|
[meta-selinux][PATCH 07/16] secilc: upgrade 3.3 -> 3.4
Yi Zhao
Use precise license BSD-2-Clause instead of license BSD.
Signed-off-by: Yi Zhao <yi.zhao@...> --- recipes-security/selinux/{secilc_3.3.bb => secilc_3.4.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename recipes-security/selinux/{secilc_3.3.bb => secilc_3.4.bb} (85%) diff --git a/recipes-security/selinux/secilc_3.3.bb b/recipes-security/selinux/secilc_3.4.bb similarity index 85% rename from recipes-security/selinux/secilc_3.3.bb rename to recipes-security/selinux/secilc_3.4.bb index 60ab2fe..e30cd3a 100644 --- a/recipes-security/selinux/secilc_3.3.bb +++ b/recipes-security/selinux/secilc_3.4.bb @@ -3,12 +3,12 @@ DESCRIPTION = "\ This package contains secilc, the SELinux Common Intermediate \ Language (CIL) compiler." SECTION = "base" -LICENSE = "BSD" +LICENSE = "BSD-2-Clause" LIC_FILES_CHKSUM = "file://${S}/COPYING;md5=c7e802b9a3b0c2c852669864c08b9138" require selinux_common.inc -DEPENDS += "libsepol xmlto-native" +DEPENDS = "libsepol xmlto-native" S = "${WORKDIR}/git/secilc" -- 2.25.1 |
|
|
|
[meta-selinux][PATCH 06/16] checkpolicy: upgrade 3.3 -> 3.4
Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@...>
--- .../selinux/{checkpolicy_3.3.bb => checkpolicy_3.4.bb} | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) rename recipes-security/selinux/{checkpolicy_3.3.bb => checkpolicy_3.4.bb} (84%) diff --git a/recipes-security/selinux/checkpolicy_3.3.bb b/recipes-security/selinux/checkpolicy_3.4.bb similarity index 84% rename from recipes-security/selinux/checkpolicy_3.3.bb rename to recipes-security/selinux/checkpolicy_3.4.bb index ad90cc2..3df1bbb 100644 --- a/recipes-security/selinux/checkpolicy_3.3.bb +++ b/recipes-security/selinux/checkpolicy_3.4.bb @@ -11,10 +11,7 @@ LIC_FILES_CHKSUM = "file://${S}/COPYING;md5=393a5ca445f6965873eca0259a17f833" require selinux_common.inc -DEPENDS += "libsepol bison-native flex-native" - -EXTRA_OEMAKE += "LEX='flex'" -EXTRA_OEMAKE += "LIBSEPOLA=${STAGING_LIBDIR}/libsepol.a" +DEPENDS = "libsepol bison-native" S = "${WORKDIR}/git/checkpolicy" -- 2.25.1 |
|
|
|
[meta-selinux][PATCH 05/16] libsemanage: upgrade 3.3 -> 3.4
Yi Zhao
Refresh patches.
Signed-off-by: Yi Zhao <yi.zhao@...> --- .../libsemanage-Fix-execve-segfaults-on-Ubuntu.patch | 10 +++++----- .../libsemanage-allow-to-disable-audit-support.patch | 8 ++++---- ...bsemanage-disable-expand-check-on-policy-load.patch | 8 ++++---- .../selinux/{libsemanage_3.3.bb => libsemanage_3.4.bb} | 9 +++++---- 4 files changed, 18 insertions(+), 17 deletions(-) rename recipes-security/selinux/{libsemanage_3.3.bb => libsemanage_3.4.bb} (91%) diff --git a/recipes-security/selinux/libsemanage/libsemanage-Fix-execve-segfaults-on-Ubuntu.patch b/recipes-security/selinux/libsemanage/libsemanage-Fix-execve-segfaults-on-Ubuntu.patch index 0b1f3d8..5a03d30 100644 --- a/recipes-security/selinux/libsemanage/libsemanage-Fix-execve-segfaults-on-Ubuntu.patch +++ b/recipes-security/selinux/libsemanage/libsemanage-Fix-execve-segfaults-on-Ubuntu.patch @@ -1,4 +1,4 @@ -From 01a37b94a1f5605a395e8b45ee9ec653ce716c06 Mon Sep 17 00:00:00 2001 +From 2111f86dce8defd9bebd9b43008339e3b5af0aa7 Mon Sep 17 00:00:00 2001 From: Xin Ouyang <Xin.Ouyang@...> Date: Mon, 26 Mar 2012 15:15:16 +0800 Subject: [PATCH] libsemanage: Fix execve segfaults on Ubuntu. @@ -9,7 +9,7 @@ Such as "make load" while building refpolicy. http://oss.tresys.com/pipermail/refpolicy/2011-December/004859.html -Upstream-Status: Pending +Upstream-Status: Inappropriate [embedded specific] Signed-off-by: Yi Zhao <yi.zhao@...> --- @@ -17,10 +17,10 @@ Signed-off-by: Yi Zhao <yi.zhao@...> 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/semanage_store.c b/src/semanage_store.c -index 58dded6..1a94545 100644 +index 14a0957..0a9200e 100644 --- a/src/semanage_store.c +++ b/src/semanage_store.c -@@ -1441,7 +1441,7 @@ static int semanage_exec_prog(semanage_handle_t * sh, +@@ -1470,7 +1470,7 @@ static int semanage_exec_prog(semanage_handle_t * sh, if (forkval == 0) { /* child process. file descriptors will be closed * because they were set as close-on-exec. */ @@ -30,5 +30,5 @@ index 58dded6..1a94545 100644 } -- -2.7.4 +2.25.1 diff --git a/recipes-security/selinux/libsemanage/libsemanage-allow-to-disable-audit-support.patch b/recipes-security/selinux/libsemanage/libsemanage-allow-to-disable-audit-support.patch index ff5cb00..19263d8 100644 --- a/recipes-security/selinux/libsemanage/libsemanage-allow-to-disable-audit-support.patch +++ b/recipes-security/selinux/libsemanage/libsemanage-allow-to-disable-audit-support.patch @@ -1,9 +1,9 @@ -From e76867515be3bc296174aeb26c7996a0939a2a8c Mon Sep 17 00:00:00 2001 +From 5718384543ff06ad4032e90291f9e4398a2749c4 Mon Sep 17 00:00:00 2001 From: Wenzong Fan <wenzong.fan@...> Date: Mon, 20 Jan 2014 03:53:48 -0500 Subject: [PATCH] libsemanage: allow to disable audit support -Upstream-Status: Pending +Upstream-Status: Inappropriate [embedded specific] Signed-off-by: Wenzong Fan <wenzong.fan@...> --- @@ -13,7 +13,7 @@ Signed-off-by: Wenzong Fan <wenzong.fan@...> 3 files changed, 31 insertions(+), 2 deletions(-) diff --git a/src/Makefile b/src/Makefile -index a0eb374..afc4437 100644 +index 71c2a1d..52f335e 100644 --- a/src/Makefile +++ b/src/Makefile @@ -26,6 +26,14 @@ ifeq ($(DEBUG),1) @@ -122,5 +122,5 @@ index 69f49a3..f914492 100644 OBJECTS = $(SOURCES:.c=.o) POLICIES = $(CILS:.cil=.policy) -- -2.17.1 +2.25.1 diff --git a/recipes-security/selinux/libsemanage/libsemanage-disable-expand-check-on-policy-load.patch b/recipes-security/selinux/libsemanage/libsemanage-disable-expand-check-on-policy-load.patch index d1e5720..6e0faeb 100644 --- a/recipes-security/selinux/libsemanage/libsemanage-disable-expand-check-on-policy-load.patch +++ b/recipes-security/selinux/libsemanage/libsemanage-disable-expand-check-on-policy-load.patch @@ -1,4 +1,4 @@ -From 35196d58cd37fec89fcf95e3d43b41de7008f0be Mon Sep 17 00:00:00 2001 +From dd52bfb66d710473aeb75c5fe92d5cf0a66b637e Mon Sep 17 00:00:00 2001 From: Joe MacDonald <joe@...> Date: Wed, 7 May 2014 11:36:27 -0400 Subject: [PATCH] libsemanage: disable expand-check on policy load @@ -17,10 +17,10 @@ Signed-off-by: Joe MacDonald <joe@...> 1 file changed, 4 insertions(+) diff --git a/src/semanage.conf b/src/semanage.conf -index dc8d46b..254f156 100644 +index 98d769b..708fa8c 100644 --- a/src/semanage.conf +++ b/src/semanage.conf -@@ -39,3 +39,7 @@ module-store = direct +@@ -40,3 +40,7 @@ module-store = direct # By default, semanage will generate policies for the SELinux target. # To build policies for Xen, uncomment the following line. #target-platform = xen @@ -29,5 +29,5 @@ index dc8d46b..254f156 100644 +# module. This results in a significant speed-up in policy loading. +expand-check=0 -- -2.7.4 +2.25.1 diff --git a/recipes-security/selinux/libsemanage_3.3.bb b/recipes-security/selinux/libsemanage_3.4.bb similarity index 91% rename from recipes-security/selinux/libsemanage_3.3.bb rename to recipes-security/selinux/libsemanage_3.4.bb index b17eb68..08d2c9c 100644 --- a/recipes-security/selinux/libsemanage_3.3.bb +++ b/recipes-security/selinux/libsemanage_3.4.bb @@ -16,23 +16,24 @@ SRC_URI += "file://libsemanage-Fix-execve-segfaults-on-Ubuntu.patch \ file://libsemanage-disable-expand-check-on-policy-load.patch \ " -DEPENDS += "libsepol libselinux bzip2 python3 bison-native flex-native swig-native" +DEPENDS = "libsepol libselinux bison-native swig-native" + DEPENDS:append:class-target = " audit" S = "${WORKDIR}/git/libsemanage" +EXTRA_OEMAKE:class-native = "DISABLE_AUDIT=y" + PACKAGES =+ "${PN}-python" # For /usr/libexec/selinux/semanage_migrate_store -RDEPENDS:${PN}-python += "python3-core" +RDEPENDS:${PN}-python = "python3-core" FILES:${PN}-python = "${libdir}/python${PYTHON_BASEVERSION}/site-packages/* \ ${libexecdir}/selinux/semanage_migrate_store" FILES:${PN}-dbg += "${libdir}/python${PYTHON_BASEVERSION}/site-packages/.debug/*" FILES:${PN} += "${libexecdir}" -EXTRA_OEMAKE:class-native += "DISABLE_AUDIT=y" - do_compile:append() { oe_runmake pywrap \ PYLIBVER='python${PYTHON_BASEVERSION}${PYTHON_ABI}' \ -- 2.25.1 |
|
|
|
[meta-selinux][PATCH 04/16] libselinux-python: upgrade 3.3 -> 3.4
Yi Zhao
* Use libpcre2 instead of libpcre.
* Refresh patches. Signed-off-by: Yi Zhao <yi.zhao@...> --- ...linux-python_3.3.bb => libselinux-python_3.4.bb} | 13 +++++++------ ...ix-python-modules-install-path-for-multili.patch | 8 ++++---- ...PYCEXT-and-rely-on-the-installed-file-nam.patch} | 8 ++++---- 3 files changed, 15 insertions(+), 14 deletions(-) rename recipes-security/selinux/{libselinux-python_3.3.bb => libselinux-python_3.4.bb} (79%) rename recipes-security/selinux/libselinux/{0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch => 0002-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch} (94%) diff --git a/recipes-security/selinux/libselinux-python_3.3.bb b/recipes-security/selinux/libselinux-python_3.4.bb similarity index 79% rename from recipes-security/selinux/libselinux-python_3.3.bb rename to recipes-security/selinux/libselinux-python_3.4.bb index 136f538..a850369 100644 --- a/recipes-security/selinux/libselinux-python_3.3.bb +++ b/recipes-security/selinux/libselinux-python_3.4.bb @@ -8,18 +8,20 @@ LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=84b4d2c6ef954a2d4081e775a270d0d0" require selinux_common.inc -inherit python3native python3targetconfig pkgconfig +inherit python3targetconfig pkgconfig FILESEXTRAPATHS:prepend := "${THISDIR}/libselinux:" SRC_URI += "\ file://0001-Makefile-fix-python-modules-install-path-for-multili.patch \ - file://0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch \ + file://0002-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch \ " S = "${WORKDIR}/git/libselinux" -DEPENDS += "python3 swig-native libpcre libsepol" -RDEPENDS:${PN} += "libselinux python3-core python3-shell" +DEPENDS = "libsepol libpcre2 swig-native" +DEPENDS:append:libc-musl = " fts" + +RDEPENDS:${PN} = "libselinux python3-core python3-shell" def get_policyconfigarch(d): import re @@ -28,8 +30,7 @@ def get_policyconfigarch(d): target = p.sub('i386',target) return "ARCH=%s" % (target) -EXTRA_OEMAKE += "${@get_policyconfigarch(d)}" -EXTRA_OEMAKE += "LDFLAGS='${LDFLAGS} -lpcre' LIBSEPOLA='${STAGING_LIBDIR}/libsepol.a'" +EXTRA_OEMAKE = "${@get_policyconfigarch(d)}" EXTRA_OEMAKE:append:libc-musl = " FTS_LDLIBS=-lfts" FILES:${PN} = "${libdir}/python${PYTHON_BASEVERSION}/site-packages/*" diff --git a/recipes-security/selinux/libselinux/0001-Makefile-fix-python-modules-install-path-for-multili.patch b/recipes-security/selinux/libselinux/0001-Makefile-fix-python-modules-install-path-for-multili.patch index 9dfd8d4..9750cd6 100644 --- a/recipes-security/selinux/libselinux/0001-Makefile-fix-python-modules-install-path-for-multili.patch +++ b/recipes-security/selinux/libselinux/0001-Makefile-fix-python-modules-install-path-for-multili.patch @@ -1,4 +1,4 @@ -From 41540f5c4e3552a2806097613f016d1a2fd4754a Mon Sep 17 00:00:00 2001 +From 1ff60a36bb0bfc95ce33cf950f58e121548a3c8a Mon Sep 17 00:00:00 2001 From: Yi Zhao <yi.zhao@...> Date: Mon, 13 Apr 2020 12:44:23 +0800 Subject: [PATCH] Makefile: fix python modules install path for multilib @@ -11,10 +11,10 @@ Signed-off-by: Yi Zhao <yi.zhao@...> 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Makefile b/src/Makefile -index 190016e..dcdeb10 100644 +index 04bf4f2..81ae6a2 100644 --- a/src/Makefile +++ b/src/Makefile -@@ -174,7 +174,7 @@ install: all +@@ -181,7 +181,7 @@ install: all ln -sf --relative $(DESTDIR)$(SHLIBDIR)/$(LIBSO) $(DESTDIR)$(LIBDIR)/$(TARGET) install-pywrap: pywrap @@ -24,5 +24,5 @@ index 190016e..dcdeb10 100644 ln -sf --relative $(DESTDIR)$(PYTHONLIBDIR)/selinux/_selinux$(PYCEXT) $(DESTDIR)$(PYTHONLIBDIR)/_selinux$(PYCEXT) -- -2.17.1 +2.25.1 diff --git a/recipes-security/selinux/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch b/recipes-security/selinux/libselinux/0002-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch similarity index 94% rename from recipes-security/selinux/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch rename to recipes-security/selinux/libselinux/0002-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch index 0fafcef..db7d68f 100644 --- a/recipes-security/selinux/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch +++ b/recipes-security/selinux/libselinux/0002-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch @@ -1,4 +1,4 @@ -From 1542c79660484a2f2e24ee0593586dba35c3ad13 Mon Sep 17 00:00:00 2001 +From dae53d7cd4d7875f7fb7aba016a0331559044eea Mon Sep 17 00:00:00 2001 From: Thomas Petazzoni <thomas.petazzoni@...> Date: Fri, 25 Oct 2019 13:37:14 +0200 Subject: [PATCH] Do not use PYCEXT, and rely on the installed file name @@ -27,7 +27,7 @@ Signed-off-by: Changqing Li <changqing.li@...> 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/Makefile b/src/Makefile -index dcdeb10..da6f719 100644 +index 81ae6a2..37399e1 100644 --- a/src/Makefile +++ b/src/Makefile @@ -15,7 +15,6 @@ INCLUDEDIR ?= $(PREFIX)/include @@ -38,7 +38,7 @@ index dcdeb10..da6f719 100644 RUBYINC ?= $(shell $(RUBY) -e 'puts "-I" + RbConfig::CONFIG["rubyarchhdrdir"] + " -I" + RbConfig::CONFIG["rubyhdrdir"]') RUBYLIBS ?= $(shell $(RUBY) -e 'puts "-L" + RbConfig::CONFIG["libdir"] + " -L" + RbConfig::CONFIG["archlibdir"] + " " + RbConfig::CONFIG["LIBRUBYARG_SHARED"]') RUBYINSTALL ?= $(shell $(RUBY) -e 'puts RbConfig::CONFIG["vendorarchdir"]') -@@ -176,7 +175,7 @@ install: all +@@ -183,7 +182,7 @@ install: all install-pywrap: pywrap $(PYTHON) setup.py install --prefix=$(PREFIX) --root=$(DESTDIR) --install-lib=$(PYTHONLIBDIR) $(PYTHON_SETUP_ARGS) install -m 644 $(SWIGPYOUT) $(DESTDIR)$(PYTHONLIBDIR)/selinux/__init__.py @@ -48,5 +48,5 @@ index dcdeb10..da6f719 100644 install-rubywrap: rubywrap test -d $(DESTDIR)$(RUBYINSTALL) || install -m 755 -d $(DESTDIR)$(RUBYINSTALL) -- -2.17.1 +2.25.1 -- 2.25.1 |
|
|
|
[meta-selinux][PATCH 03/16] libselinux: upgrade 3.3 -> 3.4
Yi Zhao
Use libpcre2 instead of libpcre.
Signed-off-by: Yi Zhao <yi.zhao@...> --- .../selinux/{libselinux_3.3.bb => libselinux_3.4.bb} | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) rename recipes-security/selinux/{libselinux_3.3.bb => libselinux_3.4.bb} (77%) diff --git a/recipes-security/selinux/libselinux_3.3.bb b/recipes-security/selinux/libselinux_3.4.bb similarity index 77% rename from recipes-security/selinux/libselinux_3.3.bb rename to recipes-security/selinux/libselinux_3.4.bb index 1144840..8009d6d 100644 --- a/recipes-security/selinux/libselinux_3.3.bb +++ b/recipes-security/selinux/libselinux_3.4.bb @@ -8,9 +8,9 @@ LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=84b4d2c6ef954a2d4081e775a270d0d0" require selinux_common.inc -inherit lib_package python3native pkgconfig +inherit lib_package pkgconfig -DEPENDS += "libsepol libpcre" +DEPENDS = "libsepol libpcre2" DEPENDS:append:libc-musl = " fts" S = "${WORKDIR}/git/libselinux" @@ -22,8 +22,7 @@ def get_policyconfigarch(d): target = p.sub('i386',target) return "ARCH=%s" % (target) -EXTRA_OEMAKE += "${@get_policyconfigarch(d)}" -EXTRA_OEMAKE += "LDFLAGS='${LDFLAGS} -lpcre' LIBSEPOLA='${STAGING_LIBDIR}/libsepol.a'" +EXTRA_OEMAKE = "${@get_policyconfigarch(d)}" EXTRA_OEMAKE:append:libc-musl = " FTS_LDLIBS=-lfts" BBCLASSEXTEND = "native" -- 2.25.1 |
|
|
|
[meta-selinux][PATCH 02/16] libsepol: upgrade 3.3 -> 3.4
Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@...>
--- .../selinux/{libsepol_3.3.bb => libsepol_3.4.bb} | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) rename recipes-security/selinux/{libsepol_3.3.bb => libsepol_3.4.bb} (80%) diff --git a/recipes-security/selinux/libsepol_3.3.bb b/recipes-security/selinux/libsepol_3.4.bb similarity index 80% rename from recipes-security/selinux/libsepol_3.3.bb rename to recipes-security/selinux/libsepol_3.4.bb index 80d8819..49312da 100644 --- a/recipes-security/selinux/libsepol_3.3.bb +++ b/recipes-security/selinux/libsepol_3.4.bb @@ -13,10 +13,6 @@ inherit lib_package S = "${WORKDIR}/git/libsepol" -# Change RANLIB for cross compiling, use host-tools $(AR) rather than -# local ranlib. -EXTRA_OEMAKE += "RANLIB='$(AR) s'" - -DEPENDS += "flex-native" +DEPENDS = "flex-native" BBCLASSEXTEND = "native" -- 2.25.1 |
|
|
|
[meta-selinux][PATCH 01/16] selinux: upgrade 3.3 -> 3.4
Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@...>
--- recipes-security/selinux/selinux_common.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/selinux/selinux_common.inc b/recipes-security/selinux/selinux_common.inc index 8bdf8ad..86c748f 100644 --- a/recipes-security/selinux/selinux_common.inc +++ b/recipes-security/selinux/selinux_common.inc @@ -1,7 +1,7 @@ HOMEPAGE = "https://github.com/SELinuxProject" SRC_URI = "git://github.com/SELinuxProject/selinux.git;branch=master;protocol=https" -SRCREV = "7f600c40bc18d8180993edcd54daf45124736776" +SRCREV = "0a8c177dacdc1df96ea11bb8aa75e16c4fa82285" UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+(\.\d+)+)" -- 2.25.1 |
|
|
|
[meta-security][v2][PATCH] suricata: fix compile issue
make[2]: *** No rule to make target '../rust/target/arm-poky-linux-gnueabi/release/libsuricata.a', needed by 'suricata'
Signed-off-by: Armin Kuster <akuster808@...> --- [v2] use RUST_HOST_SYS instead --- recipes-ids/suricata/suricata_6.0.6.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-ids/suricata/suricata_6.0.6.bb b/recipes-ids/suricata/suricata_6.0.6.bb index 35054ef..ce9aca8 100644 --- a/recipes-ids/suricata/suricata_6.0.6.bb +++ b/recipes-ids/suricata/suricata_6.0.6.bb @@ -145,6 +145,8 @@ export logdir = "${localstatedir}/log" CACHED_CONFIGUREVARS = "ac_cv_func_malloc_0_nonnull=yes ac_cv_func_realloc_0_nonnull=yes" do_configure:prepend () { + # use host for RUST_SURICATA_LIB_XC_DIR + sed -i -e 's,\${host_alias},${RUST_HOST_SYS},' ${S}/configure.ac oe_runconf } -- 2.25.1 |
|
|
|
Re: Dependency for binary package
On Fri, Aug 26, 2022 at 10:38 AM Rudolf J Streif <rudolf.streif@...> wrote:
This is the problem link. So either the sdk has provided them faulty install or they have replaced some stuff knowiingly or unknowingly or they have environment issues where their make system is finding this library elsewhere during their app build You can ask them for content of Usr/lib of their sdk instAll If you do then it would be interesting to see if the library and its corresponding links are intact
|
|
|
|
Re: Devtool fails if SRCREV is set to ${AUTOREV}
#kirkstone
#devtool
#yocto
acox@...
I'm having the exact same issue when just modifying a custom linux recipie which is essntially the same as the one provided but referencing 5.15 after transposing recipies from dunfell to kirkstone. The builds without any devtool modify sources work fine but the second I am working with a devtool'd linux it produces that error. So the current best workflow seems to be to make changes in a branch on the remote repository which will require forking the kernel sources and then pointing the branch at the branch created on the fork of the repository. raise bb.fetch2.FetchError("Recipe uses a floating tag/branch '%s' for repo '%s' without a fixed SRCREV yet doesn't call bb.fetch2.get_srcrev() (use SRCPV in PV for OE)." % (ud.unresolvedrev[name], ud.host+ud.path))
^ https://git.yoctoproject.org/poky/plain/bitbake/lib/bb/fetch2/git.py |
|
|
|
Re: Dependency for binary package
On 8/25/22 5:44 PM, Khem Raj wrote:
On Thu, Aug 25, 2022 at 4:56 PM Rudolf J StreifYes, I have. These are the libs: 0x0000000000000001 (NEEDED) Shared library: [libQt5Quick.so.5] 0x0000000000000001 (NEEDED) Shared library: [libQt5Gui.so.5] 0x0000000000000001 (NEEDED) Shared library: [libQt5Qml.so.5] 0x0000000000000001 (NEEDED) Shared library: [libQt5Network.so.5] 0x0000000000000001 (NEEDED) Shared library: [libQt5SerialPort.so.5] 0x0000000000000001 (NEEDED) Shared library: [libQt5Core.so.5] 0x0000000000000001 (NEEDED) Shared library: [librt.so.1] 0x0000000000000001 (NEEDED) Shared library: [libdl.so.2] 0x0000000000000001 (NEEDED) Shared library: [libatomic.so.1] 0x0000000000000001 (NEEDED) Shared library: [libGLESv2.so] 0x0000000000000001 (NEEDED) Shared library: [libpthread.so.0] 0x0000000000000001 (NEEDED) Shared library: [libstdc++.so.6] 0x0000000000000001 (NEEDED) Shared library: [libm.so.6] 0x0000000000000001 (NEEDED) Shared library: [libgcc_s.so.1] 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] It's asking for libGLESv2.so. It's no problem on the target since it's correctly resolved by ldd: root@tgt-lcd7:/usr/lib# ldconfig -p |grep libGLES libGLESv2.so.2 (libc6,x86-64) => /lib64/libGLESv2.so.2 libGLESv2.so.2 (libc6) => /lib/libGLESv2.so.2 libGLESv2.so (libc6,x86-64) => /lib64/libGLESv2.so libGLESv1_CM.so.1 (libc6,x86-64) => /lib64/libGLESv1_CM.so.1 libGLESv1_CM.so.1 (libc6) => /lib/libGLESv1_CM.so.1 libGLESv1_CM.so (libc6,x86-64) => /lib64/libGLESv1_CM.so However, I cannot wrap my head around why this would happen with a binary that has been compiled and linked with the YP SDK that exactly matches the rootfs of the target: Target: root@tgt-lcd7:/usr/lib# ls -l libGLES* lrwxrwxrwx 1 root root 14 Mar 9 2018 libGLESv2.so -> libGLESv2.so.2 lrwxrwxrwx 1 root root 18 Mar 9 2018 libGLESv2.so.2 -> libGLESv2.so.2.0.0 -rwxr-xr-x 1 root root 46792 Mar 9 2018 libGLESv2.so.2.0.0 SDK: [rstreif@threaddy lib]$ ls -l libGLES* lrwxrwxrwx. 1 rstreif rstreif 14 Aug 25 11:35 libGLESv2.so -> libGLESv2.so.2 lrwxrwxrwx. 1 rstreif rstreif 18 Aug 25 11:36 libGLESv2.so.2 -> libGLESv2.so.2.0.0 -rwxr-xr-x. 1 rstreif rstreif 46792 Aug 25 11:36 libGLESv2.so.2.0.0 Unfortunately I don't have the sources of the application otherwise I would have YP build it. But the customer claims they are building it with the SDK. I am trying to get to the bottom of their end too. --I can SKIP_INSANE file-rdeps but then I am getting the same issue when Rudolf J Streif CEO/CTO ibeeto +1.855.442.3386 x700 |
|
|
|
Re: Bitbake + Patches
Peter Kjellerstedt
[ In the future, please make sure to reply to list and not just to me. ] [ Top posting since Outlook doesn’t support inline responses to HTML mails. ]
No, you are supposed to copy the suggest text for the bbappend verbatim, with the exception of the SRC_URI[md5sum] which need to be corrected to match the actual MD5 sum (which bitbake will tell you when you try to build). The suggested additions/deletions for SRC_URI in the bbappend I suggested should be correct as specified, based on the differences between the apache2 recipe in Zeus and master. You will also need to copy the three new patch files from master of meta-webserver, and any of the other patches that have been updated between Zeus and master. Changing PV takes care of the actual update of the code to the new version (since it determines which tar ball is fetched from upstream).
//Peter
From: forums <forums@...>
Sent: den 26 augusti 2022 14:21 To: Peter Kjellerstedt <peter.kjellerstedt@...> Subject: Re: [yocto] Bitbake + Patches
H Peter. I have t admin, looking at the above bbappend, its really confusing to me. I’ve looked at some of the documents on bitbake and I just can’t find anything to teach me how to put a bbappend together to accomplish upgrading an application.
Like for example:
I believe this one should be:
SRC_URI += file:/usr/bin/patch
The next one:
I’ve no idea what this one will nee to be.
And this one:
I don’t know what is supposed to go here either.
Then the SRC_URI_remove will be a pointer to the file containing the patches containing the diff’e between apache 12.4.1 and apache 2.4.54 ? I don’t think you can create a single patch file containing diff’s between multiple versions can you? I think it would have to be diff’s between apache 2.4.41 and 2.4.42. Right. Totally confused as to what to do here.
Any further help appreciated.
If you know of a resource for me to reference please pass it on. I just don’t see any clear documentation that explains how to construct a bbappend file.
Thanks, Jim |
|
|
|
[yocto-autobuilder-helper][kirkstone] config.json: Set SDKMACHINE to aarch64 for oe-selftest-armhost
Steve Sakoman
From: Ross Burton <ross.burton@...>
Although bitbake.conf sets the default SDKMACHINE to the build architecture, config.json resets that to i686. As oe-selftest assumes that the SDKs it builds are usable on the host machine, we should set SDKMACHINE=aarch64 in the oe-selftest-armhost build. A follow-up more invasive patch to clean up the SDKMACHINE assignments is in progress, once it has been verified to not cause regressions. Signed-off-by: Ross Burton <ross.burton@...> Signed-off-by: Richard Purdie <richard.purdie@...> (cherry picked from commit 65281a56452cf2bc547c60c0b2131422ab48a3d2) Signed-off-by: Steve Sakoman <steve@...> --- config.json | 1 + 1 file changed, 1 insertion(+) diff --git a/config.json b/config.json index 101ddff..298caf6 100644 --- a/config.json +++ b/config.json @@ -836,6 +836,7 @@ "TEMPLATE" : "selftest" }, "oe-selftest-armhost" : { + "SDKMACHINE": "aarch64", "TEMPLATE" : "selftest" }, "reproducible" : { -- 2.25.1 |
|
|
|
Qt based application fails to start with error "Could not initialize egl display" with Yocto Kirkstone
Rasool, Ansar <Ansar_Rasool@...>
Hi All,
Regards,
Ansar Rasool |
|
|
|
Multiple Images on the same HW platform with one image recipe
an010@...
Hello Yocto Experts,
I have a minor question regarding how to manage multiple projects within Yocto with MACHINE_FEATURES, DISTRO_FEATURES and IMAGE_FEATURES. If I have one HW platform but two images, where the latter one contains a bit more applications, am
I supposed to have one MACHINE, one DISTRO and 2 IMAGES? Or maybe one IMAGE but somehow to define IMAGE_FEATURES / EXTRA_IMAGE_FEATURES differently in those two cases? Due to
simplicity, I would rather have one image recipe.
Whats the best way to achieve this? Thanks.
|
|
|
|
Yocto Project 3.1.19 (dunfell-23.0.19) is Released
Lee Chee Yang
Hi We are pleased to announce the Yocto Project 3.1.19 (dunfell-23.0.19) Release is now available for download.
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2
A gpg signed version of these release notes is available at:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/RELEASENOTES
Full Test Report:
http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/testreport.txt
Thank you for everyone's contributions to this release.
Chee Yang Lee chee.yang.lee@... Yocto Project Build and Release - -------------------------- yocto-3.1.19 Release Notes - --------------------------
- -------------------------- Repositories/Downloads - --------------------------
Repository Name: poky Repository Location: https://git.yoctoproject.org/git/poky Branch: dunfell Tag: yocto-3.1.19 Git Revision: 4aad5914efe9789755789856882aac53de6c4ed3 Release Artefact: poky-dunfell-23.0.19 sha: d60e2b374e8fbb2560493a163b87f0e215795daa92d812252995af9365bd53f0 Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/poky-dunfell-23.0.19.tar.bz2
Repository Name: openembedded-core Repository Location: https://git.openembedded.org/openembedded-core Branch: dunfell Tag: yocto-3.1.19 Git Revision: a3cba15142e98177119ef36c09f553d09acf35ef Release Artefact: oecore-dunfell-23.0.19 sha: 08e66325f4e59df61790fa577626caf9fa0895db12c55407b95728916ea7597b Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/oecore-dunfell-23.0.19.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/oecore-dunfell-23.0.19.tar.bz2
Repository Name: meta-mingw Repository Location: https://git.yoctoproject.org/git/meta-mingw Branch: dunfell Tag: yocto-3.1.19 Git Revision: 524de686205b5d6736661d4532f5f98fee8589b7 Release Artefact: meta-mingw-dunfell-23.0.19 sha: ce55e5a82c51537b3900127f83c8239c7fc914a2f04ac3c8e6994cde881aeafc Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/meta-mingw-dunfell-23.0.19.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/meta-mingw-dunfell-23.0.19.tar.bz2
Repository Name: meta-gplv2 Repository Location: https://git.yoctoproject.org/git/meta-gplv2 Branch: dunfell Tag: yocto-3.1.19 Git Revision: 60b251c25ba87e946a0ca4cdc8d17b1cb09292ac Release Artefact: meta-gplv2-dunfell-23.0.19 sha: 04dc6ed5adf36b13da082cba8abf5760069c07b91590389cfce33f2b852d6d3d Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/meta-gplv2-dunfell-23.0.19.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/meta-gplv2-dunfell-23.0.19.tar.bz2
Repository Name: bitbake Repository Location: https://git.openembedded.org/bitbake Branch: dunfell Tag: yocto-3.1.19 Git Revision: 17be38290d1e971cd89785e6bf44caef0a6416f8 Release Artefact: bitbake-dunfell-23.0.19 sha: 5b6550fa76d59cb63ee15747db2c7441286a2f8d2d5296126ce4d86bbb189bea Download Locations: http://downloads.yoctoproject.org/releases/yocto/yocto-3.1.19/bitbake-dunfell-23.0.19.tar.bz2 http://mirrors.kernel.org/yocto/yocto/yocto-3.1.19/bitbake-dunfell-23.0.19.tar.bz2
Repository Name: yocto-docs Repository Location: https://git.yoctoproject.org/git/yocto-docs Branch: dunfell Tag: yocto-3.1.19 Git Revision: 95e030ec74f69eccabcc97737c8a93fd7629f9d9
- --------------- Known Issues - --------------- N/A
- --------------- Security Fixes - --------------- gdk-pixbuf: Fix CVE-2021-46829 gnupg: Fix CVE-2022-34903 gnutls: Fix CVE-2022-2509 grub2: Fix CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28736 libTiff: Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 libjpeg-turbo: Fix CVE-2021-46822 libtirpc: Fix CVE-2021-46828 qemu: Fix CVE-2020-27821 CVE-2022-35414 zlib: Fix CVE-2022-37434
- --------------- Fixes - --------------- bin_package: install into base_prefix bitbake: fetch2/wget: Update user-agent build-appliance-image: Update to dunfell head revision cve_check: skip remote patches that haven't been fetched when searching for CVE tags documentation: update for 3.1.19 release gstreamer1.0: use the correct meson option for the capabilities initscripts: run umountnfs as a KILL script insane: Fix buildpaths test to work with special devices kernel-arch: Fix buildpaths leaking into external module compiles kernel-fitimage.bbclass: add padding algorithm property in config nodes libmodule-build-perl: Use env utility to find perl interpreter libxml2: Port gentest.py to Python-3 linux-firmware: update 20220610 -> 20220708 linux-firwmare: restore WHENCE_CHKSUM variable linux-yocto/5.4: update to v5.4.209 openssh: Add openssh-sftp-server to openssh RDEPENDS poky.conf: bump version for 3.1.19 release rootfs-postcommands.bbclass: move host-user-contaminated.txt to ${S} selftest: skip virgl test on fedora 36 vim: Upgrade to 9.0.0115 |
|
|
|
Re: Dependency for binary package
On Thu, Aug 25, 2022 at 4:56 PM Rudolf J Streif
<rudolf.streif@...> wrote: I see a potential problem here, the soname is libGLESv2.so.2 but the dependency its complaining about is libGLESv2.so()(64bit), ( you see the missing version number ?) Can you run readelf -d <binary name> | grep NEEDED and see what libs are encoded in the ELF
|
|
|
|
Re: Dependency for binary package
On 8/25/22 4:49 PM, Khem Raj wrote:
On Thu, Aug 25, 2022 at 4:44 PM Rudolf J StreifYes, but that does not satisfy the dependency: ERROR: virtuoso-0.1-r0 do_package_qa: QA Issue: /opt/virtuoso/virtuoso contained in package virtuoso requires libGLESv2.so()(64bit), but no providers found in RDEPENDS:virtuoso? [file-rdeps] I can SKIP_INSANE file-rdeps but then I am getting the same issue when creating the rootfs with dnf. But in all fairness, I don't have control over the entire process. The customer builds the executable with the SDK I gave them. They give me the executable to put in the rootfs. ----Thanks, Rudolf J Streif CEO/CTO ibeeto +1.855.442.3386 x700 |
|
|
|
Re: Dependency for binary package
On Thu, Aug 25, 2022 at 4:44 PM Rudolf J Streif
<rudolf.streif@...> wrote: interesting, are you adding RDEPENDS on libgles2-mesa ? --Thanks, |
|
|
|
Re: Dependency for binary package
Thanks, Khem.
On 8/25/22 4:27 PM, Khem Raj wrote: On Thu, Aug 25, 2022 at 7:30 AM Rudolf J StreiflibGLESv2 in question on the target was built with YP: 0x000000000000000e (SONAME) Library soname: [libGLESv2.so.2] The SDK that builds the application was built with the same YP setup. That's why I am scratching my head. --Thanks, Rudolf J Streif CEO/CTO ibeeto +1.855.442.3386 x700 |
|
|