1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
|
.. SPDX-License-Identifier: CC-BY-SA-2.0-UK
Release notes for 4.3 (nandbield)
----------------------------------
New Features / Enhancements in 4.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Linux kernel 6.5 and 6.1, gcc 13, glibc 2.38, LLVM 17, and other recipe upgrades
- The autobuilder's shared-state artefacts are now available over the `jsDeliver
<https://jsdelivr.com>`__ Content Delivery Network (CDN).
See :term:`SSTATE_MIRRORS`.
- New variables:
- :term:`CVE_CHECK_STATUSMAP`, :term:`CVE_STATUS`, :term:`CVE_STATUS_GROUPS`,
replaceing the deprecated :term:`CVE_CHECK_IGNORE`.
- :term:`FILE_LAYERNAME`: bitbake now sets this to the name of the layer
containing the recipe
- :term:`FIT_ADDRESS_CELLS` and :term:`UBOOT_FIT_ADDRESS_CELLS`.
See details below.
- :term:`KERNEL_DTBDEST`: directory where to install DTB files.
- :term:`KERNEL_DTBVENDORED`: whether to keep vendor subdirectories.
- :term:`KERNEL_LOCALVERSION`: to add a string to the kernel version
information.
- :term:`KERNEL_STRIP`: to specify the command to strip the kernel binary.
- :term:`LICENSE_FLAGS_DETAILS`: add extra details about a recipe license
in case it is not allowed by :term:`LICENSE_FLAGS_ACCEPTED`.
- :term:`MESON_TARGET`: to compile a specific Meson target instead of the
default ones.
- :term:`OEQA_REPRODUCIBLE_TEST_PACKAGE`: to restrict package managers used
in reproducibility testing.
- Layername functionality available through overrides
Code can now know which layer a recipe is coming from through the newly added :term:`FILE_LAYERNAME`
variable. This has been added as an override of the form ``layer-<layername>``. In particular,
this means QA checks can now be layer specific, for example::
ERROR_QA:layer-core:append = " patch-status"
This will enable the ``patch-status`` QA check for the core layer.
- Architecture-specific enhancements:
- RISCV support is now enabled in LLVM 17.
- Loongarch support in the :ref:`ref-classes-linuxloader` class and
``core-image-minimal-initramfs`` image.
- The ``arch-armv8`` and ``arch-armv9`` architectures are now given
`Scalable Vector Extension (SVE)
<https://developer.arm.com/documentation/100891/0612/sve-overview/introducing-sve>`__
based tune options. Commits:
:yocto_git:`1 </poky/commit/?id=e4be03be5be62e367a40437a389121ef97d6cff3>`,
:yocto_git:`2 </poky/commit/?id=8cd5d264af4c346730531cb98ae945ab862dbd69>`.
- Kernel-related enhancements:
- The default kernel is the current stable (6.5), and there is also support
for the latest long-term release (6.1).
- The list of fixed kernel CVEs is updated regularly using data from
`linuxkernelcves.com <https://linuxkernelcves.com>`__.
- A ``showconfig`` task was added to the :ref:`ref-classes-cml1` class, to
easily examine the final generated ``.config`` file.
- New core recipes:
- ``musl-legacy-error``: glibc ``error()`` API implementation still needed
by a few packages.
- `python3-beartype <https://beartype.readthedocs.io>`, unbearably fast
runtime type checking in pure Python.
- `python3-spdx-tools <https://github.com/spdx/tools-python>`__,
tools for SPDX validation and conversion.
- `python3-uritools <https://github.com/tkem/uritools/>`__, replacement for
the ``urllib.parse`` module.
- `ttyrun <https://github.com/ibm-s390-linux/s390-tools>`__, starts
``getty`` programs only when a terminal exists, preventing respawns
through the ``init`` program. This allowed to remove the
``SERIAL_CONSOLES_CHECK`` variable.
- New classes:
- A ``ptest-cargo`` class was added to allow Cargo based recipes to easily add ptests
- A :ref:`ref-classes-cargo_c` class was added to allow recipes to make Rust code
available to C and C++ programs.
- QEMU / ``runqemu`` enhancements:
- QEMU has been upgraded to version 8.1
- Many updates to the ``runqemu`` command.
- The ``qemu-system-native`` recipe is now built with PNG support, which could be
useful to grab screeshots for error reporting purposes.
- Rust improvements:
- Rust has been upgraded to version 1.70
- Image-related enhancements:
- Distribution-related enhancements:
- The ``poky`` distribution enables the generation of :term:`SPDX` manifests.
- The ``poky-altcfg`` distribution enables the ``usrmerge``
:ref:`distro feature <ref-manual/features:Distro Features>`.
- wic Image Creator enhancements:
- FIT image related improvements:
- New :term:`FIT_ADDRESS_CELLS` and :term:`UBOOT_FIT_ADDRESS_CELLS` variables allowing
to specify 64 bit addresses, typically for loading U-Boot.
- SDK-related improvements:
- Testing:
- The :ref:`ref-classes-insane` class now adds an :ref:`unimplemented-ptest
<qa-check-unimplemented-ptest>` infrastructure to detect package sources
with unit tests but no implemented ptests in the recipe.
- A new task to perform recipe-wide QA checks was added: ``do_recipe_qa``.
- New build-time checks for set :term:`SUMMARY`, :term:`HOMEPAGE`, and
:term:`RECIPE_MAINTAINER` fields was added, and enabled for the core
recipes.
- The ``parselogs`` runtime test was rewritten. Notably it no longer uses
regular expressions, which may mean custom patterns need updating.
- A self-test to validate that the :term:`SPDX` manifests generated by
image builds are valid was added.
- The ``QEMU_USE_SLIRP`` variable has been replaced by adding ``slirp`` to
``TEST_RUNQEMUPARAMS``.
- Utility script changes:
- New ``scripts/patchtest`` utility to check patches to the
OpenEmbedded-Core project. See
:ref:`contributor-guide/submit-changes:validating patches with patchtest`
for details.
- ``scripts/bblock`` was added, allowing the user to lock/unlock specific
recipes from being built. This makes it possibly to work on the
``python3`` recipe without causing ``python3-native`` to rebuild.
- BitBake improvements:
- A fetcher for the Google Cloud Platform (``gs://``) was added.
- The BitBake Cooker log now contains notes when the caches are
invalidated which is useful for memory resident BitBake debugging.
- BitBake no longer watches files with :wikipedia:`inotify <inotify>` for
changes, as under load this can lead to races causing build instability.
- Toaster's dependencies were upgraded to current releases, specifically
to Django 4.2.
- Packaging changes:
- :term:`FILES` now accepts ``**``, which matches zero or more subdirectories.
- The X server packagroup now defaults to using the ``modesetting`` X
driver, which obsoletes the ``fbdev`` driver.
- If a recipe uses :term:`LICENSE_FLAGS` and the licenses are not accepted,
it can set a custom message with :term:`LICENSE_FLAGS_DETAILS` to be
displayed to the users.
- Recipes that fetch specific revisions no longer need to explictly add
:term:`SRCPV` to :term:`PV` as BitBake will now automatically add the
revision infomation to :term:`PKGV` if needed.
- The default :term:`PR` values in many recipes have been removed.
- Security improvements:
- Most repositories now include a :yocto_git:`SECURITY.md
</poky/tree/SECURITY.md>` file with hints for security researchers
and other parties who might report potential security vulnerabilities.
- Prominent documentation updates:
- New :doc:`../contributor-guide/index` document.
- New :doc:`../dev-manual/security-subjects` chapter in the Development
Tasks Manual.
- Long due documentation for the :ref:`ref-classes-devicetree` class.
- New :ref:`summary about available init systems
<dev-manual/init-manager:summary>`.
- New documentation for the :ref:`ref-classes-uboot-sign` class and
its variables and for the :ref:`ref-classes-kernel-devicetree` class
variables.
- Miscellaneous changes:
- Git based recipes in OE-Core which used the git protocol have been
changed to use https where possibile. https is now believed to be
faster and more reliable.
- The ``os-release`` recipe added a ``CPE_NAME`` to the fields provided, with the
default being populated from :term:`DISTRO`.
- The ``psplash`` recipe now accepts a PNG format image through :term:`SPLASH_IMAGES`,
instead of a harder to generate and modify ``.h`` file.
Known Issues in 4.3
~~~~~~~~~~~~~~~~~~~
Recipe License changes in 4.3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The following corrections have been made to the :term:`LICENSE` values set by recipes:
Security Fixes in 4.3
~~~~~~~~~~~~~~~~~~~~~
Recipe Upgrades in 4.3
~~~~~~~~~~~~~~~~~~~~~~
Contributors to 4.3
~~~~~~~~~~~~~~~~~~~
|
