-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi Khem,
thanks for your reply. As far as I understand, the "proper" way is to
use dynamic linked libraries whenever possible? I have done some more
thinking on the matter, and at least in our case the packages in
question are empty (the base package that is, everything else is in
${PN}-src ${PN}-devstatic etc), so I believe the easiest way to include
these into the license manifest is to also add them to RDEPENDS and set
ALLOW_EMPTY_${PN} = "1". This should not change the output image, but
include the packages in the build, thus adding them to the license
manifest. What do you think?
- --
With best regards
Jasper Orschulko
DevOps Engineer
Tel. +49 30 58 58 14 265
Fax +49 30 58 58 14 999
[email protected]
• • • • • • • • • • • • • • • • • • • • • • • • • •
iris-GmbH
infrared & intelligent sensors
Ostendstraße 1-14 | 12459 Berlin
https://iris-sensing.com/
On Mon, 2021-05-17 at 15:56 -0700, Khem Raj wrote:
>
>
> On 5/17/21 10:44 AM, Jasper Orschulko wrote:
> > Hi,
> >
> > my question more or less reiterates the following:
> > https://www.yoctoproject.org/pipermail/yocto/2018-July/041854.html
> >
> > I am trying to find a way to list statically linked libraries in
> > the
> > license manifest, but so far I am at a loss. To my understanding
> > Yocto
> > does not understand packages included using DEPENDS and not
> > RDEPENDS as
> > part of the resulting image, however technically source code from
> > the
> > dependee can (and will) end up on the image as part of the
> > dependent
> > package. This is a serious issue from a legal point of view, as the
> > developer ultimately might end up with an incomplete list of
> > licenses,
> > when relying on the Yocto license manifest.
> >
> > Please, do correct me if I'm wrong :)
>
> partly yes. there is a provision to disable static linking using
> DISABLE_STATIC, so atleast some of packages can be cleared of.
> depends
> are effective during build time and its the linking which decides on
> that but you can perhaps easily write a probe and extract this
> information from linker cmdline perhaps by dumping linker map and
> post
> processing it.
>
> >
> >
> >
> >
> >
> >
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEE4WyPMIC5Ap4+Ooo1Ygqew07VMNUFAmCmh3EACgkQYgqew07V
MNWiXAf9GPbvZjlzAW+ref/+RKP/9GbtSBpajVUkn+x4DYdO0DmSq6JwOGeLblW8
qu2wjw9cLwgDAL4YRLESrgA3XAbflFgf0IZBuEMbT6WONW7fgHeQ7+jPrEQ7dkgx
POrePcququDSDi2idjjrdTuqHxLl0Il09g8vJz9oktZhIKwCesqWQE8VjSLcjBaj
u+7nHLY77fV/a1o/Ka7PkH2AjbWsmn/iHC1hLN91yNVG6EyzAneHQYKDo7Y5kRVn
YWNSgmmab7uiigrN2KqFOblazkBaA5/rIKD1PpeOjqOTtF7+UfWkL5DZZArdh/KG
+E3VauRz6agqxbb0VUWZZjE6if07Qg==
=UCmd
-----END PGP SIGNATURE-----
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#53608): https://lists.yoctoproject.org/g/yocto/message/53608
Mute This Topic: https://lists.yoctoproject.org/mt/82892834/21656
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
