Re: [yocto] ext4 issues with scarthgap .wic image

2024-11-21 Thread Mikko Rapeli via lists.yoctoproject.org
Hi, On Thu, Nov 21, 2024 at 09:18:13AM +, Böckelmann, Thore wrote: > Hi Mikko! > > I found a different approach to resize the ext4 filesystem. Instead of doing > this while deploying the .wic image to the SD card, I simply created a small > systemd service, which does all the dirty work wit

Re: [yocto] Suggested way to generate two version of same package in Yocto

2024-11-20 Thread Mikko Rapeli via lists.yoctoproject.org
Hi, On Tue, Nov 19, 2024 at 12:06:58AM -0800, emailaddress.ashish via lists.yoctoproject.org wrote: > Hi Members , > > I want openssl-3.2.x build to use some file from openssl-3.0.8 build > So this requires the same build to generate build for both version of openssl > . Don't do this. > Is t

Re: [yocto] ext4 issues with scarthgap .wic image

2024-11-20 Thread Mikko Rapeli via lists.yoctoproject.org
Hi, On Wed, Nov 20, 2024 at 12:42:51PM +, Böckelmann, Thore wrote: > Hi Mikko! > > Of course it is always better to move forward instead of backwards. But my > point is that the documented EXTRA_IMAGECMD variable is somehow ignored and > not passed to mkfs.ext4 as it should be. If it isn't

Re: [yocto] ext4 issues with scarthgap .wic image

2024-11-20 Thread Mikko Rapeli via lists.yoctoproject.org
Hi, On Wed, Nov 20, 2024 at 11:37:51AM +, tboeckel via lists.yoctoproject.org wrote: > Hi! > > I am building an image for an iMX8 system and recently upgraded from > hardknott to scarthgap. The image (wic.bz2) is created successfully, but > after deploying it to an SD card I am not able to

Re: [yocto] ERROR: Nothing PROVIDES 'virtual/kernel'

2024-10-21 Thread Mikko Rapeli
Hi, On Mon, Oct 21, 2024 at 09:25:39AM +0200, Zoran via lists.yoctoproject.org wrote: > Hello Yocto Community Support Team, > > I have an interesting problem to report. > > Parsing recipes: 100% > || > Time: 0:02:30 > Parsi

Re: [yocto] Yocto Binary Distro

2024-10-08 Thread Mikko Rapeli
Hi, On Tue, Oct 08, 2024 at 05:09:33AM -0700, Aleksandar Nikolic via Lists.Yoctoproject.Org wrote: > To build from the SDK occurred to us as well, but is there a offical/stable > Yocto way to integrate those binaries back into the image? I don't like the > idea of building a base image in Yocto

Re: [yocto] Yocto Binary Distro

2024-10-08 Thread Mikko Rapeli
Hi, On Tue, Oct 08, 2024 at 01:30:47AM -0700, Aleksandar Nikolic via lists.yoctoproject.org wrote: > On Tue, Oct 8, 2024 at 01:25 AM, Dmitry Baryshkov wrote: > > > > > Consider using shared SSTATE, it saves you from all the rebuilds, > > while keeping Yocto internals intact and sane. > > We ar

Re: [yocto][meta-openembedded] How to properly build a lib package

2024-08-29 Thread Mikko Rapeli
Hi, On Wed, Aug 28, 2024 at 11:50:03AM +0200, Yann CARDAILLAC Pro wrote: > Hi Mikko, > > Well without the RPROVIDES I get the following error when a package DEPENDS > on it : > > ERROR: rj2d-com-1.1-r0 do_package_qa: QA Issue: /usr/bin/rj2d- com > contained in package rj2d- com requires librj2d.

Re: [yocto] Parallel builds under yocto

2024-08-14 Thread Mikko Rapeli
Hi, On Wed, Aug 14, 2024 at 09:36:05PM +0200, Alexander Kanavin via lists.yoctoproject.org wrote: > Also there are sensible defaults for both, which use autodetection for > how many cores a system cpu has. Generally you need to start tweaking > these settings only when defaults aren't working wel

Re: [yocto][meta-openembedded] How to properly build a lib package

2024-08-07 Thread Mikko Rapeli
Hi, On Wed, Aug 07, 2024 at 04:14:29PM +0200, Yann CARDAILLAC Pro wrote: > Thanks Mikko, that was it indeed! I didn't test on target yet but it seems > ok so far! > > I'm still not sure about the librj2d.so()(64bit) though any idea? I would leave all RPROVIDES for bitbake etc automation to set.

Re: [yocto][meta-openembedded] How to properly build a lib package

2024-08-07 Thread Mikko Rapeli
Hi, On Wed, Aug 07, 2024 at 03:13:31PM +0200, Yann CARDAILLAC Pro wrote: > Thanks for the fast reply! > > - The library is *not* pre-compiled, here's the makefile rule that produce > it : > > CFLAGS ?= -std=gnu99 -Wall -Wextra -Wno-parentheses -Wno-switch > > shared-lib: > $(CC) -fPIC -

Re: [yocto][meta-openembedded] How to properly build a lib package

2024-08-07 Thread Mikko Rapeli
Hi, On Wed, Aug 07, 2024 at 10:47:57AM +0200, Yann CARDAILLAC via lists.yoctoproject.org wrote: > Hi all, > > I'm working on upgrading different yocto BSPs to scarthgap, I'm having an > error that I haven't seen. It's the one described here on stack overflow by > someone else: > > https://stack

Re: [yocto] Fw: Inquiry and Proposal: Method to Identify Package Containing a Specific Binary

2024-07-03 Thread Mikko Rapeli
Hi, On Wed, Jul 03, 2024 at 10:27:58AM +0200, Mike Looijmans via lists.yoctoproject.org wrote: > On 03-07-2024 08:02, Chris via lists.yoctoproject.org wrote: > > > Dear Yocto Community, > > > I am reaching out to inquire whether there currently exists a method > > > within the Yocto Project

Re: [yocto] Verity hash in kernel bootscript

2024-05-02 Thread Mikko Rapeli
Hi, On Thu, May 02, 2024 at 02:28:03AM -0700, f.louveau via lists.yoctoproject.org wrote: > Hello, > > I have a project where I want to implement dm-verity on my rootfs (no > initramfs here). > > I modify image recipe to split rootfs in multiple partition (weird this is > not supported upstre

[yocto] [meta-parsec][PATCH] parsec-tool: fix serialNumber check

2024-01-03 Thread Mikko Rapeli
From: Mikko Rapeli New openssl 3.2.0 version removed spaces around serialNumber in: Subject: CN=parallaxsecond.com, serialNumber=EZ4U2CIXL Fixes parsec-service oeqa test on qemu. Signed-off-by: Mikko Rapeli --- sh-adapt-to-new-serialNumber-output.patch | 33

Re: [yocto] CVE Scanners and Package Version

2024-01-02 Thread Mikko Rapeli
Hi, On Tue, Jan 02, 2024 at 10:46:21PM +0100, adrian.freiho...@gmail.com wrote: > On Tue, 2024-01-02 at 09:24 +0200, Mikko Rapeli wrote: > > Hi, > > > > On Sat, Dec 23, 2023 at 02:47:36AM -0800, fabian.hanke via > > lists.yoctoproject.org wrote: > > > Hello Y

Re: [yocto] CVE Scanners and Package Version

2024-01-01 Thread Mikko Rapeli
Hi, On Sat, Dec 23, 2023 at 02:47:36AM -0800, fabian.hanke via lists.yoctoproject.org wrote: > Hello Yocto community, > > we must provide a SBOM for our Yocto based product which will then be used > for (internal) CVE scanning by the security department. Generating the base > document in cyclo

[yocto] [meta-security][PATCH 4/4] dm-verity-img.bbclass: add DM_VERITY_DEPLOY_DIR

2023-12-20 Thread Mikko Rapeli
dm-verity-img.bbclass. Signed-off-by: Mikko Rapeli --- classes/dm-verity-img.bbclass | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/classes/dm-verity-img.bbclass b/classes/dm-verity-img.bbclass index 7f35df5..2f212d6 100644 --- a/classes/dm-verity-img.bbclass +++ b/classes

[yocto] [meta-security][PATCH 1/4] tpm2-tss: support native builds

2023-12-20 Thread Mikko Rapeli
systemd-native, tpm2-tss support is needed for native too. Signed-off-by: Mikko Rapeli --- meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.0.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.0.1.bb b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.0.1.bb index

[yocto] [meta-security][PATCH 2/4] dm-verity-img.bbclass: use bc-native

2023-12-20 Thread Mikko Rapeli
From: Erik Schilling Build host may not have bc. Signed-off-by: Mikko Rapeli --- classes/dm-verity-img.bbclass | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/classes/dm-verity-img.bbclass b/classes/dm-verity-img.bbclass index 045c860..3dd2b94 100644 --- a/classes/dm

[yocto] [meta-security][PATCH 3/4] dm-verity-img.bbclass: remove IMAGE_NAME_SUFFIX

2023-12-20 Thread Mikko Rapeli
From: Erik Schilling It is embedded into IMAGE_NAME since poky master branch commit 6f6c79029bc2020907295858449c725952d560a1 Signed-off-by: Mikko Rapeli --- classes/dm-verity-img.bbclass | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/classes/dm-verity-img.bbclass b

Re: [yocto] [meta-security][PATCH] tpm2-tss: support native builds

2023-11-23 Thread Mikko Rapeli
Hi, On Thu, Nov 23, 2023 at 11:01:12AM +, Jose Quaresma wrote: > Hi Mikko, > > Mikko Rapeli escreveu no dia quinta, 23/11/2023 > à(s) 10:53: > > > systemd tool ukify > > https://www.freedesktop.org/software/systemd/man/latest/ukify.html > > depends

[yocto] [meta-security][PATCH] tpm2-tss: support native builds

2023-11-23 Thread Mikko Rapeli
systemd-native, tpm2-tss support is needed for native too. Signed-off-by: Mikko Rapeli --- meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.0.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.0.1.bb b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.0.1.bb index

Re: [yocto] Using cmake... how?

2023-10-17 Thread Mikko Rapeli
Hi, On Tue, Oct 17, 2023 at 11:58:23AM +, Dave Hitchman wrote: > I understand that, and the compiler the rest of the recipe uses does cope so > I am trying to understand why this bit of the whole thing is using a > different compiler. Maybe it is somewhere in the cmake of the library, but it

Re: [yocto] Using cmake... how?

2023-10-17 Thread Mikko Rapeli
Hi, On Tue, Oct 17, 2023 at 11:35:13AM +, Dave Hitchman wrote: > | /usr/bin/g++ -O2 -pipe -g -feliminate-unused-debug-types > -fmacro-prefix-map=/home/dave/Documents/Kymati/yocto/build/tmp/work/cortexa53-crypto-phytec-linux/libkymati/1.0-r0=/usr/src/debug/libkymati/1.0-r0 >

Re: [yocto] Using cmake... how?

2023-10-17 Thread Mikko Rapeli
Hi, On Tue, Oct 17, 2023 at 11:35:13AM +, Dave Hitchman wrote: > Thanks, but without the CXX settings there is no difference either, it still > uses the wrong toolchain (or rather tries to and fails in the same way) . I > have now removed the two export CXX type lines... Check the CMakeFile

Re: [yocto] Using cmake... how?

2023-10-17 Thread Mikko Rapeli
Hi, On Tue, Oct 17, 2023 at 10:09:42AM +, Dave Hitchman wrote: > Thanks > > So, first, I thought - as I had seen examples that I had to put these flags > etc. in the configuration function but it appears that was a wrong thing. > Now my recipe looks like: > SUMMARY = "mylib" > DESCRIPTION =

Re: [yocto] Using cmake... how?

2023-10-17 Thread Mikko Rapeli
Hi, On Tue, Oct 17, 2023 at 09:21:27AM +, Dave Hitchman wrote: > Oh I dont know. This is getting to be a bit annoying. > I had already included the inherit cmake line but now it seems maybe that you > dont need to put any cmake commands in... not 100% sure, no one seems to > explain this, I

Re: [yocto] Using cmake... how?

2023-10-16 Thread Mikko Rapeli
Hi, On Mon, Oct 16, 2023 at 03:27:01PM +, Dave Hitchman wrote: > So my current recipe for the project works, including building various C, C++ > files > I wanted to now add a library of someone elses creation. > On my machine this library builds using the tools installed so the code is ok >

Re: [yocto] aptly repository manager

2023-10-06 Thread Mikko Rapeli
Hi, On Fri, Oct 06, 2023 at 01:15:02PM +, Dave Hitchman wrote: > Has anyone added this to a yocto build? > I am sure it is possible but cant find any info, maybe someone has done it Layerindex is the place to search for packages and recipes. Sadly aptly isn't found from there: https://layers

Re: [yocto] how to get ubxtool into the build

2023-10-04 Thread Mikko Rapeli
Hi, On Wed, Oct 04, 2023 at 01:50:18AM -0700, Dave Hitchman wrote: > So I hav a custom recipe, gpsd is in place and functioning along with cgps, I > can see the position nicely. > > I have also added per instructions I found the whole list of programs related > to gps utils... > SUMMARY_gps-uti

Re: [yocto] cmake backporting

2023-10-02 Thread Mikko Rapeli
Hi, On Mon, Oct 02, 2023 at 10:41:37AM +, Danter, Richard via lists.yoctoproject.org wrote: > Hi all, > > We have a customer using hardknott & kirkstone who needs a newer cmake > version. Looking at mickledore, it has a version of cmake that has the > features they require. > > Would it be

Re: [yocto] [Openembedded-architecture] Security processes: YP needs

2023-09-13 Thread Mikko Rapeli
Hi, On Wed, Sep 13, 2023 at 01:52:19PM +0200, Marta Rybczynska wrote: > Hello, > I've been working recently on collecting what works and what doesn't > in YP security processes. The goal is to go forward and define an > actionable strategy! > > Today, I'd like to share with you the summary of wha

Re: [yocto] Memory requirements for building images with different architectures

2023-09-08 Thread Mikko Rapeli
Hi, One related improvement is to avoid IO to disk completely as long as RAM is available. By default file systems like ext4 will start writing all buffers in the background after few seconds which is wasted IO if memory is available and rm_work will anyway wipe the tmp to produce a target filesy

Re: [yocto] How to switch between package version ?

2023-08-17 Thread Mikko Rapeli
Hi, On Thu, Aug 17, 2023 at 09:37:51AM +0200, Alexander Kanavin wrote: > On Thu, 17 Aug 2023 at 06:41, Mikko Rapeli wrote: > > One of the major problems with yocto major updates is that it becomes a big > > bang, > > everything must be updated at once. This can be spli

Re: [yocto] How to switch between package version ?

2023-08-16 Thread Mikko Rapeli
Hi, On Wed, Aug 16, 2023 at 05:32:23PM +0200, Alexander Kanavin wrote: > On Wed, 16 Aug 2023 at 14:05, Mikko Rapeli wrote: > > There isn't much documentation. It's more about just doing it and resolving > > any issues > > you find. For example BSP deliveries from

Re: [yocto] How to switch between package version ?

2023-08-16 Thread Mikko Rapeli
Hi, On Wed, Aug 16, 2023 at 04:55:53AM -0700, Nicolas Wirth via lists.yoctoproject.org wrote: > Hi Mikko, thank you for you're answer which was very insightful. > > > > > If that is not available, check if you can change the branch of an existing > > meta layer to provide what you need. Note th

Re: [yocto] How to switch between package version ?

2023-08-16 Thread Mikko Rapeli
Hi, On Wed, Aug 16, 2023 at 03:54:38AM -0700, Nicolas Wirth via lists.yoctoproject.org wrote: > Hello everyone, I hope you're all doing well. > > I began learning how to use Yocto three months ago. I believe I now have a > general understanding of how Yocto operates and how to integrate it into

Re: [yocto] [meta-security][PATCH] layer: add more memory for Qemu machines

2023-06-29 Thread Mikko Rapeli
Hi, On Thu, Jun 29, 2023 at 01:45:41PM +0300, Mikko Rapeli via lists.yoctoproject.org wrote: > Currently these belong logically to machine config but what about generic > machine targets. Could an image config define how much memory is needed > to run the image on qemu? Done already i

Re: [yocto] [meta-security][PATCH] layer: add more memory for Qemu machines

2023-06-29 Thread Mikko Rapeli
Hi, On Wed, Jun 28, 2023 at 05:47:21PM +0100, Richard Purdie wrote: > On Wed, 2023-06-28 at 08:56 -0400, Armin Kuster wrote: > > Signed-off-by: Armin Kuster > > --- > > conf/layer.conf | 3 +++ > > 1 file changed, 3 insertions(+) > > > > diff --git a/conf/layer.conf b/conf/layer.conf > > index

Re: [yocto] kirkstone meta-security branch

2023-06-05 Thread Mikko Rapeli
Hi, On Mon, Jun 05, 2023 at 08:31:55AM +, Peter Marko via lists.yoctoproject.org wrote: > Hello maintainers, > > I'd be interested to know if meta-security repository for kirkstone is still > maintained. > Looking at commit history, there are only two commits since July 2022 (almost > a ye

[yocto] [meta-parsec][PATCH 2/2] parsec-tool: fix build error

2023-05-29 Thread Mikko Rapeli
From: Mikko Rapeli Currently build fails with: | error: manifest path `/home/builder/build/tmp_qemuarm64/work/cortexa57-linux/parsec-tool/0.6.0-r0/cargo_home/bitbake/parsec-tool-0.6.0//Cargo.toml` does not exist Normal source directory has Cargo.toml so only set ${B} to the new path. Signed

[yocto] [meta-parsec][PATCH 1/2] parsec-service: fix build error

2023-05-29 Thread Mikko Rapeli
From: Mikko Rapeli After latest changes to ${S}, parsec-service fails to apply systemd.patch: ERROR: parsec-service-1.2.0-r0 do_patch: Applying patch 'systemd.patch' on target directory '/home/builder/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/parsec-service/1.2.0-r0/car

[yocto] [meta-parsec][PATCH] parsec-service: fix build error

2023-05-29 Thread Mikko Rapeli
From: Mikko Rapeli After latest changes to ${S}, parsec-service fails to apply systemd.patch: ERROR: parsec-service-1.2.0-r0 do_patch: Applying patch 'systemd.patch' on target directory '/home/builder/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/parsec-service/1.2.0-r0/car

[yocto] [meta-tpm][PATCH 2/2] linux-yocto: remove tpm_x86.cfg

2023-05-23 Thread Mikko Rapeli
From: Mikko Rapeli It's not used by linux-yocto bbappends in any configuration. Signed-off-by: Mikko Rapeli --- meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg | 4 1 file changed, 4 deletions(-) delete mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg diff

[yocto] [meta-tpm][PATCH 1/2] linux-yocto: support tpm and tpm2 on all architectures

2023-05-23 Thread Mikko Rapeli
From: Mikko Rapeli arm, arm64 and other machines can also have tpm and tpm2 devices and the config snippets tpm.scc and tpm2.scc work there too. Signed-off-by: Mikko Rapeli --- meta-tpm/recipes-kernel/linux/linux-yocto_tpm.inc | 11 +-- 1 file changed, 1 insertion(+), 10 deletions

Re: [yocto] [meta-security][PATCH 1/8] Revert "ima-evm-utils: Update ima-evm-utils to v1.5 and add a patch"

2023-05-10 Thread Mikko Rapeli
Hi, On Wed, May 10, 2023 at 10:20:22AM -0400, Stefan Berger wrote: > > > On 5/10/23 09:15, Mikko Rapeli wrote: > > Hi, > > > > On Wed, May 10, 2023 at 08:23:18AM -0400, Stefan Berger wrote: > > > > > > > > > On 5/10/23 07:44, Armin Kus

Re: [yocto] [meta-security][PATCH 1/8] Revert "ima-evm-utils: Update ima-evm-utils to v1.5 and add a patch"

2023-05-10 Thread Mikko Rapeli
Hi, On Wed, May 10, 2023 at 08:23:18AM -0400, Stefan Berger wrote: > > > On 5/10/23 07:44, Armin Kuster wrote: > > > > > > On 5/9/23 2:56 PM, Jose Quaresma wrote: > > > This reverts commit 9de807705b27b05bbf84e9f16502fe6cdaa8928f. > > > > > > The full patchset are overriding the do_configure

Re: [yocto] [meta-security][kirkstone][PATCH] tpm2-tss: upgrade to 3.2.2 to fix CVE-2023-22745

2023-05-08 Thread Mikko Rapeli
Hi, Since master has 4.0.1 and CVE is impacting: https://nvd.nist.gov/vuln/detail/CVE-2023-22745 "Up to (including) 4.0.0" then I guess master branch and 4.0.1 is not impacted. Would be nice to have this info in commit message though. Cheers, -Mikko On Mon, May 08, 2023 at 03:23:34PM +0200,

Re: [yocto] Trouble Adding Files to rootfs

2023-05-03 Thread Mikko Rapeli
Hi, On Tue, May 02, 2023 at 06:17:27PM -0400, Anthony Abboud wrote: > HI Yocto Community, > > I am currently working on build a custom Boot2Qt image to learn about > How-To's since it's my first time playing with Yocto. I am successfully > able to build an image for my system; manually inserting

Re: [yocto] [meta-security][PATCH 7/8] linux: overlayfs: Add kernel patch resolving a file change notification issue

2023-04-28 Thread Mikko Rapeli
Hi, On Fri, Apr 28, 2023 at 08:23:15AM -0400, Stefan Berger wrote: > Add a temporary patch that resolves a file change notification issue > with overlayfs where IMA did not become aware of the file changes > since the 'lower' inode's i_version had not changed. The issue will be > resolved in later

Re: [yocto] Give access token to yocto build. (pass environment variable to bitbake)

2023-04-14 Thread Mikko Rapeli
Hi, On Fri, Apr 14, 2023 at 09:37:05AM +0200, Leon Woestenberg wrote: > On Fri, Apr 14, 2023 at 9:24 AM Mikko Rapeli > wrote: > > > > > The environment variables and thus secrets are easily leaking into build > > logs so I would not use them. > > > >

Re: [yocto] Give access token to yocto build. (pass environment variable to bitbake)

2023-04-14 Thread Mikko Rapeli
Hi, On Thu, Apr 13, 2023 at 07:54:13PM +, Philippe Lafontaine via lists.yoctoproject.org wrote: > Greeting, > > I have a recipe that fetch a pre-built binary from a build machine using an > access token. Every developer will have different access token, for obvious > reason. Therefore, the

[yocto] [meta-security][PATCH v3] parsec-service: update from 1.1.0 to 1.2.0-rc1

2023-03-26 Thread Mikko Rapeli
s from poky to maintain list of crates in the .inc file, but removed entries for fuzz/Cargo.lock. Tested on qemu that parsec.service stars correctly and works with swtpm use cases. Signed-off-by: Mikko Rapeli --- ...ce_1.1.0.inc => parsec-service-crates.inc} | 239 +- ...e_

Re: [yocto] [meta-security][PATCH] parsec-service: update from 1.1.0 to 1.2.0-rc1

2023-03-26 Thread Mikko Rapeli
Hi, On Fri, Mar 24, 2023 at 08:05:08AM -0700, Anton Antonov wrote: > Hi Mikko, > > > > > +SRC_URI += > > "git://github.com/parallaxsecond/parsec;protocol=https;branch=main \ > > We noticed another small issue with your patch. Could you use gitsm instead > of git, so required git submodules wil

[yocto] [meta-security][PATCH v2] parsec-service: update from 1.1.0 to 1.2.0-rc1

2023-03-24 Thread Mikko Rapeli
s from poky to maintain list of crates in the .inc file, but removed entries for fuzz/Cargo.lock. Tested on qemu that parsec.service stars correctly and works with swtpm use cases. Signed-off-by: Mikko Rapeli --- ...ce_1.1.0.inc => parsec-service-crates.inc} | 239 +- ...e_

Re: [yocto] [meta-security][PATCH] parsec-service: update from 1.1.0 to 1.2.0-rc1

2023-03-24 Thread Mikko Rapeli
Hi, On Fri, Mar 24, 2023 at 05:24:31AM -0700, Anton Antonov wrote: > Hi Mikko, > > Thank you for the patch. In general I don't mind switching from "cargo > bitbake" to "bitbake -c update_crates" for Parsec recipes. But, in this case > when you use a git repository instead of a Parsec crate the

[yocto] [meta-security][PATCH] parsec-service: update from 1.1.0 to 1.2.0-rc1

2023-03-23 Thread Mikko Rapeli
s from poky to maintain list of crates in the .inc file. Tested on qemu that parsec.service stars correctly and works with swtpm use cases. Signed-off-by: Mikko Rapeli --- .../parsec-service/parsec-service-crates.inc | 449 ++ .../parsec-service/parsec-service_1.1.0.inc | 223

[yocto] [meta-security][PATCH] ima-evm-utils: disable documentation from build

2023-03-20 Thread Mikko Rapeli
Building documentation fails due to missing asciidoc, xsltproc etc so it's better to just disable building them by default. Signed-off-by: Mikko Rapeli --- .../recipes-security/ima-evm-utils/ima-evm-utils_1.4.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-integrity/re

[yocto] [meta-selinux][PATCH] linux-yocto: remove version from bbappend

2023-03-06 Thread Mikko Rapeli
There are multiple kernel versions now and the changes apply to all of them, e.g. 5.15 and 6.1. Signed-off-by: Mikko Rapeli --- .../linux/{linux-yocto_5.%.bbappend => linux-yocto_%.bbappend}| 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-kernel/linux/{linux-yoct

Re: [yocto] [kirkstone][meta-security][PATCH 0/2] dm-verity-img support for squashfs and erofs

2023-02-14 Thread Mikko Rapeli
Hi, On Tue, Feb 14, 2023 at 09:08:29AM +0100, Maciej Borzęcki wrote: > A cherry pick of patches adding support for EROFS and squashfs in > dm-verity-img. Depending on stable branch policies for meta-security, backporting new features may not be acceptable. As an alternative, master branch may j

Re: [yocto] [kirkstone][meta-tpm][PATCH 1/3] oeqa/swtpm: add swtpm runtime

2023-02-01 Thread Mikko Rapeli
Hi, I don't mind but is the meta-security policy to accept new features in stable branches? FWIW, meta-security meta-tpm master branch does work on kirkstone too. On Wed, Feb 01, 2023 at 08:26:12AM -0500, Armin Kuster wrote: > Signed-off-by: Armin Kuster > (cherry picked from commit 50eff83d428

Re: [yocto] [meta-security][PATCH] linux-yocto: drop version from bbappends

2023-02-01 Thread Mikko Rapeli
Hi, On Wed, Feb 01, 2023 at 08:19:42AM -0500, akuster808 wrote: > > > On 1/30/23 6:01 AM, Mikko Rapeli wrote: > > These bbappends apply to multiple kernel versions so no > > need to make them version dependent. Fixes recipe parsing when > > using meta-security master

[yocto] [meta-security][PATCH] linux-yocto: drop version from bbappends

2023-01-30 Thread Mikko Rapeli
have to branch off layers over minor details like this. Signed-off-by: Mikko Rapeli --- .../linux/{linux-yocto_6.%.bbappend => linux-yocto_%.bbappend}| 0 .../linux/{linux-yocto_6.%.bbappend => linux-yocto_%.bbappend}| 0 2 files changed, 0 insertions(+), 0 deletions(-) rename

[yocto] [meta-security][PATCH] linux-yocto: drop version from bbappends

2023-01-30 Thread Mikko Rapeli
have to branch off layers over minor details like this. Signed-off-by: Mikko Rapeli --- .../linux/{linux-yocto_6.%.bbappend => linux-yocto_%.bbappend}| 0 .../linux/{linux-yocto_6.%.bbappend => linux-yocto_%.bbappend}| 0 2 files changed, 0 insertions(+), 0 deletions(-) rename

Re: [yocto] meta-egl failure: Nothing RPROVIDES polkit

2022-05-31 Thread Mikko Rapeli
On Tue, May 31, 2022 at 07:52:05AM -0500, Joshua Watt wrote: > On Tue, May 31, 2022 at 7:27 AM wrote: > > > > On Sat, 2022-05-28 at 07:40 +0300, Marius Vlad wrote: > > > On Fri, May 27, 2022 at 04:25:00PM -0400, Scott Murray wrote: > > > > On Fri, 27 May 2022, Tim Orling wrote: > > > > > > > > > O

Re: [yocto] host file contamination with recipes using cmake and find_package

2022-05-27 Thread Mikko Rapeli
Hi, On Fri, May 27, 2022 at 04:37:40PM +0100, Daniel Squires wrote: > We are indeed using > > inherit cmake > > The CMakeLists.txt adds a few bits to CMAKE_CXX_FLAGS but does not outright > clobber it. I have noticed in other recipes some things like: > > EXTRA_OECONF = " --with-openssl=${STAGI

Re: [yocto] host file contamination with recipes using cmake and find_package

2022-05-27 Thread Mikko Rapeli
Hi, On Fri, May 27, 2022 at 08:07:57AM -0700, Daniel Squires wrote: > Hi, > We have an internal source tree, I'll call it libA for brevity here, which > uses cmake and find_package to build against openssl as follows: > > find_package(OpenSSL REQUIRED) > > The recipe for this source runs fine b

Re: [yocto] Custom DISTRO_VERSION with git describe

2022-04-28 Thread Mikko Rapeli
Hi, On Thu, Apr 28, 2022 at 01:38:35PM +0200, Ayoub Zaki wrote: > I'm also suing dunfell branch, I did a small modification in > my_distro_version.bbclass: > > def my_distro_version(d): > > import subprocess > > project_path = d.getVar('MY_LAYER_BASE', True) > > cmd = "git describe --

Re: [yocto] Custom DISTRO_VERSION with git describe

2022-04-28 Thread Mikko Rapeli
On Thu, Apr 28, 2022 at 01:25:03PM +0200, Ayoub Zaki wrote: > Hi, > > thanks for the quick reply I tried your suggestion but I get: > > ERROR: Unable to parse Var > Traceback (most recent call last): > File "Var ", line 1, in > bb.data_smart.ExpansionError: Failure expanding variable > DISTRO

Re: [yocto] Custom DISTRO_VERSION with git describe

2022-04-28 Thread Mikko Rapeli
Hi, On Thu, Apr 28, 2022 at 01:04:22PM +0200, Ayoub Zaki via lists.yoctoproject.org wrote: > hello, > > > I would like to have a custom DISTRO_VERSION based on "git describe" of my > layer: > > > 1) In my layer meta-mylayer/conf/layer.conf, I defined the following: > > # Set variable to get

Re: [yocto] [Question] How to handle GPLv3 packages?

2022-04-08 Thread Mikko Rapeli
Hi, On Fri, Apr 08, 2022 at 10:18:22AM +0200, Mans Zigher wrote: > Hi Ross, > > We don't have a ptest set in DISTRO_FEATURE so if that is the only way > to pull in ptest I would say that is the reason for us at least on why > there are so many bash dependencies. > One recipe that I am looking int

Re: [yocto] [Question] How to handle GPLv3 packages?

2022-04-06 Thread Mikko Rapeli
Hi I set INCOMPATIBLE_LICENSE_append = " GPLv3 GPLv3+ LGPLv3 LGPLv3+" but then allow compiling several recipes with those licenses as long as they don't end up on images and in the product. For example: ... WHITELIST_GPL-3.0+ += "cairo" PACKAGE_EXCLUDE += "cairo-src cairo-dbg cairo-perf-utils cai

Re: [yocto] How to manage disk space while working with Yocto?

2022-03-16 Thread Mikko Rapeli
Hi, On Wed, Mar 16, 2022 at 12:54:14AM -0700, Sourabh Hegde wrote: > Hello All, > > I am using Yocto for one of my project. I know that Yocto needs a good amount > of disk space for build activities. And also I am working as non-root user in > Ubuntu 20.04. But I often run into space issues dur

Re: [yocto] [oe] Inclusive Language Proposal for YP/OE

2022-01-26 Thread Mikko Rapeli
Hi, On Tue, Jan 25, 2022 at 04:30:40PM +, Ross Burton wrote: > On Mon, 24 Jan 2022 at 16:18, Jon Mason wrote: > > CVE_CHECK_PN_WHITELIST -> CVE_CHECK_SKIPRECIPE > > CVE_CHECK_WHITELIST -> CVE_CHECK_IGNORECVE > > This is the only one that sticks out to me. I think it needs another > _, SKIP_

[yocto] [PATCH][meta-selinux][dunfell] MAINTAINERS: update email address

2021-10-15 Thread Mikko Rapeli
From: Armin Kuster Include example send-email Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit 48038b45dc114592991c069eb66d174820c0701d) --- MAINTAINERS | 9 - 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/MAINTAINERS b/MAINTAINERS ind

Re: [yocto] Yocto Dunfell: u-boot-fw-utils ERROR #yocto #dunfell #swupdtae #libubootenv #imx6

2021-04-20 Thread Mikko Rapeli
Hi, On Tue, Apr 20, 2021 at 03:24:25AM -0700, anthony.march...@navocap.com wrote: > Hello, > I'm actually migrating a yocto project zeus version to dunfell LTS to build > my imx6 Linux system on this LTS release. > > Almost all works fine except the following message I try to understand when I

Re: [licensing] [yocto] Package names in IMAGE_MANIFEST and PACKAGES

2021-02-26 Thread Mikko Rapeli
Hi, On Fri, Feb 26, 2021 at 10:08:47AM -0500, Jérôme Carretero wrote: > On Fri, 26 Feb 2021 14:18:59 + > "Mikko Murto" wrote: > > > The crux of the matter is that I need to find packages created by recipes > > and to link the packages listed in image's manifest files to these > > packages.

Re: [yocto] Kernel Header UAPI Issue

2021-02-23 Thread Mikko Rapeli
Hi, On Tue, Feb 23, 2021 at 06:56:02AM -0800, Karthik Poduval wrote: > Hi Mikko, > > Do you have an example on how you do that ? Do you bbapend the > linux-libc-headers recipe file ? A kernel recipe will provide linux-libc-headers after a "make headers_install" call... So the SRC_URI of linux-l

Re: [yocto] Updating Yocto

2021-02-23 Thread Mikko Rapeli
On Tue, Feb 23, 2021 at 09:24:47AM -0500, Claude Bing wrote: > I mentioned that we remove that directory, and it does indeed solve a > lot of problems. Not sure that it was clear from the original message, > but whenever we get a random error on the first build after the upgrade > we run a "bitbak

Re: [yocto] Kernel Header UAPI Issue

2021-02-23 Thread Mikko Rapeli
Hi, I know it's not the best or recommended approach, but I find it hard to avoid merging linux-libc-headers recipe with the actual kernel recipe that a distro is using. At least a static copy of some version of uapi headers from that kernel can be used instead of the poky side linux-libc-headers.

Re: [yocto] Updating Yocto

2021-02-23 Thread Mikko Rapeli
Hi, On Mon, Feb 22, 2021 at 12:12:21PM -0500, Claude Bing wrote: > Hello all. My organization has been working with Yocto recently, and we > have noticed that there are often weird errors encountered after > updating revisions within a release branch (e.g., 3.1.3 -> 3.1.5). Is > there an accepted

Re: [yocto] using SYSTEMD_SERVICE to disable a systemd service?

2021-02-02 Thread Mikko Rapeli
Hi, On Tue, Feb 02, 2021 at 03:38:34AM -0500, Robert P. J. Day wrote: > > while the "standard" way to disable a systemd service from > auto-booting is SYSTEMD_AUTO_ENABLE, i just ran across a number of > examples in an existing project that do this: > > SYSTEMD_SERVICE_${PN} = "" > > ouch.

[yocto] [dunfell][PATCH v2 3/3] bitbake: fetch/git: download LFS content too during do_fetch

2021-01-29 Thread Mikko Rapeli
From: Matt Hoosier Insert an explicit pass to fetch all blobs needed by Git LFS, during the fetch() function. This avoids the default behavior of Git LFS to wait until 'git checkout' to begin downloading the blobs pointed to by LFS records. Network access is not allowed at that point in the recip

[yocto] [dunfell][PATCH v2 2/3] bitbake: git.py: Use the correct branch to check if the repository has LFS objects.

2021-01-29 Thread Mikko Rapeli
From: Mauro Queirós Function "contains_lfs" was only looking at the master branch when searching for LFS content. LFS may be configured in specific branches only, so we need to use the correct branch. (Bitbake rev: 4fa67c2af830035a1ddedc14592ee25a15ebff22) Signed-off-by: Mauro Queiros Signed-

[yocto] [dunfell][PATCH v2 1/3] bitbake: git.py: skip smudging if lfs=0 is set

2021-01-29 Thread Mikko Rapeli
From: Mauro Queirós Git-LFS objects were being fetched even when lfs=0 was not set. This patch disables LFS smudging when lfs=0. That way, only the LFS pointers are downloaded during checkout. (Bitbake rev: 646d86df7de774255246a3d7051c308e43eb257d) Signed-off-by: Mauro Queiros Signed-off-by: R

Re: [yocto] [OE-core] [dunfell][PATCH 1/2] bitbake: git.py: Use the correct branch to check if the repository has LFS objects.

2021-01-29 Thread Mikko Rapeli
Sorry, third patch needs to be backported from master for git lfs to work nicely on dunfell. Will send a v2. -Mikko -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#52147): https://lists.yoctoproject.org/g/yocto/message/52147 Mute This Topic: https://

[yocto] [dunfell][PATCH 2/2] bitbake: fetch/git: download LFS content too during do_fetch

2021-01-29 Thread Mikko Rapeli
From: Matt Hoosier Insert an explicit pass to fetch all blobs needed by Git LFS, during the fetch() function. This avoids the default behavior of Git LFS to wait until 'git checkout' to begin downloading the blobs pointed to by LFS records. Network access is not allowed at that point in the recip

[yocto] [dunfell][PATCH 1/2] bitbake: git.py: Use the correct branch to check if the repository has LFS objects.

2021-01-29 Thread Mikko Rapeli
From: Mauro Queirós Function "contains_lfs" was only looking at the master branch when searching for LFS content. LFS may be configured in specific branches only, so we need to use the correct branch. (Bitbake rev: 4fa67c2af830035a1ddedc14592ee25a15ebff22) Signed-off-by: Mauro Queiros Signed-

Re: [yocto] python bump

2020-11-11 Thread Mikko Rapeli
On Wed, Nov 11, 2020 at 08:39:42AM +0100, Belisko Marek wrote: > On Wed, Nov 11, 2020 at 8:04 AM wrote: > > > > Hi, > > > > On Tue, Nov 10, 2020 at 07:44:39PM +0100, Marek Belisko wrote: > > > Hi, > > > > > > I'm using poky release thud and would like to bump python3 to 3.8.x. I > > > took recipe

Re: [yocto] python bump

2020-11-10 Thread Mikko Rapeli
Hi, On Tue, Nov 10, 2020 at 07:44:39PM +0100, Marek Belisko wrote: > Hi, > > I'm using poky release thud and would like to bump python3 to 3.8.x. I > took recipe from most recent poky version but I'm hitting issue with > e.g. meson build like: > Log data follows: > | DEBUG: Executing shell functi

Re: [yocto] Backport some packages

2020-08-31 Thread Mikko Rapeli
Hi, On Mon, Aug 31, 2020 at 11:32:56AM +0200, Alexander Kanavin wrote: > The best is to ask your BSP supplier to provide a new version of the BSP > that is compatible with recent Yocto versions. > > Backporting userspace stuff is difficult or impossible. For those who aren't afraid to digging de

Re: [yocto] Yocto standard SDK/cmake/ and meta-clang build issue

2020-08-24 Thread Mikko Rapeli
Hi, On Mon, Aug 24, 2020 at 02:38:54PM +, Monsees, Steven C (US) via lists.yoctoproject.org wrote: > > I am having trouble with configuring my SDK for meta-clang... > > When I build my SDK, I setup the following: > > SDKMACHINE = "x86_64" > SDKIMAGE_FEATURES_append = " staticdev-pkgs" > TO

Re: [yocto] one way hash analogy of yocto

2020-07-31 Thread Mikko Rapeli
On Fri, Jul 31, 2020 at 08:45:17AM -0400, Rob Prowel wrote: > What I really need is information about introspection or the ability to > query an existing yocto distro to return data about features included and > more to the point, to understand EXACTLY where recipes or classes are > overridden or a

Re: [yocto] meta layers priority using BBFILE_PRIORITY in layer.conf is not working for me?

2020-07-14 Thread Mikko Rapeli
Hi, On Tue, Jul 14, 2020 at 02:08:37PM +0200, Mans Zigher wrote: > I figured it out the problem was that in meta-layer1 we had > SRC_URI_append_machine1 += "file://0001-patch-one.patch" this > apparently will always be added to the end of SRC_URI list and > thereby the meta-layer2 patches will be

Re: [yocto] ERROR: iso-codes-4.4-r0

2020-07-08 Thread Mikko Rapeli
Hi, On Wed, Jul 08, 2020 at 07:52:30AM -0700, Pankaj Vinadrao Joshi wrote: > I am trying to build yocto image for RPI4 but i am getting following error > > pankaj@exaleap-Inspiron-3584:~/raspberrypi4_image$ bitbake core-image-sato > Parsing recipes: 100% > |#

Re: [yocto] INCOMPATIBLE_LICENSE - how to use it properly?

2020-06-30 Thread Mikko Rapeli
Hi, On Tue, Jun 30, 2020 at 09:34:39AM +, John Ernberg wrote: > Hi, > > I have been trying to use INCOMPATIBLE_LICENSE to filter out undesirable > licenses for us from our images. I started simple and picked the > examples from the manual (AGPL-3.0, GPL-3.0 and LGPL-3.0). > > Currently we'

Re: [yocto] what to expect from distributed sstate cache?

2020-05-27 Thread Mikko Rapeli
Hi, On Wed, May 27, 2020 at 10:58:55AM +0200, Mans Zigher wrote: > This is maybe more related to bitbake but I start by posting it here. > I am for the first time trying to make use of a distributed sstate > cache but I am getting some unexpected results and wanted to hear if > my expectations are

Re: [yocto] Is there a relationship between the sstate and the machine?

2020-05-13 Thread Mikko Rapeli
Hi, On Wed, May 13, 2020 at 10:36:49AM +0200, Mans Zigher wrote: > I am using a build environment based on the yocto project from one of > the big HW suppliers in the mobile industries. They are continuously > breaking the principles behind the yocto project and at one point they > managed to brea

Re: [yocto] Image size reduction

2020-03-30 Thread Mikko Rapeli
On Mon, Mar 30, 2020 at 03:00:05AM +, Ajam Ali wrote: > Hi khemraj, > > Please suggest the way to reduce the image size. Your earlier suggestion is > not that much helpful. Actually suggestion to use buildhistory is the first critical step because without this you can't easily see where the

  1   2   >