[OE-core][PATCH 1/4] systemd: sort packages before pn

2023-10-17 Thread Jose Quaresma
Signed-off-by: Jose Quaresma --- meta/recipes-core/systemd/systemd_254.4.bb | 14 +++--- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/meta/recipes-core/systemd/systemd_254.4.bb b/meta/recipes-core/systemd/systemd_254.4.bb index 77724eb822..d24bf0cb06 100644 ---

[OE-core][PATCH 2/4] systemd: add systemd-crypt package

2023-10-17 Thread Jose Quaresma
Signed-off-by: Jose Quaresma --- meta/recipes-core/systemd/systemd_254.4.bb | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/meta/recipes-core/systemd/systemd_254.4.bb b/meta/recipes-core/systemd/systemd_254.4.bb index d24bf0cb06..2146c130d5 100644 ---

[OE-core][PATCH 3/4] systemd: add cryptsetup-plugins package config

2023-10-17 Thread Jose Quaresma
Signed-off-by: Jose Quaresma --- meta/recipes-core/systemd/systemd_254.4.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-core/systemd/systemd_254.4.bb b/meta/recipes-core/systemd/systemd_254.4.bb index 2146c130d5..578d3b463d 100644 ---

[OE-core][PATCH 4/4] systemd: add p11kit package config

2023-10-17 Thread Jose Quaresma
Signed-off-by: Jose Quaresma --- meta/recipes-core/systemd/systemd_254.4.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-core/systemd/systemd_254.4.bb b/meta/recipes-core/systemd/systemd_254.4.bb index 578d3b463d..fc42787555 100644 ---

[OE-core] why is it PROVIDES = "udev" and not PROVIDES = "virtual/udev"?

2023-10-17 Thread Robert P. J. Day
given that the PREFERRED_PROVIDER feature is typically used for "virtual" entities: * virtual/kernel * virtual/xserver * virtual/libgl and so on, is there a reason that this pattern is not followed for the selection of a udev provider, which is referred to as just "PREFERRED_PROVIDER_udev",

Re: [OE-core] [PATCH] systemd: fix packaging tpm2 plugin for cryptsetup

2023-10-17 Thread Jose Quaresma
Hi Erik, Erik Schilling escreveu no dia terça, 17/10/2023 à(s) 06:51: > On Mon Oct 16, 2023 at 6:31 PM CEST, Jose Quaresma wrote: > > Erik Schilling escreveu no dia segunda, > > 16/10/2023 à(s) 13:02: > > > > > When building with `cryptsetup` and `tpm2` in the > > > PACKAGECONFIG, this plugin

[OE-core] weston-init: how to debug with systemd

2023-10-17 Thread Sean Nyekjaer
Hi, To my understanding the weston.service doesn’t log to journal. If I'm is running the weston binary there is fine output on stdout. Looks like TTYPath is eating the logs, but I could be wrong. Adding: ExecStart=/usr/bin/weston --modules=systemd-notify.so --log=/tmp/weston.log Will of

[OE-core] Dependency on packages

2023-10-17 Thread Vyacheslav Yurkov
Hey everyone. As you know, DEPENDS operates on a recipe name basis, and RDEPENDS on a package name basis. I'm working on a dependency issue in meta-openembedded, where I need to indicate a package dependency during a build stage. Any advice how should I do it? (if any details necessary it's

Re: [OE-core] why is it PROVIDES = "udev" and not PROVIDES = "virtual/udev"?

2023-10-17 Thread Richard Purdie
On Tue, 2023-10-17 at 02:30 -0400, Robert P. J. Day wrote: > given that the PREFERRED_PROVIDER feature is typically used for > "virtual" entities: > > * virtual/kernel > * virtual/xserver > * virtual/libgl > > and so on, is there a reason that this pattern is not followed for the > selection >

Re: [OE-Core][PATCH v2 4/4] recipetool: Add handler to create go recipes

2023-10-17 Thread Lukas Funke
Hi Richard, On 17.10.2023 15:53, Richard Purdie wrote: On Tue, 2023-10-17 at 15:26 +0200, Lukas Funke wrote: From: Lukas Funke Signed-off-by: Lukas Funke --- scripts/lib/recipetool/create_go.py | 730 1 file changed, 730 insertions(+) create mode 100644

[OE-core][PATCH] patchtest: update SPDX identifiers

2023-10-17 Thread Trevor Gamblin
Replace full license headers with SPDX identifiers and adjust all patchtest-related code to use GPL-2.0-only. Signed-off-by: Trevor Gamblin --- meta/lib/patchtest/data.py | 15 +-- meta/lib/patchtest/patch.py | 13 +

[OE-core][PATCH] Move Go architecture mapping to a library

2023-10-17 Thread Joshua Watt
Other spaces uses the Go architecture definitions as their own (for example, container arches are defined to be Go arches). To make it easier for other places to use this mapping, move the code that does the translation of OpenEmbedded arches to Go arches to a library. Signed-off-by: Joshua Watt

Re: [OE-core] [PATCH 2/3] selftest/sstatetests: add tests for 'bitbake -S printdiff'

2023-10-17 Thread Alexander Kanavin
Thanks, I was completely sure in my head I had fixed this, but either I haven't, or it has been somehow lost. Alex On Tue, 17 Oct 2023 at 16:06, Jose Quaresma wrote: > > > > Alexander Kanavin escreveu no dia terça, 17/10/2023 > à(s) 14:31: >> >> 'bitbake -S printdiff' is a useful diagnostic

[OE-core] Yocto Project Status 17 October 2023 (WW42)

2023-10-17 Thread Neal Caidin
Current Dev Position: YP 4.3 M4 (Feature Freeze) Next Deadline: 2nd October 2023 YP 4.3 M4 build date Next Team Meetings: - Bug Triage meeting Thursday October 19th 7:30 am PDT ( https://zoom.us/j/454367603?pwd=ZGxoa2ZXL3FkM3Y0bFd5aVpHVVZ6dz09) - Weekly Project Engineering Sync

[OE-core] [PATCH] Add SECURITY.md

2023-10-17 Thread Marta Rybczynska
Add a SECURITY.md filr with hints for security researchers and other parties who might report potential security vulnerabilities. Signed-off-by: Marta Rybczynska --- SECURITY.md | 17 + 1 file changed, 17 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md

Re: [OE-core][PATCH 0/4] patchtest: add to oe-core

2023-10-17 Thread Michael Opdenacker via lists.openembedded.org
Hi Trevor On 16.10.23 at 21:44, Trevor Gamblin wrote: Add the patchtest core tools and supporting scripts to openembedded-core. This will enable users to validate their changes locally against the repository before submission to the mailing list, reducing maintainer overhead and encouraging

[OE-core] [PATCH 1/3] lib/oe/sstatesig.py: dump locked.sigs.inc only when explicitly asked via -S lockedsigs

2023-10-17 Thread Alexander Kanavin
This was writing out locked-sigs.inc into cwd with every 'bitbake -S' invocation. When the intent is only to to get task stamps (-S none), or print the difference between them (-S printdiff), the file is unnecessary clutter. A couple of selftests were however relying on this, so they're adjusted

[OE-core] [PATCH 2/3] selftest/sstatetests: add tests for 'bitbake -S printdiff'

2023-10-17 Thread Alexander Kanavin
'bitbake -S printdiff' is a useful diagnostic facility for finding out why sstate is not being reused, but until now it had no tests that would ensure it works. This commit adds three basic scenarios: 1. make a change in a really basic, common recipe that is at the very root of dependency trees

[OE-core] [PATCH 3/3] scripts/bitbake-whatchanged: remove

2023-10-17 Thread Alexander Kanavin
This is not documented or tested, and indeed hasn't been producing useful reports for some time. The script works by redirecting STAMPS_DIR into a separate location, then running bitbake -S none, then comparing the two sets of stamp filenames with regexes: Match the stamp's filename group(1):

Re: [OE-Core][PATCH v2 4/4] recipetool: Add handler to create go recipes

2023-10-17 Thread Richard Purdie
On Tue, 2023-10-17 at 15:26 +0200, Lukas Funke wrote: > From: Lukas Funke > > Signed-off-by: Lukas Funke > --- > scripts/lib/recipetool/create_go.py | 730 > 1 file changed, 730 insertions(+) > create mode 100644 scripts/lib/recipetool/create_go.py > > diff --git

[OE-core][PATCH] patchtest/selftest: fix command arguments

2023-10-17 Thread Trevor Gamblin
Changes to patchtest's command-line arguments to work with oe-core by default do not match the selftest script's argument list. Explicitly use the --testdir and --repodir flags in selftest so that it is compatible them. Signed-off-by: Trevor Gamblin --- meta/lib/patchtest/selftest/selftest | 2

[OE-Core][PATCH v2 0/4] recipetool: Add handler to create go recipes

2023-10-17 Thread Lukas Funke
From: Lukas Funke This patch series adds a recipetool handler in order to create 'go' recipes. Each recipe contains a list of dependencies in their SRC_URI variable which are derived from the projects `go.mod` file. For each dependency the corresponding license file uri/hash is added. The

[OE-Core][PATCH v2 3/4] recipetool: Ignore *.go files while scanning for licenses

2023-10-17 Thread Lukas Funke
From: Lukas Funke Signed-off-by: Lukas Funke --- scripts/lib/recipetool/create.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/lib/recipetool/create.py b/scripts/lib/recipetool/create.py index 143bc63e9d..293198d1c8 100644 --- a/scripts/lib/recipetool/create.py

[OE-Core][PATCH v2 1/4] classes: go-vendor: Add go-vendor class

2023-10-17 Thread Lukas Funke
From: Lukas Funke Signed-off-by: Lukas Funke --- meta/classes/go-vendor.bbclass | 135 + 1 file changed, 135 insertions(+) create mode 100644 meta/classes/go-vendor.bbclass diff --git a/meta/classes/go-vendor.bbclass b/meta/classes/go-vendor.bbclass new file

[OE-Core][PATCH v2 2/4] selftest: recipetool: Add test for go recipe handler

2023-10-17 Thread Lukas Funke
From: Lukas Funke This commit adds a test for the go recipetool handler. The choosen go project to test the created recipe was picked randomly. The SRC_URIs and the LIC_FILES_CHKSUMs are checked against there reference values. Signed-off-by: Lukas Funke ---

[OE-Core][PATCH v2 4/4] recipetool: Add handler to create go recipes

2023-10-17 Thread Lukas Funke
From: Lukas Funke Signed-off-by: Lukas Funke --- scripts/lib/recipetool/create_go.py | 730 1 file changed, 730 insertions(+) create mode 100644 scripts/lib/recipetool/create_go.py diff --git a/scripts/lib/recipetool/create_go.py

Re: [OE-core] [PATCH 2/3] selftest/sstatetests: add tests for 'bitbake -S printdiff'

2023-10-17 Thread Jose Quaresma
Alexander Kanavin escreveu no dia terça, 17/10/2023 à(s) 14:31: > 'bitbake -S printdiff' is a useful diagnostic facility for finding out > why sstate is not being reused, but until now it had no tests that would > ensure it works. This commit adds three basic scenarios: > > 1. make a change in a

[OE-core][dunfell 10/10] systemd: Backport systemd-resolved: use hostname for certificate validation in DoT

2023-10-17 Thread Steve Sakoman
From: Marek Vasut Widely accepted certificates for IP addresses are expensive and only affordable for larger organizations. Therefore if the user provides the hostname in the DNS= option, we should use it instead of the IP address. This fixes https://nvd.nist.gov/vuln/detail/CVE-2018-21029 per

[OE-core] [PATCH] packagegroup-core-tools-profile: Remove PROFILE_TOOLS_X

2023-10-17 Thread Fabio Estevam
Since commit d085e70eeedb ("sysprof: move recipe to meta-oe") PROFILE_TOOLS_X is always set to an empty string. Remove PROFILE_TOOLS_X as it is no longer needed. Reported-by: Robert P. J. Day Signed-off-by: Fabio Estevam --- .../packagegroups/packagegroup-core-tools-profile.bb | 4

Re: [OE-core] weston-init: how to debug with systemd

2023-10-17 Thread Khem Raj
I have systemd based system and I can see it in journal e.g. see https://snips.sh/f/jleAzcqMVd On Tue, Oct 17, 2023 at 6:05 AM Sean Nyekjaer wrote: > > Hi, > > To my understanding the weston.service doesn’t log to journal. If I'm is > running the weston binary there is fine output on stdout. >

[OE-core][dunfell 01/10] libtiff: Add fix for tiffcrop CVE-2023-1916

2023-10-17 Thread Steve Sakoman
From: Marek Vasut Add fix for tiffcrop tool CVE-2023-1916 [1]. A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service

[OE-core][dunfell 02/10] curl: Backport fix for CVE-2023-38545

2023-10-17 Thread Steve Sakoman
From: Mike Crowe Backporting this change required tweaking the error value since the two-level CURLE_PROXY error reporting was introduced after curl 7.69.1. The test required some tweaks to not rely on more-recent improvements to the test infrastructure too. Signed-off-by: Mike Crowe CVE:

[OE-core][dunfell 00/10] Patch review

2023-10-17 Thread Steve Sakoman
Please review this set of changes for dunfell and have comments back by end of day Thursday, October 19 Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6058 with the exception of a reproducibility issue for the vim-common package where we have:

[OE-core][dunfell 03/10] curl: Backport fix for CVE-2023-38546

2023-10-17 Thread Steve Sakoman
From: Mike Crowe Take patch from Debian 7.64.0-4+deb10u7. Signed-off-by: Mike Crowe CVE: CVE-2023-38546 Signed-off-by: Steve Sakoman --- .../curl/curl/CVE-2023-38546.patch| 132 ++ meta/recipes-support/curl/curl_7.69.1.bb | 1 + 2 files changed, 133

[OE-core][dunfell 05/10] libwebp: Update CVE ID CVE-2023-4863

2023-10-17 Thread Steve Sakoman
From: Pawan Notice that it references different CVE id: https://nvd.nist.gov/vuln/detail/CVE-2023-5129 which was marked as a rejected duplicate of: https://nvd.nist.gov/vuln/detail/CVE-2023-4863 but it's the same issue. Hence update CVE ID CVE-2023-4863 to CVE-2023-5129.patch. Signed-off-by:

[OE-core][dunfell 04/10] glib-2.0: Fix multiple vulnerabilities

2023-10-17 Thread Steve Sakoman
From: Siddharth Doshi CVE's Fixed: CVE-2023-29499: glib: GVariant offset table entry size is not checked in is_normal() CVE-2023-32611: glib: g_variant_byteswap() can take a long time with some non-normal inputs CVE-2023-32636: glib: Timeout in fuzz_variant_text CVE-2023-32643: glib:

[OE-core][dunfell 06/10] vim: Upgrade 9.0.1894 -> 9.0.2009

2023-10-17 Thread Steve Sakoman
From: Siddharth Doshi This includes CVE fix for CVE-2023-5441. Signed-off-by: Siddharth Doshi Signed-off-by: Steve Sakoman --- meta/recipes-support/vim/vim.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-support/vim/vim.inc

[OE-core][dunfell 07/10] xorg-lib-common: Add variable to set tarball type

2023-10-17 Thread Steve Sakoman
From: Siddharth Doshi Upstream has switched some new releases from bz2 to xz compression. Add an XORG_EXT variable so recipes can set the file name extension needed for the compression type. Following the approach in oe-core/master: 6a8068e036b4b2a40b38896275b936916b4db76e xorg-lib-common: Add

[OE-core][dunfell 08/10] libxpm: upgrade to 3.5.17

2023-10-17 Thread Steve Sakoman
From: Siddharth Doshi - This upgrade includes multiple security fixes. CVE-2022-4883 CVE-2022-44617 CVE-2022-46285 CVE-2022-44617 CVE-2023-43788 CVE-2023-43789 - Removed CVE-2022-46285 as it is already fixed by this upgrade. - License-update: additional copyright holders f0857c0 man pages:

[OE-core][dunfell 09/10] kernel.bbclass: Add force flag to rm calls

2023-10-17 Thread Steve Sakoman
From: Ryan Eatmon The latest 6.5 kernels do not appear to create the source file in ${D}${nonarch_base_libdir}/modules/${KERNEL_VERSION}/source so the recipe errors out when trying to remove it. Simple fix is to add the -f (force) flag to the call. (From OE-Core rev:

[OE-core][kirkstone][PATCH] tiff: Security fix for CVE-2023-40745

2023-10-17 Thread Siddharth via lists.openembedded.org
From: Siddharth Doshi Upstream-Status: Backport from [https://gitlab.com/libtiff/libtiff/-/commit/4fc16f649fa2875d5c388cf2edc295510a247ee5] CVE: CVE-2023-40745 Signed-off-by: Siddharth Doshi --- .../libtiff/tiff/CVE-2023-40745.patch | 34 +++

Re: [OE-core][PATCH 0/4] patchtest: add to oe-core

2023-10-17 Thread Trevor Gamblin
On 2023-10-17 11:45, Michael Opdenacker wrote: Hi Trevor On 16.10.23 at 21:44, Trevor Gamblin wrote: Add the patchtest core tools and supporting scripts to openembedded-core. This will enable users to validate their changes locally against the repository before submission to the mailing list,

Re: [OE-core] Recent failures on master depmodwrapper-cross

2023-10-17 Thread Mark Hatle
I wanted to confirm, this did fix the problem for me. Thanks! On 10/16/23 10:54 AM, Yoann Congal wrote: Le lun. 16 oct. 2023 à 17:37, Mark Hatle a écrit : On 10/16/23 7:17 AM, Yoann Congal wrote: Hi Mark, Le lun. 16 oct. 2023 à 02:40, Mark Hatle via lists.openembedded.org a écrit :

[OE-core] doesn't seem like "PROFILE_TOOLS_X" has any value

2023-10-17 Thread Robert P. J. Day
if you look here: https://git.openembedded.org/openembedded-core/tree/meta/recipes-core/packagegroups/packagegroup-core-tools-profile.bb#n12 it's not clear what PROFILE_TOOLS_X is doing, given that it's set to the empty string, then conditionally set to the same thing. i don't see it being

[OE-core] [PATCH] strace: further clean up of ptest folders

2023-10-17 Thread Alexandre Belloni via lists.openembedded.org
From: Alexandre Belloni Removing the out files removes about 350MB of data which helps staying in the currently allocated ptest image space as we are hitting disk space issues after enabling the parallelization of tests. Fixes [Yocto #15220] Signed-off-by: Alexandre Belloni ---

[OE-core] [kirkstone][PATCH] binutils: CVE-2022-48063

2023-10-17 Thread Armin Kuster
From: Armin Kuster Source: Binutils MR: 128800 Type: Security Fix Disposition: Backport from https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75393a2d54bcc40053e5262a3de9d70c5ebfbbfd ChangeID: ab04e4ec62d054c90d94f82230adb2342ce1ee1b Description: Affects binutils < 2.40

Re: [OE-core] [PATCH] Add SECURITY.md

2023-10-17 Thread Marta Rybczynska
On Tue, Oct 17, 2023 at 11:50 PM Richard Purdie wrote: > > On Tue, 2023-10-17 at 17:25 +0200, Marta Rybczynska wrote: > > Add a SECURITY.md filr with hints for security researchers and other > > parties who might report potential security vulnerabilities. > > > > Signed-off-by: Marta Rybczynska

[PATCH v2][OE-core] SECURITY.md: add file

2023-10-17 Thread Marta Rybczynska
Add a SECURITY.md file with hints for security researchers and other parties who might report potential security vulnerabilities. Signed-off-by: Marta Rybczynska --- SECURITY.md | 22 ++ 1 file changed, 22 insertions(+) create mode 100644 SECURITY.md diff --git

[OE-core][dunfell][PATCH] binutils: Backport fix CVE-2023-25588

2023-10-17 Thread Ashish Sharma via lists.openembedded.org
Upstream-Status: Backport from [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=d12f8998d2d086f0a6606589e5aedb7147e6f2f1] CVE: CVE-2023-25588 Signed-off-by: Ashish Sharma --- .../binutils/binutils-2.34.inc| 1 + .../binutils/binutils/CVE-2023-25588.patch| 146

Re: [OE-core] [PATCH] Add SECURITY.md

2023-10-17 Thread Richard Purdie
On Tue, 2023-10-17 at 17:25 +0200, Marta Rybczynska wrote: > Add a SECURITY.md filr with hints for security researchers and other > parties who might report potential security vulnerabilities. > > Signed-off-by: Marta Rybczynska > --- > SECURITY.md | 17 + > 1 file changed, 17

Re: Kernel 6.5 ttyS1 hang with qemu (was Re: [OE-core] Summary of the remaining 6.5 kernel serial issue (and 6.5 summary)

2023-10-17 Thread Richard Purdie
On Tue, 2023-10-17 at 09:56 +0300, Tony Lindgren wrote: > * Richard Purdie [231016 08:10]: > > The port sometimes doesn't come up properly at boot. > > > > To be clear, the "\n\n" from the qemu side into the port doesn't seem > > to help. The "echo helloB > /dev/ttyS1" inside the image does seem

Re: [OE-Core][PATCH v2 4/4] recipetool: Add handler to create go recipes

2023-10-17 Thread Richard Purdie
On Tue, 2023-10-17 at 16:00 +0200, Lukas Funke wrote: > Hi Richard, > > On 17.10.2023 15:53, Richard Purdie wrote: > > On Tue, 2023-10-17 at 15:26 +0200, Lukas Funke wrote: > > > From: Lukas Funke > > > > > > Signed-off-by: Lukas Funke > > > --- > > > scripts/lib/recipetool/create_go.py |