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core][dunfell 3/6] linux-firmware: correct license for ar3k firmware
From: Dmitry Baryshkov According to the WHENCE file, some a3k firmware files are licensed under the special ar3k license, while others are licensed under the more generic Atheros license. Document this by adding extending the LICENSE_${PN}-ar3k and depending on both of them. Signed-off-by: Dmitry Baryshkov Signed-off-by: Luca Ceresoli (cherry picked from commit 8e651814af706285d64b532095fcd6f5f02629ba) Signed-off-by: Steve Sakoman --- meta/recipes-kernel/linux-firmware/linux-firmware_20220411.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-kernel/linux-firmware/linux-firmware_20220411.bb b/meta/recipes-kernel/linux-firmware/linux-firmware_20220411.bb index 04a6cefaa1..ad8dbac17f 100644 --- a/meta/recipes-kernel/linux-firmware/linux-firmware_20220411.bb +++ b/meta/recipes-kernel/linux-firmware/linux-firmware_20220411.bb @@ -352,7 +352,7 @@ FILES_${PN}-carl9170 = " \ RDEPENDS_${PN}-carl9170 += "${PN}-gplv2-license" # For QualCommAthos -LICENSE_${PN}-ar3k = "Firmware-qualcommAthos_ar3k" +LICENSE_${PN}-ar3k = "Firmware-qualcommAthos_ar3k & Firmware-atheros_firmware" LICENSE_${PN}-ar3k-license = "Firmware-qualcommAthos_ar3k" LICENSE_${PN}-ath10k = "Firmware-qualcommAthos_ath10k" LICENSE_${PN}-ath10k-license = "Firmware-qualcommAthos_ath10k" @@ -376,7 +376,7 @@ FILES_${PN}-qca = " \ ${nonarch_base_libdir}/firmware/qca \ " -RDEPENDS_${PN}-ar3k += "${PN}-ar3k-license" +RDEPENDS_${PN}-ar3k += "${PN}-ar3k-license ${PN}-atheros-license" RDEPENDS_${PN}-ath10k += "${PN}-ath10k-license" RDEPENDS_${PN}-ath11k += "${PN}-ath10k-license" RDEPENDS_${PN}-qca += "${PN}-ath10k-license" -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164981): https://lists.openembedded.org/g/openembedded-core/message/164981 Mute This Topic: https://lists.openembedded.org/mt/90764067/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core][dunfell 4/6] cve-check: add json format
From: Marta Rybczynska Backport to dunfell from master df567de36ae5964bee433ebb97e8bf702034994a Add an option to output the CVE check in a JSON-based format. This format is easier to parse in software than the original text-based one and allows post-processing by other tools. Output formats are now handed by CVE_CHECK_FORMAT_TEXT and CVE_CHECK_FORMAT_JSON. The text format is enabled by default to maintain compatibility, while the JSON format is disabled by default. The JSON output format gets generated in a similar way to the text format with the exception of the manifest: appending to JSON arrays requires parsing the file. Because of that we first write JSON fragments and then assemble them in one pass at the end. Signed-off-by: Marta Rybczynska Signed-off-by: Steve Sakoman --- meta/classes/cve-check.bbclass | 144 - meta/lib/oe/cve_check.py | 16 2 files changed, 159 insertions(+), 1 deletion(-) diff --git a/meta/classes/cve-check.bbclass b/meta/classes/cve-check.bbclass index 75c5b92b96..a7156cbdfb 100644 --- a/meta/classes/cve-check.bbclass +++ b/meta/classes/cve-check.bbclass @@ -34,15 +34,27 @@ CVE_CHECK_TMP_FILE ?= "${TMPDIR}/cve_check" CVE_CHECK_SUMMARY_DIR ?= "${LOG_DIR}/cve" CVE_CHECK_SUMMARY_FILE_NAME ?= "cve-summary" CVE_CHECK_SUMMARY_FILE ?= "${CVE_CHECK_SUMMARY_DIR}/${CVE_CHECK_SUMMARY_FILE_NAME}" +CVE_CHECK_SUMMARY_FILE_NAME_JSON = "cve-summary.json" +CVE_CHECK_SUMMARY_INDEX_PATH = "${CVE_CHECK_SUMMARY_DIR}/cve-summary-index.txt" + +CVE_CHECK_LOG_JSON ?= "${T}/cve.json" CVE_CHECK_DIR ??= "${DEPLOY_DIR}/cve" CVE_CHECK_RECIPE_FILE ?= "${CVE_CHECK_DIR}/${PN}" +CVE_CHECK_RECIPE_FILE_JSON ?= "${CVE_CHECK_DIR}/${PN}_cve.json" CVE_CHECK_MANIFEST ?= "${DEPLOY_DIR_IMAGE}/${IMAGE_NAME}${IMAGE_NAME_SUFFIX}.cve" +CVE_CHECK_MANIFEST_JSON ?= "${DEPLOY_DIR_IMAGE}/${IMAGE_NAME}${IMAGE_NAME_SUFFIX}.json" CVE_CHECK_COPY_FILES ??= "1" CVE_CHECK_CREATE_MANIFEST ??= "1" CVE_CHECK_REPORT_PATCHED ??= "1" +# Provide text output +CVE_CHECK_FORMAT_TEXT ??= "1" + +# Provide JSON output - disabled by default for backward compatibility +CVE_CHECK_FORMAT_JSON ??= "0" + # Whitelist for packages (PN) CVE_CHECK_PN_WHITELIST ?= "" @@ -118,6 +130,7 @@ python cve_check_cleanup () { Delete the file used to gather all the CVE information. """ bb.utils.remove(e.data.getVar("CVE_CHECK_TMP_FILE")) +bb.utils.remove(e.data.getVar("CVE_CHECK_SUMMARY_INDEX_PATH")) } addhandler cve_check_cleanup @@ -129,11 +142,15 @@ python cve_check_write_rootfs_manifest () { """ import shutil +from oe.cve_check import cve_check_merge_jsons if d.getVar("CVE_CHECK_COPY_FILES") == "1": deploy_file = d.getVar("CVE_CHECK_RECIPE_FILE") if os.path.exists(deploy_file): bb.utils.remove(deploy_file) +deploy_file_json = d.getVar("CVE_CHECK_RECIPE_FILE_JSON") +if os.path.exists(deploy_file_json): +bb.utils.remove(deploy_file_json) if os.path.exists(d.getVar("CVE_CHECK_TMP_FILE")): bb.note("Writing rootfs CVE manifest") @@ -152,6 +169,26 @@ python cve_check_write_rootfs_manifest () { os.remove(manifest_link) os.symlink(os.path.basename(manifest_name), manifest_link) bb.plain("Image CVE report stored in: %s" % manifest_name) + +if os.path.exists(d.getVar("CVE_CHECK_SUMMARY_INDEX_PATH")): +import json +bb.note("Generating JSON CVE manifest") +deploy_dir = d.getVar("DEPLOY_DIR_IMAGE") +link_name = d.getVar("IMAGE_LINK_NAME") +manifest_name = d.getVar("CVE_CHECK_MANIFEST_JSON") +index_file = d.getVar("CVE_CHECK_SUMMARY_INDEX_PATH") +manifest = {"version":"1", "package": []} +with open(index_file) as f: +filename = f.readline() +while filename: +with open(filename.rstrip()) as j: +data = json.load(j) +cve_check_merge_jsons(manifest, data) +filename = f.readline() + +with open(manifest_name, "w") as f: +json.dump(manifest, f, indent=2) +bb.plain("Image CVE report stored in: %s" % manifest_name) } ROOTFS_POSTPROCESS_COMMAND_prepend = "${@'cve_check_write_rootfs_manifest; ' if d.getVar('CVE_CHECK_CREATE_MANIFEST') == '1' else ''}" @@ -337,7 +374,7 @@ def get_cve_info(d, cves): conn.close() return cve_data -def cve_write_data(d, patched, unpatched, whitelisted, cve_data): +def cve_write_data_text(d, patched, unpatched, whitelisted, cve_data): """ Write CVE information in WORKDIR; and to CVE_CHECK_DIR, and CVE manifest if enabled. @@ -403,3 +440,108 @@ def cve_write_data(d, patched, unpatched, whitelisted, cve_data): with open(d.getVar("CVE_CHECK_TMP_FILE"), "a") as f: f.write("%s" % write_string) + +def cve_check_write_json_output(d, output, direct_file, deploy_file, manifest_file): +
[OE-core][dunfell 6/6] scripts/contrib/oe-build-perf-report-email.py: remove obsolete check for phantomjs and optipng
Use of those tools was removed in b5c131006e3fad0a15e6cdf81f71dc1e96647028 perf-build-test/report: Drop phantomjs and html email reports support Signed-off-by: Steve Sakoman --- scripts/contrib/oe-build-perf-report-email.py | 13 - 1 file changed, 13 deletions(-) diff --git a/scripts/contrib/oe-build-perf-report-email.py b/scripts/contrib/oe-build-perf-report-email.py index c900720f6e..7192113c28 100755 --- a/scripts/contrib/oe-build-perf-report-email.py +++ b/scripts/contrib/oe-build-perf-report-email.py @@ -27,17 +27,6 @@ logging.basicConfig(level=logging.INFO, format="%(levelname)s: %(message)s") log = logging.getLogger('oe-build-perf-report') -def check_utils(): -"""Check that all needed utils are installed in the system""" -missing = [] -for cmd in ('phantomjs', 'optipng'): -if not shutil.which(cmd): -missing.append(cmd) -if missing: -log.error("The following tools are missing: %s", ' '.join(missing)) -sys.exit(1) - - def parse_args(argv): """Parse command line arguments""" description = """Email build perf test report""" @@ -101,8 +90,6 @@ def main(argv=None): if args.debug: log.setLevel(logging.DEBUG) -check_utils() - if args.outdir: outdir = args.outdir if not os.path.exists(outdir): -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164984): https://lists.openembedded.org/g/openembedded-core/message/164984 Mute This Topic: https://lists.openembedded.org/mt/90764072/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core][dunfell 5/6] perf-build-test/report: Drop phantomjs and html email reports support
From: Richard Purdie phantomjs isn't reliable and we've moved to sharing the reports via a webserver. Update the scripts to more match those being used in the autobuilder helper where the html email support was removed. Signed-off-by: Richard Purdie (cherry picked from commit b5c131006e3fad0a15e6cdf81f71dc1e96647028) Signed-off-by: Steve Sakoman --- scripts/contrib/build-perf-test-wrapper.sh| 15 +- scripts/contrib/oe-build-perf-report-email.py | 154 +- 2 files changed, 8 insertions(+), 161 deletions(-) diff --git a/scripts/contrib/build-perf-test-wrapper.sh b/scripts/contrib/build-perf-test-wrapper.sh index fa71d4a2e9..0a85e6e708 100755 --- a/scripts/contrib/build-perf-test-wrapper.sh +++ b/scripts/contrib/build-perf-test-wrapper.sh @@ -87,21 +87,10 @@ if [ $# -ne 0 ]; then exit 1 fi -if [ -n "$email_to" ]; then -if ! [ -x "$(command -v phantomjs)" ]; then -echo "ERROR: Sending email needs phantomjs." -exit 1 -fi -if ! [ -x "$(command -v optipng)" ]; then -echo "ERROR: Sending email needs optipng." -exit 1 -fi -fi - # Open a file descriptor for flock and acquire lock LOCK_FILE="/tmp/oe-build-perf-test-wrapper.lock" if ! exec 3> "$LOCK_FILE"; then -echo "ERROR: Unable to open lock file" +echo "ERROR: Unable to open loemack file" exit 1 fi if ! flock -n 3; then @@ -226,7 +215,7 @@ if [ -n "$results_repo" ]; then if [ -n "$email_to" ]; then echo "Emailing test report" os_name=`get_os_release_var PRETTY_NAME` -"$script_dir"/oe-build-perf-report-email.py --to "$email_to" --subject "Build Perf Test Report for $os_name" --text $report_txt --html $report_html "${OE_BUILD_PERF_REPORT_EMAIL_EXTRA_ARGS[@]}" +"$script_dir"/oe-build-perf-report-email.py --to "$email_to" --subject "Build Perf Test Report for $os_name" --text $report_txt "${OE_BUILD_PERF_REPORT_EMAIL_EXTRA_ARGS[@]}" fi # Upload report files, unless we're on detached head diff --git a/scripts/contrib/oe-build-perf-report-email.py b/scripts/contrib/oe-build-perf-report-email.py index de3862c897..c900720f6e 100755 --- a/scripts/contrib/oe-build-perf-report-email.py +++ b/scripts/contrib/oe-build-perf-report-email.py @@ -19,8 +19,6 @@ import socket import subprocess import sys import tempfile -from email.mime.image import MIMEImage -from email.mime.multipart import MIMEMultipart from email.mime.text import MIMEText @@ -29,19 +27,6 @@ logging.basicConfig(level=logging.INFO, format="%(levelname)s: %(message)s") log = logging.getLogger('oe-build-perf-report') -# Find js scaper script -SCRAPE_JS = os.path.join(os.path.dirname(__file__), '..', 'lib', 'build_perf', - 'scrape-html-report.js') -if not os.path.isfile(SCRAPE_JS): -log.error("Unableto find oe-build-perf-report-scrape.js") -sys.exit(1) - - -class ReportError(Exception): -"""Local errors""" -pass - - def check_utils(): """Check that all needed utils are installed in the system""" missing = [] @@ -77,137 +62,19 @@ def parse_args(argv): "the email parts") parser.add_argument('--text', help="Plain text message") -parser.add_argument('--html', -help="HTML peport generated by oe-build-perf-report") -parser.add_argument('--phantomjs-args', action='append', -help="Extra command line arguments passed to PhantomJS") args = parser.parse_args(argv) -if not args.html and not args.text: -parser.error("Please specify --html and/or --text") +if not args.text: +parser.error("Please specify --text") return args -def decode_png(infile, outfile): -"""Parse/decode/optimize png data from a html element""" -with open(infile) as f: -raw_data = f.read() - -# Grab raw base64 data -b64_data = re.sub('^.*href="data:image/png;base64,', '', raw_data, 1) -b64_data = re.sub('">.+$', '', b64_data, 1) - -# Replace file with proper decoded png -with open(outfile, 'wb') as f: -f.write(base64.b64decode(b64_data)) - -subprocess.check_output(['optipng', outfile], stderr=subprocess.STDOUT) - - -def mangle_html_report(infile, outfile, pngs): -"""Mangle html file into a email compatible format""" -paste = True -png_dir = os.path.dirname(outfile) -with open(infile) as f_in: -with open(outfile, 'w') as f_out: -for line in f_in.readlines(): -stripped = line.strip() -# Strip out scripts -if stripped == '': -paste = False -elif stripped == '': -paste = True -elif paste: -if re.match('^.+href="data:image/png;base64', stripped): -# Strip out encoded pngs (as they're huge in size) -continue -
Re: [OE-core][dunfell 6/6] scripts/contrib/oe-build-perf-report-email.py: remove obsolete check for phantomjs and optipng
This patch is in master-next, but not yet master. I decided to run the dunfell review process in parallel with master. I will wait till the patch hits master before sending a pull request (and will add the cherry-pick notation) Steve On Thu, Apr 28, 2022 at 11:47 AM Steve Sakoman via lists.openembedded.org wrote: > > Use of those tools was removed in b5c131006e3fad0a15e6cdf81f71dc1e96647028 > perf-build-test/report: Drop phantomjs and html email reports support > > Signed-off-by: Steve Sakoman > --- > scripts/contrib/oe-build-perf-report-email.py | 13 - > 1 file changed, 13 deletions(-) > > diff --git a/scripts/contrib/oe-build-perf-report-email.py > b/scripts/contrib/oe-build-perf-report-email.py > index c900720f6e..7192113c28 100755 > --- a/scripts/contrib/oe-build-perf-report-email.py > +++ b/scripts/contrib/oe-build-perf-report-email.py > @@ -27,17 +27,6 @@ logging.basicConfig(level=logging.INFO, > format="%(levelname)s: %(message)s") > log = logging.getLogger('oe-build-perf-report') > > > -def check_utils(): > -"""Check that all needed utils are installed in the system""" > -missing = [] > -for cmd in ('phantomjs', 'optipng'): > -if not shutil.which(cmd): > -missing.append(cmd) > -if missing: > -log.error("The following tools are missing: %s", ' '.join(missing)) > -sys.exit(1) > - > - > def parse_args(argv): > """Parse command line arguments""" > description = """Email build perf test report""" > @@ -101,8 +90,6 @@ def main(argv=None): > if args.debug: > log.setLevel(logging.DEBUG) > > -check_utils() > - > if args.outdir: > outdir = args.outdir > if not os.path.exists(outdir): > -- > 2.25.1 > > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164985): https://lists.openembedded.org/g/openembedded-core/message/164985 Mute This Topic: https://lists.openembedded.org/mt/90764132/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core][PATCH] go-helloworld: remove unused GO_WORKDIR
The GO_WORKDIR is used only in go-mod.bbclass. As this recipe does not inherit go-mod.bbclass, this variable is useless here. This go-helloworld recipe was made to inherit go-mod.bbclass and build in module-aware mode. However, it was found that we need to build go recipes in GOPATH mode in order to support offline build. As a result, this recipe was changed back to only inherit go.bbclass. But the GO_WORKDIR setting was not cleaned up. Signed-off-by: Chen Qi --- meta/recipes-extended/go-examples/go-helloworld_0.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-extended/go-examples/go-helloworld_0.1.bb b/meta/recipes-extended/go-examples/go-helloworld_0.1.bb index 0faab39b66..d0de035921 100644 --- a/meta/recipes-extended/go-examples/go-helloworld_0.1.bb +++ b/meta/recipes-extended/go-examples/go-helloworld_0.1.bb @@ -11,7 +11,7 @@ UPSTREAM_CHECK_COMMITS = "1" GO_IMPORT = "golang.org/x/example" GO_INSTALL = "${GO_IMPORT}/hello" -GO_WORKDIR = "${GO_INSTALL}" + export GO111MODULE="off" inherit go -- 2.17.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164986): https://lists.openembedded.org/g/openembedded-core/message/164986 Mute This Topic: https://lists.openembedded.org/mt/90768475/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [warrior][PATCH] neard: Switch SRC_URI to git repo
From: Rahul Kumar The tarball (neard-0.16.tar.xz) fetched by the recipe is incomplete. Few plugins (e.g. tizen) and tests scripts (e.g. Test-channel, test-see, neard-ui.py, ndef-agent etc) are missing. Since neard did not release latest tarballs, so as per community recommendation switching the recipe SRC_URI to git repo. Community Discussion: https://lists.openembedded.org/g/openembedded-core/topic/90058043#163681 Signed-off-by: Rahul Kumar Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry-picked from b563f40ebf4461d9c35df72bd7599ea11e97da9c) Signed-off-by: Rahul Kumar --- meta/recipes-connectivity/neard/neard_0.16.bb | 13 +++-- 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/meta/recipes-connectivity/neard/neard_0.16.bb b/meta/recipes-connectivity/neard/neard_0.16.bb index cc6af4e1ca..769fda8c19 100644 --- a/meta/recipes-connectivity/neard/neard_0.16.bb +++ b/meta/recipes-connectivity/neard/neard_0.16.bb @@ -2,21 +2,22 @@ SUMMARY = "Linux NFC daemon" DESCRIPTION = "A daemon for the Linux Near Field Communication stack" HOMEPAGE = "http://01.org/linux-nfc"; LICENSE = "GPLv2" +LIC_FILES_CHKSUM = "file://COPYING;md5=12f884d2ae1ff87c09e5b7ccc2c4ca7e \ + file://src/near.h;beginline=1;endline=20;md5=358e4deefef251a4761e1ffacc965d13 \ + " DEPENDS = "dbus glib-2.0 libnl" -SRC_URI = "${KERNELORG_MIRROR}/linux/network/nfc/${BP}.tar.xz \ +SRC_URI = "git://git.kernel.org/pub/scm/network/nfc/neard.git;protocol=git;branch=master \ file://neard.in \ file://Makefile.am-fix-parallel-issue.patch \ file://Makefile.am-do-not-ship-version.h.patch \ file://0001-Add-header-dependency-to-nciattach.o.patch \ " -SRC_URI[md5sum] = "5c691fb7872856dc0d909c298bc8cb41" -SRC_URI[sha256sum] = "eae3b11c541a988ec11ca94b7deab01080cd5b58cfef3ced6ceac9b6e6e65b36" -LIC_FILES_CHKSUM = "file://COPYING;md5=12f884d2ae1ff87c09e5b7ccc2c4ca7e \ - file://src/near.h;beginline=1;endline=20;md5=358e4deefef251a4761e1ffacc965d13 \ - " +SRCREV = "949795024f7625420e93e288c56e194cb9a3e74a" + +S = "${WORKDIR}/git" inherit autotools pkgconfig systemd update-rc.d bluetooth -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164987): https://lists.openembedded.org/g/openembedded-core/message/164987 Mute This Topic: https://lists.openembedded.org/mt/90769943/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH v2] base-passwd: Disable shell for default users
On 2022-04-28 21:34, Peter Kjellerstedt wrote: >> -Original Message- >> From: openembedded-core@lists.openembedded.org > c...@lists.openembedded.org> On Behalf Of Jiaqing Zhao >> Sent: den 28 april 2022 11:50 >> To: openembedded-core@lists.openembedded.org >> Cc: Jiaqing Zhao >> Subject: [OE-core] [PATCH v2] base-passwd: Disable shell for default users >> >> Change the shell of all global static users other than root (which >> retains /bin/sh) and sync (as /bin/sync is rather harmless) to >> /sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) >> >> Upstream-Status: Backport >> [https://launchpad.net/ubuntu/+source/base-passwd/3.5.30] > > Since Kirkstone is out the door, is there any reason to not update > the version of base-passwd instead? > > //Peter The reason is that since base-passwd 3.5.30, it switches to dh-autoreconf instead of autoconf to configure Changelog: https://launchpad.net/ubuntu/+source/base-passwd/3.5.30 > [ Colin Watson ] > * Remove config.h.in and configure, now autogenerated by dh-autoreconf. Since openembedded does not have the Debian toolchain, this recipe is marked NO UPDATE with reason "Version 3.5.38 requires cdebconf for update-passwd utility". https://github.com/openembedded/openembedded-core/blob/master/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb#L8 Jiaqing > >> Signed-off-by: Jiaqing Zhao >> --- >> v2: >> Fix indentation in bbfile. >> --- >> .../base-passwd/disable-shell.patch | 57 +++ >> .../base-passwd/base-passwd_3.5.29.bb | 1 + >> 2 files changed, 58 insertions(+) >> create mode 100644 meta/recipes-core/base-passwd/base-passwd/disable- >> shell.patch >> >> diff --git a/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch >> b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch >> new file mode 100644 >> index 00..dddc93ca35 >> --- /dev/null >> +++ b/meta/recipes-core/base-passwd/base-passwd/disable-shell.patch >> @@ -0,0 +1,57 @@ >> +From 91e0db96741359173ddf2be083aafcc1a3c32472 Mon Sep 17 00:00:00 2001 >> +From: Jiaqing Zhao >> +Date: Mon, 18 Apr 2022 11:22:43 +0800 >> +Subject: [PATCH] Disable shell for default users >> + >> +Change the shell of all global static users other than root (which >> +retains /bin/sh) and sync (as /bin/sync is rather harmless) to >> +/sbin/nologin (as /usr/sbin/nologin does not exist in openembedded) >> + >> +Upstream-Status: Backport [https://launchpad.net/ubuntu/+source/base- >> passwd/3.5.30] >> +Signed-off-by: Jiaqing Zhao >> +--- >> + passwd.master | 32 >> + 1 file changed, 16 insertions(+), 16 deletions(-) >> + >> +diff --git a/passwd.master b/passwd.master >> +index e1c32ff..0cd5ffd 100644 >> +--- a/passwd.master >> b/passwd.master >> +@@ -1,18 +1,18 @@ >> + root::0:0:root:/root:/bin/sh >> +-daemon:*:1:1:daemon:/usr/sbin:/bin/sh >> +-bin:*:2:2:bin:/bin:/bin/sh >> +-sys:*:3:3:sys:/dev:/bin/sh >> ++daemon:*:1:1:daemon:/usr/sbin:/sbin/nologin >> ++bin:*:2:2:bin:/bin:/sbin/nologin >> ++sys:*:3:3:sys:/dev:/sbin/nologin >> + sync:*:4:65534:sync:/bin:/bin/sync >> +-games:*:5:60:games:/usr/games:/bin/sh >> +-man:*:6:12:man:/var/cache/man:/bin/sh >> +-lp:*:7:7:lp:/var/spool/lpd:/bin/sh >> +-mail:*:8:8:mail:/var/mail:/bin/sh >> +-news:*:9:9:news:/var/spool/news:/bin/sh >> +-uucp:*:10:10:uucp:/var/spool/uucp:/bin/sh >> +-proxy:*:13:13:proxy:/bin:/bin/sh >> +-www-data:*:33:33:www-data:/var/www:/bin/sh >> +-backup:*:34:34:backup:/var/backups:/bin/sh >> +-list:*:38:38:Mailing List Manager:/var/list:/bin/sh >> +-irc:*:39:39:ircd:/var/run/ircd:/bin/sh >> +-gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh >> +-nobody:*:65534:65534:nobody:/nonexistent:/bin/sh >> ++games:*:5:60:games:/usr/games:/sbin/nologin >> ++man:*:6:12:man:/var/cache/man:/sbin/nologin >> ++lp:*:7:7:lp:/var/spool/lpd:/sbin/nologin >> ++mail:*:8:8:mail:/var/mail:/sbin/nologin >> ++news:*:9:9:news:/var/spool/news:/sbin/nologin >> ++uucp:*:10:10:uucp:/var/spool/uucp:/sbin/nologin >> ++proxy:*:13:13:proxy:/bin:/sbin/nologin >> ++www-data:*:33:33:www-data:/var/www:/sbin/nologin >> ++backup:*:34:34:backup:/var/backups:/sbin/nologin >> ++list:*:38:38:Mailing List Manager:/var/list:/sbin/nologin >> ++irc:*:39:39:ircd:/var/run/ircd:/sbin/nologin >> ++gnats:*:41:41:Gnats Bug-Reporting System >> (admin):/var/lib/gnats:/sbin/nologin >> ++nobody:*:65534:65534:nobody:/nonexistent:/sbin/nologin >> +-- >> +2.32.0 >> + >> diff --git a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb >> b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb >> index 9a27ad3ab5..ef7792ae49 100644 >> --- a/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb >> +++ b/meta/recipes-core/base-passwd/base-passwd_3.5.29.bb >> @@ -14,6 +14,7 @@ SRC_URI = >> "https://launchpad.net/debian/+archive/primary/+files/${BPN}_${PV}.tar >> file://input.patch \ >> file://disable-docs.patch \ >> file://kvm.patch \ >> +
Re: [OE-core][PATCH] go-helloworld: remove unused GO_WORKDIR
lgtm, thanks for fixing it On Thu, Apr 28, 2022 at 7:23 PM Chen Qi wrote: > > The GO_WORKDIR is used only in go-mod.bbclass. As this recipe does > not inherit go-mod.bbclass, this variable is useless here. > > This go-helloworld recipe was made to inherit go-mod.bbclass and build > in module-aware mode. However, it was found that we need to build go > recipes in GOPATH mode in order to support offline build. As a result, > this recipe was changed back to only inherit go.bbclass. But the GO_WORKDIR > setting was not cleaned up. > > Signed-off-by: Chen Qi > --- > meta/recipes-extended/go-examples/go-helloworld_0.1.bb | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/meta/recipes-extended/go-examples/go-helloworld_0.1.bb > b/meta/recipes-extended/go-examples/go-helloworld_0.1.bb > index 0faab39b66..d0de035921 100644 > --- a/meta/recipes-extended/go-examples/go-helloworld_0.1.bb > +++ b/meta/recipes-extended/go-examples/go-helloworld_0.1.bb > @@ -11,7 +11,7 @@ UPSTREAM_CHECK_COMMITS = "1" > > GO_IMPORT = "golang.org/x/example" > GO_INSTALL = "${GO_IMPORT}/hello" > -GO_WORKDIR = "${GO_INSTALL}" > + > export GO111MODULE="off" > > inherit go > -- > 2.17.1 > > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164989): https://lists.openembedded.org/g/openembedded-core/message/164989 Mute This Topic: https://lists.openembedded.org/mt/90768475/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [PATCH] gnutls: Added fips support option.
Hi, Alex > What do those do_compile/do_install tweaks do, and why are they necessary? > Please explain, it seems like there might be a better way to do this. Sorry, It seems that I should add an explain in commit message. I found that if enable fips, a binary build for target will be executed in do_compile task. The log(MACHINE ?= "qemuarm64") is as the following: -- | ./fipshmac .libs/libgnutls.so.30 > .libs/.libgnutls.so.30.hmac-t && mv .libs/.libgnutls.so.30.hmac-t .libs/.libgnutls.so.30.hmac | libtool: link: (cd ".libs" && rm -f "libgnutlsxx.so.30" && ln -s "libgnutlsxx.so.30.0.0" "libgnutlsxx.so.30") | libtool: link: (cd ".libs" && rm -f "libgnutlsxx.so" && ln -s "libgnutlsxx.so.30.0.0" "libgnutlsxx.so") | /lib/ld-linux-aarch64.so.1: No such file or directory So, I tweaked do_compile/do_install to use fipshmac from native instead of target. If there is better way, please tell me. And if there are no questions, I'll send a v2 patch with an issue fixed for multilib. Best regards Lei Maohui > -Original Message- > From: Alexander Kanavin > Sent: Thursday, April 28, 2022 4:12 PM > To: Lei, Maohui > Cc: OE-core > Subject: Re: [OE-core] [PATCH] gnutls: Added fips support option. > > What do those do_compile/do_install tweaks do, and why are they necessary? > Please explain, it seems like there might be a better way to do this. > > Alex > > On Thu, 28 Apr 2022 at 09:34, leimaohui wrote: > > > > Signed-off-by: Lei Maohui > > --- > > meta/recipes-support/gnutls/gnutls_3.7.4.bb | 17 + > > 1 file changed, 17 insertions(+) > > > > diff --git a/meta/recipes-support/gnutls/gnutls_3.7.4.bb > > b/meta/recipes-support/gnutls/gnutls_3.7.4.bb > > index b34eb7f..5a34805 100644 > > --- a/meta/recipes-support/gnutls/gnutls_3.7.4.bb > > +++ b/meta/recipes-support/gnutls/gnutls_3.7.4.bb > > @@ -15,6 +15,7 @@ LIC_FILES_CHKSUM = > "file://LICENSE;md5=71391c8e0c1cfe68077e7fce3b586283 \ > > > file://doc/COPYING.LESSER;md5=a6f89e2100d9b6cdffcea4f398e37343" > > > > DEPENDS = "nettle gmp virtual/libiconv libunistring" > > +DEPENDS:append:class-target = " gnutls-native" > > DEPENDS:append:libc-musl = " argp-standalone" > > > > SHRT_VER = > > "${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}" > > @@ -36,6 +37,7 @@ PACKAGECONFIG[libidn] = > "--with-idn,--without-idn,libidn2" > > PACKAGECONFIG[libtasn1] = > "--with-included-libtasn1=no,--with-included-libtasn1,libtasn1" > > PACKAGECONFIG[p11-kit] = "--with-p11-kit,--without-p11-kit,p11-kit" > > PACKAGECONFIG[tpm] = "--with-tpm,--without-tpm,trousers" > > +PACKAGECONFIG[fips] = "--enable-fips140-mode,--disable-fips140-mode" > > > > EXTRA_OECONF = " \ > > --enable-doc \ > > @@ -59,6 +61,21 @@ do_configure:prepend() { > > done > > } > > > > +do_compile:prepend:class-target () { > > +if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', > > d)}; > then > > + sed -i -e > "s#\$(builddir)/fipshmac#${STAGING_DIR_NATIVE}${libdir}/fipshmac#g" > ${B}/lib/Makefile > > +fi > > +} > > + > > +do_install:append:class-native() { > > +if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', > > d)}; > then > > + install -d ${D}${libdir} > > + install -d ${D}${libdir}/.libs > > + install -m 0755 ${B}/lib/fipshmac ${D}${libdir}/ > > + install -m 0755 ${B}/lib/.libs/fipshmac ${D}${libdir}/.libs/ > > +fi > > +} > > + > > PACKAGES =+ "${PN}-openssl ${PN}-xx" > > > > FILES:${PN}-dev += "${bindir}/gnutls-cli-debug" > > -- > > 1.8.3.1 > > > > > > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164990): https://lists.openembedded.org/g/openembedded-core/message/164990 Mute This Topic: https://lists.openembedded.org/mt/90748530/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [OE-core] [yocto] [qa-build-notification] QA notification for completed autobuilder build (yocto-3.1.16.rc1)
Hi All, This is the full report for yocto-3.1.16.rc1: https://git.yoctoproject.org/cgit/cgit.cgi/yocto-testresults-contrib/tree/?h=intel-yocto-testresults === Summary No high milestone defects. No new issue found. Thanks, Jay > -Original Message- > From: yo...@lists.yoctoproject.org On Behalf > Of Richard Purdie > Sent: Tuesday, 26 April, 2022 8:04 PM > To: qa-build-notificat...@lists.yoctoproject.org; yo...@lists.yoctoproject.org > Cc: Yocto TSC ; Steve Sakoman > > Subject: Re: [yocto] [qa-build-notification] QA notification for completed > autobuilder build (yocto-3.1.16.rc1) > > On Tue, 2022-04-26 at 10:56 +, Pokybuild User wrote: > > A build flagged for QA (yocto-3.1.16.rc1) was completed on the autobuilder > and is available at: > > > > > > https://autobuilder.yocto.io/pub/releases/yocto-3.1.16.rc1 > > > > > > Build hash information: > > > > bitbake: 0784db7dd0fef6f0621ad8d74372f44e87fef950 > > meta-agl: ca53308f8803fb50709b3f17bb1f9e476366bb62 > > meta-arm: 5c09684863be8e803e3e987a5ce4940721c3f39a > > meta-aws: 9979cfa676105cb68cfadfdaeabf044d7c919319 > > meta-gplv2: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac > > meta-intel: affda10724e5e3c7948200e888a91ffdb5d32a11 > > meta-mingw: 524de686205b5d6736661d4532f5f98fee8589b7 > > meta-openembedded: fdd1dfe6b4b2412cc536c26450ce126c960d8107 > > oecore: 8e81d38048c953d0823abf04d5b2506cd988f0bb > > poky: f14992950eb90dc168eb82823ab69538f668f8bc > > There was one failure in this build on a new performance worker. We've just > switched over to the new performance workers so we can decommission the > others and apply the data centre power budget to other things. I don't think > that should block release. > > I'll work with Steve to get the changes we need sorted so this doesn't happen > in future, the issues are to do with the html email report generation which > we no longer use. > > Cheers, > > Richard -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164991): https://lists.openembedded.org/g/openembedded-core/message/164991 Mute This Topic: https://lists.openembedded.org/mt/90770449/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 1/2] cve-update-db-native: update the CVE database once a day only
The update of the NVD database was expected to happen once per hour. However, the database file date changes only if the content was actually updated. In practice, the check worked for the first hour after the new download. As the NVD database changes usually only once a day, we can just update it less frequently. Signed-off-by: Marta Rybczynska --- meta/recipes-core/meta/cve-update-db-native.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-core/meta/cve-update-db-native.bb b/meta/recipes-core/meta/cve-update-db-native.bb index e5822cee58..af39480dda 100644 --- a/meta/recipes-core/meta/cve-update-db-native.bb +++ b/meta/recipes-core/meta/cve-update-db-native.bb @@ -43,10 +43,10 @@ python do_fetch() { if os.path.exists(db_file): os.remove(db_file) -# Don't refresh the database more than once an hour +# The NVD database changes once a day, so no need to update more frequently try: import time -if time.time() - os.path.getmtime(db_file) < (60*60): +if time.time() - os.path.getmtime(db_file) < (24*60*60): bb.debug(2, "Recently updated, skipping") return except OSError: -- 2.33.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164992): https://lists.openembedded.org/g/openembedded-core/message/164992 Mute This Topic: https://lists.openembedded.org/mt/90771092/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [PATCH 2/2] cve-update-db-native: allow an option to force the CVE database update
Add a new variable FORCE_CVE_DB_UPDATE allowing the user to force the database update, if the default update frequency is too low. Signed-off-by: Marta Rybczynska --- meta/recipes-core/meta/cve-update-db-native.bb | 10 +++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/meta/recipes-core/meta/cve-update-db-native.bb b/meta/recipes-core/meta/cve-update-db-native.bb index af39480dda..d89f79f310 100644 --- a/meta/recipes-core/meta/cve-update-db-native.bb +++ b/meta/recipes-core/meta/cve-update-db-native.bb @@ -13,6 +13,7 @@ deltask do_install deltask do_populate_sysroot NVDCVE_URL ?= "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-"; +FORCE_CVE_DB_UPDATE ?= "0" python () { if not bb.data.inherits_class("cve-check", d): @@ -44,11 +45,14 @@ python do_fetch() { os.remove(db_file) # The NVD database changes once a day, so no need to update more frequently +# Allow the user to force-update try: import time -if time.time() - os.path.getmtime(db_file) < (24*60*60): -bb.debug(2, "Recently updated, skipping") -return +if d.getVar("FORCE_CVE_DB_UPDATE") == "0": +if time.time() - os.path.getmtime(db_file) < (24*60*60): +bb.debug(2, "Recently updated, skipping") +return + except OSError: pass -- 2.33.0 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164993): https://lists.openembedded.org/g/openembedded-core/message/164993 Mute This Topic: https://lists.openembedded.org/mt/90771095/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[OE-core] [dunfell][PATCH] neard: Switch SRC_URI to git repo
From: Rahul Kumar The tarball (neard-0.16.tar.xz) fetched by the recipe is incomplete. Few plugins (e.g. tizen) and tests scripts (e.g. Test-channel, test-see, neard-ui.py, ndef-agent etc) are missing. Since neard did not release latest tarballs, so as per community recommendation switching the recipe SRC_URI to git repo. Community Discussion: https://lists.openembedded.org/g/openembedded-core/topic/90058043#163681 Signed-off-by: Rahul Kumar Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry-picked from b563f40ebf4461d9c35df72bd7599ea11e97da9c) Signed-off-by: Rahul Kumar --- meta/recipes-connectivity/neard/neard_0.16.bb | 13 +++-- 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/meta/recipes-connectivity/neard/neard_0.16.bb b/meta/recipes-connectivity/neard/neard_0.16.bb index 7c124a3c0b..dd0742f792 100644 --- a/meta/recipes-connectivity/neard/neard_0.16.bb +++ b/meta/recipes-connectivity/neard/neard_0.16.bb @@ -2,21 +2,22 @@ SUMMARY = "Linux NFC daemon" DESCRIPTION = "A daemon for the Linux Near Field Communication stack" HOMEPAGE = "http://01.org/linux-nfc"; LICENSE = "GPLv2" +LIC_FILES_CHKSUM = "file://COPYING;md5=12f884d2ae1ff87c09e5b7ccc2c4ca7e \ + file://src/near.h;beginline=1;endline=20;md5=358e4deefef251a4761e1ffacc965d13 \ + " DEPENDS = "dbus glib-2.0 libnl" -SRC_URI = "${KERNELORG_MIRROR}/linux/network/nfc/${BP}.tar.xz \ +SRC_URI = "git://git.kernel.org/pub/scm/network/nfc/neard.git;protocol=git;branch=master \ file://neard.in \ file://Makefile.am-fix-parallel-issue.patch \ file://Makefile.am-do-not-ship-version.h.patch \ file://0001-Add-header-dependency-to-nciattach.o.patch \ " -SRC_URI[md5sum] = "5c691fb7872856dc0d909c298bc8cb41" -SRC_URI[sha256sum] = "eae3b11c541a988ec11ca94b7deab01080cd5b58cfef3ced6ceac9b6e6e65b36" -LIC_FILES_CHKSUM = "file://COPYING;md5=12f884d2ae1ff87c09e5b7ccc2c4ca7e \ - file://src/near.h;beginline=1;endline=20;md5=358e4deefef251a4761e1ffacc965d13 \ - " +SRCREV = "949795024f7625420e93e288c56e194cb9a3e74a" + +S = "${WORKDIR}/git" inherit autotools pkgconfig systemd update-rc.d -- 2.25.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#164994): https://lists.openembedded.org/g/openembedded-core/message/164994 Mute This Topic: https://lists.openembedded.org/mt/90771211/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-