Date   

Re: #bitbake Can't use 'bitbake -g <image-name> -u taskdep #bitbake

keydi <krzysztof.dudziak@...>
 

Myself wonders if the answer is just to enable a recipe building native package gtk of version 3.0.


Re: [meta-security][PATCH] packagegroup-core-security: exclude apparmor in mips64

Armin Kuster
 

On 4/20/21 9:07 AM, Khem Raj wrote:


On 4/20/21 7:41 AM, Armin Kuster wrote:
Signed-off-by: Armin Kuster <akuster808@...>
---
  recipes-core/packagegroup/packagegroup-core-security.bb | 3 +++
  1 file changed, 3 insertions(+)

diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb
b/recipes-core/packagegroup/packagegroup-core-security.bb
index 9ac0d2c..a6142a8 100644
--- a/recipes-core/packagegroup/packagegroup-core-security.bb
+++ b/recipes-core/packagegroup/packagegroup-core-security.bb
@@ -80,6 +80,9 @@ RDEPENDS_packagegroup-security-mac = " \
      ${@bb.utils.contains("DISTRO_FEATURES", "smack", "smack", "",d)} \
      "
  +RDEPENDS_packagegroup-security-mac_remove_mips64 = "apparmor"
+RDEPENDS_packagegroup-security-mac_remove_mips64le = "apparmor"
+
this should be mips64el
Actuall, this is the wrong patch. working on too many systems.

Thanks for the review.

-armin

  RDEPENDS_packagegroup-meta-security-ptest-packages = "\
      ptest-runner \
      samhain-standalone-ptest \





Re: [PATCH] [yocto-autobuilder-helper 1/2] config.json: Add default MACHINE qemux86-64

Yi Fan Yu
 

+cc RP

On 4/19/21 10:36 PM, Yi Fan Yu wrote:
This is the default oe-core MACHINE value.
Prevent error-reporting tool to report simply False.
It was seen in check-layer where the MACHINE wasn't specified.
[YOCTO #14208]
Signed-off-by: Yi Fan Yu <yifan.yu@...>
---
config.json | 1 +
1 file changed, 1 insertion(+)
diff --git a/config.json b/config.json
index 962d8ae..2d1a698 100644
--- a/config.json
+++ b/config.json
@@ -26,6 +26,7 @@
"defaults" : {
"NEEDREPOS" : ["poky"],
"DISTRO" : "poky",
+ "MACHINE" : "qemux86-64",
"SDKMACHINE" : "i686",
"PACKAGE_CLASSES" : "package_rpm package_deb package_ipk",
"DLDIR" : "DL_DIR = '${BASE_SHAREDDIR}/current_sources'",


[yocto-autobuilder2] [PATCH] config/schedulers: Add check-layer-nightly

Richard Purdie
 

Add a new target to run layer checks every 24 hours on various layers we don't
test as part of the standard test runs.

Signed-off-by: Richard Purdie <richard.purdie@...>
---
config.py | 2 ++
schedulers.py | 5 +++++
2 files changed, 7 insertions(+)

diff --git a/config.py b/config.py
index 54ec9ce8..82076cd3 100644
--- a/config.py
+++ b/config.py
@@ -23,6 +23,7 @@ buildertorepos = {
"qemuarm-oecore": ["oecore", "bitbake"],
"checkuri": ["poky"],
"check-layer": ["poky", "meta-mingw", "meta-gplv2"],
+ "check-layer-nightly": ["poky", "meta-agl", "meta-arm", "meta-aws", "meta-intel", "meta-openembedded", "meta-virtualization"],
"docs": ["yocto-docs", "bitbake"],
"default": ["poky"]
}
@@ -110,6 +111,7 @@ builders_others = [
"qemuarm-armhost",
"meta-agl-core",
"meta-aws",
+ "check-layer-nightly",
"auh"
]

diff --git a/schedulers.py b/schedulers.py
index 9d81806b..8b166e0b 100644
--- a/schedulers.py
+++ b/schedulers.py
@@ -352,6 +352,11 @@ schedulers.append(sched.Nightly(name='nightly-quick', branch='master', propertie
schedulers.append(sched.Nightly(name='nightly-full', branch='master', properties=parent_default_props('a-full'),
builderNames=['a-full'], hour=1, minute=0, dayOfWeek=6))

+# Run check-layer-nightly each day
+schedulers.append(sched.Nightly(name='nightly-check-layer', branch='master', properties=parent_default_props('check-layer-nightly'),
+ builderNames=['check-layer-nightly'], hour=0, minute=0))
+
+
# Run the build performance tests at 3am, 9am, 3pm and 9pm
schedulers.append(sched.Nightly(name='nightly-buildperf-ubuntu1604', branch='master', properties=parent_default_props('buildperf-ubuntu1604'),
builderNames=['buildperf-ubuntu1604'], hour=[3,9,15,21], minute=0))
--
2.30.2


hardknott build issue

Marek Belisko
 

Hi,

I'm meta-sunxi co-maintainer and in order to add hardknott support to
meta-sunxi I try to build few days ago image from hardknott release
and hitting this issue:

WARNING: core-image-base-1.0-r0 do_rootfs: libglib-2.0-0.postinst
returned 126, marking as unpacked only, configuration required on
target.
WARNING: core-image-base-1.0-r0 do_rootfs: eudev-hwdb.postinst
returned 126, marking as unpacked only, configuration required on
target.
ERROR: core-image-base-1.0-r0 do_rootfs: Postinstall scriptlets of
['libglib-2', 'eudev-hwdb'] have failed. If the intention is to defer
them to first boot,
then please place them into pkg_postinst_ontarget_${PN} ().
Deferring to first boot via 'exit 1' is no longer supported.
Details of the failure are in
/home/builder/build/tmp/work/orange_pi_zero-poky-linux-gnueabi/core-image-base/1.0-r0/temp/log.do_rootfs.
ERROR: Logfile of failure stored in:
/home/builder/build/tmp/work/orange_pi_zero-poky-linux-gnueabi/core-image-base/1.0-r0/temp/log.do_rootfs.8491
ERROR: Task (/home/builder/poky/meta/recipes-core/images/core-image-base.bb:do_rootfs)
failed with exit code '1'

I'm building core-image-base without any other changes. Ideas?

Thanks and BR,

marek


--
as simple and primitive as possible
-------------------------------------------------
Marek Belisko - OPEN-NANDRA
Freelance Developer

Ruska Nova Ves 219 | Presov, 08005 Slovak Republic
Tel: +421 915 052 184
skype: marekwhite
twitter: #opennandra
web: http://open-nandra.com


Re: Yocto Technical Team Minutes, Engineering Sync, for April 20, 2021

Nicolas Dechesne
 



On Tue, Apr 20, 2021 at 7:35 PM Trevor Woerner <twoerner@...> wrote:
Yocto Technical Team Minutes, Engineering Sync, for April 20, 2021
archive: https://docs.google.com/document/d/1ly8nyhO14kDNnFcW2QskANXW3ZT7QwKC5wWVDg9dDH4/edit

== announcements ==
The upcoming Yocto Project Summit is taking place May 25-26 2021
details: https://www.yoctoproject.org/yocto-project-virtual-summit-2021/
CfP: https://pretalx.com/yocto-project-summit-2021/cfp
registration: https://www.cvent.com/d/yjq4dr/4W?ct=868bfddd-ca91-46bb-aaa5-62d2b61b2501

== disclaimer ==
Best efforts are made to ensure the below is accurate and valid. However,
errors sometimes happen. If any errors or omissions are found, please feel
free to reply to this email with any corrections.

== attendees ==
Trevor Woerner, Stephen Jolley, Armin Kuster, Steve Sakoman, Peter
Kjellerstedt, Alexandre Belloni, Michael Opdenacker, Scott Murray, Jon
Mason, Michael Halstead, Richard Purdie, Bruce Ashfield, Ross Burton, Randy
MacLeod, Saul Wold, Tim Orling, Daiane Angolini

== notes ==
- 3.3 (hardknott) released!!
- 3.1.7 (dunfell) through QA, pending TSC approval
- YP TSC: 3 seats re-elected, 2 seats up for re-election
- master branch open for 3.4 (honister) and things are starting to merge
- new command proposed: bitbake-getvar
- AB issues: 59 (going up)

== general ==
RP: the re-election for OE TSC is coming up in August, but the re-election for
    the YP TSC is in May. a call for candidates will be going out soon
TrevorW: do we want to align the voting with the conference?
RP: probably not


MichaelO: is there a 3.3 celebration?
RP: usually we do it at the conferences, but we’ll have to do it at the
    virtual one this year
MichaelO: i didn’t see anything on lwn
RP: we don’t have a mechanism for this
MichaelO: there are usually release notes
RP: yocto-announce mailing list
TrevorW: release notes?
RP: yes, PaulE put together some notes
TrevorW: is someone putting a release note together?
MichaelO: okay, i’ll put it together and email internally first
RP: advocacy is less that it was, if people can think of places to
    help/advertise that would be great. sometime i publish something in the LF
    newsletter

I think we should indeed improve that a bit. As far as I know, the only place for the release notes is the 'email' sent to yocto-announce, which includes the content from this file:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.3/RELEASENOTES

At the very least we should probably produce (as part of the release process) a similar document that we publish on the website site. That would help us share the news on various social media. We either need to reformat the content for the web , e.g. more verbose, or at least copy/paste into an html page. 
We also recently discussed moving the release notes to docs.yp.org, so perhaps that could be enough to publish it here. The point is it's simpler to share a link on twitter, linkedin, .. that this 'raw/text' file.
 


RP: bitbake-getvar, instead of “bitbake -e | grep”. saves people some
    keystrokes
RP: uses tinfoil, acts as a very good, very small example of how to write a
    small tinfoil tool (e.g. c larson’s bb tool). maybe a way of expanding
    this infrastructure to make it easier to add tools in the future, perhaps
    expandable in layers itself
RP: also perhaps could be used for layer and config setup (e.g. kas,
    combo-layer)
AlexB: sounds great! i often show students “bitbake -e | grep” and
    they’re often surprised and happy to see it
ScottM: +1
RP: it’s in master-next. there are probably a lot of tutorials that will
    need updating after this :-) and there are places in selftest where we do
    “bitbake -e | grep” (it runs it once then builds a dictionary of the
    results to avoid having to run it multiple times throughout the test run)
RossB: it’s similar to bbvars
RP: i’d like to keep it simple, single variable, i don’t want to get too
    much scope creep which makes it more complicated. not meant to solve all
    problems, just solve one elegantly. if we add something to take multiple
    vars then we’d have to return JSON (?) or something else that would be
    machine-parsable
RP: i think a separate command to do multiple vars would be best


PeterK: don't forget to move poky-conf back to master
RP: ah, thanks


Saul: CentOS 8 issues, grrr
RP: i haven’t looked into it
Saul: i think qemu is dying and qmp is trying to read the linux socket and
    getting nothing. maybe i could take out the centos builder for a while
RP: sounds reasonable. if you want to pull one builder out to work on it, that
    would be fine
Saul: i’ll talk to MichaelH about it


Saul: any cmake experts out there?
<crickets>
Saul: i have a nasty cmake + python issue wrt ceph: it doesn’t find the
    core gcc libraries, sysroot being set to /not/exist. i think there’s an
    environment passing issue between cmake and the python
RP: that /not/exist is something *we* hardcode into the compiler to make sure
    sysroot gets set
Bruce: have a look at what we did in libvirt recently. we had a similar issue
    with meson whereby it couldn’t find getent from libc. we had to create a
    patch. meson+cmake couldn’t find getent from libc
RossB: i’ll take a look at your patch Bruce, meson acts strange in some
    ways, but sometimes there’s a way to straighten it out


ScottM: Steve: 3.1.7 this week?
SteveS: up to TSC to approve it
RP: it’s through QA, QA didn’t flag any issues (there was one failure but
    it succeeded on a subsequent build). the TSC meeting is later today, so if
    they approve it’ll be out by tomorrow


Randy: latency monitoring. turned down from 10 to 6 seconds, tuned timeout
    from 5 to 15 seconds. new column in AB console to link to this new data.
    generates graphs of “time to dd 100 kb periodically” to hopefully help
    correlate failures with load. we usually see 3-5 seconds but sometimes 50s
    for unexplained reasons
RP: that’s very interesting. but we still don’t know what the system is
    doing at those times when we see the 20. it’s one thing to know it’s
    happening, it’s another to know why. i’ve noticed that webkit builds
    add a lot of load, also compression adds a lot of load (xz)
Randy: behind on the rust things since i’ve been working on this


RP: speaking of languages, Go also worries me. Go has 2 issues: the fetcher
    is messy and builds are not reproducible. are there any Go experts in our
    community who can help?
TimO: Bruce and I have been struggling over a bunch of things, but it’s not
    fun
Bruce: working on something; i’m currently up to 37 fetches, but it’s not
    just fetching but also a layout issue. if you fetch something to “c/a”
    but Go expects to find it at “a” then it won’t use it
Randy: someone wrote a cargo module for Rust to do something similar (i.e. a
    translation between Rust and bitbake), would that pattern be useful here?
Bruce: probably, hard to know at what point we need to make deep changes vs
    patches on the surface. the “make” infrastructure doesn’t help, too
    many hard-coded paths and options in the Go  “make” files
RP: and that’s only ½ the problem (still have build reproducibility issues)
Bruce: Khem can bump the Go version, but then we need to chase after all these
    fixes


Randy: suricata?
Armin: yes, those are in meta-security now, donated by ARM
Randy: did you use a cargo build
Armin: it was a couple things, had to start with one but then switch over
    partway


TrevorW: is there any update on the “layout of where patches go” work?
RP: you mean “work directory” vs “source directory”?
RP: pretty invasive things, put it aside for now. a change like this will end
    up causing lots of follow-on issues for weeks to come. the cleanup would
    be nice, don’t know if the cost is worth it and would eat up my time for
    a while. although i agree the time would be best now to do it (start of
    new release). i think this is the second time i’ve tried


RP: parallel make job server (another such example of something I’ve looked
    at and think would be nice, but have had to put aside for the time-being)
RP: the todo list isn’t too bad, but it’s something that fell off to the
    side.
RP: i get the feeling that some of the things Randy is trying to track down
    (load on AB servers) might end up being helped by having a parallel job
    server, but we just don’t know
ScottM: is that branch still around. i’m interested in tinkering with it
RP: ignore the branch, just take the commit.
RP: i had hard-coded the fifo to one place (/tmp) on the machine, which means
    every build on that machine is tied together. is that good or bad?
ScottM: is that something you could see being global for all bitbake on the
    machine
RP: as long as all the builds are being run by the same user. probably need to
    create a separate fifo, give it a relevant name, and place it somewhere
    where each user can access it themselves. maybe i should try it on the AB
    and see what blows up




[meta-openssl102-fips][PATCH 6/6] layer.conf: add hardknott to LAYERSERIES_COMPAT

Yi Zhao
 

From: Chen Qi <Qi.Chen@...>

Signed-off-by: Chen Qi <Qi.Chen@...>
---
conf/layer.conf | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/layer.conf b/conf/layer.conf
index 892cf79..01026f0 100644
--- a/conf/layer.conf
+++ b/conf/layer.conf
@@ -10,7 +10,7 @@ BBFILE_PRIORITY_meta-openssl-one-zero-two-fips = "5"

LAYERVERSION_meta-openssl-one-zero-two-fips = "1"

-LAYERSERIES_COMPAT_meta-openssl-one-zero-two-fips = "zeus"
+LAYERSERIES_COMPAT_meta-openssl-one-zero-two-fips = "hardknott"

LAYERPATH_meta-openssl-one-zero-two-fips = "${LAYERDIR}"

--
2.25.1


[meta-openssl102-fips][PATCH 5/6] openssh: set kex->sessin_id via sshbuf_put in ssh-cavs

Yi Zhao
 

The kex->session_id has been replaced from u_char * to sshbuf and
kex->session_id_len has been removed in openssh 8.5[1]. Update ssh-cavs
to adapt it.

Fixes:
ssh-cavs.c:198:12: error: 'struct kex' has no member named 'session_id_len'; did you mean 'session_id'?
198 | ssh->kex->session_id_len = test->session_id_len;
| ^~~~~~~~~~~~~~
| session_id

[1] https://github.com/openssh/openssh-portable/commit/39be3dc209f28f9c1ebfeba42adde8963b01e1cd

Signed-off-by: Yi Zhao <yi.zhao@...>
---
...avs-set-kex-sessin_id-via-sshbuf_put.patch | 45 +++++++++++++++++++
recipes-connectivity/openssh/openssh_fips.inc | 1 +
2 files changed, 46 insertions(+)
create mode 100644 recipes-connectivity/openssh/openssh/0001-ssh-cavs-set-kex-sessin_id-via-sshbuf_put.patch

diff --git a/recipes-connectivity/openssh/openssh/0001-ssh-cavs-set-kex-sessin_id-via-sshbuf_put.patch b/recipes-connectivity/openssh/openssh/0001-ssh-cavs-set-kex-sessin_id-via-sshbuf_put.patch
new file mode 100644
index 0000000..20e8604
--- /dev/null
+++ b/recipes-connectivity/openssh/openssh/0001-ssh-cavs-set-kex-sessin_id-via-sshbuf_put.patch
@@ -0,0 +1,45 @@
+From 3841d7c1057e62a57c49e5042080202739c9bf98 Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@...>
+Date: Thu, 8 Apr 2021 15:09:21 +0800
+Subject: [PATCH] ssh-cavs: set kex->sessin_id via sshbuf_put
+
+The kex->session_id has been replaced from u_char * to sshbuf and
+kex->session_id_len has been removed in openssh 8.5[1]. Update ssh-cavs
+to adapt it.
+
+Fixes:
+ssh-cavs.c:198:12: error: 'struct kex' has no member named 'session_id_len'; did you mean 'session_id'?
+ 198 | ssh->kex->session_id_len = test->session_id_len;
+ | ^~~~~~~~~~~~~~
+ | session_id
+
+[1] https://github.com/openssh/openssh-portable/commit/39be3dc209f28f9c1ebfeba42adde8963b01e1cd
+
+Upstream-Status: Inappropriate [oe specific]
+
+Signed-off-by: Yi Zhao <yi.zhao@...>
+---
+ ssh-cavs.c | 7 +++++--
+ 1 file changed, 5 insertions(+), 2 deletions(-)
+
+diff --git a/ssh-cavs.c b/ssh-cavs.c
+index 641a453..48bae74 100644
+--- a/ssh-cavs.c
++++ b/ssh-cavs.c
+@@ -194,8 +194,11 @@ static int sshkdf_cavs(struct kdf_cavs *test)
+ goto out;
+ }
+
+- ssh->kex->session_id = test->session_id;
+- ssh->kex->session_id_len = test->session_id_len;
++ if (sshbuf_put(ssh->kex->session_id, test->session_id, test->session_id_len) != 0) {
++ printf("cannot convert session_id into sshbuf\n");
++ ret = 1;
++ goto out;
++ }
+
+ /* setup kex */
+
+--
+2.17.1
+
diff --git a/recipes-connectivity/openssh/openssh_fips.inc b/recipes-connectivity/openssh/openssh_fips.inc
index 961f2d5..194a6f4 100644
--- a/recipes-connectivity/openssh/openssh_fips.inc
+++ b/recipes-connectivity/openssh/openssh_fips.inc
@@ -11,6 +11,7 @@ SRC_URI += " \
file://openssh-6.6p1-ctr-cavstest.patch \
file://openssh-6.7p1-kdf-cavs.patch \
file://0001-ssh-cavs-fix-the-double-free-error.patch \
+ file://0001-ssh-cavs-set-kex-sessin_id-via-sshbuf_put.patch \
"

do_install_append() {
--
2.25.1


[meta-openssl102-fips][PATCH 4/6] openssh: refresh patches to 8.5p1

Yi Zhao
 

From: Changqing Li <changqing.li@...>

Signed-off-by: Changqing Li <changqing.li@...>
---
.../0001-conditional-enable-fips-mode.patch | 40 ++++++++--------
.../openssh/0001-openssh-8.4p1-fips.patch | 48 +++++++++----------
2 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch b/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch
index 17c5967..9fd19c0 100644
--- a/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch
+++ b/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch
@@ -1,4 +1,4 @@
-From 571b24129e3c3a84e38a59a32aa61fa40e04e1e2 Mon Sep 17 00:00:00 2001
+From 48888de317391522186c6ae24a8d6d7d7add2673 Mon Sep 17 00:00:00 2001
From: Hongxu Jia <hongxu.jia@...>
Date: Sat, 21 Dec 2019 13:03:23 +0800
Subject: [PATCH] conditional enable fips mode
@@ -44,10 +44,10 @@ index 06566d3..a10566d 100644
sanitise_stdfd();

diff --git a/sftp-server.c b/sftp-server.c
-index 55386fa..8c1634e 100644
+index 7300900..42da9d7 100644
--- a/sftp-server.c
+++ b/sftp-server.c
-@@ -1577,6 +1577,7 @@ sftp_server_main(int argc, char **argv, struct passwd *user_pw)
+@@ -1616,6 +1616,7 @@ sftp_server_main(int argc, char **argv, struct passwd *user_pw)
extern char *optarg;
extern char *__progname;

@@ -56,10 +56,10 @@ index 55386fa..8c1634e 100644
log_init(__progname, log_level, log_facility, log_stderr);

diff --git a/sftp.c b/sftp.c
-index c88c861..171bc56 100644
+index fb3c08d..85b9b67 100644
--- a/sftp.c
+++ b/sftp.c
-@@ -2390,6 +2390,7 @@ main(int argc, char **argv)
+@@ -2345,6 +2345,7 @@ main(int argc, char **argv)
size_t num_requests = DEFAULT_NUM_REQUESTS;
long long limit_kbps = 0;

@@ -68,10 +68,10 @@ index c88c861..171bc56 100644
sanitise_stdfd();
msetlocale();
diff --git a/ssh-add.c b/ssh-add.c
-index 936dc21..b7ac2d2 100644
+index 7edb9f9..c75f85b 100644
--- a/ssh-add.c
+++ b/ssh-add.c
-@@ -671,6 +671,7 @@ main(int argc, char **argv)
+@@ -667,6 +667,7 @@ main(int argc, char **argv)
SyslogFacility log_facility = SYSLOG_FACILITY_AUTH;
LogLevel log_level = SYSLOG_LEVEL_INFO;

@@ -80,10 +80,10 @@ index 936dc21..b7ac2d2 100644
sanitise_stdfd();

diff --git a/ssh-agent.c b/ssh-agent.c
-index e1fd1f3..da49b57 100644
+index 58fe6dd..9018a7c 100644
--- a/ssh-agent.c
+++ b/ssh-agent.c
-@@ -1289,6 +1289,7 @@ main(int ac, char **av)
+@@ -1388,6 +1388,7 @@ main(int ac, char **av)
size_t npfd = 0;
u_int maxfds;

@@ -92,10 +92,10 @@ index e1fd1f3..da49b57 100644
sanitise_stdfd();

diff --git a/ssh-keygen.c b/ssh-keygen.c
-index cb8e569..67c7d62 100644
+index 6451584..246caa1 100644
--- a/ssh-keygen.c
+++ b/ssh-keygen.c
-@@ -3184,6 +3184,7 @@ main(int argc, char **argv)
+@@ -3153,6 +3153,7 @@ main(int argc, char **argv)
extern int optind;
extern char *optarg;

@@ -104,7 +104,7 @@ index cb8e569..67c7d62 100644
sanitise_stdfd();

diff --git a/ssh-keyscan.c b/ssh-keyscan.c
-index ca19042..c667f2c 100644
+index 7abbcbf..b604bfd 100644
--- a/ssh-keyscan.c
+++ b/ssh-keyscan.c
@@ -667,6 +667,7 @@ main(int argc, char **argv)
@@ -116,7 +116,7 @@ index ca19042..c667f2c 100644
seed_rng();
TAILQ_INIT(&tq);
diff --git a/ssh-keysign.c b/ssh-keysign.c
-index 7991e0f..26a3bab 100644
+index 907162d..294148a 100644
--- a/ssh-keysign.c
+++ b/ssh-keysign.c
@@ -173,6 +173,7 @@ main(int argc, char **argv)
@@ -128,10 +128,10 @@ index 7991e0f..26a3bab 100644
fatal("%s: pledge: %s", __progname, strerror(errno));

diff --git a/ssh-pkcs11-helper.c b/ssh-pkcs11-helper.c
-index d73e835..e508684 100644
+index a9a6fe3..3c76f70 100644
--- a/ssh-pkcs11-helper.c
+++ b/ssh-pkcs11-helper.c
-@@ -332,6 +332,7 @@ main(int argc, char **argv)
+@@ -326,6 +326,7 @@ main(int argc, char **argv)
extern char *__progname;
struct pollfd pfd[2];

@@ -140,22 +140,22 @@ index d73e835..e508684 100644
seed_rng();
TAILQ_INIT(&pkcs11_keylist);
diff --git a/ssh.c b/ssh.c
-index aabd5d3..81393f1 100644
+index 729d87a..ab78b53 100644
--- a/ssh.c
+++ b/ssh.c
-@@ -660,6 +660,7 @@ main(int ac, char **av)
- size_t n, len;
+@@ -650,6 +650,7 @@ main(int ac, char **av)
u_int j;
+ struct ssh_conn_info *cinfo = NULL;

+ ssh_enable_fips_mode();
/* Ensure that fds 0, 1 and 2 are open or directed to /dev/null */
sanitise_stdfd();

diff --git a/sshd.c b/sshd.c
-index 1f1fcc2..0f68419 100644
+index fee4703..07faf7b 100644
--- a/sshd.c
+++ b/sshd.c
-@@ -1553,6 +1553,7 @@ main(int ac, char **av)
+@@ -1534,6 +1534,7 @@ main(int ac, char **av)
Authctxt *authctxt;
struct connection_info *connection_info = NULL;

diff --git a/recipes-connectivity/openssh/openssh/0001-openssh-8.4p1-fips.patch b/recipes-connectivity/openssh/openssh/0001-openssh-8.4p1-fips.patch
index 48c18b4..10687ff 100644
--- a/recipes-connectivity/openssh/openssh/0001-openssh-8.4p1-fips.patch
+++ b/recipes-connectivity/openssh/openssh/0001-openssh-8.4p1-fips.patch
@@ -1,4 +1,4 @@
-From 059b61a58b27c40fbb78b3930cdcf110ff717340 Mon Sep 17 00:00:00 2001
+From 0452f9dc4acf90b8d7ac6ddf6ebbe455d202ce54 Mon Sep 17 00:00:00 2001
From: Hongxu Jia <hongxu.jia@...>
Date: Sat, 21 Dec 2019 11:45:38 +0800
Subject: [PATCH] openssh 8.4p1 fips
@@ -38,7 +38,7 @@ Signed-off-by: Yi Zhao <yi.zhao@...>
14 files changed, 171 insertions(+), 20 deletions(-)

diff --git a/Makefile.in b/Makefile.in
-index acfb919..5b2c397 100644
+index e3cd296..bf53fb0 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -204,25 +204,25 @@ libssh.a: $(LIBSSH_OBJS)
@@ -97,7 +97,7 @@ index 32771f2..74fac3b 100644
return (&aes_ctr);
}
diff --git a/dh.c b/dh.c
-index 7cb135d..306f1bc 100644
+index b5bb35e..676f893 100644
--- a/dh.c
+++ b/dh.c
@@ -152,6 +152,12 @@ choose_dh(int min, int wantbits, int max)
@@ -165,10 +165,10 @@ index 5d6df62..54c7aa2 100644
u_int dh_estimate(int);

diff --git a/kex.c b/kex.c
-index aecb939..3d5d3b0 100644
+index 30425ab..1250f42 100644
--- a/kex.c
+++ b/kex.c
-@@ -163,7 +163,10 @@ kex_names_valid(const char *names)
+@@ -165,7 +165,10 @@ kex_names_valid(const char *names)
for ((p = strsep(&cp, ",")); p && *p != '\0';
(p = strsep(&cp, ","))) {
if (kex_alg_by_name(p) == NULL) {
@@ -181,7 +181,7 @@ index aecb939..3d5d3b0 100644
return 0;
}
diff --git a/kexgexc.c b/kexgexc.c
-index 323a659..812112d 100644
+index 4a2e741..2535732 100644
--- a/kexgexc.c
+++ b/kexgexc.c
@@ -28,6 +28,7 @@
@@ -192,7 +192,7 @@ index 323a659..812112d 100644
#include <sys/types.h>

#include <openssl/dh.h>
-@@ -113,6 +114,10 @@ input_kex_dh_gex_group(int type, u_int32_t seq, struct ssh *ssh)
+@@ -115,6 +116,10 @@ input_kex_dh_gex_group(int type, u_int32_t seq, struct ssh *ssh)
r = SSH_ERR_ALLOC_FAIL;
goto out;
}
@@ -204,7 +204,7 @@ index 323a659..812112d 100644

/* generate and send 'e', client DH public key */
diff --git a/myproposal.h b/myproposal.h
-index 5312e60..d0accae 100644
+index f03b7df..57b8779 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -57,6 +57,20 @@
@@ -255,12 +255,12 @@ index 5312e60..d0accae 100644
+
/* Not a KEX value, but here so all the algorithm defaults are together */
#define SSH_ALLOWED_CA_SIGALGS \
- "ecdsa-sha2-nistp256," \
+ "ssh-ed25519," \
diff --git a/readconf.c b/readconf.c
-index 554efd7..16eda65 100644
+index 724974b..870a654 100644
--- a/readconf.c
+++ b/readconf.c
-@@ -2255,11 +2255,16 @@ fill_default_options(Options * options)
+@@ -2475,11 +2475,16 @@ fill_default_options(Options * options)
all_key = sshkey_alg_list(0, 0, 1, ',');
all_sig = sshkey_alg_list(0, 1, 1, ',');
/* remove unsupported algos from default lists */
@@ -283,7 +283,7 @@ index 554efd7..16eda65 100644
do { \
if ((r = kex_assemble_names(&options->what, \
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
-index e0768c0..8971bba 100644
+index d8dc712..c6e62e4 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -157,6 +157,9 @@ static const struct sock_filter preauth_insns[] = {
@@ -297,10 +297,10 @@ index e0768c0..8971bba 100644
SC_DENY(__NR_openat, EACCES),
#endif
diff --git a/servconf.c b/servconf.c
-index f08e374..dbcee84 100644
+index 9695583..98f6303 100644
--- a/servconf.c
+++ b/servconf.c
-@@ -213,11 +213,16 @@ assemble_algorithms(ServerOptions *o)
+@@ -218,11 +218,16 @@ assemble_algorithms(ServerOptions *o)
all_key = sshkey_alg_list(0, 0, 1, ',');
all_sig = sshkey_alg_list(0, 1, 1, ',');
/* remove unsupported algos from default lists */
@@ -323,10 +323,10 @@ index f08e374..dbcee84 100644
do { \
if ((r = kex_assemble_names(&o->what, defaults, all)) != 0) \
diff --git a/ssh-keygen.c b/ssh-keygen.c
-index a12b79a..cb8e569 100644
+index cfb5f11..6451584 100644
--- a/ssh-keygen.c
+++ b/ssh-keygen.c
-@@ -204,6 +204,12 @@ type_bits_valid(int type, const char *name, u_int32_t *bitsp)
+@@ -205,6 +205,12 @@ type_bits_valid(int type, const char *name, u_int32_t *bitsp)
#endif
}
#ifdef WITH_OPENSSL
@@ -339,7 +339,7 @@ index a12b79a..cb8e569 100644
switch (type) {
case KEY_DSA:
if (*bitsp != 1024)
-@@ -1094,9 +1100,17 @@ do_gen_all_hostkeys(struct passwd *pw)
+@@ -1095,9 +1101,17 @@ do_gen_all_hostkeys(struct passwd *pw)
first = 1;
printf("%s: generating new host keys: ", __progname);
}
@@ -359,7 +359,7 @@ index a12b79a..cb8e569 100644
error("Could not save your private key in %s: %s",
prv_tmp, strerror(errno));
diff --git a/ssh.c b/ssh.c
-index f34ca0d..aabd5d3 100644
+index 53330da..729d87a 100644
--- a/ssh.c
+++ b/ssh.c
@@ -77,6 +77,8 @@
@@ -371,7 +371,7 @@ index f34ca0d..aabd5d3 100644
#include "openbsd-compat/openssl-compat.h"
#include "openbsd-compat/sys-queue.h"

-@@ -662,6 +664,16 @@ main(int ac, char **av)
+@@ -652,6 +654,16 @@ main(int ac, char **av)
sanitise_stdfd();

__progname = ssh_get_progname(av[0]);
@@ -388,7 +388,7 @@ index f34ca0d..aabd5d3 100644

#ifndef HAVE_SETPROCTITLE
/* Prepare for later setproctitle emulation */
-@@ -1500,6 +1512,10 @@ main(int ac, char **av)
+@@ -1506,6 +1518,10 @@ main(int ac, char **av)
exit(0);
}

@@ -400,7 +400,7 @@ index f34ca0d..aabd5d3 100644
if (options.sk_provider != NULL && *options.sk_provider == '$' &&
strlen(options.sk_provider) > 1) {
diff --git a/sshd.c b/sshd.c
-index 5af7986..1f1fcc2 100644
+index eff4778..fee4703 100644
--- a/sshd.c
+++ b/sshd.c
@@ -66,6 +66,7 @@
@@ -420,7 +420,7 @@ index 5af7986..1f1fcc2 100644
#include "openbsd-compat/openssl-compat.h"
#endif

-@@ -1555,6 +1558,18 @@ main(int ac, char **av)
+@@ -1536,6 +1539,18 @@ main(int ac, char **av)
#endif
__progname = ssh_get_progname(av[0]);

@@ -439,7 +439,7 @@ index 5af7986..1f1fcc2 100644
/* Save argv. Duplicate so setproctitle emulation doesn't clobber it */
saved_argc = ac;
rexec_argc = ac;
-@@ -2039,6 +2054,10 @@ main(int ac, char **av)
+@@ -2017,6 +2032,10 @@ main(int ac, char **av)
/* Reinitialize the log (because of the fork above). */
log_init(__progname, options.log_level, options.log_facility, log_stderr);

@@ -451,7 +451,7 @@ index 5af7986..1f1fcc2 100644
unmounted if desired. */
if (chdir("/") == -1)
diff --git a/sshkey.c b/sshkey.c
-index ac451f1..4f72eab 100644
+index b25c59a..8fcfe22 100644
--- a/sshkey.c
+++ b/sshkey.c
@@ -34,6 +34,7 @@
--
2.25.1


[meta-openssl102-fips][PATCH 3/6] openssh: fix the double free error for ssh-cavs

Yi Zhao
 

There is a 'double free or corruption' error when running ssh-cavs:
$ /usr/libexec/ssh-cavs -K
0055d50f2d163cc07cd8a93cc7c3430c30ce786b572c01ad29fec7597000cf8618d664e2ec3dcbc8bb7a1a7eb7ef67f61cdaf291625da879186ac0a5cb27af571b59612d6a6e0627344d846271959fda61c78354aa498773d59762f8ca2d0215ec590d8633de921f920d41e47b3de6ab9a3d0869e1c826d0e4adebf8e3fb646a15dea20a410b44e969f4b791ed6a67f13f1b74234004d5fa5e87eff7abc32d49bbdf44d7b0107e8f10609233b7e2b7eff74a4daf25641de7553975dac6ac1e5117df6f6dbaa1c263d23a6c3e5a3d7d49ae8a828c1e333ac3f85fbbf57b5c1a45be45e43a7be1a4707eac779b8285522d1f531fe23f890fd38a004339932b93eda4
-H d3ab91a850febb417a25d892ec48ed5952c7a5de -s d3ab91a850febb417a25d892ec48ed5952c7a5de -i 8 -e 24 -m 20
Initial IV (client to server) = 4bb320d1679dfd3a
Initial IV (server to client) = 43dea6fdf263a308
Encryption key (client to server) = 13048cc600b9d3cf9095aa6cf8e2ff9cf1c54ca0520c89ed
Encryption key (server to client) = 1e483c5134e901aa11fc4e0a524e7ec7b75556148a222bb0
Integrity key (client to server) = ecef63a092b0dcc585bdc757e01b2740af57d640
Integrity key (server to client) = 7424b05f3c44a72b4ebd281fb71f9cbe7b64d479
double free or corruption (out)
Aborted

Since openssh 8.x, the ssh->kex has been allocated when struct ssh is
initialized in function ssh_alloc_session_state()[1] and will be freed
in function ssh_packet_close()[2]. We don't need to make the ssh->kex to
point a extra kex struct which will cause the memory corruption and
memory leak.

Signed-off-by: Yi Zhao <yi.zhao@...>
---
...1-ssh-cavs-fix-the-double-free-error.patch | 161 ++++++++++++++++++
recipes-connectivity/openssh/openssh_fips.inc | 1 +
2 files changed, 162 insertions(+)
create mode 100644 recipes-connectivity/openssh/openssh/0001-ssh-cavs-fix-the-double-free-error.patch

diff --git a/recipes-connectivity/openssh/openssh/0001-ssh-cavs-fix-the-double-free-error.patch b/recipes-connectivity/openssh/openssh/0001-ssh-cavs-fix-the-double-free-error.patch
new file mode 100644
index 0000000..7d7fc14
--- /dev/null
+++ b/recipes-connectivity/openssh/openssh/0001-ssh-cavs-fix-the-double-free-error.patch
@@ -0,0 +1,161 @@
+From b6202d402a27467a8a4bacaca4064ee731a03fa7 Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@...>
+Date: Sun, 17 Jan 2021 11:17:53 +0800
+Subject: [PATCH] ssh-cavs: fix the double free error
+
+There is a 'double free or corruption' error when running ssh-cavs:
+$ /usr/libexec/ssh-cavs -K
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
+-H d3ab91a850febb417a25d892ec48ed5952c7a5de -s d3ab91a850febb417a25d892ec48ed5952c7a5de -i 8 -e 24 -m 20
+Initial IV (client to server) = 4bb320d1679dfd3a
+Initial IV (server to client) = 43dea6fdf263a308
+Encryption key (client to server) = 13048cc600b9d3cf9095aa6cf8e2ff9cf1c54ca0520c89ed
+Encryption key (server to client) = 1e483c5134e901aa11fc4e0a524e7ec7b75556148a222bb0
+Integrity key (client to server) = ecef63a092b0dcc585bdc757e01b2740af57d640
+Integrity key (server to client) = 7424b05f3c44a72b4ebd281fb71f9cbe7b64d479
+double free or corruption (out)
+Aborted
+
+Since openssh 8.x, the ssh->kex has been allocated when struct ssh is
+initialized in function ssh_alloc_session_state()[1] and will be freed
+in function ssh_packet_close()[2]. We don't need to make the ssh->kex to
+point a extra kex struct which will cause the memory corruption and
+memory leak.
+
+[1] https://github.com/openssh/openssh-portable/commit/0a843d9a0e805f14653a555f5c7a8ba99d62c12d
+[2] https://github.com/openssh/openssh-portable/commit/55ef3e9cbd5b336bd0f89205716924886fcf86de
+
+Upstream-Status: Pending
+
+Signed-off-by: Yi Zhao <yi.zhao@...>
+---
+ ssh-cavs.c | 60 ++++++++++++++++++++++++------------------------------
+ 1 file changed, 27 insertions(+), 33 deletions(-)
+
+diff --git a/ssh-cavs.c b/ssh-cavs.c
+index b74ae7f..641a453 100644
+--- a/ssh-cavs.c
++++ b/ssh-cavs.c
+@@ -164,7 +164,6 @@ struct kdf_cavs {
+ static int sshkdf_cavs(struct kdf_cavs *test)
+ {
+ int ret = 0;
+- struct kex kex;
+ struct sshbuf *Kb = NULL;
+ BIGNUM *Kbn = NULL;
+ int mode = 0;
+@@ -175,8 +174,6 @@ static int sshkdf_cavs(struct kdf_cavs *test)
+ #define HEXOUTLEN 500
+ char hex[HEXOUTLEN];
+
+- memset(&kex, 0, sizeof(struct kex));
+-
+ Kbn = BN_new();
+ BN_bin2bn(test->K, test->Klen, Kbn);
+ if (!Kbn) {
+@@ -192,24 +189,29 @@ static int sshkdf_cavs(struct kdf_cavs *test)
+ }
+ sshbuf_put_bignum2(Kb, Kbn);
+
+- kex.session_id = test->session_id;
+- kex.session_id_len = test->session_id_len;
++ if ((ssh = ssh_packet_set_connection(NULL, -1, -1)) == NULL){
++ printf("Allocation error\n");
++ goto out;
++ }
++
++ ssh->kex->session_id = test->session_id;
++ ssh->kex->session_id_len = test->session_id_len;
+
+ /* setup kex */
+
+ /* select the right hash based on struct ssh_digest digests */
+ switch (test->ik_len) {
+ case 20:
+- kex.hash_alg = SSH_DIGEST_SHA1;
++ ssh->kex->hash_alg = SSH_DIGEST_SHA1;
+ break;
+ case 32:
+- kex.hash_alg = SSH_DIGEST_SHA256;
++ ssh->kex->hash_alg = SSH_DIGEST_SHA256;
+ break;
+ case 48:
+- kex.hash_alg = SSH_DIGEST_SHA384;
++ ssh->kex->hash_alg = SSH_DIGEST_SHA384;
+ break;
+ case 64:
+- kex.hash_alg = SSH_DIGEST_SHA512;
++ ssh->kex->hash_alg = SSH_DIGEST_SHA512;
+ break;
+ default:
+ printf("Wrong hash type %u\n", test->ik_len);
+@@ -219,41 +221,35 @@ static int sshkdf_cavs(struct kdf_cavs *test)
+
+ /* implement choose_enc */
+ for (mode = 0; mode < 2; mode++) {
+- kex.newkeys[mode] = calloc(1, sizeof(struct newkeys));
+- if (!kex.newkeys[mode]) {
++ ssh->kex->newkeys[mode] = calloc(1, sizeof(struct newkeys));
++ if (!ssh->kex->newkeys[mode]) {
+ printf("allocation of newkeys failed\n");
+ ret = 1;
+ goto out;
+ }
+- kex.newkeys[mode]->enc.iv_len = test->iv_len;
+- kex.newkeys[mode]->enc.key_len = test->ek_len;
+- kex.newkeys[mode]->enc.block_size = (test->iv_len == 64) ? 8 : 16;
+- kex.newkeys[mode]->mac.key_len = test->ik_len;
++ ssh->kex->newkeys[mode]->enc.iv_len = test->iv_len;
++ ssh->kex->newkeys[mode]->enc.key_len = test->ek_len;
++ ssh->kex->newkeys[mode]->enc.block_size = (test->iv_len == 64) ? 8 : 16;
++ ssh->kex->newkeys[mode]->mac.key_len = test->ik_len;
+ }
+
+ /* implement kex_choose_conf */
+- kex.we_need = kex.newkeys[0]->enc.key_len;
+- if (kex.we_need < kex.newkeys[0]->enc.block_size)
+- kex.we_need = kex.newkeys[0]->enc.block_size;
+- if (kex.we_need < kex.newkeys[0]->enc.iv_len)
+- kex.we_need = kex.newkeys[0]->enc.iv_len;
+- if (kex.we_need < kex.newkeys[0]->mac.key_len)
+- kex.we_need = kex.newkeys[0]->mac.key_len;
++ ssh->kex->we_need = ssh->kex->newkeys[0]->enc.key_len;
++ if (ssh->kex->we_need < ssh->kex->newkeys[0]->enc.block_size)
++ ssh->kex->we_need = ssh->kex->newkeys[0]->enc.block_size;
++ if (ssh->kex->we_need < ssh->kex->newkeys[0]->enc.iv_len)
++ ssh->kex->we_need = ssh->kex->newkeys[0]->enc.iv_len;
++ if (ssh->kex->we_need < ssh->kex->newkeys[0]->mac.key_len)
++ ssh->kex->we_need = ssh->kex->newkeys[0]->mac.key_len;
+
+ /* MODE_OUT (1) -> server to client
+ * MODE_IN (0) -> client to server */
+- kex.server = 1;
++ ssh->kex->server = 1;
+
+- /* do it */
+- if ((ssh = ssh_packet_set_connection(NULL, -1, -1)) == NULL){
+- printf("Allocation error\n");
+- goto out;
+- }
+- ssh->kex = &kex;
+ kex_derive_keys(ssh, test->H, test->Hlen, Kb);
+
+- ctoskeys = kex.newkeys[0];
+- stockeys = kex.newkeys[1];
++ ctoskeys = ssh->kex->newkeys[0];
++ stockeys = ssh->kex->newkeys[1];
+
+ /* get data */
+ memset(hex, 0, HEXOUTLEN);
+@@ -376,8 +372,6 @@ int main(int argc, char *argv[])
+ ret = sshkdf_cavs(&test);
+
+ out:
+- if (test.session_id)
+- free(test.session_id);
+ if (test.K)
+ free(test.K);
+ if (test.H)
+--
+2.17.1
+
diff --git a/recipes-connectivity/openssh/openssh_fips.inc b/recipes-connectivity/openssh/openssh_fips.inc
index 4fdb2aa..961f2d5 100644
--- a/recipes-connectivity/openssh/openssh_fips.inc
+++ b/recipes-connectivity/openssh/openssh_fips.inc
@@ -10,6 +10,7 @@ SRC_URI += " \
file://0001-conditional-enable-fips-mode.patch \
file://openssh-6.6p1-ctr-cavstest.patch \
file://openssh-6.7p1-kdf-cavs.patch \
+ file://0001-ssh-cavs-fix-the-double-free-error.patch \
"

do_install_append() {
--
2.25.1


[meta-openssl102-fips][PATCH 2/6] openssh: refresh patches to 8.4p1

Yi Zhao
 

Refresh patches to openssh-8.4p1.
Reference:
http://pkgs.fedoraproject.org/cgit/rpms/openssh.git/plain/openssh-7.7p1-fips.patch
(commit: fbd5f1bee2e2cdc7b1b47f4604b8347d8c3ed63f)

Signed-off-by: Yi Zhao <yi.zhao@...>
---
.../0001-conditional-enable-fips-mode.patch | 40 ++---
...ps.patch => 0001-openssh-8.4p1-fips.patch} | 159 +++++++-----------
recipes-connectivity/openssh/openssh_fips.inc | 2 +-
3 files changed, 80 insertions(+), 121 deletions(-)
rename recipes-connectivity/openssh/openssh/{0001-openssh-8.2p1-fips.patch => 0001-openssh-8.4p1-fips.patch} (75%)

diff --git a/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch b/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch
index 942fda6..17c5967 100644
--- a/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch
+++ b/recipes-connectivity/openssh/openssh/0001-conditional-enable-fips-mode.patch
@@ -1,4 +1,4 @@
-From ef6490841a73b4f71ca35e09328c6a8b0ad9dba9 Mon Sep 17 00:00:00 2001
+From 571b24129e3c3a84e38a59a32aa61fa40e04e1e2 Mon Sep 17 00:00:00 2001
From: Hongxu Jia <hongxu.jia@...>
Date: Sat, 21 Dec 2019 13:03:23 +0800
Subject: [PATCH] conditional enable fips mode
@@ -44,10 +44,10 @@ index 06566d3..a10566d 100644
sanitise_stdfd();

diff --git a/sftp-server.c b/sftp-server.c
-index 359204f..346255a 100644
+index 55386fa..8c1634e 100644
--- a/sftp-server.c
+++ b/sftp-server.c
-@@ -1576,6 +1576,7 @@ sftp_server_main(int argc, char **argv, struct passwd *user_pw)
+@@ -1577,6 +1577,7 @@ sftp_server_main(int argc, char **argv, struct passwd *user_pw)
extern char *optarg;
extern char *__progname;

@@ -56,7 +56,7 @@ index 359204f..346255a 100644
log_init(__progname, log_level, log_facility, log_stderr);

diff --git a/sftp.c b/sftp.c
-index ff14d3c..a633200 100644
+index c88c861..171bc56 100644
--- a/sftp.c
+++ b/sftp.c
@@ -2390,6 +2390,7 @@ main(int argc, char **argv)
@@ -68,10 +68,10 @@ index ff14d3c..a633200 100644
sanitise_stdfd();
msetlocale();
diff --git a/ssh-add.c b/ssh-add.c
-index 8057eb1..19f3da2 100644
+index 936dc21..b7ac2d2 100644
--- a/ssh-add.c
+++ b/ssh-add.c
-@@ -628,6 +628,7 @@ main(int argc, char **argv)
+@@ -671,6 +671,7 @@ main(int argc, char **argv)
SyslogFacility log_facility = SYSLOG_FACILITY_AUTH;
LogLevel log_level = SYSLOG_LEVEL_INFO;

@@ -80,10 +80,10 @@ index 8057eb1..19f3da2 100644
sanitise_stdfd();

diff --git a/ssh-agent.c b/ssh-agent.c
-index 7eb6f0d..1409044 100644
+index e1fd1f3..da49b57 100644
--- a/ssh-agent.c
+++ b/ssh-agent.c
-@@ -1196,6 +1196,7 @@ main(int ac, char **av)
+@@ -1289,6 +1289,7 @@ main(int ac, char **av)
size_t npfd = 0;
u_int maxfds;

@@ -92,10 +92,10 @@ index 7eb6f0d..1409044 100644
sanitise_stdfd();

diff --git a/ssh-keygen.c b/ssh-keygen.c
-index feafe73..9b832f6 100644
+index cb8e569..67c7d62 100644
--- a/ssh-keygen.c
+++ b/ssh-keygen.c
-@@ -3140,6 +3140,7 @@ main(int argc, char **argv)
+@@ -3184,6 +3184,7 @@ main(int argc, char **argv)
extern int optind;
extern char *optarg;

@@ -104,10 +104,10 @@ index feafe73..9b832f6 100644
sanitise_stdfd();

diff --git a/ssh-keyscan.c b/ssh-keyscan.c
-index a5e6440..e56a9d1 100644
+index ca19042..c667f2c 100644
--- a/ssh-keyscan.c
+++ b/ssh-keyscan.c
-@@ -675,6 +675,7 @@ main(int argc, char **argv)
+@@ -667,6 +667,7 @@ main(int argc, char **argv)
extern int optind;
extern char *optarg;

@@ -116,7 +116,7 @@ index a5e6440..e56a9d1 100644
seed_rng();
TAILQ_INIT(&tq);
diff --git a/ssh-keysign.c b/ssh-keysign.c
-index 3e3ea3e..4804c42 100644
+index 7991e0f..26a3bab 100644
--- a/ssh-keysign.c
+++ b/ssh-keysign.c
@@ -173,6 +173,7 @@ main(int argc, char **argv)
@@ -128,7 +128,7 @@ index 3e3ea3e..4804c42 100644
fatal("%s: pledge: %s", __progname, strerror(errno));

diff --git a/ssh-pkcs11-helper.c b/ssh-pkcs11-helper.c
-index 17220d6..1af0c2e 100644
+index d73e835..e508684 100644
--- a/ssh-pkcs11-helper.c
+++ b/ssh-pkcs11-helper.c
@@ -332,6 +332,7 @@ main(int argc, char **argv)
@@ -140,22 +140,22 @@ index 17220d6..1af0c2e 100644
seed_rng();
TAILQ_INIT(&pkcs11_keylist);
diff --git a/ssh.c b/ssh.c
-index 49331fc..06836dd 100644
+index aabd5d3..81393f1 100644
--- a/ssh.c
+++ b/ssh.c
-@@ -606,6 +606,7 @@ main(int ac, char **av)
- u_char conn_hash[SSH_DIGEST_MAX_LENGTH];
+@@ -660,6 +660,7 @@ main(int ac, char **av)
size_t n, len;
+ u_int j;

+ ssh_enable_fips_mode();
/* Ensure that fds 0, 1 and 2 are open or directed to /dev/null */
sanitise_stdfd();

diff --git a/sshd.c b/sshd.c
-index b86d682..304bf01 100644
+index 1f1fcc2..0f68419 100644
--- a/sshd.c
+++ b/sshd.c
-@@ -1514,6 +1514,7 @@ main(int ac, char **av)
+@@ -1553,6 +1553,7 @@ main(int ac, char **av)
Authctxt *authctxt;
struct connection_info *connection_info = NULL;

@@ -208,5 +208,5 @@ index abaf7ad..b3b1c8c 100644
__attribute__((__nonnull__ (2)));
+void ssh_enable_fips_mode(void);
--
-2.7.4
+2.17.1

diff --git a/recipes-connectivity/openssh/openssh/0001-openssh-8.2p1-fips.patch b/recipes-connectivity/openssh/openssh/0001-openssh-8.4p1-fips.patch
similarity index 75%
rename from recipes-connectivity/openssh/openssh/0001-openssh-8.2p1-fips.patch
rename to recipes-connectivity/openssh/openssh/0001-openssh-8.4p1-fips.patch
index c1de130..48c18b4 100644
--- a/recipes-connectivity/openssh/openssh/0001-openssh-8.2p1-fips.patch
+++ b/recipes-connectivity/openssh/openssh/0001-openssh-8.4p1-fips.patch
@@ -1,7 +1,7 @@
-From c51dd44e1c594ddeb3a27ae5d9be2899e4bf2ac6 Mon Sep 17 00:00:00 2001
+From 059b61a58b27c40fbb78b3930cdcf110ff717340 Mon Sep 17 00:00:00 2001
From: Hongxu Jia <hongxu.jia@...>
Date: Sat, 21 Dec 2019 11:45:38 +0800
-Subject: [PATCH] openssh 8.2p1 fips
+Subject: [PATCH] openssh 8.4p1 fips

Port openssh-7.7p1-fips.patch from Fedora
https://src.fedoraproject.org/rpms/openssh.git
@@ -12,11 +12,17 @@ Upstream-Status: Inappropriate [oe specific]
Signed-off-by: Hongxu Jia <hongxu.jia@...>

Rebase to 8.2p1
+Signed-off-by: Yi Zhao <yi.zhao@...>
+
+Rebase to 8.4p1
+Port openssh-7.7p1-fips.patch from Fedora
+https://src.fedoraproject.org/rpms/openssh.git
+(commit: fbd5f1bee2e2cdc7b1b47f4604b8347d8c3ed63f)
+
Signed-off-by: Yi Zhao <yi.zhao@...>
---
Makefile.in | 14 +++++++-------
cipher-ctr.c | 3 ++-
- clientloop.c | 2 +-
dh.c | 40 ++++++++++++++++++++++++++++++++++++++++
dh.h | 1 +
kex.c | 5 ++++-
@@ -27,21 +33,20 @@ Signed-off-by: Yi Zhao <yi.zhao@...>
servconf.c | 15 ++++++++++-----
ssh-keygen.c | 16 +++++++++++++++-
ssh.c | 16 ++++++++++++++++
- sshconnect2.c | 8 ++++++--
sshd.c | 19 +++++++++++++++++++
sshkey.c | 4 ++++
- 16 files changed, 178 insertions(+), 23 deletions(-)
+ 14 files changed, 171 insertions(+), 20 deletions(-)

diff --git a/Makefile.in b/Makefile.in
-index e754947..57f94f4 100644
+index acfb919..5b2c397 100644
--- a/Makefile.in
+++ b/Makefile.in
-@@ -206,25 +206,25 @@ libssh.a: $(LIBSSH_OBJS)
+@@ -204,25 +204,25 @@ libssh.a: $(LIBSSH_OBJS)
$(RANLIB) $@

ssh$(EXEEXT): $(LIBCOMPAT) libssh.a $(SSHOBJS)
-- $(LD) -o $@ $(SSHOBJS) $(LDFLAGS) -lssh -lopenbsd-compat $(SSHLIBS) $(LIBS) $(GSSLIBS)
-+ $(LD) -o $@ $(SSHOBJS) $(LDFLAGS) -lssh -lopenbsd-compat -lfipscheck $(SSHLIBS) $(LIBS) $(GSSLIBS)
+- $(LD) -o $@ $(SSHOBJS) $(LDFLAGS) -lssh -lopenbsd-compat $(LIBS) $(GSSLIBS)
++ $(LD) -o $@ $(SSHOBJS) $(LDFLAGS) -lssh -lopenbsd-compat -lfipscheck $(LIBS) $(GSSLIBS)

sshd$(EXEEXT): libssh.a $(LIBCOMPAT) $(SSHDOBJS)
- $(LD) -o $@ $(SSHDOBJS) $(LDFLAGS) -lssh -lopenbsd-compat $(SSHDLIBS) $(LIBS) $(GSSLIBS) $(K5LIBS)
@@ -68,7 +73,7 @@ index e754947..57f94f4 100644

ssh-pkcs11-helper$(EXEEXT): $(LIBCOMPAT) libssh.a $(P11HELPER_OBJS)
$(LD) -o $@ $(P11HELPER_OBJS) $(LDFLAGS) -lssh -lopenbsd-compat -lssh -lopenbsd-compat $(LIBS)
-@@ -233,7 +233,7 @@ ssh-sk-helper$(EXEEXT): $(LIBCOMPAT) libssh.a $(SKHELPER_OBJS)
+@@ -231,7 +231,7 @@ ssh-sk-helper$(EXEEXT): $(LIBCOMPAT) libssh.a $(SKHELPER_OBJS)
$(LD) -o $@ $(SKHELPER_OBJS) $(LDFLAGS) -lssh -lopenbsd-compat -lssh -lopenbsd-compat $(LIBS) $(LIBFIDO2)

ssh-keyscan$(EXEEXT): $(LIBCOMPAT) libssh.a $(SSHKEYSCAN_OBJS)
@@ -91,19 +96,6 @@ index 32771f2..74fac3b 100644
#endif
return (&aes_ctr);
}
-diff --git a/clientloop.c b/clientloop.c
-index ebd0dbc..b3e0c19 100644
---- a/clientloop.c
-+++ b/clientloop.c
-@@ -2083,7 +2083,7 @@ static int
- key_accepted_by_hostkeyalgs(const struct sshkey *key)
- {
- const char *ktype = sshkey_ssh_name(key);
-- const char *hostkeyalgs = options.hostkeyalgorithms;
-+ const char *hostkeyalgs = (FIPS_mode() ? KEX_FIPS_PK_ALG : options.hostkeyalgorithms);
-
- if (key == NULL || key->type == KEY_UNSPEC)
- return 0;
diff --git a/dh.c b/dh.c
index 7cb135d..306f1bc 100644
--- a/dh.c
@@ -173,7 +165,7 @@ index 5d6df62..54c7aa2 100644
u_int dh_estimate(int);

diff --git a/kex.c b/kex.c
-index ce85f04..9cc14de 100644
+index aecb939..3d5d3b0 100644
--- a/kex.c
+++ b/kex.c
@@ -163,7 +163,10 @@ kex_names_valid(const char *names)
@@ -265,36 +257,36 @@ index 5312e60..d0accae 100644
#define SSH_ALLOWED_CA_SIGALGS \
"ecdsa-sha2-nistp256," \
diff --git a/readconf.c b/readconf.c
-index f3cac6b..26b9a59 100644
+index 554efd7..16eda65 100644
--- a/readconf.c
+++ b/readconf.c
-@@ -2187,11 +2187,16 @@ fill_default_options(Options * options)
+@@ -2255,11 +2255,16 @@ fill_default_options(Options * options)
all_key = sshkey_alg_list(0, 0, 1, ',');
all_sig = sshkey_alg_list(0, 1, 1, ',');
/* remove unsupported algos from default lists */
-- def_cipher = match_filter_whitelist(KEX_CLIENT_ENCRYPT, all_cipher);
-- def_mac = match_filter_whitelist(KEX_CLIENT_MAC, all_mac);
-- def_kex = match_filter_whitelist(KEX_CLIENT_KEX, all_kex);
-- def_key = match_filter_whitelist(KEX_DEFAULT_PK_ALG, all_key);
-- def_sig = match_filter_whitelist(SSH_ALLOWED_CA_SIGALGS, all_sig);
-+ def_cipher = match_filter_whitelist((FIPS_mode() ?
+- def_cipher = match_filter_allowlist(KEX_CLIENT_ENCRYPT, all_cipher);
+- def_mac = match_filter_allowlist(KEX_CLIENT_MAC, all_mac);
+- def_kex = match_filter_allowlist(KEX_CLIENT_KEX, all_kex);
+- def_key = match_filter_allowlist(KEX_DEFAULT_PK_ALG, all_key);
+- def_sig = match_filter_allowlist(SSH_ALLOWED_CA_SIGALGS, all_sig);
++ def_cipher = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_ENCRYPT : KEX_CLIENT_ENCRYPT), all_cipher);
-+ def_mac = match_filter_whitelist((FIPS_mode() ?
++ def_mac = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_MAC : KEX_CLIENT_MAC), all_mac);
-+ def_kex = match_filter_whitelist((FIPS_mode() ?
++ def_kex = match_filter_allowlist((FIPS_mode() ?
+ KEX_DEFAULT_KEX_FIPS : KEX_CLIENT_KEX), all_kex);
-+ def_key = match_filter_whitelist((FIPS_mode() ?
++ def_key = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_PK_ALG : KEX_DEFAULT_PK_ALG), all_key);
-+ def_sig = match_filter_whitelist((FIPS_mode() ?
++ def_sig = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_PK_ALG : SSH_ALLOWED_CA_SIGALGS), all_sig);
#define ASSEMBLE(what, defaults, all) \
do { \
if ((r = kex_assemble_names(&options->what, \
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
-index f80981f..00702a7 100644
+index e0768c0..8971bba 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
-@@ -156,6 +156,9 @@ static const struct sock_filter preauth_insns[] = {
+@@ -157,6 +157,9 @@ static const struct sock_filter preauth_insns[] = {
#ifdef __NR_open
SC_DENY(__NR_open, EACCES),
#endif
@@ -305,33 +297,33 @@ index f80981f..00702a7 100644
SC_DENY(__NR_openat, EACCES),
#endif
diff --git a/servconf.c b/servconf.c
-index 70f5f73..815beaf 100644
+index f08e374..dbcee84 100644
--- a/servconf.c
+++ b/servconf.c
-@@ -212,11 +212,16 @@ assemble_algorithms(ServerOptions *o)
+@@ -213,11 +213,16 @@ assemble_algorithms(ServerOptions *o)
all_key = sshkey_alg_list(0, 0, 1, ',');
all_sig = sshkey_alg_list(0, 1, 1, ',');
/* remove unsupported algos from default lists */
-- def_cipher = match_filter_whitelist(KEX_SERVER_ENCRYPT, all_cipher);
-- def_mac = match_filter_whitelist(KEX_SERVER_MAC, all_mac);
-- def_kex = match_filter_whitelist(KEX_SERVER_KEX, all_kex);
-- def_key = match_filter_whitelist(KEX_DEFAULT_PK_ALG, all_key);
-- def_sig = match_filter_whitelist(SSH_ALLOWED_CA_SIGALGS, all_sig);
-+ def_cipher = match_filter_whitelist((FIPS_mode() ?
+- def_cipher = match_filter_allowlist(KEX_SERVER_ENCRYPT, all_cipher);
+- def_mac = match_filter_allowlist(KEX_SERVER_MAC, all_mac);
+- def_kex = match_filter_allowlist(KEX_SERVER_KEX, all_kex);
+- def_key = match_filter_allowlist(KEX_DEFAULT_PK_ALG, all_key);
+- def_sig = match_filter_allowlist(SSH_ALLOWED_CA_SIGALGS, all_sig);
++ def_cipher = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_ENCRYPT : KEX_SERVER_ENCRYPT), all_cipher);
-+ def_mac = match_filter_whitelist((FIPS_mode() ?
++ def_mac = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_MAC : KEX_SERVER_MAC), all_mac);
-+ def_kex = match_filter_whitelist((FIPS_mode() ?
++ def_kex = match_filter_allowlist((FIPS_mode() ?
+ KEX_DEFAULT_KEX_FIPS : KEX_SERVER_KEX), all_kex);
-+ def_key = match_filter_whitelist((FIPS_mode() ?
++ def_key = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_PK_ALG : KEX_DEFAULT_PK_ALG), all_key);
-+ def_sig = match_filter_whitelist((FIPS_mode() ?
++ def_sig = match_filter_allowlist((FIPS_mode() ?
+ KEX_FIPS_PK_ALG : SSH_ALLOWED_CA_SIGALGS), all_sig);
#define ASSEMBLE(what, defaults, all) \
do { \
if ((r = kex_assemble_names(&o->what, defaults, all)) != 0) \
diff --git a/ssh-keygen.c b/ssh-keygen.c
-index 0d6ed1f..feafe73 100644
+index a12b79a..cb8e569 100644
--- a/ssh-keygen.c
+++ b/ssh-keygen.c
@@ -204,6 +204,12 @@ type_bits_valid(int type, const char *name, u_int32_t *bitsp)
@@ -347,7 +339,7 @@ index 0d6ed1f..feafe73 100644
switch (type) {
case KEY_DSA:
if (*bitsp != 1024)
-@@ -1088,9 +1094,17 @@ do_gen_all_hostkeys(struct passwd *pw)
+@@ -1094,9 +1100,17 @@ do_gen_all_hostkeys(struct passwd *pw)
first = 1;
printf("%s: generating new host keys: ", __progname);
}
@@ -364,10 +356,10 @@ index 0d6ed1f..feafe73 100644
fflush(stdout);
- type = sshkey_type_from_name(key_types[i].key_type);
if ((fd = mkstemp(prv_tmp)) == -1) {
- error("Could not save your public key in %s: %s",
+ error("Could not save your private key in %s: %s",
prv_tmp, strerror(errno));
diff --git a/ssh.c b/ssh.c
-index 15aee56..49331fc 100644
+index f34ca0d..aabd5d3 100644
--- a/ssh.c
+++ b/ssh.c
@@ -77,6 +77,8 @@
@@ -379,7 +371,7 @@ index 15aee56..49331fc 100644
#include "openbsd-compat/openssl-compat.h"
#include "openbsd-compat/sys-queue.h"

-@@ -608,6 +610,16 @@ main(int ac, char **av)
+@@ -662,6 +664,16 @@ main(int ac, char **av)
sanitise_stdfd();

__progname = ssh_get_progname(av[0]);
@@ -396,52 +388,19 @@ index 15aee56..49331fc 100644

#ifndef HAVE_SETPROCTITLE
/* Prepare for later setproctitle emulation */
-@@ -622,6 +634,10 @@ main(int ac, char **av)
-
- seed_rng();
+@@ -1500,6 +1512,10 @@ main(int ac, char **av)
+ exit(0);
+ }

+ if (FIPS_mode()) {
+ logit("FIPS mode initialized");
+ }
+
- /*
- * Discard other fds that are hanging around. These can cause problem
- * with backgrounded ssh processes started by ControlPersist.
-diff --git a/sshconnect2.c b/sshconnect2.c
-index af00fb3..639fc51 100644
---- a/sshconnect2.c
-+++ b/sshconnect2.c
-@@ -44,6 +44,8 @@
- #include <vis.h>
- #endif
-
-+#include <openssl/crypto.h>
-+
- #include "openbsd-compat/sys-queue.h"
-
- #include "xmalloc.h"
-@@ -119,7 +121,8 @@ order_hostkeyalgs(char *host, struct sockaddr *hostaddr, u_short port)
- for (i = 0; i < options.num_system_hostfiles; i++)
- load_hostkeys(hostkeys, hostname, options.system_hostfiles[i]);
-
-- oavail = avail = xstrdup(options.hostkeyalgorithms);
-+ oavail = avail = xstrdup((FIPS_mode()
-+ ? KEX_FIPS_PK_ALG : options.hostkeyalgorithms));
- maxlen = strlen(avail) + 1;
- first = xmalloc(maxlen);
- last = xmalloc(maxlen);
-@@ -179,7 +182,8 @@ ssh_kex2(struct ssh *ssh, char *host, struct sockaddr *hostaddr, u_short port)
- /* Expand or fill in HostkeyAlgorithms */
- all_key = sshkey_alg_list(0, 0, 1, ',');
- if (kex_assemble_names(&options.hostkeyalgorithms,
-- kex_default_pk_alg(), all_key) != 0)
-+ (FIPS_mode() ? KEX_FIPS_PK_ALG : kex_default_pk_alg()),
-+ all_key) != 0)
- fatal("%s: kex_assemble_namelist", __func__);
- free(all_key);
-
+ /* Expand SecurityKeyProvider if it refers to an environment variable */
+ if (options.sk_provider != NULL && *options.sk_provider == '$' &&
+ strlen(options.sk_provider) > 1) {
diff --git a/sshd.c b/sshd.c
-index 5b9a0b5..b86d682 100644
+index 5af7986..1f1fcc2 100644
--- a/sshd.c
+++ b/sshd.c
@@ -66,6 +66,7 @@
@@ -461,7 +420,7 @@ index 5b9a0b5..b86d682 100644
#include "openbsd-compat/openssl-compat.h"
#endif

-@@ -1516,6 +1519,18 @@ main(int ac, char **av)
+@@ -1555,6 +1558,18 @@ main(int ac, char **av)
#endif
__progname = ssh_get_progname(av[0]);

@@ -480,7 +439,7 @@ index 5b9a0b5..b86d682 100644
/* Save argv. Duplicate so setproctitle emulation doesn't clobber it */
saved_argc = ac;
rexec_argc = ac;
-@@ -1990,6 +2005,10 @@ main(int ac, char **av)
+@@ -2039,6 +2054,10 @@ main(int ac, char **av)
/* Reinitialize the log (because of the fork above). */
log_init(__progname, options.log_level, options.log_facility, log_stderr);

@@ -492,7 +451,7 @@ index 5b9a0b5..b86d682 100644
unmounted if desired. */
if (chdir("/") == -1)
diff --git a/sshkey.c b/sshkey.c
-index 57995ee..3fa4274 100644
+index ac451f1..4f72eab 100644
--- a/sshkey.c
+++ b/sshkey.c
@@ -34,6 +34,7 @@
@@ -511,7 +470,7 @@ index 57995ee..3fa4274 100644
#include "ssh-sk.h"

#ifdef WITH_XMSS
-@@ -1597,6 +1599,8 @@ rsa_generate_private_key(u_int bits, RSA **rsap)
+@@ -1595,6 +1597,8 @@ rsa_generate_private_key(u_int bits, RSA **rsap)
}
if (!BN_set_word(f4, RSA_F4) ||
!RSA_generate_key_ex(private, bits, f4, NULL)) {
@@ -521,5 +480,5 @@ index 57995ee..3fa4274 100644
goto out;
}
--
-2.7.4
+2.17.1

diff --git a/recipes-connectivity/openssh/openssh_fips.inc b/recipes-connectivity/openssh/openssh_fips.inc
index c74532f..4fdb2aa 100644
--- a/recipes-connectivity/openssh/openssh_fips.inc
+++ b/recipes-connectivity/openssh/openssh_fips.inc
@@ -6,7 +6,7 @@ DEPENDS += " \
RRECOMMENDS_${PN}-sshd_remove = "rng-tools"

SRC_URI += " \
- file://0001-openssh-8.2p1-fips.patch \
+ file://0001-openssh-8.4p1-fips.patch \
file://0001-conditional-enable-fips-mode.patch \
file://openssh-6.6p1-ctr-cavstest.patch \
file://openssh-6.7p1-kdf-cavs.patch \
--
2.25.1


[meta-openssl102-fips][PATCH 1/6] README.build: add "Known Issues" section

Yi Zhao
 

There is an openssl build error if the prebuilt FIPS object module is
built on target with a CPU which supports AVX/AVX2 instruction set.
Add section "Known Issues" to describe this issue.

Signed-off-by: Yi Zhao <yi.zhao@...>
---
README.build | 28 ++++++++++++++++++++++++++++
1 file changed, 28 insertions(+)

diff --git a/README.build b/README.build
index 102c850..36e3875 100644
--- a/README.build
+++ b/README.build
@@ -254,3 +254,31 @@ Note this sample command is functionally equivalent to:
$ env OPENSSL_FIPS=1 openssl sha1 -hmac etaonrishdlcupfm fips_hmac.c
HMAC-SHA1(fips_hmac.c)= ae25ad68d9a8cc04075100563a437fa37829afcc

+=======================
+Known Issues
+=======================
+If the CPU on target machine which building FIPS object module is newer than
+Nehalem (e.g. Sandy Brigde) or is an Intel Atom processor. Then you may
+encounter an error when building openssl with the FIPS object module:
+qemu: uncaught target signal 4 (Illegal instruction).
+
+The current processor emulated in qemu is set to Nehalem. But the GCC will use
+-march=native to enable all instruction subsets supported by the target machine
+when building FIPS object module. The illegal instruction error will occur if
+some instruction subsets (e.g AVX/AVX2) are not supported by Nehalem.
+
+To check if the CPU is Intel Atom:
+$ cat /proc/cpuinfo | grep "Atom"
+
+To check if the CPU supports AVX/AVX2:
+$ cat /proc/cpuinfo | grep "avx"
+Or:
+$ gcc -dM -E - < /dev/null | grep "AVX"
+
+As a workaround, we can specify -march=nehalem in GCC before build the FIPS
+object module:
+$ export CC="gcc -march=nehalem"
+$ ./config [no-asm]
+$ make
+$ make install
+
--
2.25.1


[meta-openssl102-fips][PATCH 0/6] hardknott fixes

Yi Zhao
 

Changqing Li (1):
openssh: refresh patches to 8.5p1

Chen Qi (1):
layer.conf: add hardknott to LAYERSERIES_COMPAT

Yi Zhao (4):
README.build: add "Known Issues" section
openssh: refresh patches to 8.4p1
openssh: fix the double free error for ssh-cavs
openssh: set kex->sessin_id via sshbuf_put in ssh-cavs

README.build | 28 +++
conf/layer.conf | 2 +-
.../0001-conditional-enable-fips-mode.patch | 46 ++---
...ps.patch => 0001-openssh-8.4p1-fips.patch} | 173 +++++++-----------
...1-ssh-cavs-fix-the-double-free-error.patch | 161 ++++++++++++++++
...avs-set-kex-sessin_id-via-sshbuf_put.patch | 45 +++++
recipes-connectivity/openssh/openssh_fips.inc | 4 +-
7 files changed, 327 insertions(+), 132 deletions(-)
rename recipes-connectivity/openssh/openssh/{0001-openssh-8.2p1-fips.patch => 0001-openssh-8.4p1-fips.patch} (73%)
create mode 100644 recipes-connectivity/openssh/openssh/0001-ssh-cavs-fix-the-double-free-error.patch
create mode 100644 recipes-connectivity/openssh/openssh/0001-ssh-cavs-set-kex-sessin_id-via-sshbuf_put.patch

--
2.25.1


[yocto-autobuilder2][PATCH] schedulers.py: build docs for hardknott/1.50 as well

Anuj Mittal
 

Signed-off-by: Anuj Mittal <anuj.mittal@...>
---
schedulers.py | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/schedulers.py b/schedulers.py
index 920daab..9d81806 100644
--- a/schedulers.py
+++ b/schedulers.py
@@ -364,7 +364,7 @@ schedulers.append(sched.Nightly(name='nightly-auh', branch='master', properties=

# If any of our sphinx docs branches change, trigger a build
schedulers.append(sched.AnyBranchScheduler(name="yocto-docs-changed",
- change_filter=util.ChangeFilter(project=["yocto-docs"], branch=["master", "master-next", "gatesgarth", "dunfell", "transition"]),
+ change_filter=util.ChangeFilter(project=["yocto-docs"], branch=["master", "master-next", "hardknott", "gatesgarth", "dunfell", "transition"]),
codebases = ['', 'yocto-docs', 'bitbake'],
treeStableTimer=60,
builderNames=["docs"]))
@@ -376,7 +376,7 @@ def isbitbakeDocFile(change):
return True
return False
schedulers.append(sched.AnyBranchScheduler(name="bitbake-docs-changed",
- change_filter=util.ChangeFilter(project=["bitbake"], branch=["master", "1.48", "1.46"]),
+ change_filter=util.ChangeFilter(project=["bitbake"], branch=["master", "1.50", "1.48", "1.46"]),
codebases = ['', 'yocto-docs', 'bitbake'],
fileIsImportant=isbitbakeDocFile,
onlyImportant=True,
--
2.30.2


[yocto-autobuilder2][PATCH] schedulers.py: add hardknott to release selector

Anuj Mittal
 

Keep meta-arm at master since there's no hardknott there yet.

Signed-off-by: Anuj Mittal <anuj.mittal@...>
---
schedulers.py | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/schedulers.py b/schedulers.py
index 8479290..920daab 100644
--- a/schedulers.py
+++ b/schedulers.py
@@ -169,7 +169,7 @@ def parent_scheduler(target):
name="branchselector",
default="master",
label="Release Shortcut Selector",
- choices=["master", "master-next", "mut", "gatesgarth", "dunfell", "zeus", "warrior", "thud", "sumo", "rocko", "pyro", "morty"],
+ choices=["master", "master-next", "mut", "hardknott", "gatesgarth", "dunfell", "zeus", "warrior", "thud", "sumo", "rocko", "pyro", "morty"],
selectors={
'master': {
'branch': 'master',
@@ -202,6 +202,16 @@ def parent_scheduler(target):
'branch_meta-mingw': 'master',
'branch_oecore': 'master',
},
+ 'hardknott': {
+ 'branch': 'hardknott',
+ 'branch_poky': 'hardknott',
+ 'branch_bitbake': '1.50',
+ 'branch_meta-arm': 'master',
+ 'branch_meta-gplv2': 'hardknott',
+ 'branch_meta-intel': 'hardknott',
+ 'branch_meta-mingw': 'hardknott',
+ 'branch_oecore': 'hardknott',
+ },
'gatesgarth': {
'branch': 'gatesgarth',
'branch_poky': 'gatesgarth',
--
2.30.2


[yocto-autobuilder-helper][PATCH] config.json: add hardknott for buildhistory

Anuj Mittal
 

Signed-off-by: Anuj Mittal <anuj.mittal@...>
---
config.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.json b/config.json
index 5bfa240..3beb990 100644
--- a/config.json
+++ b/config.json
@@ -5,7 +5,7 @@

"BUILD_HISTORY_DIR" : "buildhistory",
"BUILD_HISTORY_REPO" : "ssh://git@.../poky-buildhistory",
- "BUILD_HISTORY_DIRECTPUSH" : ["poky:morty", "poky:pyro", "poky:rocko", "poky:sumo", "poky:thud", "poky:warrior", "poky:zeus", "poky:dunfell", "poky:gatesgarth", "poky:master"],
+ "BUILD_HISTORY_DIRECTPUSH" : ["poky:morty", "poky:pyro", "poky:rocko", "poky:sumo", "poky:thud", "poky:warrior", "poky:zeus", "poky:dunfell", "poky:gatesgarth", "poky:hardknott", "poky:master"],
"BUILD_HISTORY_FORKPUSH" : {"poky-contrib:ross/mut" : "poky:master", "poky:master-next" : "poky:master"},

"BUILDTOOLS_URL_TEMPLOCAL" : "/srv/autobuilder/autobuilder.yoctoproject.org/pub/non-release/20200309-15/buildtools/x86_64-buildtools-extended-nativesdk-standalone-3.0+snapshot-20200309.sh",
--
2.30.2


[ANNOUNCEMENT] Yocto Project 3.1.7 (Dunfell 23.0.7) is Released

Vineela
 

Hello,

We are pleased to announce the Yocto Project 3.1.7 (dunfell-23.0.7) Release is now available for download.

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/poky-dunfell-23.0.7.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.7/poky-dunfell-23.0.7.tar.bz2

A gpg signed version of these release notes is available at:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/RELEASENOTES

Full Test Report:

http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/testreport.txt

Thank you for everyone's contributions to this release.

Sincerely,

Vineela Tummalapalli
Yocto Project Build and Release
vineela.tummalapalli@...

- --------------------------
yocto-3.1.7 Release Notes
- --------------------------


- --------------------------
Repositories/Downloads
- --------------------------

Repository Name: poky
Repository Location: https://git.yoctoproject.org/git/poky
Branch: dunfell
Tag: yocto-3.1.7
Git Revision: 13f4ddf50eccaeed96a40a5f1a1d4173e677e98a
Release Artefact: poky-dunfell-23.0.7
sha: d3ae731cc7d76c4dd0c88ce72798a373511303beb45c623f0e08237c4cff884d
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/poky-dunfell-23.0.7.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.7/poky-dunfell-23.0.7.tar.bz2

Repository Name: openembedded-core
Repository Location: https://git.openembedded.org/openembedded-core
Branch: dunfell
Tag: 2020-04.7-dunfell
Git Revision: a3de6239e98efafe3668396e69133ffee3d9b27f
Release Artefact: oecore-dunfell-23.0.7
sha: 7d06059d6455c8b56303c9803418568536c8b18fb63a4d5330d34dc5200c05ba
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/oecore-dunfell-23.0.7.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.7/oecore-dunfell-23.0.7.tar.bz2

Repository Name: meta-mingw
Repository Location: https://git.yoctoproject.org/git/meta-mingw
Branch: dunfell
Tag: yocto-3.1.7
Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7
Release Artefact: meta-mingw-dunfell-23.0.7
sha: a282ecfecf73b3626e82472a2c54e46f349140cc87579dc9fe2940c1ed113194
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/meta-mingw-dunfell-23.0.7.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.7/meta-mingw-dunfell-23.0.7.tar.bz2

Repository Name: meta-gplv2
Repository Location: https://git.yoctoproject.org/git/meta-gplv2
Branch: dunfell
Tag: yocto-3.1.7
Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac
Release Artefact: meta-gplv2-dunfell-23.0.7
sha: 19ebacca25b52920f77633cb50f43e57e7cfe40f6118ef434b3bfa8074ad7b3a
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/meta-gplv2-dunfell-23.0.7.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.7/meta-gplv2-dunfell-23.0.7.tar.bz2

Repository Name: bitbake
Repository Location: https://git.openembedded.org/bitbake
Branch: 1.46
Tag: 2020-04.7-dunfell
Git Revision: 017a39ed05d065bf28fd38f91bcde8a098300551
Release Artefact: bitbake-dunfell-23.0.7
sha: d5c542a3ba721f820c2b5963f9d2309bc17a1eb6fe42082327b7cc6bd44126d6
Download Locations:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.7/bitbake-dunfell-23.0.7.tar.bz2
http://mirrors.kernel.org/yocto/yocto/yocto-3.1.7/bitbake-dunfell-23.0.7.tar.bz2

Repository Name: yocto-docs
Repository Location: https://git.yoctoproject.org/git/yocto-docs
Branch: dunfell
Tag: yocto-3.1.7
Git Revision:5a54200a8702e473ecbbc3dbbdaa24169796c9e8

- -------------
Contributors
- -------------
akuster
Alejandro Hernandez Samaniego
Anatol Belski
Andrei Gherzan
Anton D. Kachalov
Anuj Mittal
Bruce Ashfield
Catalin Enache
Charlie Davies
Chee Yang Lee
Chen Qi
Chris Laplante
Christopher Larson
Denys Dmytriyenko
Diego Santa Cruz
Dorinda
Dorinda Bassey
Douglas Royds
Florian Bezdeka
He Zhe
Jan Brzezanski
Jain Sangeeta
Jan-Simon Möller
Jon Mason
Joshua Watt
Khem Raj
Lee Chee Yang
Li Wang
Marek Vasut
Mark Hatle
Martin Jansa
Meh Mbeh Ida Delphine
Michael Halstead
Michael Trensch
Mikko Rapeli
Milan Shah
Mingli Yu
Minjae Kim
Naveen Saini
Peter Kjellerstedt
Petr Vorel
Purushottam Choudhary
Richard Purdie
Robert P. J. Day
Ross Burton
Scott Murray
Stefan Ghinea
Stefan Schmidt
Stephen Jolley
Steve Sakoman
Teoh Jay Shen
Thomas Viehweger
Vivien Didelot
Wang Mingyu
Wes Lindauer
Yi Fan Yu
Yi Zhao
Yoann Congal
Zbigniew Bodek

- ---------------
Known Issues
- ---------------
N/A


- ---------------
Security Fixes
- ---------------
openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449
git: fix CVE-2021-21300
connman: fix CVE-2021-26675, CVE-2021-26676
cve-check: CVE_VERSION_SUFFIX to work with patched release
cve-update-db-native: consider version suffix when update CVE db
wpa-supplicant: update CVE-2021-27803.patch
python3-jinja2: set CVE_PRODUCT
shadow: whitelist CVE-2013-4235
qemu: fix CVE-2021-20203
wpa-supplicant: fix CVE-2021-27803
librepo: fix CVE-2020-14352
libsdl2: fix CVE-2020-14409 CVE-2020-14410
wpa-supplicant: fix CVE-2021-0326
bind: fix CVE-2020-8625
screen: fix CVE-2021-26937
python3: fix CVE-2021-3177
u-boot: fix CVE-2020-8432 and CVE-2020-10648
cve-check: add CVE_CHECK_REPORT_PATCHED variable to suppress reporting of patched CVEs
cve-check: introduce CVE_CHECK_RECIPE_FILE variable to allow changing of per-recipe check file


- ---------------
Fixes
- ---------------
build-appliance-image: Update to dunfell head revision
poky.conf: Bump version for 3.1.7 release
documentation: prepare for 3.1.7 release
image,populate_sdk_base: move 'func' flag setting for sdk command vars
buildhistory: add missing vardepsexcludes
populate_sdk_ext: Avoid copying and producing .pyc files
libtool: make sure autoheader run before autoconf
bitbake.conf: correct description of HOSTTOOLS_DIR
documentation-audit.sh: Fix typo in specifying LICENSE_FLAGS_WHITELIST
run-postinsts: do not remove postinsts directory.
cryptodev-module: fix build failure with kernel v5.10
cryptodev-module: Backport a patch to fix build failure with kernel v5.8
linux-firmware: Fix packaging
linux-yocto/5.4: update to v5.4.107
bitbake: Force parser shutdown after catching an exception
linux-yocto/5.4: update to v5.4.105
selftest/wic: Fix dependency issue in rawcopy test
linux-dummy: add empty dependent packages
devshell.bbclass: Exceptions displayed within devpyshell
scripts/verify-bashisms: Update checkbashisms.pl URL
externalsrc: Detect code changes in submodules
cmake: Fully-qualified path to ar
initrdscripts: init-install-efi.sh install extra files for ESP
glibc: Pull latest 2.31 HEAD
iputils: fix various arping regressions
systemd-conf: do not ask for DHCP if configured on kernel command line
maintainers: update own email address
meta-selftest: Add HOMEPAGE / DESCRIPTION
bitbake-whatchanged: change ending quote to proper period
populate_sdk_ext: record METADATA_REVISION
devtool: Fix do_kernel_configme task
iso-codes: fix protocol in SRC_URI
Revert "sstatesig.py: show an error instead of warning when sstate manifest isn't found"
bitbake: runqueue: Add setscene task overlap sanity check
bitbake: runqueue: Fix task execution corruption issue
cups: use /run instead /var/run in systemd's unit file
insane: don't check for a warning string that is never output
build-appliance-image: Drop kernel module handling
ptest-packagelists: remove libinput-ptest
bitbake-bblayers/create: Fix incorrect priority help message
runqemu: use "raw" instead of "bin" for ovmf
dtc: Fix array-bounds error
rxvt-unicode: Do not use throw specifications
valgrind: Increase timeout duration 30 -> 90 s
oeqa/pam: Need shadow installed for the tests
wic: Warn if an ext filesystem affected by the Y2038 problem is used
selftest/reproducible: Add ability to pull some objects from sstate
efivar: Fix reproducibility issue
swig: Fix reproducibility issue
syslinux: Fix reproducibility issues
libid3tag: Fix reproducibility issue
meta/recipes-devtools: Add HOMEPAGE / DESCRIPTION
meta/recipes-graphics: Add HOMEPAGE / DESCRIPTION
meta/recipes-multimedia: Add HOMEPAGE / DESCRIPTION
meta/recipes-kernel: Add HOMEPAGE / DESCRIPTION
meta/recipes-support: Add HOMEPAGE / DESCRIPTION
meta/recipes-extended: Add HOMEPAGE / DESCRIPTION
meta-skeleton: Add HOMEPAGE / DESCRIPTION
meta/recipes-rt: Add HOMEPAGE / DESCRIPTION
recipes-support: Add missing HOMEPAGE and DESCRIPTION for recipes
recipes-sato: Add missing HOMEPAGE and DESCRIPTION for recipes
recipes-multimedia: Add missing HOMEPAGE and DESCRIPTION for recipes.
recipes-kernel: Add missing HOMEPAGE and DESCRIPTION for recipes.
recipes-graphics: Add missing HOMEPAGE and DESCRIPTION for recipes.
recipes-gnome: Add missing HOMEPAGE and DESCRIPTION for recipes
linux-yocto/5.4: update to v5.4.103
linux-yocto/5.4: update to v5.4.101
linux-yocto/5.4: update to v5.4.99
yocto-uninative.inc: version 3.0 incorporate seccomp filter workaround
yocto-uninative.inc: version 2.11 updates glibc to 2.33
linux-yocto: update genericx86* to v5.4.94
linux-yocto: update genericx86 to v5.4.87
linux-yocto: update genericx86* SRCREV for 5.4
local.conf.sample.extended: prefer INIT_MANAGER
local.conf.sample.extended: fix double 'of' typo
meta/recipes-core: Add HOMEPAGE / DESCRIPTION
meta/recipes-devtools: Add HOMEPAGE / DESCRIPTION
meta/recipes-connectivity: Add HOMEPAGE / DESCRIPTION
meta/recipes-bsp: Add HOMEPAGE / DESCRIPTION
cups: Fix reproducibility issues
asciidoc: Switch to using the main branch
package/package_rpm: Disable font_provides configuration for reproducibilty
reproducible: Improve SOURCE_DATE_EPOCH_FALLBACK handling
reproducible_builds: SOURCE_DATE_EPOCH should not be 0
report-error.bbclass: Add layer and bitbake version info to error report
libpcre: Drop old/stale patch
ca-certificates: Clean up two patches and submit upstream
libevdev: Update patch status to backport
maintainers: Update email address for Victor
bitbake.conf: Split PSEUDO_IGNORE_PATHS to be more readable
bitbake.conf/image: Move image specific PSEUDO_IGNORE_PATHS to image class
populate_sdk: Add directories to PSEUDO_IGNORE_PATHS
image: Add directories to PSEUDO_IGNORE_PATHS
sstatesig.py: show an error instead of warning when sstate manifest isn't found
linux-firmware: upgrade 20201218 -> 20210208
openssl: upgrade 1.1.1i -> 1.1.1j
bitbake: __init__.py: Fix bitbake debug log handling
selftest/reproducible: Don't call sync between each file compare
qemu: Backport patch to avoid assertion fails on icache line size
oeqa/commands: Fix compatibility with python 3.9
oe/recipeutils: Fix copying patches when BBLAYERS entries are not normalised
icu: backport fix for rare random genrb segmentation fault
wpebackend-fdo: Fix missing .so symlink when using dev package
package_rpm: Enable use_source_date_epoch_as_buildtime in package_rpm class
df.py: Add feature check for read-only-rootfs
weston-init: Fix weston-keyboard path in weston.ini
mtd-utils: Remove duplicate assignments to alternative link names
libomxil: Fix up commercial license flag
npm.bbclass: avoid building target nodejs for native npm recipes
groff: Fix determinism issue
xmlto: Fix reproducibility
xorg-minimal-fonts: Really fix determinism
xorg-fonts-minimal: Fix reproducibility
watchdog: Avoid reproducibility failures after fixing build
watchdog: Fix determinism issue from sendmail host path
vim: Fix a race over creation of the desktop files
vim: Improve determinism
cwautomacros: Ensure version is set deterministically
oeqa/runlevel : add test for runlevels
oeqa: reproducible: Add more logging
oeqa: reproducible: Fix SSTATE_MIRRORS variable
buildtools-extended-tarball: Add glibc-gconvs needed for build
quilt: Be determnistic about column presence
linux-yocto/5.4: update to v5.4.98
linux-yocto/5.4: update to v5.4.96
go: update to 1.14.15
sudo: 1.8.31 -> 1.8.32
cve-check.bbclass: add layer to cve log
pseudo: Update to include fixes for glibc 2.33
pseudo: Update for rename and faccessat fixes
pseudo: Update to work with glibc 2.33
poky.conf: Drop OELAYOUT_ABI poking


OpenEmbedded Happy Hour April 28 9pm/2100 UTC

Denys Dmytriyenko
 

Hi,

Please join us for the upcoming OpenEmbedded Happy Hour on April 28 for
Asia/Pacific timezones @ 2100/9pm UTC (5pm EDT):

https://www.openembedded.org/wiki/Calendar
https://www.timeanddate.com/worldclock/fixedtime.html?msg=OpenEmbedded+Happy+Hour+April+28&iso=20210428T21

--
Regards,
Denys Dmytriyenko <denis@...>
PGP: 0x420902729A92C964 - https://denix.org/0x420902729A92C964
Fingerprint: 25FC E4A5 8A72 2F69 1186 6D76 4209 0272 9A92 C964


need support for QPSQL plugins for PostgreSQL in rootfs created with Rocko version #qt5 #rocko

rohit jadhav
 

I have created Rootfs with Rocko build  for imx6. I am trying to use qt application with PostgreSQL database.
Not able to access database.
Showing log like :
QSqlDatabase: QPSQL driver not loaded
QSqlDatabase: available drivers:
"Driver not loaded Driver not loaded"

Is related to qtdeclarative-plugins?
If yes if I try to include it in local.conf and try to build then it showing error :
qtdeclarative-plugins
No package qtdeclarative-plugins available.

It was working with Krogoth.

OR
To include QPSQL in rootfs did missed any Package in my  Rocko build ?

Please guide me in this regards

Thanks and Regards
Rohit J


Re: #yocto llvm support and meta-clang #yocto

Monsees, Steven C (US)
 

Khem:

There are at least 4 zeus released tags, can you vouch for one of them to work properly with meta-clang ?
Porting to dunfell might not be possible at this time...

Would it be possible to build the dunfell drop of meta-clang under zeus ?


Although we do not plan on using clang in the kernel, I did a quick build to see if I would get a similar error...
Seeing: error: unknown argument: '-maccumulate-outgoing-args' for kernel build

Any ideas what might be missing ?

Again Note: If I remove/comment out the line TOOLCHAIN ?= "clang" in conf/local.conf, the build is much faster,
and it builds without the error, also appears not to require/include "llvm" component in build.
I do not believe the full package was actually built/enabled, but no errors and image is functional.

Steps used to build a clean Kernel image with meta-clang...

(1) Added meta-clang to bblayers.conf

(2) Added Setting for meta-clang in conf/local.conf:

TOOLCHAIN ?= "clang"

The build is much slower due to "clang-native-9.0.1-r0 do_compile"...

EXT SDK build error seen:
=========================

13:36 smonsees@yix490038 /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default> bitbake -k sbcb-defaultfs-fullParsing recipes: 100% |#################################################################################| Time: 0:01:27
Parsing of 2463 .bb files complete (0 cached, 2463 parsed). 3671 targets, 91 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION = "1.44.0"
BUILD_SYS = "x86_64-linux"
NATIVELSBSTRING = "rhel-7.9"
TARGET_SYS = "x86_64-poky-linux"
MACHINE = "sbcb-default"
DISTRO = "limws"
DISTRO_VERSION = "3.0.4"
TUNE_FEATURES = "m64 corei7"
TARGET_FPU = ""
meta
meta-poky = "my_yocto_3.0.4:f2eb22a8783f1eecf99bd4042695bab920eed00e"
meta-perl
meta-python
meta-filesystems
meta-networking
meta-initramfs
meta-oe = "zeus:2b5dd1eb81cd08bc065bc76125f2856e9383e98b"
meta-clang = "zeus:f5355ca9b86fb5de5930132ffd95a9b352d694f9"
meta = "master:a32ddd2b2a51b26c011fa50e441df39304651503"
meta-intel = "zeus:d9942d4c3a710406b051852de7232db03c297f4e"
meta-intel = "v2019.02:f635a364c55f1fb12519aff54924a0a5b947091e"

Initialising tasks: 100% |##############################################################################| Time: 0:00:05
Checking sstate mirror object availability: 100% |######################################################| Time: 0:00:01
Sstate summary: Wanted 2137 Found 709 Missed 1428 Current 0 (33% match, 0% complete)
NOTE: Executing Tasks
NOTE: Setscene tasks completed
ERROR: gnu-efi-3.0.9-r0 do_compile: oe_runmake failed
ERROR: gnu-efi-3.0.9-r0 do_compile: Execution of '/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/temp/run.do_compile.1840' failed with exit code 1:
mkdir -p /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib
make -C /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib -f /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/Makefile SRCDIR=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib ARCH=x86_64
make[1]: Entering directory `/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib'
for sdir in ia32 x86_64 ia64 aarch64 arm mips64el runtime; do mkdir -p $sdir; done
x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/boxdraw.c -o boxdraw.o
x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/smbios.c -o smbios.o
clang-9x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/console.c -o console.o
: error: unknown argument: '-maccumulate-outgoing-args'
clang-9: error: unknown argument: '-maccumulate-outgoing-args'
clang-9: error: unknown argument: '-maccumulate-outgoing-args'
make[1]: *** [boxdraw.o] Error 1
make[1]: *** Waiting for unfinished jobs....
clang-9: error: unknown argument: '-maccumulate-outgoing-args'
make[1]: *** [smbios.o] Error 1
make[1]: *** wait: No child processes. Stop.
make: *** [lib] Error 2
WARNING: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/temp/run.do_compile.1840:1 exit 1 from 'exit 1'

ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/temp/log.do_compile.1840
Log data follows:
| DEBUG: Executing shell function do_compile
| NOTE: make -j 4 ARCH=x86_64 CC=x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot AS=x86_64-poky-linux-as LD=x86_64-poky-linux-ld --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot AR=x86_64-poky-linux-llvm-ar RANLIB=x86_64-poky-linux-llvm-ranlib OBJCOPY=x86_64-poky-linux-objcopy PREFIX=/usr LIBDIR=/usr/lib
| mkdir -p /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib
| make -C /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib -f /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/Makefile SRCDIR=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib ARCH=x86_64
| make[1]: Entering directory `/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib'
| for sdir in ia32 x86_64 ia64 aarch64 arm mips64el runtime; do mkdir -p $sdir; done
| x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/boxdraw.c -o boxdraw.o
| x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/smbios.c -o smbios.o
| clang-9x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/console.c -o console.o
| : error: unknown argument: '-maccumulate-outgoing-args'
| clang-9: error: unknown argument: '-maccumulate-outgoing-args'
| clang-9: error: unknown argument: '-maccumulate-outgoing-args'
| make[1]: *** [boxdraw.o] Error 1
| make[1]: *** Waiting for unfinished jobs....
| clang-9: error: unknown argument: '-maccumulate-outgoing-args'
| make[1]: *** [smbios.o] Error 1
| make[1]: *** wait: No child processes. Stop.
| ERROR: oe_runmake failed
| make: *** [lib] Error 2
| WARNING: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/temp/run.do_compile.1840:1 exit 1 from 'exit 1'
| ERROR: Execution of '/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/temp/run.do_compile.1840' failed with exit code 1:
| mkdir -p /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib
| make -C /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib -f /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/Makefile SRCDIR=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib ARCH=x86_64
| make[1]: Entering directory `/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9/x86_64/lib'
| for sdir in ia32 x86_64 ia64 aarch64 arm mips64el runtime; do mkdir -p $sdir; done
| x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/boxdraw.c -o boxdraw.o
| x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/smbios.c -o smbios.o
| clang-9x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -msse4.2 -mlittle-endian -Wno-error=unused-command-line-argument -Qunused-arguments --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/x86_64 -I/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/../inc/protocol -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0=/usr/src/debug/gnu-efi/3.0.9-r0 -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot= -fdebug-prefix-map=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/recipe-sysroot-native= -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -Wno-error=pragmas -mno-red-zone -mno-avx -fpic -g -O2 -Wall -Wextra -Werror -fshort-wchar -fno-strict-aliasing -ffreestanding -fno-stack-protector -fno-stack-check -fno-stack-check -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -DCONFIG_x86_64 -DGNU_EFI_USE_MS_ABI -maccumulate-outgoing-args --std=c11 -c /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/gnu-efi-3.0.9//lib/console.c -o console.o
| : error: unknown argument: '-maccumulate-outgoing-args'
| clang-9: error: unknown argument: '-maccumulate-outgoing-args'
| clang-9: error: unknown argument: '-maccumulate-outgoing-args'
| make[1]: *** [boxdraw.o] Error 1
| make[1]: *** Waiting for unfinished jobs....
| clang-9: error: unknown argument: '-maccumulate-outgoing-args'
| make[1]: *** [smbios.o] Error 1
| make[1]: *** wait: No child processes. Stop.
| make: *** [lib] Error 2
| WARNING: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/gnu-efi/3.0.9-r0/temp/run.do_compile.1840:1 exit 1 from 'exit 1'
|
ERROR: Task (/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-bsp/gnu-efi/gnu-efi_3.0.9.bb:do_compile) failed with exit code '1'
ERROR: thermald-1.9-r0 do_prepare_recipe_sysroot: The file /usr/lib/libgomp.so is installed by both openmp and gcc-runtime, aborting
ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/thermald/1.9-r0/temp/log.do_prepare_recipe_sysroot.27971
ERROR: Task (/disk0/scratch/smonsees/yocto/workspace_3/poky/../meta-intel/recipes-bsp/thermald/thermald_1.9.bb:do_prepare_recipe_sysroot) failed with exit code '1'
ERROR: nfs-utils-2.4.1-r0 do_configure: configure failed
ERROR: nfs-utils-2.4.1-r0 do_configure: Execution of '/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/temp/run.do_configure.10368' failed with exit code 1:
automake (GNU automake) 1.16.1
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv2+: GNU GPL version 2 or later <https://gnu.org/licenses/gpl-2.0.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Written by Tom Tromey <tromey@...>
and Alexandre Duret-Lutz <adl@...>.
AUTOV is 1.16
autoreconf: Entering directory `.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal --system-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot/usr/share/aclocal/ --automake-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal-1.16 -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force -I aclocal
autoreconf: configure.ac: tracing
autoreconf: running: libtoolize --copy --force
libtoolize: putting auxiliary files in '.'.
libtoolize: copying file './ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'aclocal'.
libtoolize: copying file 'aclocal/libtool.m4'
libtoolize: copying file 'aclocal/ltoptions.m4'
libtoolize: copying file 'aclocal/ltsugar.m4'
libtoolize: copying file 'aclocal/ltversion.m4'
libtoolize: copying file 'aclocal/lt~obsolete.m4'
autoreconf: running: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/bin/autoconf --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force
autoreconf: running: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/bin/autoheader --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force
autoreconf: running: automake --add-missing --copy --force-missing
configure.ac:11: installing './compile'
configure.ac:7: installing './missing'
support/export/Makefile.am: installing './depcomp'
support/nsm/Makefile.am:13: warning: source file '../misc/misc.c' is in a subdirectory,
support/nsm/Makefile.am:13: but option 'subdir-objects' is disabled
automake: warning: possible forward-incompatibility.
automake: At least a source file is in a subdirectory, but the 'subdir-objects'
automake: automake option hasn't been enabled. For now, the corresponding output
automake: object file(s) will be placed in the top-level directory. However,
automake: this behaviour will change in future Automake versions: they will
automake: unconditionally cause object files to be placed in the same subdirectory
automake: of the corresponding sources.
automake: You are advised to start using 'subdir-objects' option throughout your
automake: project, to avoid future incompatibilities.
autoreconf: running: gnu-configize
autoreconf: Leaving directory `.'
configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/endian-little
configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common-linux
configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common-glibc
configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/x86_64-linux
configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common
configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/../meta-openembedded/meta-networking/site/endian-little
configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot/usr/share/x86_64-poky-linux_config_site.d/ncurses_config
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-poky-linux-gnu
checking for a BSD-compatible install... /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/hosttools/install -c
checking whether build environment is sane... yes
checking for x86_64-poky-linux-strip... x86_64-poky-linux-strip
checking for a thread-safe mkdir -p... /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/hosttools/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether to enable maintainer-specific portions of Makefiles... no
checking whether make supports the include directive... yes (GNU style)
checking for x86_64-poky-linux-gcc... x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -mfpmath=sse -msse4.2 -Werror=unknown-warning-option -mlittle-endian --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot
checking whether the C compiler works... no
configure: error: in `/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1':
configure: error: C compiler cannot create executables
See `config.log' for more details
WARNING: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/temp/run.do_configure.10368:1 exit 1 from 'exit 1'

ERROR: Logfile of failure stored in: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/temp/log.do_configure.10368
Log data follows:
| DEBUG: Executing shell function autotools_preconfigure
| DEBUG: Shell function autotools_preconfigure finished
| DEBUG: Executing python function autotools_aclocals
| DEBUG: SITE files ['endian-little', 'common-linux', 'common-glibc', 'bit-64', 'x86_64-linux', 'common']
| DEBUG: Python function autotools_aclocals finished
| DEBUG: Executing shell function do_configure
| automake (GNU automake) 1.16.1
| Copyright (C) 2018 Free Software Foundation, Inc.
| License GPLv2+: GNU GPL version 2 or later <https://gnu.org/licenses/gpl-2.0.html>
| This is free software: you are free to change and redistribute it.
| There is NO WARRANTY, to the extent permitted by law.
|
| Written by Tom Tromey <tromey@...>
| and Alexandre Duret-Lutz <adl@...>.
| AUTOV is 1.16
| NOTE: Executing ACLOCAL="aclocal --system-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot/usr/share/aclocal/ --automake-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal-1.16" autoreconf -Wcross --verbose --install --force --exclude=autopoint -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/
| autoreconf: Entering directory `.'
| autoreconf: configure.ac: not using Gettext
| autoreconf: running: aclocal --system-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot/usr/share/aclocal/ --automake-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal-1.16 -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force -I aclocal
| autoreconf: configure.ac: tracing
| autoreconf: running: libtoolize --copy --force
| libtoolize: putting auxiliary files in '.'.
| libtoolize: copying file './ltmain.sh'
| libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'aclocal'.
| libtoolize: copying file 'aclocal/libtool.m4'
| libtoolize: copying file 'aclocal/ltoptions.m4'
| libtoolize: copying file 'aclocal/ltsugar.m4'
| libtoolize: copying file 'aclocal/ltversion.m4'
| libtoolize: copying file 'aclocal/lt~obsolete.m4'
| autoreconf: running: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/bin/autoconf --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force
| autoreconf: running: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/bin/autoheader --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force
| autoreconf: running: automake --add-missing --copy --force-missing
| configure.ac:11: installing './compile'
| configure.ac:7: installing './missing'
| support/export/Makefile.am: installing './depcomp'
| support/nsm/Makefile.am:13: warning: source file '../misc/misc.c' is in a subdirectory,
| support/nsm/Makefile.am:13: but option 'subdir-objects' is disabled
| automake: warning: possible forward-incompatibility.
| automake: At least a source file is in a subdirectory, but the 'subdir-objects'
| automake: automake option hasn't been enabled. For now, the corresponding output
| automake: object file(s) will be placed in the top-level directory. However,
| automake: this behaviour will change in future Automake versions: they will
| automake: unconditionally cause object files to be placed in the same subdirectory
| automake: of the corresponding sources.
| automake: You are advised to start using 'subdir-objects' option throughout your
| automake: project, to avoid future incompatibilities.
| autoreconf: running: gnu-configize
| autoreconf: Leaving directory `.'
| NOTE: Running ./configure --build=x86_64-linux --host=x86_64-poky-linux --target=x86_64-poky-linux --prefix=/usr --exec_prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --libexecdir=/usr/libexec --datadir=/usr/share --sysconfdir=/etc --sharedstatedir=/com --localstatedir=/var --libdir=/usr/lib --includedir=/usr/include --oldincludedir=/usr/include --infodir=/usr/share/info --mandir=/usr/share/man --disable-silent-rules --disable-dependency-tracking --with-libtool-sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot --with-statduser=rpcuser --enable-mountconfig --enable-libmount-mount --enable-uuid --disable-gss --disable-nfsdcltrack --with-statdpath=/var/lib/nfs/statd --disable-static --enable-ipv6 --disable-nfsv4 --disable-nfsv41 --with-tcp-wrappers
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/endian-little
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common-linux
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common-glibc
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/x86_64-linux
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/../meta-openembedded/meta-networking/site/endian-little
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot/usr/share/x86_64-poky-linux_config_site.d/ncurses_config
| checking build system type... x86_64-pc-linux-gnu
| checking host system type... x86_64-poky-linux-gnu
| checking for a BSD-compatible install... /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/hosttools/install -c
| checking whether build environment is sane... yes
| checking for x86_64-poky-linux-strip... x86_64-poky-linux-strip
| checking for a thread-safe mkdir -p... /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/hosttools/mkdir -p
| checking for gawk... gawk
| checking whether make sets $(MAKE)... yes
| checking whether make supports nested variables... yes
| checking whether to enable maintainer-specific portions of Makefiles... no
| checking whether make supports the include directive... yes (GNU style)
| checking for x86_64-poky-linux-gcc... x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -mfpmath=sse -msse4.2 -Werror=unknown-warning-option -mlittle-endian --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot
| checking whether the C compiler works... no
| configure: error: in `/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1':
| configure: error: C compiler cannot create executables
| See `config.log' for more details
| NOTE: The following config.log files may provide further information.
| NOTE: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/config.log
| ERROR: configure failed
| WARNING: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/temp/run.do_configure.10368:1 exit 1 from 'exit 1'
| ERROR: Execution of '/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/temp/run.do_configure.10368' failed with exit code 1:
| automake (GNU automake) 1.16.1
| Copyright (C) 2018 Free Software Foundation, Inc.
| License GPLv2+: GNU GPL version 2 or later <https://gnu.org/licenses/gpl-2.0.html>
| This is free software: you are free to change and redistribute it.
| There is NO WARRANTY, to the extent permitted by law.
|
| Written by Tom Tromey <tromey@...>
| and Alexandre Duret-Lutz <adl@...>.
| AUTOV is 1.16
| autoreconf: Entering directory `.'
| autoreconf: configure.ac: not using Gettext
| autoreconf: running: aclocal --system-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot/usr/share/aclocal/ --automake-acdir=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal-1.16 -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ -I /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force -I aclocal
| autoreconf: configure.ac: tracing
| autoreconf: running: libtoolize --copy --force
| libtoolize: putting auxiliary files in '.'.
| libtoolize: copying file './ltmain.sh'
| libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'aclocal'.
| libtoolize: copying file 'aclocal/libtool.m4'
| libtoolize: copying file 'aclocal/ltoptions.m4'
| libtoolize: copying file 'aclocal/ltsugar.m4'
| libtoolize: copying file 'aclocal/ltversion.m4'
| libtoolize: copying file 'aclocal/lt~obsolete.m4'
| autoreconf: running: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/bin/autoconf --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force
| autoreconf: running: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/bin/autoheader --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1/aclocal/ --include=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot-native/usr/share/aclocal/ --force
| autoreconf: running: automake --add-missing --copy --force-missing
| configure.ac:11: installing './compile'
| configure.ac:7: installing './missing'
| support/export/Makefile.am: installing './depcomp'
| support/nsm/Makefile.am:13: warning: source file '../misc/misc.c' is in a subdirectory,
| support/nsm/Makefile.am:13: but option 'subdir-objects' is disabled
| automake: warning: possible forward-incompatibility.
| automake: At least a source file is in a subdirectory, but the 'subdir-objects'
| automake: automake option hasn't been enabled. For now, the corresponding output
| automake: object file(s) will be placed in the top-level directory. However,
| automake: this behaviour will change in future Automake versions: they will
| automake: unconditionally cause object files to be placed in the same subdirectory
| automake: of the corresponding sources.
| automake: You are advised to start using 'subdir-objects' option throughout your
| automake: project, to avoid future incompatibilities.
| autoreconf: running: gnu-configize
| autoreconf: Leaving directory `.'
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/endian-little
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common-linux
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common-glibc
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/x86_64-linux
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/meta/site/common
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/poky/../meta-openembedded/meta-networking/site/endian-little
| configure: loading site script /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot/usr/share/x86_64-poky-linux_config_site.d/ncurses_config
| checking build system type... x86_64-pc-linux-gnu
| checking host system type... x86_64-poky-linux-gnu
| checking for a BSD-compatible install... /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/hosttools/install -c
| checking whether build environment is sane... yes
| checking for x86_64-poky-linux-strip... x86_64-poky-linux-strip
| checking for a thread-safe mkdir -p... /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/hosttools/mkdir -p
| checking for gawk... gawk
| checking whether make sets $(MAKE)... yes
| checking whether make supports nested variables... yes
| checking whether to enable maintainer-specific portions of Makefiles... no
| checking whether make supports the include directive... yes (GNU style)
| checking for x86_64-poky-linux-gcc... x86_64-poky-linux-clang -m64 -march=nehalem -mtune=generic -mfpmath=sse -msse4.2 -Werror=unknown-warning-option -mlittle-endian --sysroot=/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/recipe-sysroot
| checking whether the C compiler works... no
| configure: error: in `/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/nfs-utils-2.4.1':
| configure: error: C compiler cannot create executables
| See `config.log' for more details
| WARNING: /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/corei7-64-poky-linux/nfs-utils/2.4.1-r0/temp/run.do_configure.10368:1 exit 1 from 'exit 1'
|
ERROR: Task (/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-connectivity/nfs-utils/nfs-utils_2.4.1.bb:do_configure) failed with exit code '1'
NOTE: Tasks Summary: Attempted 5925 tasks of which 1948 didn't need to be rerun and 3 failed.

Summary: 3 tasks failed:
/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-bsp/gnu-efi/gnu-efi_3.0.9.bb:do_compile
/disk0/scratch/smonsees/yocto/workspace_3/poky/../meta-intel/recipes-bsp/thermald/thermald_1.9.bb:do_prepare_recipe_sysroot
/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/recipes-connectivity/nfs-utils/nfs-utils_2.4.1.bb:do_configure
Summary: There were 5 ERROR messages shown, returning a non-zero exit code.
17:03 smonsees@yix490038 /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default>

-----Original Message-----
From: Khem Raj <raj.khem@...>
Sent: Tuesday, April 20, 2021 4:51 PM
To: Monsees, Steven C (US) <steven.monsees@...>
Cc: yocto@...
Subject: Re: [yocto] #yocto llvm support and meta-clang

External Email Alert

This email has been sent from an account outside of the BAE Systems network.

Please treat the email with caution, especially if you are requested to click on a link, decrypt/open an attachment, or enable macros. For further information on how to spot phishing, access "Cybersecurity OneSpace Page" and report phishing by clicking the button "Report Phishing" on the Outlook toolbar.


On Tue, Apr 20, 2021 at 12:18 PM Monsees, Steven C (US) <steven.monsees@...> wrote:


There appears to be an issue with build zeus based meta-clang under zeus platform...

I followed steps off meta-clang page, and from the work I did with meta-clang under "Rocko" about a year ago, a lot has changed under the hood...

Working under zeus 3.0.4... EXT SDK appears fully functional, I require CLANG/LLVM for future development...
I think for future development you should look into dunfell or newer since those are supported releases.

Never seen this error before, did I miss a patch or possibly a step ?
clang toolchain has evolved rapidly in past few years and so you might find major changes from release to release and also SDK builds are relatively new, I think dunfell and newer is where its properly working without much issues.


Clean build area...

(1) Add meta-clang to bblayers.conf

(2) Added EXT SDK Settings for meta-clang :

SDKIMAGE_FEATURES_append = " staticdev-pkgs"

SDK_EXTRA_TOOLS = " \
nativesdk-cmake \
nativesdk-clang \ <---Only appears to download/build llvm when present
"

TOOLCHAIN_HOST_TASK_append = "${SDK_EXTRA_TOOLS}"

The build is much slower due to "native-clang-9.0.1-r0 do_compile"...


EXT SDK build error seen:
=========================

10:12 smonsees@yix490038
/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default>
bitbake sbcb-defaultfs-full -c populate_sdk_ext Parsing recipes: 100% |#################################################################################| Time: 0:01:25 Parsing of 2463 .bb files complete (0 cached, 2463 parsed). 3671 targets, 91 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION = "1.44.0"
BUILD_SYS = "x86_64-linux"
NATIVELSBSTRING = "rhel-7.9"
TARGET_SYS = "x86_64-poky-linux"
MACHINE = "sbcb-default"
DISTRO = "limws"
DISTRO_VERSION = "3.0.4"
TUNE_FEATURES = "m64 corei7"
TARGET_FPU = ""
meta
meta-poky = "my_yocto_3.0.4:f2eb22a8783f1eecf99bd4042695bab920eed00e"
meta-perl
meta-python
meta-filesystems
meta-networking
meta-initramfs
meta-oe = "zeus:2b5dd1eb81cd08bc065bc76125f2856e9383e98b"
meta-clang = "zeus:f5355ca9b86fb5de5930132ffd95a9b352d694f9"
meta = "master:a32ddd2b2a51b26c011fa50e441df39304651503"
meta-intel = "zeus:d9942d4c3a710406b051852de7232db03c297f4e"
meta-intel = "v2019.02:f635a364c55f1fb12519aff54924a0a5b947091e"

NOTE: Fetching uninative binary shim from
file:///ede/tms/yocto/zeus/downloads/intel/x86_64-nativesdk-libc.tar.x
z;sha256sum=a09922172c3a439105e0ae6b943daad2d83505b17da0aba97961ff433b
8c21ab Initialising tasks: 100%
|#####################################################################
#########| Time: 0:00:12 Checking sstate mirror object availability:
100% |######################################################| Time:
0:00:00 Sstate summary: Wanted 2490 Found 2157 Missed 333 Current 0
(86% match, 0% complete)
NOTE: Executing Tasks
NOTE: Setscene tasks completed
ERROR: sbcb-defaultfs-full-1.0-r0 do_sdk_depends: Error executing a python function in exec_python_func() autogenerated:

The stack trace of python calls that resulted in this exception/failure was:
File: 'exec_python_func() autogenerated', lineno: 2, function: <module>
0001:
*** 0002:extend_recipe_sysroot(d)
0003:
File: '/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/classes/staging.bbclass', lineno: 551, function: extend_recipe_sysroot
0547: dest = newmanifest[l]
0548: if l.endswith("/"):
0549: staging_copydir(l, targetdir, dest, seendirs)
0550: continue
*** 0551: staging_copyfile(l, targetdir, dest, postinsts, seendirs)
0552:
0553: bb.note("Installed into sysroot: %s" % str(msg_adding))
0554: bb.note("Skipping as already exists in sysroot: %s" % str(msg_exists))
0555:
File: '/disk0/scratch/smonsees/yocto/workspace_3/poky/meta/classes/staging.bbclass', lineno: 144, function: staging_copyfile
0140: if os.path.islink(c):
0141: linkto = os.readlink(c)
0142: if os.path.lexists(dest):
0143: if not os.path.islink(dest):
*** 0144: raise OSError(errno.EEXIST, "Link %s already exists as a file" % dest, dest)
0145: if os.readlink(dest) == linkto:
0146: return dest
0147: raise OSError(errno.EEXIST, "Link %s already exists to a different location? (%s vs %s)" % (dest, os.readlink(dest), linkto), dest)
0148: os.symlink(linkto, dest)
Exception: FileExistsError: [Errno 17] Link /disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/sbcb_default-poky-linux/sbcb-defaultfs-full/1.0-r0/recipe-sysroot/lib already exists as a file: '/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/work/sbcb_default-poky-linux/sbcb-defaultfs-full/1.0-r0/recipe-sysroot/lib'

ERROR: Logfile of failure stored in:
/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default/tmp/wor
k/sbcb_default-poky-linux/sbcb-defaultfs-full/1.0-r0/temp/log.do_sdk_d
epends.24732
ERROR: Task (/disk0/scratch/smonsees/yocto/workspace_3/poky/../meta-bae/meta-limws/meta-intel/recipes-core/images/sbcb-defaultfs-full.bb:do_sdk_depends) failed with exit code '1'
NOTE: Tasks Summary: Attempted 6892 tasks of which 5539 didn't need to be rerun and 1 failed.

Summary: 1 task failed:

/disk0/scratch/smonsees/yocto/workspace_3/poky/../meta-bae/meta-limws/
meta-intel/recipes-core/images/sbcb-defaultfs-full.bb:do_sdk_depends
Summary: There was 1 ERROR message shown, returning a non-zero exit code.
13:01 smonsees@yix490038
/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default>



Note: Modifying SDK_EXTRA_TOOLS by removing "nativesdk-clang", i.e.:

SDK_EXTRA_TOOLS = " \
nativesdk-cmake \
"

If I remove, the build is much faster, and it builds without the
error, also appears not to require/include "llvm" component in build.
I do not believe the full package was actually built/enabled, but no errors and image is functional.


13:09 smonsees@yix490038
/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default>
bitbake sbcb-defaultfs-full -c populate_sdk_ext Parsing recipes: 100% |#################################################################################| Time: 0:01:26 Parsing of 2463 .bb files complete (0 cached, 2463 parsed). 3671 targets, 91 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION = "1.44.0"
BUILD_SYS = "x86_64-linux"
NATIVELSBSTRING = "rhel-7.9"
TARGET_SYS = "x86_64-poky-linux"
MACHINE = "sbcb-default"
DISTRO = "limws"
DISTRO_VERSION = "3.0.4"
TUNE_FEATURES = "m64 corei7"
TARGET_FPU = ""
meta
meta-poky = "my_yocto_3.0.4:f2eb22a8783f1eecf99bd4042695bab920eed00e"
meta-perl
meta-python
meta-filesystems
meta-networking
meta-initramfs
meta-oe = "zeus:2b5dd1eb81cd08bc065bc76125f2856e9383e98b"
meta-clang = "zeus:f5355ca9b86fb5de5930132ffd95a9b352d694f9"
meta = "master:a32ddd2b2a51b26c011fa50e441df39304651503"
meta-intel = "zeus:d9942d4c3a710406b051852de7232db03c297f4e"
meta-intel = "v2019.02:f635a364c55f1fb12519aff54924a0a5b947091e"

NOTE: Fetching uninative binary shim from
file:///ede/tms/yocto/zeus/downloads/intel/x86_64-nativesdk-libc.tar.x
z;sha256sum=a09922172c3a439105e0ae6b943daad2d83505b17da0aba97961ff433b
8c21ab Initialising tasks: 100%
|#####################################################################
#########| Time: 0:00:12 Checking sstate mirror object availability:
100% |######################################################| Time:
0:00:00 Sstate summary: Wanted 2436 Found 2407 Missed 29 Current 0
(98% match, 0% complete)
NOTE: Executing Tasks
NOTE: Setscene tasks completed
NOTE: Tasks Summary: Attempted 6767 tasks of which 6223 didn't need to be rerun and all succeeded.
13:31 smonsees@yix490038
/disk0/scratch/smonsees/yocto/workspace_3/builds2/sbcb-default>


-----Original Message-----
From: Khem Raj <raj.khem@...>
Sent: Tuesday, April 20, 2021 12:02 PM
To: Monsees, Steven C (US) <steven.monsees@...>; Anton
Antonov <anton.antonov@...>; yocto@...
Subject: Re: [yocto] #yocto llvm support

External Email Alert

This email has been sent from an account outside of the BAE Systems network.

Please treat the email with caution, especially if you are requested to click on a link, decrypt/open an attachment, or enable macros. For further information on how to spot phishing, access "Cybersecurity OneSpace Page" and report phishing by clicking the button "Report Phishing" on the Outlook toolbar.



On 4/20/21 7:00 AM, Monsees, Steven C (US) via lists.yoctoproject.org wrote:
I noticed similar behavior.

I am running zeus 3.0.4, "devtool sdk-install llvm" will get llvm
8.0.1.

When I build meta-clang, and I set TOOLCHAIN?="clang" in local.conf
it appears to grab llvm-project-source-9.0.1-9.0.1.
this is intentional, when you use meta-clang, then llvm is preferred from LLVM since them we have consistent version of llvm for clang and others.

*From:*yocto@... <yocto@...>
*On Behalf Of *Anton Antonov
*Sent:* Tuesday, April 20, 2021 9:51 AM
*To:* yocto@...
*Subject:* Re: [yocto] #yocto llvm support

*_External Email Alert_*

*This email has been sent from an account outside of the BAE Systems
network.*

Please treat the email with caution, especially if you are requested
to click on a link, decrypt/open an attachment, or enable macros.
For further information on how to spot phishing, access
"Cybersecurity OneSpace Page" and report phishing by clicking the
button "Report Phishing" on the Outlook toolbar.


Hi Steven,

I used meta-clang in my recipes and I noticed that:
1. The current release of poky uses LLVM v11.1.0 by default
(poky/meta/recipes-devtools/llvm/llvm_git.bb)
2. Meta-clang requires LLVM v12.0.0 (meta-clang/conf/layer.conf
defines LLVMVERSION = "12.0.0")

As a result just including meta-clang into bblayers.conf will
require bitbake to build a new version of LLVM and rebuild
everything which uses it

Anton




4601 - 4620 of 57789