On Fri, Jan 13, 2023 at 6:32 AM Kamal Kishor <kamal.kishor@...> wrote:

Hi,
I was trying to integrate meta-selinux layer with thud branch on our existing yocto build. I followed all the steps which are mentioned in README and SElinux-FAQ but I am facing an error in do_rootfs step.
The error is shown below:

ERROR: custom-base-image-1.0-r0 do_rootfs: Unable to install packages. Command '/mnt/EVC-TI-06.03.00.106/tisdk/build/arago-tmp-external-arm-toolchain/work/am437x_hs_evm-linux-gnueabi/custom-base-image/1.0-r0/recipe-sysroot-native/usr/bin/opkg --volatile-cache -f /mnt/EVC-TI-06.03.00.106/tisdk/build/arago-tmp-external-arm-toolchain/work/am437x_hs_evm-linux-gnueabi/custom-base-image/1.0-r0/opkg.conf -t /mnt/EVC-TI-06.03.00.106/tisdk/build/arago-tmp-external-arm-toolchain/work/am437x_hs_evm-linux-gnueabi/custom-base-image/1.0-r0/temp/ipktemp/ -o /mnt/EVC-TI-06.03.00.106/tisdk/build/arago-tmp-external-arm-toolchain/work/am437x_hs_evm-linux-gnueabi/custom-base-image/1.0-r0/rootfs --force_postinstall install agentv3-evc10 base-passwd czmq dropbear e2fsprogs-resize2fs eichrecht gattlib gosuncn-cm ifmetric kernel-module-mt7663 kernel-module-mt7668 kernel-module-mt7668-bt libmodbus5 libtcti-device-dev libtcti-device-staticdev libtcti-device0 libtcti-socket-dev libtcti-socket-staticdev libtcti-socket0 libtss2 libtss2-dev libtss2-staticdev libwebsockets19 midmeter modbustcp ocpp-evc10 openssh-sftp-server opkg ostree packagegroup-arago-base packagegroup-arago-base-tisdk packagegroup-arago-console packagegroup-arago-qte packagegroup-arago-tisdk-connectivity packagegroup-arago-tisdk-crypto packagegroup-arago-tisdk-graphics packagegroup-core-boot packagegroup-core-selinux parted procps psplash pybluez python3-aws-iot-device-sdk-python python3-bcrypt python3-flask python3-flask-login python3-flask-restful python3-flask-sqlalchemy python3-marshmallow python3-modbus-tk python3-pycryptodome python3-pyjwt python3-pyserial python3-pyzmq python3-requests python3-sqlalchemy quectel-cm resourcemgr rest-webasto restv2 run-postinsts shadow smartcharge tpm2.0-tools tzdata ui-evc10 uidreader webconfigv3 wpa zeromq' returned 1:
Collected errors:
* Solver encountered 1 problem(s):
* Problem 1/1:
* - nothing provides coreutils needed by packagegroup-core-selinux-1.0-r0.armv7at2hf-neon

Does your distro policy inhibit GPL-3.0 ? if so then the error is right.

*
* Solution 1:
* - do not ask to install a package providing packagegroup-core-selinux



ERROR: custom-base-image-1.0-r0 do_rootfs: Function failed: do_rootfs
ERROR: Logfile of failure stored in: /mnt/EVC-TI-06.03.00.106/tisdk/build/arago-tmp-external-arm-toolchain/work/am437x_hs_evm-linux-gnueabi/custom-base-image/1.0-r0/temp/log.do_rootfs.21704
ERROR: Task (/mnt/EVC-TI-06.03.00.106/tisdk/sources/meta-custom/recipes-core/images/custom-base-image.bb:do_rootfs) failed with exit code '1'


To avoid the error, I added RDEPENDS_packagegroup-core-selinux_remove = "coreutils" to local.conf. After that the build is successfull.
But I am not sure if this will break selinux functionality. Please provide me with some insights on this.

If your distro does not want coreutils then you may have to look
through other options to get selinux working. I am not sure if
upstream meta-security tests this option
by default.

Attached here is the log file for your reference. Please let me know if you need any information from me.

Thanks & Regards
Kamal Pandey