[OE-core] [PATCH] musl: add typedefs for Elf64_Relr and Elf32_Relr

2023-12-07 Thread Zang Ruochen
From: Zang Ruochen The absence of this typedef causes elfutils to report the following error: /usr/include/gelf.h:86:9: error: unknown type name 'Elf64_Relr' https://git.musl-libc.org/cgit/musl/commit/?id=6be76895f6863100a311d474a42abdbb6466189d Signed-off-by: Zang Ruochen --- ...pedefs-for-E

Re: [PATCH] [OE-core] [PATCHv2] elfutils: upgrade 0.189 -> 0.190

2023-12-07 Thread Zang Ruochen
Hello. This error is caused by a lack of typedefs in musl. I'll submit a fix patch for musl later. https://git.musl-libc.org/cgit/musl/commit/include/elf.h?id=6be76895f6863100a311d474a42abdbb6466189d > -原始邮件- > 发件人: "Alexandre Belloni" > 发送时间:2023-12-05 06:35:30 (星期二) > 收件人: "Zang Ruoch

[OE-core][kirkstone][PATCH] avahi: backport CVE-2023-1981 & CVE's follow-up patches

2023-12-07 Thread Vijay Anusuri via lists.openembedded.org
From: Vijay Anusuri import patches from ubuntu to fix CVE-2023-1981 CVE-2023-38469-2 CVE-2023-38470-2 CVE-2023-38471-2 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/avahi/tree/debian/patches?h=ubuntu/jammy-security Upstream commit https://github.com/

[OE-core] [master] [PATCH] cve-update-nvd2-native: increase the delay between subsequent request failures

2023-12-07 Thread Dhairya Nagodra via lists.openembedded.org
Sometimes NVD servers are unstable and return too many errors. There is an option to have higher fetch attempts to increase the chances of successfully fetching the CVE data. Additionally, it also makes sense to progressively increase the delay after a failed request to an already unstable or busy

[OE-core] [PATCH] gdb: Update to gdb 14.1 release

2023-12-07 Thread Khem Raj
* Drop add-missing-ldflags.patch, its already applied to gdb 14 * Add dependency on mpfr for cross/cross-canadian/target recipe * Remove gcc-only complier restriction, clang can compile it just fine * Notable changes are here [1] [2] [1] https://sourceware.org/git/?p=binutils-gdb.git;a=blob_plain

[OE-core] [master] [PATCH] cve-update-nvd2-native: faster requests with API keys

2023-12-07 Thread Dhairya Nagodra via lists.openembedded.org
As per NVD, the public rate limit is 5 requests in 30s (6s delay). Using an API key increases the limit to 50 requests in 30s (0.6s delay). However, NVD still recommends sleeping for several seconds so that the other legitimate requests are serviced without denial or interruption. Keeping the defau

[OE-core][kirkstone 15/15] native: Clear TUNE_FEATURES/ABIEXTENSION

2023-12-07 Thread Steve Sakoman
From: Richard Purdie Some recipes reference these. Rather than continually trying to chase down the references and taskhash issues, clear the variables for an easier life and simpler code. These wouldn't convey anything useful in a native build. Signed-off-by: Richard Purdie (cherry picked fr

[OE-core][kirkstone 14/15] rust-cross: Simplfy the rust_gen_target calls

2023-12-07 Thread Steve Sakoman
From: Richard Purdie Match the code in rust-cross-canadian so that further simplifications can be considered in future. Signed-off-by: Richard Purdie (cherry picked from commit 5cb62d0a33777cb9afb1eea5f736a2580ce50dc7) Signed-off-by: Jermain Horsman Signed-off-by: Steve Sakoman --- meta/reci

[OE-core][kirkstone 13/15] rust-cross/rust-common: Merge arm target handling code to fix cross-canadian

2023-12-07 Thread Steve Sakoman
From: Richard Purdie rust-cross had special handling for armv7 targets but we also need this for cross-canadian. Merge the code into the main function so everything is consistent. Also then fix the arm definition to be arm-eabi since ABI is correctly being looked up. Signed-off-by: Richard Purd

[OE-core][kirkstone 12/15] rust-cross-canadian: Fix ordering of target json config generation

2023-12-07 Thread Steve Sakoman
From: Richard Purdie Based upon a patch from Otavio Salvador , ensure the target json files are written in the correct order with the most specific last incase it overwrites earlier files if the prefixes match. Signed-off-by: Richard Purdie (cherry picked from commit 1912c4e9e0ecf9655f3b3a41588

[OE-core][kirkstone 11/15] rust-common: Set llvm-target correctly for cross SDK targets

2023-12-07 Thread Steve Sakoman
From: Richard Purdie When a 'BUILD' target is requested we shouldn't be looking at TARGET_SYS but at BUILD_SYS. Due to the way rust mangles triplets, we need the HOST_SYS triplet to work with existing code - fixing that issue is a separate patch. Also drop the arch_abi argument, it doens't make

[OE-core][kirkstone 10/15] rust-llvm: Allow overriding LLVM target archs

2023-12-07 Thread Steve Sakoman
From: Niko Mauno Move the default value into a variable which can be overridden to match more accurately the use case specific scenario. (From OE-Core rev: 645370e85d8742d0614cd52ca7507b5df2d38ad8) Signed-off-by: Niko Mauno Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signe

[OE-core][kirkstone 09/15] bash: changes to SIGINT handler while waiting for a child

2023-12-07 Thread Steve Sakoman
From: Wenlin Kang It rarely observes the problem while running shell script aborting test repeatedly, at the problem, the test shell script never returns to shell Steps to reproduce: 1. Run test script and ctrl-c repeatedly 2. Observe whether returns to shell after ctrl-c Fixed issue: https://l

[OE-core][kirkstone 08/15] cve-exclusion_5.10.inc: update for 5.10.202

2023-12-07 Thread Steve Sakoman
Signed-off-by: Steve Sakoman --- .../linux/cve-exclusion_5.10.inc | 92 +++ 1 file changed, 73 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/cve-exclusion_5.10.inc b/meta/recipes-kernel/linux/cve-exclusion_5.10.inc index 7b4f68c428..583d81d0f

[OE-core][kirkstone 07/15] linux-yocto/5.10: update to v5.10.202

2023-12-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 479e8b892541 Linux 5.10.202 610057f4f6e0 interconnect: qcom: Add support for mask-based BCMs 7ce66afcaaf6 netfilter: nf_tables: disable toggling dormant table state more than once

[OE-core][kirkstone 06/15] linux-yocto/5.10: update to v5.10.200

2023-12-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: 3e55583405ac Linux 5.10.200 a5feaf765935 ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection 9109649559f9 tty: 8250: Add support for Intashield IS-100 73bcb4d44988

[OE-core][kirkstone 05/15] linux-yocto/5.10: update to v5.10.198

2023-12-07 Thread Steve Sakoman
From: Bruce Ashfield Updating to the latest korg -stable release that comprises the following commits: a8d812240fdd Linux 5.10.198 660627c71bc1 xen/events: replace evtchn_rwlock with RCU 1e3d016a9506 mmc: renesas_sdhi: only reset SCC when its pointer is populated a7d86a77c33b ne

[OE-core][kirkstone 04/15] vim: upgrade 9.0.2068 -> 9.0.2130

2023-12-07 Thread Steve Sakoman
From: Tim Orling https://github.com/vim/vim/compare/v9.0.2068...v9.0.2130 CVE: CVE-2023-48231 CVE: CVE-2023-48232 CVE: CVE-2023-48233 CVE: CVE-2023-48234 CVE: CVE-2023-48235 CVE: CVE-2023-48236 CVE: CVE-2023-48237 Signed-off-by: Tim Orling Signed-off-by: Alexandre Belloni (cherry picked from

[OE-core][kirkstone 03/15] python3-cryptography: fix CVE-2023-49083

2023-12-07 Thread Steve Sakoman
From: Narpat Mali cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a seriou

[OE-core][kirkstone 02/15] xwayland: fix CVE-2023-5367

2023-12-07 Thread Steve Sakoman
From: Lee Chee Yang Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman --- .../xwayland/xwayland/CVE-2023-5367.patch | 85 +++ .../xwayland/xwayland_22.1.8.bb | 4 +- 2 files changed, 88 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-gra

[OE-core][kirkstone 01/15] libsndfile: fix CVE-2022-33065 Signed integer overflow in src/mat4.c

2023-12-07 Thread Steve Sakoman
From: Vivek Kumbhar Signed-off-by: Vivek Kumbhar Signed-off-by: Steve Sakoman --- .../libsndfile1/CVE-2022-33065.patch | 46 +++ .../libsndfile/libsndfile1_1.0.31.bb | 1 + 2 files changed, 47 insertions(+) create mode 100644 meta/recipes-multimedia/libsndf

[OE-core][kirkstone 00/15] Patch review

2023-12-07 Thread Steve Sakoman
Please review this set of changes for kirkstone and have comments back by end of day Monday, December 11 Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/6300 The following changes since commit 11da43b58e19583a9bc16044309610cfb2e86469: systemtap_

[OE-core] Patchtest results for [PATCH 6/6] python3-maturin: add sdk (testsdk) test case

2023-12-07 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/6-6-python3-maturin-add-sdk-testsdk-test-case.patch FAIL: test mbox format: Series has malformed diff lines. Create

[OE-core] Patchtest results for [PATCH 5/6] oe-selfest: add maturn runtime (testimage) test

2023-12-07 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/5-6-oe-selfest-add-maturn-runtime-testimage-test.patch FAIL: test mbox format: Series has malformed diff lines. Cre

Re: [OE-core][PATCH v2] gdb/systemd: enable minidebuginfo support conditionally

2023-12-07 Thread Richard Purdie
On Tue, 2023-12-05 at 14:37 +0100, Etienne Cordonnier via lists.openembedded.org wrote: > From: Etienne Cordonnier > > Enabling minidebuginfo is not useful if gdb and systemd-coredump > are unable to parse it. > > In order to parse it, gdb needs xz support. Systemd needs coredump enabled, as > w

[OE-core] [PATCH 4/6] recipetool: add python_maturin support

2023-12-07 Thread Tim Orling
Add the new python_maturin PEP-517 backend Add selftest for 'pydantic-core' pypi package. [YOCTO #15312] Signed-off-by: Tim Orling --- meta/lib/oeqa/selftest/cases/recipetool.py| 34 +++ .../lib/recipetool/create_buildsys_python.py | 1 + 2 files changed, 35 insertions(+)

[OE-core] [PATCH 6/6] python3-maturin: add sdk (testsdk) test case

2023-12-07 Thread Tim Orling
We expect 'maturin' will be used in SDKs, so it makes sense to also test it in the testsdk environment. To run this test case, you can add the following to local.conf: TOOLCHAIN_HOST_TASK:append = " nativesdk-python3-maturin" And the build and test the SDK: bitbake -c populate_sdk core-image-full

[OE-core] [PATCH 5/6] oe-selfest: add maturn runtime (testimage) test

2023-12-07 Thread Tim Orling
Basic smoke test for maturin to test the 'maturin list-python' case. [YOCTO #15312] Signed-off-by: Tim Orling --- meta/lib/oeqa/runtime/cases/maturin.py | 23 +++ 1 file changed, 23 insertions(+) create mode 100644 meta/lib/oeqa/runtime/cases/maturin.py diff --git a/meta/l

[OE-core] [PATCH 3/6] classes-recipe: add python_maturin.bbclass

2023-12-07 Thread Tim Orling
maturin is a replacement for setuptools_rust and another "backend" for building python wheels. [YOCTO #15312] Signed-off-by: Tim Orling --- meta/classes-recipe/python_maturin.bbclass | 17 + 1 file changed, 17 insertions(+) create mode 100644 meta/classes-recipe/python_maturin.

[OE-core] [PATCH 2/6] python3-maturin: add v1.3.2

2023-12-07 Thread Tim Orling
Build and publish crates with pyo3, rust-cpython, cffi and uniffi bindings as well as rust binaries as python packages. This project is meant as a zero configuration replacement for setuptools-rust and milksnake. It supports building wheels for python 3.7+ on windows, linux, mac and freebsd, can u

[OE-core] [PATCH 1/6] python3-setuptools-rust: BBCLASSEXTEND + nativesdk

2023-12-07 Thread Tim Orling
We would like to build python3-maturin for nativesdk use and nativesdk-python3-setuptools-rust is a dependency. Signed-off-by: Tim Orling --- meta/recipes-devtools/python/python3-setuptools-rust_1.8.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/py

[OE-core] [PATCH 0/6] Add 'maturin' python backend support

2023-12-07 Thread Tim Orling
We are increasingly seeing Rust extensions for Python added in the ecosystem. The current best practices approach has moved from using 'setuptools-rust' to using 'maturin'. * Add python3-maturin, including 'native' and 'nativesdk' support. * Add a 'python_maturin' bbclass for the PEP-517 backend.

[OE-core] Patchtest results for [PATCH] tcl: skip timing-dependent tests in run-ptest

2023-12-07 Thread Patchtest
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/tcl-skip-timing-dependent-tests-in-run-ptest.patch FAIL: test bugzilla entry format: Bugzilla issue ID is not corre

Re: [OE-Core][PATCH 2/3] cargo: Move CARGO_MANIFEST_PATH/CARGO_SRC_DIR to cargo_common

2023-12-07 Thread Richard Purdie
On Thu, 2023-12-07 at 13:39 +, Alex Kiernan wrote: > cargo_common_do_configure uses CARGO_MANIFEST_PATH (which depends on > CARGO_SRC_DIR), but their definition was in cargo.bbclass. > > Match the other variables here and change to default values, rather > than weak defaults. FWIW "single val

[OE-core] [kirkstone][PATCH] externalsrc: Ensure SRCREV is processed before accessing SRC_URI

2023-12-07 Thread Yoann Congal
Call bb.fetch.get_srcrev() before accessing SRC_URI. Without this new bb.fetch.get_srcrev() call, SRC_URI might be accessed before SRCREV had a chance to be processed. In master, this is fixed by https://git.yoctoproject.org/poky/commit/?id=62afa02d01794376efab75623f42e7e08af08526 However, this c

[OE-core] [PATCH] tcl: skip timing-dependent tests in run-ptest

2023-12-07 Thread Ross Burton
From: Ross Burton There are several tests in the test suite which are very dependent on timing and fail on a loaded host system, so skip them. [ YOCTO #14825 #14882 #15081 ] Signed-off-by: Ross Burton --- meta/recipes-devtools/tcltk/tcl/run-ptest | 6 +- 1 file changed, 5 insertions(+), 1

[OE-core] [PATCH 4/4] oe-selftest: add tests for C and C++ build tools

2023-12-07 Thread Adrian Freihofer
Add new file for C and C++ build tools. The initial implemmentation contains a class for CMake and one for Meson. At least these first tests for the qemu-usermode share most of the code. That's why there is only one c_ccp.py file and not for example a cmake.py and a meson.py file. Signed-off-by: A

[OE-core] [PATCH 3/4] oeqa/core/decorator: add skip if not qemu-usermode

2023-12-07 Thread Adrian Freihofer
Add a decorator to skip tests which require the qemu-usermode machine feature. Signed-off-by: Adrian Freihofer --- meta/lib/oeqa/core/decorator/data.py | 10 ++ 1 file changed, 10 insertions(+) diff --git a/meta/lib/oeqa/core/decorator/data.py b/meta/lib/oeqa/core/decorator/data.py ind

[OE-core] [PATCH 2/4] oe-selftest: add a cpp-example recipe

2023-12-07 Thread Adrian Freihofer
This simple C++ project supports compilation with CMake and Meson. (Autotool support could be added later on.) It's supposed to be used with oe-selftest. An artificial project has several advantages over compiling a normal CMake or Meson based project for testing purposes: - It is much faster beca

[OE-core] [PATCH 1/4] cmake-qemu.bbclass: make it more usable

2023-12-07 Thread Adrian Freihofer
Make the cmake-qemu.bbclass more usable: - Drop the CMAKE_EXEWRAPPER_ENABLED variable (which does not make much sense without the second commit of the original patch series). - Inherit qemu to make the cmake-qemu a drop in replacement for cmake. Signed-off-by: Adrian Freihofer --- meta/classes

[OE-core] [PATCHv3 7/9] recipetool: create: Only include the expected SRC_URI checksums

2023-12-07 Thread Peter Kjellerstedt
Rather than including all SRC_URI checksums, include the ones that are expected. These are the same as are output if no checksums are included when building the recipe. Signed-off-by: Peter Kjellerstedt --- This is based on abelloni/master-next. meta/lib/oeqa/selftest/cases/recipetool.py | 2 -

Re: [OE-core] [PATCH 2/4] python3-qemu-qmp: Add recipe

2023-12-07 Thread Tim Orling
This will also need a maintainer entry in: https://git.openembedded.org/openembedded-core/tree/meta/conf/distro/include/maintainers.inc On Thu, Dec 7, 2023 at 6:36 AM Eilís 'pidge' Ní Fhlannagáin < pi...@baylibre.com> wrote: > From: Ross Burton > > Add a recipe for python QEMU Monitor Protocol.

Re: [OE-core] [kirkstone][PATCH] gstreamer1.0-plugins-base: enable glx/opengl support

2023-12-07 Thread Claus Stovgaard
On Thu, 2023-12-07 at 05:07 -1000, Steve Sakoman wrote: > On Tue, Dec 5, 2023 at 11:13 PM Claus Stovgaard > wrote: > > > > From: Alexander Kanavin > > > > This is required by latest webkit when built with x11 support. > > Is this an issue for the version of webkit in kirkstone?  i.e. is it > c

Re: [OE-core] [PATCHv2 7/9] recipetool: create: Only include the expected SRC_URI checksums

2023-12-07 Thread Alexandre Belloni via lists.openembedded.org
Hello, This one doesn't apply and I've skippedit, can you rebase? I've applied all the other ones On 06/12/2023 21:55:29+0100, Peter Kjellerstedt wrote: > Rather than including all SRC_URI checksums, include the ones that are > expected. These are the same as are output if no checksums are includ

Re: [OE-core] [kirkstone][PATCH 2/4] base-passwd: Add PW_SUBDIR

2023-12-07 Thread Joakim Tjernlund via lists.openembedded.org
On Thu, 2023-12-07 at 15:05 +, Peter Kjellerstedt wrote: > > -Original Message- > > From: Joakim Tjernlund > > Sent: den 7 december 2023 09:48 > > To: openembedded-core@lists.openembedded.org; Peter Kjellerstedt > > > > Subject: Re: [OE-core] [kirkstone][PATCH 2/4] base-passwd: Add PW

Re: [OE-core] [kirkstone][PATCH] gstreamer1.0-plugins-base: enable glx/opengl support

2023-12-07 Thread Steve Sakoman
On Tue, Dec 5, 2023 at 11:13 PM Claus Stovgaard wrote: > > From: Alexander Kanavin > > This is required by latest webkit when built with x11 support. Is this an issue for the version of webkit in kirkstone? i.e. is it currently broken? Steve > > (From OE-Core rev: 024edebf6f722ae4d05411be3487

Re: [OE-core] [kirkstone][PATCH 2/4] base-passwd: Add PW_SUBDIR

2023-12-07 Thread Peter Kjellerstedt
> -Original Message- > From: Joakim Tjernlund > Sent: den 7 december 2023 09:48 > To: openembedded-core@lists.openembedded.org; Peter Kjellerstedt > > Subject: Re: [OE-core] [kirkstone][PATCH 2/4] base-passwd: Add PW_SUBDIR > > On Wed, 2023-12-06 at 20:21 +, Peter Kjellerstedt wrote:

Re: [OE-core] [PATCH] wic/DirectPlugin: don't update fstab if --no-fstab-update

2023-12-07 Thread Alexandre Belloni via lists.openembedded.org
Hello, This causes the following failure: 2023-12-07 02:54:18,682 - oe-selftest - INFO - == 2023-12-07 02:54:18,682 - oe-selftest - INFO - FAIL: wic.Wic.test_no_fstab_update (subunit.RemotedTestCase) 2023-12-07 02:54:18,682 - o

[OE-core] [PATCH 4/4] login.py: Proof of concept for screenshot testcases

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
This takes the work rburton did on image screenshot testing and expands it. The two caveats here: 1. We expect ImageMagick as a host tool for the time being. There is a question as to do we bring ImageMagick into core for this or do we require meta-oe for these tests. 2. Right now this only works

[OE-core] [PATCH 3/4] runqemu: add qmp socket support

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
From: Ross Burton Add support for qmp sockets and defaults to unix:qmp.sock if unspecified Signed-off-by: Ross Burton Signed-off-by: Eilís 'pidge' Ní Fhlannagáin --- scripts/runqemu | 11 +++ 1 file changed, 11 insertions(+) diff --git a/scripts/runqemu b/scripts/runqemu index 18aeb7

[OE-core] [PATCH 0/4] Image screenshot testing proof of concept

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
This patch series is based off of earlier work from Ross Burton to enable QMP based screenshot testing. Eilís 'pidge' Ní Fhlannagáin (1): login.py: Proof of concept for screenshot testcases Ross Burton (3): qemurunner: remove unused import python3-qemu-qmp: Add recipe runqemu: add qmp so

[OE-core] [PATCH 1/4] qemurunner: remove unused import

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
From: Ross Burton Removes unused logging import Signed-off-by: Ross Burton Signed-off-by: Eilís 'pidge' Ní Fhlannagáin --- meta/lib/oeqa/utils/qemurunner.py | 1 - 1 file changed, 1 deletion(-) diff --git a/meta/lib/oeqa/utils/qemurunner.py b/meta/lib/oeqa/utils/qemurunner.py index 29fe2719

[OE-core] [PATCH 2/4] python3-qemu-qmp: Add recipe

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
From: Ross Burton Add a recipe for python QEMU Monitor Protocol. This will be needed for qemu screendumps for qemu screendump testing. Signed-off-by: Ross Burton Signed-off-by: Eilís 'pidge' Ní Fhlannagáin --- .../python/python3-qemu-qmp_0.0.2.bb | 14 ++ 1 file chan

[OE-core] [PATCH] subports: Use _GNU_SOURCE

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
[YOCTO #15074] The syncfs probe in ports/unix/subports was failing if the compiler does not support implicit function declarations. syncfs is protected and requires _GNU_SOURCE, so the answer here is to pull it in. Signed-off-by: Eilís 'pidge' Ní Fhlannagáin --- .../pseudo/files/syncfs-probe.

[OE-Core][PATCH 3/3] cargo: Add CARGO_LOCK_PATH for path to Cargo.lock

2023-12-07 Thread Alex Kiernan
When building a workspace enabled project, the Cargo.lock is found at the root of the project, not alongside the Cargo.toml. Expose CARGO_LOCK_PATH so it can be explicitly configured. Signed-off-by: Alex Kiernan --- meta/classes-recipe/cargo_common.bbclass | 6 -- 1 file changed, 4 insertio

[OE-Core][PATCH 2/3] cargo: Move CARGO_MANIFEST_PATH/CARGO_SRC_DIR to cargo_common

2023-12-07 Thread Alex Kiernan
cargo_common_do_configure uses CARGO_MANIFEST_PATH (which depends on CARGO_SRC_DIR), but their definition was in cargo.bbclass. Match the other variables here and change to default values, rather than weak defaults. Signed-off-by: Alex Kiernan --- meta/classes-recipe/cargo.bbclass| 7 -

[OE-Core][PATCH 1/3] cargo: Rename MANIFEST_PATH -> CARGO_MANIFEST_PATH

2023-12-07 Thread Alex Kiernan
This variable is a piece of recipe configurable interface, scope it with the class name to make that clear. Signed-off-by: Alex Kiernan --- meta/classes-recipe/cargo.bbclass| 4 ++-- meta/classes-recipe/cargo_common.bbclass | 2 +- meta/classes-recipe/ptest-cargo.bbclass | 2 +- 3 file

Re: [OE-core] [PATCH 1/3] useradd: Fix issues with useradd dependencies

2023-12-07 Thread Richard Purdie
On Thu, 2023-12-07 at 13:58 +0100, Alexander Kanavin wrote: > On Thu, 7 Dec 2023 at 13:45, Eilís 'pidge' Ní Fhlannagáin > wrote: > > -USERADDSETSCENEDEPS:class-target = > > "${MLPREFIX}base-passwd:do_populate_sysroot_setscene > > pseudo-native:do_populate_sysroot_setscene > > shadow-native:do_p

Re: [OE-core] [PATCH 1/3] useradd: Fix issues with useradd dependencies

2023-12-07 Thread Alexander Kanavin
On Thu, 7 Dec 2023 at 13:45, Eilís 'pidge' Ní Fhlannagáin wrote: > -USERADDSETSCENEDEPS:class-target = > "${MLPREFIX}base-passwd:do_populate_sysroot_setscene > pseudo-native:do_populate_sysroot_setscene > shadow-native:do_populate_sysroot_setscene > ${MLPREFIX}shadow-sysroot:do_populate_sysroo

[OE-core] [PATCH 1/3] useradd: Fix issues with useradd dependencies

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
If recipe A requires the useradd actions of recipe B we need to ensure that recipe B is part of the recipe A dependancy chain. In order to do that, we introduce USERADD_DEPENDS. This makes sure that the do_populate_sysroot_setscene of recipe B exists for recipe A in case of a missing TMPDIR. This r

[OE-core] [PATCH 3/3] variables.rst: Add USERADD_DEPENDS

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
Adding USERADD_DEPENDS to the variables document Signed-off-by: Eilís 'pidge' Ní Fhlannagáin --- documentation/ref-manual/variables.rst | 15 +++ 1 file changed, 15 insertions(+) diff --git a/documentation/ref-manual/variables.rst b/documentation/ref-manual/variables.rst index b394

[OE-core] [PATCH 0/3] useradd fixes, tests and documentation

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
This patch series fixes and/or tests for some issues in useradd dependencies. It adds a new variable "USERADD_DEPENDS" that is required now for recipes that have dependencies on other recipes useradd. Fixes/Tests: Bug 13419 - recipes that add users to groups cannot rely on other recipes creating

[OE-core] [PATCH 2/3] usergrouptests.py: Add test for switching between static-ids

2023-12-07 Thread Eilís 'pidge' Ní Fhlannagáin
This test is related to https://bugzilla.yoctoproject.org/show_bug.cgi?id=12107 At the moment it doesn't seem to be able to actually replicate this issue in the bug, which tells me it's likely fixed. Signed-off-by: Eilís 'pidge' Ní Fhlannagáin --- .../lib/oeqa/selftest/cases/usergrouptests.py |

Re: [OE-core][mickledore][PATCH 1/1] python3-cryptography: fix CVE-2023-49083

2023-12-07 Thread Yoann Congal
Hi, Le 07/12/2023 à 12:58, Narpat Mali via lists.openembedded.org a écrit : > From: Narpat Mali > > cryptography is a package designed to expose cryptographic primitives > and recipes to Python developers. Calling `load_pem_pkcs7_certificates` > or `load_der_pkcs7_certificates` could lead to a N

Re: [OE-core] [PATCH v4] openssh: Add PACKAGECONFIG option to customize sshd mode

2023-12-07 Thread Alex Kiernan
On Thu, Dec 7, 2023 at 2:10 AM Yu, Mingli wrote: > > Hi Alex, > > Thanks for your suggestion! > > Both sshd.socket and sshd.service belong to openssh-sshd package, so using > SYSTEMD_AUTO_ENABLE can't enable one of them, it just can enable both or > disable both. > Yes, it would need changes t

[OE-core][mickledore][PATCH 1/1] python3-cryptography: fix CVE-2023-49083

2023-12-07 Thread Narpat Mali via lists.openembedded.org
From: Narpat Mali cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a seriou

[OE-core] [PATCH 2/2] go: upgrade 1.21.0 -> 1.21.5

2023-12-07 Thread Jose Quaresma
Upgrade to latest 1.21.x release [1]: $ git --no-pager log --oneline go1.21.0..go1.21.5 6018ad99a4 (tag: go1.21.5) [release-branch.go1.21] go1.21.5 ec8c526e4b [release-branch.go1.21] net/http: limit chunked data overhead f7a79cb5fc [release-branch.go1.21] cmd/compile: fix findIndVar so it does not

Re: [OE-core] [kirkstone][PATCH 2/4] base-passwd: Add PW_SUBDIR

2023-12-07 Thread Joakim Tjernlund via lists.openembedded.org
On Wed, 2023-12-06 at 20:21 +, Peter Kjellerstedt wrote: > Since I've seen Richard's reply and his reluctance to merge this, > this is mostly technical. I know but I don't understand what "batter ways" to do this is, I have tested symlinks/--prefix/--root and bind mounting the passwd/shadow f