[OE-core] [OE-Core][PATCH] rootfs: Make BUILDNAME a weak default in reproducible_build_simple

2020-01-17 Thread Alex Kiernan
11e45082ad00 ("rootfs-postcommands.bbclass: improve binary reproducibility") fixed binary reproducibility of /etc/version, but with the move to reproducibilty in all builds, setting /etc/version to anything other than the default fixed timestamp is tricky because rootfs_reproducible() runs very lat

Re: [OE-core] Looking for a way to build latest tagged releases in recipes

2020-01-17 Thread chris.laplante--- via Openembedded-core
> Cross the first TODO off the list: > https://gist.github.com/mostthingsweb/39e24b329de70c0212e5bf21a431e143/8d1a5f51b3c0bf260c730ed5716d9807c78335b8 > > (BTW eventually I will move this to poky-contrib; gist is just more > convenient for me for the short term. If there's a desire for it to > ha

Re: [OE-core] Building older releases on modern distros (and vice versa)

2020-01-17 Thread akuster808
I would like to thank you and Intel for taking up this task even thought the community seemed to have issues with Centos7 being dropped. Is there anything community can do at this point? - armin On 1/17/20 9:59 AM, Richard Purdie wrote: > We've been discussing how we could: > > a) build old rel

[OE-core] [PATCHv3] wic: fix images build in parallel

2020-01-17 Thread Maxim Uvarov
OE wic plugins create temporary file with the index of the line tmp file name. This causes race in case several builds run in time. If source_params['file'] is an absolute path, the cr_workdir prefix is not applied by os.path.join(). So instead it writes to a ".1" file next to the original image -

[OE-core] ✗ patchtest: failure for Make MIME work on desktops (rev2)

2020-01-17 Thread Patchwork
== Series Details == Series: Make MIME work on desktops (rev2) Revision: 2 URL : https://patchwork.openembedded.org/series/21945/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on t

[OE-core] [PATCH][v2 05/10] insane.bbclass: introduce a warning for mime missing in inherit

2020-01-17 Thread Andreas Müller
* looking through layers it looks that usage of mime.bbclass is somewhat orphaned * now that update-mime-database is called once only at image creation time, costs of mime.bbclass are limited Signed-off-by: Andreas Müller --- meta/classes/insane.bbclass | 12 1 file changed, 12

[OE-core] [PATCH][v2 07/10] gcr: add mime to inherit

2020-01-17 Thread Andreas Müller
gcr installs mime types we want in our mime-database Signed-off-by: Andreas Müller --- meta/recipes-gnome/gcr/gcr_3.34.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-gnome/gcr/gcr_3.34.0.bb b/meta/recipes-gnome/gcr/gcr_3.34.0.bb index e3e8999635..272112dd1

[OE-core] [PATCH][v2 10/10] gcr: add mime-xdg to inherit

2020-01-17 Thread Andreas Müller
Signed-off-by: Andreas Müller --- meta/recipes-gnome/gcr/gcr_3.34.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-gnome/gcr/gcr_3.34.0.bb b/meta/recipes-gnome/gcr/gcr_3.34.0.bb index 272112dd12..9853b3f416 100644 --- a/meta/recipes-gnome/gcr/gcr_3.34.0.bb ++

[OE-core] [PATCH][v2 09/10] insane.bbclass: Spawn warning for missing mime-xdg in inherit

2020-01-17 Thread Andreas Müller
If a package signals that it can open mime-types but does not inharit mime-xdg, a warning is created. Signed-off-by: Andreas Müller --- meta/classes/insane.bbclass | 31 ++- 1 file changed, 30 insertions(+), 1 deletion(-) diff --git a/meta/classes/insane.bbclass b/me

[OE-core] [PATCH][v2 08/10] mime-xdg.bbclass: initial add

2020-01-17 Thread Andreas Müller
When opening files by file-browsers on fresh images, user has to choose the application to open from the pool af ALL known applications even those not designed to open the file selected. By inheriting this classs in recipes the assosiations in /usr/share/applications/mimeinfo.cache are build by cal

[OE-core] [PATCH][v2 06/10] shared-mime-info: add mime to inherit

2020-01-17 Thread Andreas Müller
shared-mime-info-data: is the base for mime database Signed-off-by: Andreas Müller --- meta/recipes-support/shared-mime-info/shared-mime-info_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/shared-mime-info/shared-mime-info_git.bb b/meta/recipes-s

[OE-core] [PATCH][v2 03/10] shared-mime-info: upgrade 1.10 -> 1.15

2020-01-17 Thread Andreas Müller
* sources/development moved to freedesktop's gitlab * patches do not apply any more due to major changes in Makefile.am * give up bb/inc separation Signed-off-by: Andreas Müller --- .../shared-mime-info/install-data-hook.patch | 25 -- .../shared-mime-info/parallelmake.patch |

[OE-core] [PATCH][v2 02/10] itstool: extend to nativesdk

2020-01-17 Thread Andreas Müller
This was not done in meta-oe but shared-mime-info extends to nativesdk either. Signed-off-by: Andreas Müller --- meta/recipes-support/itstool/itstool_2.0.6.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-support/itstool/itstool_2.0.6.bb b/meta/recipes-suppo

[OE-core] [PATCH][v2 04/10] mime.bbclass: rework

2020-01-17 Thread Andreas Müller
* add a short descriptions of class' use case * remove checks for update-mime-database - it can be considered available: * at build time by PACKAGE_WRITE_DEPS * at package upgrade by RDEPENDS chain pkg -> shared-mime-info-data -> shared-mime-info * simplify (accelerate?) xml file extension

[OE-core] [PATCH][v2 00/10] Make MIME work on desktops

2020-01-17 Thread Andreas Müller
On fresh images file-browsers do not know how to open files and usually open a dialog with ALL applications available on the machine. This is not what users are used to when working with linux: For just one application installed per Mime-Type, the application is opened automatically. To get a work

[OE-core] [PATCH][v2 01/10] itstool: add from meta-oe

2020-01-17 Thread Andreas Müller
Recent versions of shared-mime-info depend on itstool Signed-off-by: Andreas Müller --- meta/conf/distro/include/maintainers.inc | 1 + ...-build-time-hardcoded-python-binary-.patch | 35 +++ ...ld-time-hardcoded-python-binary-path.patch | 29 +++ meta/recipes-s

Re: [OE-core] [PATCHv2] wic: fix images build in parallel

2020-01-17 Thread Maxim Uvarov
works. v3 is on the way.. On Fri, 17 Jan 2020 at 15:39, Maxim Uvarov wrote: > > On Fri, 17 Jan 2020 at 15:27, Paul Barker wrote: > > > > On Fri, 17 Jan 2020 at 12:17, Paul Barker wrote: > > > > > > On Fri, 17 Jan 2020 at 11:59, Maxim Uvarov > > > wrote: > > > > > > > > On Fri, 17 Jan 2020 at

Re: [OE-core] Building older releases on modern distros (and vice versa)

2020-01-17 Thread Khem Raj
On 1/17/20 10:57 AM, Richard Purdie wrote: On Fri, 2020-01-17 at 10:39 -0800, Khem Raj wrote: On 1/17/20 9:59 AM, Richard Purdie wrote: We've been discussing how we could: a) build old releases on newer distros as well as b) how we could build new releases on old distros. Our proposed answe

Re: [OE-core] Building older releases on modern distros (and vice versa)

2020-01-17 Thread Richard Purdie
On Fri, 2020-01-17 at 10:39 -0800, Khem Raj wrote: > On 1/17/20 9:59 AM, Richard Purdie wrote: > > We've been discussing how we could: > > > > a) build old releases on newer distros > > > > as well as > > > > b) how we could build new releases on old distros. > > > > Our proposed answer has bee

Re: [OE-core] Building older releases on modern distros (and vice versa)

2020-01-17 Thread Khem Raj
On 1/17/20 9:59 AM, Richard Purdie wrote: We've been discussing how we could: a) build old releases on newer distros as well as b) how we could build new releases on old distros. Our proposed answer has been "buildtools-extended-tarball" which includes nativesdk-gcc. We need b) so we can ins

[OE-core] Building older releases on modern distros (and vice versa)

2020-01-17 Thread Richard Purdie
We've been discussing how we could: a) build old releases on newer distros as well as b) how we could build new releases on old distros. Our proposed answer has been "buildtools-extended-tarball" which includes nativesdk-gcc. We need b) so we can install this on Centos7 and stop having to wo

[OE-core] ✗ patchtest: failure for binutils: fix CVE-2019-17451

2020-01-17 Thread Patchwork
== Series Details == Series: binutils: fix CVE-2019-17451 Revision: 1 URL : https://patchwork.openembedded.org/series/22087/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the pr

[OE-core] ✗ patchtest: failure for python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652 (rev6)

2020-01-17 Thread Patchwork
== Series Details == Series: python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652 (rev6) Revision: 6 URL : https://patchwork.openembedded.org/series/21468/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Se

[OE-core] ✗ patchtest: failure for python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652 (rev4)

2020-01-17 Thread Patchwork
== Series Details == Series: python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652 (rev4) Revision: 4 URL : https://patchwork.openembedded.org/series/21468/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Se

[OE-core] ✗ patchtest: failure for nasm: fix CVE-2019-14248

2020-01-17 Thread Patchwork
== Series Details == Series: nasm: fix CVE-2019-14248 Revision: 1 URL : https://patchwork.openembedded.org/series/22094/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on the propos

[OE-core] [warrior][PATCH] iputils: Whitelist CVE-2000-1213 CVE-2000-1214

2020-01-17 Thread Adrian Bunk
Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal --- meta/recipes-extended/iputils/iputils_s20180629.bb | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-extended/iputils/iputils_s20180629.bb b/meta/recipes-extended/iputils/iputils_s2018062

[OE-core] [warrior][PATCH] lz4: Whitelist CVE-2014-4715

2020-01-17 Thread Adrian Bunk
Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal --- meta/recipes-support/lz4/lz4_1.8.3.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/recipes-support/lz4/lz4_1.8.3.bb b/meta/recipes-support/lz4/lz4_1.8.3.bb index 125836f7bf..605e148d81 100644

[OE-core] [warrior][PATCH] sysstat: fix CVE-2019-19725

2020-01-17 Thread Adrian Bunk
From: Anuj Mittal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- .../sysstat/sysstat/CVE-2019-19725.patch | 28 +++ .../sysstat/sysstat_12.1.3.bb | 4 ++- 2 files changed, 31 insertions(+), 1 deletion(-) create mo

[OE-core] [warrior][PATCH] nasm: fix CVE-2019-14248

2020-01-17 Thread Adrian Bunk
From: Anuj Mittal See: https://bugzilla.nasm.us/show_bug.cgi?id=3392576 Signed-off-by: Anuj Mittal Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- .../nasm/nasm/CVE-2019-14248.patch| 43 +++ meta/recipes-devtools/nasm/nasm_

[OE-core] [warrior][PATCH] go: fix CVE-2019-17596

2020-01-17 Thread Adrian Bunk
From: Hongxu Jia https://github.com/golang/go/commit/2017d88dbc096381d4f348d2fb08bfb3c2b7ed73 Signed-off-by: Hongxu Jia Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- meta/recipes-devtools/go/go-1.12.inc | 1 + .../go/go-1.12/0010-fix-CVE-2

[OE-core] [warrior][PATCH] base.bbclass: add dependency on pseudo from do_prepare_recipe_sysroot

2020-01-17 Thread Adrian Bunk
From: Mattias Hansson do_prepare_recipe_sysroot may perform groupadd, which requires pseudo. However, do_prepare_recipe_sysroot does not depend on pseudo explicitly, which sometimes causes a build error when building a recipe that adds groups. This issue only occurs when executing do_prepare_rec

[OE-core] [warrior][PATCH] nasm: fix CVE-2018-19755

2020-01-17 Thread Adrian Bunk
From: Anuj Mittal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- .../nasm/nasm/CVE-2018-19755.patch| 116 ++ meta/recipes-devtools/nasm/nasm_2.14.02.bb| 4 +- 2 files changed, 119 insertions(+), 1 deletion(-) create m

[OE-core] [warrior][PATCH] libarchive: fix CVE-2019-19221

2020-01-17 Thread Adrian Bunk
From: Anuj Mittal Also see: https://github.com/libarchive/libarchive/issues/1276 Signed-off-by: Anuj Mittal Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- .../libarchive/CVE-2019-19221.patch | 101 ++ .../libarchive/libarchi

[OE-core] [warrior][PATCH] binutils: fix CVE-2019-17451

2020-01-17 Thread Adrian Bunk
From: Trevor Gamblin Backport upstream fix. Signed-off-by: Trevor Gamblin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Adrian Bunk --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17451.patch|

[OE-core] [warrior][PATCH] glibc: fix CVE-2019-19126

2020-01-17 Thread Adrian Bunk
From: Anuj Mittal Backport from 2.30 stable branch and drop NEWS section. Signed-off-by: Anuj Mittal Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- .../glibc/glibc/CVE-2019-19126.patch | 32 +++ meta/recipes-core/glibc/glibc_

[OE-core] [warrior][PATCH] glib-2.0: Backport the CVE-2019-12450 fix

2020-01-17 Thread Adrian Bunk
Signed-off-by: Adrian Bunk --- ...e-Limit-access-to-files-when-copying.patch | 57 +++ meta/recipes-core/glib-2.0/glib-2.0_2.58.3.bb | 1 + 2 files changed, 58 insertions(+) create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/0001-gfile-Limit-access-to-files-when-copying.pat

[OE-core] [warrior][PATCH] lighttpd: Backport the CVE-2019-11072 fix

2020-01-17 Thread Adrian Bunk
Signed-off-by: Adrian Bunk --- Already fixed in the upstream version in zeus. --- ...x-abort-in-http-parseopts-fixes-2945.patch | 54 +++ .../lighttpd/lighttpd_1.4.53.bb | 1 + 2 files changed, 55 insertions(+) create mode 100644 meta/recipes-extended/lighttpd/lig

[OE-core] [warrior][PATCH] gdb: Fix CVE-2019-1010180

2020-01-17 Thread Adrian Bunk
From: Vinay Kumar Source: git://sourceware.org/git/binutils-gdb.git Tracking -- https://sourceware.org/bugzilla/show_bug.cgi?id=23657 Backported upstream commit 950b74950f6020eda38647f22e9077ac7f68ca49 to gdb-8.3.1 sources. Upstream-Status: Backport [https://sourceware.org/git/gitweb.cgi?p=bi

[OE-core] [warrior][PATCH] bind: Whitelist CVE-2019-6470

2020-01-17 Thread Adrian Bunk
Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie --- meta/recipes-connectivity/bind/bind_9.11.5-P4.bb | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-connectivity/bind/bind_9.11.5-P4.bb b/meta/recipes-connectivity/bind/bind_9.11.5-P4.bb index 4fc0f19875..5d52b696c8

[OE-core] [warrior][PATCH] wpa-supplicant: fix CVE-2019-16275

2020-01-17 Thread Adrian Bunk
From: Ross Burton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- ...re-management-frame-from-unexpected-.patch | 82 +++ .../wpa-supplicant/wpa-supplicant_2.7.bb | 1 + 2 files changed, 83 insertions(+) create mode 100644 meta/r

[OE-core] [warrior][PATCH] binutils: fix CVE-2019-17450

2020-01-17 Thread Adrian Bunk
From: Trevor Gamblin Backport upstream fix. Signed-off-by: Trevor Gamblin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Adrian Bunk --- .../binutils/binutils-2.32.inc| 1 + .../binutils/binutils/CVE-2019-17450.patch|

[OE-core] [warrior][PATCH] python3: RDEPEND on libgcc

2020-01-17 Thread Adrian Bunk
From: Joshua Watt Python uses features of glibc that require it to dynamically load (i.e. dlopen()) libgcc_s at runtime. However, since this isn't a link time dependency, it doesn't get picked up automatically by bitbake so manually add it to RDEPENDS. There is an outstanding bug in Python to ma

[OE-core] [warrior][PATCH] python3: Upgrade 3.7.5 -> 3.7.6

2020-01-17 Thread Adrian Bunk
Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie --- .../python/{python3_3.7.5.bb => python3_3.7.6.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/python/{python3_3.7.5.bb => python3_3.7.6.bb} (98%) diff --git a/meta/recipes-devto

[OE-core] [warrior][PATCH] python/python3: Whitelist CVE-2019-18348

2020-01-17 Thread Adrian Bunk
This is not exploitable when glibc has CVE-2016-10739 fixed, which is fixed in the upstream version since warrior. Signed-off-by: Adrian Bunk Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie --- meta/recipes-devtools/python/python.inc | 3 +++ meta/recipes-devtools/python/python3

[OE-core] [warrior][PATCH] python: Whitelist CVE-2017-17522 CVE-2017-18207 CVE-2015-5652

2020-01-17 Thread Adrian Bunk
One Windows-only CVE that cannot be fixed, and two CVEs where upstream agreement is that they are not vulnerabilities. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie --- meta/recipes-devtools/python/python.inc | 10 ++ 1 file changed, 10 insertions(+) diff --git a/meta/recipe

[OE-core] ✗ patchtest: failure for systemd: Upgrade to a more recent snapshot from the 241 branch (rev3)

2020-01-17 Thread Patchwork
== Series Details == Series: systemd: Upgrade to a more recent snapshot from the 241 branch (rev3) Revision: 3 URL : https://patchwork.openembedded.org/series/22082/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. S

[OE-core] ✗ patchtest: failure for systemd: Upgrade to a more recent snapshot from the 241 branch (rev6)

2020-01-17 Thread Patchwork
== Series Details == Series: systemd: Upgrade to a more recent snapshot from the 241 branch (rev6) Revision: 6 URL : https://patchwork.openembedded.org/series/22082/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. S

[OE-core] ✗ patchtest: failure for systemd: Upgrade to a more recent snapshot from the 241 branch (rev7)

2020-01-17 Thread Patchwork
== Series Details == Series: systemd: Upgrade to a more recent snapshot from the 241 branch (rev7) Revision: 7 URL : https://patchwork.openembedded.org/series/22082/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. S

[OE-core] ✗ patchtest: failure for systemd: Upgrade to a more recent snapshot from the 241 branch

2020-01-17 Thread Patchwork
== Series Details == Series: systemd: Upgrade to a more recent snapshot from the 241 branch Revision: 1 URL : https://patchwork.openembedded.org/series/22082/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several

[OE-core] ✗ patchtest: failure for systemd: Upgrade to a more recent snapshot from the 241 branch (rev4)

2020-01-17 Thread Patchwork
== Series Details == Series: systemd: Upgrade to a more recent snapshot from the 241 branch (rev4) Revision: 4 URL : https://patchwork.openembedded.org/series/22082/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. S

[OE-core] [warrior][PATCH] openssl: fix CVE-2019-1551

2020-01-17 Thread Adrian Bunk
From: Anuj Mittal Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk --- .../openssl/openssl/CVE-2019-1551.patch | 758 ++ .../openssl/openssl_1.1.1d.bb | 1 + 2 files changed, 759 insertions(+) create mode 100644 meta

[OE-core] [warrior][PATCH] openssl: Whitelist CVE-2019-0190

2020-01-17 Thread Adrian Bunk
This is only a problem with older Apache versions. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie --- meta/recipes-connectivity/openssl/openssl_1.1.1d.bb | 4 1 file changed, 4 insertions(+) diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1d.bb b/meta/recipes-connect

[OE-core] [warrior][PATCH] systemd: Whitelist CVE-2018-21029 CVE-2019-3843 CVE-2019-3844

2020-01-17 Thread Adrian Bunk
One does not strictly apply to 241, for the other two a fix was already backported to the 241 branch. Signed-off-by: Adrian Bunk --- meta/recipes-core/systemd/systemd.inc | 7 +++ 1 file changed, 7 insertions(+) diff --git a/meta/recipes-core/systemd/systemd.inc b/meta/recipes-core/systemd

[OE-core] [warrior][PATCH] openssl: Upgrade 1.1.1b -> 1.1.1c

2020-01-17 Thread Adrian Bunk
Backported patch removed. Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie --- .../openssl/openssl/CVE-2019-1543.patch | 69 --- .../openssl/openssl/afalg.patch | 6 +- .../{openssl_1.1.1b.bb => openssl_1.1.1c.bb} | 5 +- 3 files changed, 5 inserti

[OE-core] [warrior][PATCH] openssl: Upgrade 1.1.1c -> 1.1.1d

2020-01-17 Thread Adrian Bunk
Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie --- .../openssl/{openssl_1.1.1c.bb => openssl_1.1.1d.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-connectivity/openssl/{openssl_1.1.1c.bb => openssl_1.1.1d.bb} (98%) diff --git a/meta/recipe

[OE-core] [warrior][PATCH] openssl: Enable os option for with-rand-seed as well

2020-01-17 Thread Adrian Bunk
From: Khem Raj with openSSL 1.1.1d we start seeing errors like Error Generating Key 139979727451584:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342: when using openssl from openssl-native on build hosts, this i

[OE-core] [warrior][PATCH] systemd: Upgrade to a more recent snapshot from the 241 branch

2020-01-17 Thread Adrian Bunk
Bugfix-only changes on the 241 stable branch, including a fix for a breakage with OpenSSL >= 1.1.1c. Signed-off-by: Adrian Bunk --- meta/recipes-core/systemd/systemd.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/systemd/systemd.inc b/meta/recipes-core

[OE-core] [PATCH v4 11/13] recipetool/create: npm: remove the 'noverify' url parameter

2020-01-17 Thread Jean-Marie LEMETAYER
This commit removes the 'noverify' parameter which was added to the url to fix warnings with the shrinkwrap / lockdown file generation. This is not needed anymore with the new npm fetcher. Signed-off-by: Jean-Marie LEMETAYER --- scripts/lib/recipetool/create.py | 2 -- 1 file changed, 2 deletion

[OE-core] [PATCH v4 12/13] oeqa/selftest/recipetool: add npm recipe creation test

2020-01-17 Thread Jean-Marie LEMETAYER
This commit adds a recipetool creation test for npm recipe: - recipetool.RecipetoolTests.test_recipetool_create_npm Signed-off-by: Jean-Marie LEMETAYER --- meta/lib/oeqa/selftest/cases/recipetool.py | 25 ++ 1 file changed, 25 insertions(+) diff --git a/meta/lib/oeqa/selft

[OE-core] [PATCH v4 08/13] recipetool/create_npm: handle the licenses of the dependencies

2020-01-17 Thread Jean-Marie LEMETAYER
As usual the 'LICENSE' and the 'LIC_FILES_CHKSUM' values reflects all the license files discovered in the source tree (including the dependencies). For npm recipes the 'LIC_FILES_CHKSUM' value contains also the status of the 'package.json' file of every packages as it contains license informations

[OE-core] [PATCH v4 10/13] devtool/standard: npm: update the append file

2020-01-17 Thread Jean-Marie LEMETAYER
When creating a recipe using devtool, a workspace is created to store the new recipe, the recipe source and some append files. These append files are used by devtool to build the recipe using externalsrc (to use the source which are in the workspace). They can also have some additional actions acco

[OE-core] [PATCH v4 13/13] oeqa/selftest/devtool: add npm recipe build test

2020-01-17 Thread Jean-Marie LEMETAYER
This commit adds a devtool build test for npm recipe: - devtool.DevtoolAddTests.test_devtool_add_npm Signed-off-by: Jean-Marie LEMETAYER --- meta/lib/oeqa/selftest/cases/devtool.py | 20 1 file changed, 20 insertions(+) diff --git a/meta/lib/oeqa/selftest/cases/devtool.py

[OE-core] [PATCH v4 06/13] devtool: npm: rename npm command line options

2020-01-17 Thread Jean-Marie LEMETAYER
This commit renames the '--fetch-dev' option into '--npm-dev' as it is a npm only option. Signed-off-by: Jean-Marie LEMETAYER --- scripts/lib/devtool/standard.py | 6 +++--- scripts/lib/recipetool/create.py | 8 +++- 2 files changed, 6 insertions(+), 8 deletions(-) diff --git a/scripts/lib

[OE-core] [PATCH v4 03/13] classes/npm: use the local node headers

2020-01-17 Thread Jean-Marie LEMETAYER
When building addons, the node headers are needed to be able to compile properly. Usually they are downloaded by npm but network access in the do_compile task are unauthorized. Hopefully the local node headers are available in the native sysroot so lets use them. Signed-off-by: Jean-Marie LEMETAYE

[OE-core] [PATCH v4 09/13] lib/oe/package: remove unneeded npm_split_package_dirs function

2020-01-17 Thread Jean-Marie LEMETAYER
The npm_split_package_dirs function was used by the recipetool when creating npm recipes. This is not the case anymore. Signed-off-by: Jean-Marie LEMETAYER --- meta/lib/oe/package.py | 33 - 1 file changed, 33 deletions(-) diff --git a/meta/lib/oe/package.py b/me

[OE-core] [PATCH v4 04/13] classes/npm: use the native python

2020-01-17 Thread Jean-Marie LEMETAYER
When building addons, the node-gyp build tool is looking for python. It is available in the native directory but not directly in the PATH. This commit configures npm to use the native python executable. Signed-off-by: Jean-Marie LEMETAYER --- meta/classes/npm.bbclass | 3 +++ 1 file changed, 3

[OE-core] [PATCH v4 05/13] classes/npm: force to rebuild the prebuild addons

2020-01-17 Thread Jean-Marie LEMETAYER
This commit forces to rebuild the prebuild addons which are using node-gyp-build. https://www.npmjs.com/package/node-gyp-build Signed-off-by: Jean-Marie LEMETAYER --- meta/classes/npm.bbclass | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/meta/classes/npm.bbclass b/

[OE-core] [PATCH v4 02/13] classes/npm: restrict the build to be offline

2020-01-17 Thread Jean-Marie LEMETAYER
After the do_fetch task, every other tasks must not access the network. In order to ensure this point every npm command must use the offline configuration. In addition setting an invalid proxy is used as a safety. Signed-off-by: Jean-Marie LEMETAYER --- meta/classes/npm.bbclass | 3 +++ 1 file c

[OE-core] [PATCH v4 00/13] NPM refactoring

2020-01-17 Thread Jean-Marie LEMETAYER
Hi folks and happy new year, For readability here is a link if you want the history of this patchset: http://lists.openembedded.org/pipermail/openembedded-core/2019-December/290298.html --- V4 The patches can be found here: https://github.com/savoirfairelinux/openembedded-core/tree/npm-refactori

[OE-core] [PATCH v4 07/13] recipetool/create_npm: refactor the npm recipe creation handler

2020-01-17 Thread Jean-Marie LEMETAYER
This commit refactors the npm recipe creation handler to use the new npm behavior. The process is kept as simple as possible and only generates the shrinkwrap file. To avoid naming issues the recipe name is now extracted from the npm package name and not directly mapped. Signed-off-by: Jean-Marie

[OE-core] [PATCH v4 01/13] classes/npm: refactor the npm class

2020-01-17 Thread Jean-Marie LEMETAYER
This commit splits the npm build in three steps: 1. With the new npmsw fetcher, the sources and dependencies of the package have been fetched and unpacked. As sources can also be patched, a local cache must be configured to use these modified sources. 2. Next, the installation process is

Re: [OE-core] [PATCH] kernel-devsrc: copy mmiowb.h and modpost from ${B} of kernel

2020-01-17 Thread Bruce Ashfield
On Fri, Jan 17, 2020 at 10:49 AM Ruslan Bilovol wrote: > > On 9/11/19 2:36 PM, Bruce Ashfield wrote: > > On Wed, Sep 11, 2019 at 5:10 AM Hongzhi, Song > > wrote: > >> > >> > >> On 9/6/19 11:10 AM, Hongzhi, Song wrote: > >>> > >>> On 9/4/19 8:34 PM, Bruce Ashfield wrote: > On Wed, Sep 4, 2019

Re: [OE-core] [oe-core] attr dependency on linux-yocto

2020-01-17 Thread Vladimir Molokov
whoa, thanks for the information though I think it is not great, when applications, like vim, get linux dependecies. did anyone try to fix this? could it be considered as a bug? i can try to file the bug and fix it On Fri, 17 Jan 2020, 15:23 Ross Burton, wrote: > On 16/01/2020 23:22, Vladimir

Re: [OE-core] [PATCH] kernel-devsrc: copy mmiowb.h and modpost from ${B} of kernel

2020-01-17 Thread Ruslan Bilovol via Openembedded-core
On 9/11/19 2:36 PM, Bruce Ashfield wrote: On Wed, Sep 11, 2019 at 5:10 AM Hongzhi, Song wrote: On 9/6/19 11:10 AM, Hongzhi, Song wrote: On 9/4/19 8:34 PM, Bruce Ashfield wrote: On Wed, Sep 4, 2019 at 6:07 AM Hongzhi, Song wrote: On 9/4/19 11:55 AM, Bruce Ashfield wrote: On Tue, Sep 3,

Re: [OE-core] [oe-core] attr dependency on linux-yocto

2020-01-17 Thread Ross Burton
On 16/01/2020 23:22, Vladimir Molokov wrote: Hi, Question about attr. I'm not familiar with it. On a clean poky is it normal(not a bug?) to have deps such as "attr.do_build" -> "linux-libc-headers.do_package_write_rpm" "attr.do_build" -> "linux-yocto.do_deploy" "attr.do_build" -> "linux-yocto.

[OE-core] [PATCH] foomatic-filters: remove recipe

2020-01-17 Thread Diego Rondini
Remove foomatic-filters recipe, as the project hasn't seen a release since 2012 and is unmaintained. Most of foomatic-filters code is part of cups-filters as foomatic-rip (see [1] and [2]), which is in meta-oe since commit a67aaaf00f4c818847f95c02340872a1a49a0f34. [1] https://github.com/OpenPrinti

Re: [OE-core] [poky][master][PATCH] bzip2: Fix CVE-2019-12900

2020-01-17 Thread Saloni Jain
Hi Ross, I have added SOB details and sent another upstreaming request. For warrier and thud we can simply backport from the master release or we can additionally add the fix for both as well. Please suggest. Thanks & Regards, Saloni From: Ross Burton Sent: Wed

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Sumit Garg
On Fri, 17 Jan 2020 at 18:34, Alexander Kanavin wrote: > > You can send a patch for psmisc specifically for those stable branches, using > [branch name] in the subject. Ok will add "xz-native" dependency for psmisc recipe specifically for stable branches. -Sumit > > Alex > > On Fri, 17 Jan 202

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Alexander Kanavin
You can send a patch for psmisc specifically for those stable branches, using [branch name] in the subject. Alex On Fri, 17 Jan 2020 at 13:49, Sumit Garg wrote: > On Fri, 17 Jan 2020 at 17:35, Alexander Kanavin > wrote: > > > > On Fri, 17 Jan 2020 at 12:55, Sumit Garg wrote: > >> > >> But loo

[OE-core] ✗ patchtest: failure for bzip2: Fix CVE-2019-12900 (rev9)

2020-01-17 Thread Patchwork
== Series Details == Series: bzip2: Fix CVE-2019-12900 (rev9) Revision: 9 URL : https://patchwork.openembedded.org/series/18434/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on th

[OE-core] ✗ patchtest: failure for bzip2: Fix CVE-2019-12900 (rev8)

2020-01-17 Thread Patchwork
== Series Details == Series: bzip2: Fix CVE-2019-12900 (rev8) Revision: 8 URL : https://patchwork.openembedded.org/series/18434/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on th

[OE-core] ✗ patchtest: failure for bzip2: Fix CVE-2019-12900 (rev7)

2020-01-17 Thread Patchwork
== Series Details == Series: bzip2: Fix CVE-2019-12900 (rev7) Revision: 7 URL : https://patchwork.openembedded.org/series/18434/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have been executed on th

[OE-core] [poky][zeus][PATCH] bzip2: Fix CVE-2019-12900

2020-01-17 Thread Saloni Jain
From: Sana Kazi Added patch for CVE-2019-12900 as backport from upstream. Fixes out of bound access discovered while fuzzying karchive. Tested by: sana.k...@kpit.com Signed-off-by: Saloni Jain --- .../bzip2/bzip2-1.0.6/CVE-2019-12900.patch | 35 ++ 1 file changed,

[OE-core] [poky][sumo][PATCH] bzip2: Fix CVE-2019-12900

2020-01-17 Thread Saloni Jain
From: Sana Kazi Added patch for CVE-2019-12900 as backport from upstream. Fixes out of bound access discovered while fuzzying karchive. Tested by: sana.k...@kpit.com Signed-off-by: Saloni Jain --- .../bzip2/bzip2-1.0.6/CVE-2019-12900.patch | 35 ++ meta/recipes-ext

[OE-core] [poky][master][PATCH] bzip2: Fix CVE-2019-12900

2020-01-17 Thread Saloni Jain
From: Sana Kazi Added patch for CVE-2019-12900 as backport from upstream. Fixes out of bound access discovered while fuzzying karchive. Tested by: sana.k...@kpit.com Signed-off-by: Saloni Jain --- .../bzip2/bzip2-1.0.6/CVE-2019-12900.patch | 35 ++ 1 file changed,

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Sumit Garg
On Fri, 17 Jan 2020 at 17:35, Alexander Kanavin wrote: > > On Fri, 17 Jan 2020 at 12:55, Sumit Garg wrote: >> >> But looking at this failure again it seems like "autopoint" is >> provided by gettext rather than autotools. So yes, I think you are >> right and "xz-native" dependency should go in >>

Re: [OE-core] [PATCHv2] wic: fix images build in parallel

2020-01-17 Thread Maxim Uvarov
On Fri, 17 Jan 2020 at 15:27, Paul Barker wrote: > > On Fri, 17 Jan 2020 at 12:17, Paul Barker wrote: > > > > On Fri, 17 Jan 2020 at 11:59, Maxim Uvarov wrote: > > > > > > On Fri, 17 Jan 2020 at 13:18, Paul Barker wrote: > > > > > > > > On Mon, 13 Jan 2020 at 14:12, Maxim Uvarov > > > > wrote

Re: [OE-core] [PATCHv2] wic: fix images build in parallel

2020-01-17 Thread Paul Barker
On Fri, 17 Jan 2020 at 12:17, Paul Barker wrote: > > On Fri, 17 Jan 2020 at 11:59, Maxim Uvarov wrote: > > > > On Fri, 17 Jan 2020 at 13:18, Paul Barker wrote: > > > > > > On Mon, 13 Jan 2020 at 14:12, Maxim Uvarov > > > wrote: > > > > > > > > On Mon, 13 Jan 2020 at 17:00, Paul Barker wrote:

Re: [OE-core] [PATCHv2] wic: fix images build in parallel

2020-01-17 Thread Paul Barker
On Fri, 17 Jan 2020 at 11:59, Maxim Uvarov wrote: > > On Fri, 17 Jan 2020 at 13:18, Paul Barker wrote: > > > > On Mon, 13 Jan 2020 at 14:12, Maxim Uvarov wrote: > > > > > > On Mon, 13 Jan 2020 at 17:00, Paul Barker wrote: > > > > > > > > On Mon, 13 Jan 2020 at 13:57, Maxim Uvarov > > > > wrot

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Alexander Kanavin
On Fri, 17 Jan 2020 at 12:55, Sumit Garg wrote: > But looking at this failure again it seems like "autopoint" is > provided by gettext rather than autotools. So yes, I think you are > right and "xz-native" dependency should go in > meta/classes/gettext.bbclass instead as follows: > > diff --git a

Re: [OE-core] [PATCHv2] wic: fix images build in parallel

2020-01-17 Thread Maxim Uvarov
On Fri, 17 Jan 2020 at 13:18, Paul Barker wrote: > > On Mon, 13 Jan 2020 at 14:12, Maxim Uvarov wrote: > > > > On Mon, 13 Jan 2020 at 17:00, Paul Barker wrote: > > > > > > On Mon, 13 Jan 2020 at 13:57, Maxim Uvarov > > > wrote: > > > > > > > > On Mon, 13 Jan 2020 at 16:31, Paul Barker wrote:

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Sumit Garg
On Fri, 17 Jan 2020 at 16:21, Richard Purdie wrote: > > On Fri, 2020-01-17 at 12:29 +0530, Sumit Garg wrote: > > Some native tools dependency issues were seen while building with > > external GCC tool-set rather than source GCC tool-set. While building > > with source tool-set these dependencies w

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Sumit Garg
On Fri, 17 Jan 2020 at 16:07, Alexander Kanavin wrote: > > On Fri, 17 Jan 2020 at 07:59, Sumit Garg wrote: >> >> >> --- a/meta/recipes-graphics/xorg-app/xorg-app-common.inc >> +++ b/meta/recipes-graphics/xorg-app/xorg-app-common.inc >> @@ -3,7 +3,7 @@ HOMEPAGE = "http://www.x.org/"; >> BUGTRACKE

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Richard Purdie
On Fri, 2020-01-17 at 12:29 +0530, Sumit Garg wrote: > Some native tools dependency issues were seen while building with > external GCC tool-set rather than source GCC tool-set. While building > with source tool-set these dependencies were implicitly met which is not > the case with external tool-s

Re: [OE-core] [PATCH] core: recipes: fix some native tools dependencies

2020-01-17 Thread Alexander Kanavin
On Fri, 17 Jan 2020 at 07:59, Sumit Garg wrote: > > --- a/meta/recipes-graphics/xorg-app/xorg-app-common.inc > +++ b/meta/recipes-graphics/xorg-app/xorg-app-common.inc > @@ -3,7 +3,7 @@ HOMEPAGE = "http://www.x.org/"; > BUGTRACKER = "https://bugs.freedesktop.org"; > SECTION = "x11/apps" > LICE

Re: [OE-core] [oe-core] attr dependency on linux-yocto

2020-01-17 Thread Alexander Kanavin
Those are indirect dependencies; this means you can't install all of the packages coming from the attr recipes without also installing packages from linux-libc-headers and linux-yocto. Alex On Fri, 17 Jan 2020 at 00:22, Vladimir Molokov wrote: > Hi, > > Question about attr. I'm not familiar wit

Re: [OE-core] [PATCHv2] wic: fix images build in parallel

2020-01-17 Thread Paul Barker
On Mon, 13 Jan 2020 at 14:12, Maxim Uvarov wrote: > > On Mon, 13 Jan 2020 at 17:00, Paul Barker wrote: > > > > On Mon, 13 Jan 2020 at 13:57, Maxim Uvarov wrote: > > > > > > On Mon, 13 Jan 2020 at 16:31, Paul Barker wrote: > > > > > > > > On Mon, 13 Jan 2020 at 13:08, Maxim Uvarov > > > > wrot

Re: [OE-core] [PATCHv2] wic: add UEFI kernel as UEFI stub

2020-01-17 Thread Maxim Uvarov
ping. On Mon, 13 Jan 2020 at 23:14, Maxim Uvarov wrote: > > Linux kernel can be compiled as UEFI stub and loaded directly > with UEFI firmware without grub or other UEFI shell. > > Tested with wic file: > bootloader --ptable gpt --timeout=0 --append="rootwait" > part /boot --source bootimg-efi

[OE-core] [PATCH] findutils: Upgrade to 4.7.0

2020-01-17 Thread mingli.yu
From: Mingli Yu * Upgrade to 4.7.0 since there are so many fixes in the new release such as below commit which used to fix Yocto Bug 13311 5699fb7 xargs: use GNU_FINDUTILS_FD_LEAK_CHECK as for find * Drop all patches as it is backported or useless in new release * Licence-Update: - th