vruntime: add BBMASK to reduce multiconfig parse time

The vruntime multiconfigs (vruntime-aarch64, vruntime-x86-64) trigger
a full BitBake parse of all layers, but only need ~318 recipes to build
the vdkr/vpdmn container runtime stacks. BBMASK set in the vruntime
distro conf only affects parsing for those multiconfigs; the main build
is unaffected.

Add three .inc files, each independently disableable, that mask unused
recipes:

 - vruntime-bbmask.inc: meta-virtualization layer (~88 masks covering
   virtualization platforms, unused container orchestration/tooling,
   and individual go libraries)
 - vruntime-bbmask-oe-core.inc: oe-core graphics subdirs, multimedia,
   sato, and rt categories
 - vruntime-bbmask-meta-oe.inc: meta-oe, meta-networking categories,
   plus entire meta-python, meta-filesystems, and meta-webserver layers

Mask patterns were generated from bitbake -g dependency graph analysis
of both aarch64 and x86-64 targets, with all 318 needed PNs (including
-native variants) cross-checked against the patterns. Orphaned bbappend
files in other layers are also masked to prevent parse errors.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

4 files changed, 244 insertions, 0 deletions

diff --git a/conf/distro/include/vruntime-bbmask-meta-oe.inc b/conf/distro/include/vruntime-bbmask-meta-oe.inc
new file mode 100644
index 00000000..a2e2e77f
--- /dev/null
+++ b/conf/distro/include/vruntime-bbmask-meta-oe.inc
@@ -0,0 +1,53 @@
+# SPDX-FileCopyrightText: Copyright (C) 2025 Bruce Ashfield
+#
+# SPDX-License-Identifier: MIT
+#
+# BBMASK for meta-openembedded sublayers in vruntime multiconfig builds.
+#
+# Masks recipe categories with zero recipes in the vruntime dependency
+# graph (verified via bitbake -g).
+#
+# KEPT from meta-oe:
+#   recipes-devtools (abseil-cpp, jsoncpp, protobuf, yajl)
+#   recipes-extended (jansson)
+#   recipes-support (lvm2)
+# KEPT from meta-networking:
+#   recipes-filter (nftables, libnftnl)
+#   recipes-support (bridge-utils)
+# KEPT from meta-filesystems: NONE (entire layer masked)
+# KEPT from meta-python: NONE (entire layer masked)
+# KEPT from meta-webserver: NONE (entire layer masked)
+
+# ---------------------------------------------------------------------------
+# meta-oe: mask all categories except devtools, extended, support
+# Uses negative lookahead to keep the three needed categories
+# ---------------------------------------------------------------------------
+BBMASK += "meta-oe/recipes-(?!devtools|extended|support)"
+
+# ---------------------------------------------------------------------------
+# meta-networking: mask all categories except filter, support
+# ---------------------------------------------------------------------------
+BBMASK += "meta-networking/recipes-(?!filter|support)"
+
+# ---------------------------------------------------------------------------
+# meta-filesystems: entire layer (0 recipes in dependency graph)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-filesystems/"
+
+# ---------------------------------------------------------------------------
+# meta-python: entire layer (0 recipes in dependency graph)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-python/"
+
+# ---------------------------------------------------------------------------
+# meta-webserver: entire layer (0 recipes in dependency graph)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-webserver/"
+
+# ---------------------------------------------------------------------------
+# Orphaned bbappends in other layers (base recipes masked above)
+# ---------------------------------------------------------------------------
+# meta-openstack bbappend for meta-oe postgresql (recipes-dbs masked)
+BBMASK += "meta-openstack/recipes-dbs/postgresql/"
+# meta-oe dynamic-layers bbappend for meta-networking packagegroup (recipes-core masked)
+BBMASK += "meta-oe/dynamic-layers/networking-layer/recipes-core/"
diff --git a/conf/distro/include/vruntime-bbmask-oe-core.inc b/conf/distro/include/vruntime-bbmask-oe-core.inc
new file mode 100644
index 00000000..34db8dd2
--- /dev/null
+++ b/conf/distro/include/vruntime-bbmask-oe-core.inc
@@ -0,0 +1,41 @@
+# SPDX-FileCopyrightText: Copyright (C) 2025 Bruce Ashfield
+#
+# SPDX-License-Identifier: MIT
+#
+# BBMASK for oe-core (meta) layer in vruntime multiconfig builds.
+#
+# Masks entire recipe categories with zero recipes in the vruntime
+# dependency graph (verified via bitbake -g and PN-level cross-check).
+#
+# KEPT: recipes-bsp, recipes-connectivity, recipes-core, recipes-devtools,
+#       recipes-extended, recipes-gnome, recipes-kernel, recipes-support
+
+# ---------------------------------------------------------------------------
+# Graphics - mask only subdirs with zero needed recipes (39 of 49 subdirs)
+# Keep: wayland, libsdl2, virglrenderer, libepoxy, drm, mesa, spir,
+#       xorg-lib, xorg-proto, xorg-app, xorg-util (qemu-system-native deps)
+# ---------------------------------------------------------------------------
+BBMASK += "/meta/recipes-graphics/(?!wayland|libsdl2|virglrenderer|libepoxy|drm|mesa|spir|xorg-lib|xorg-proto|xorg-app|xorg-util)"
+
+# ---------------------------------------------------------------------------
+# Multimedia - mask all except alsa/ and libpng/ (qemu-system-native deps)
+# ---------------------------------------------------------------------------
+BBMASK += "/meta/recipes-multimedia/(?!alsa|libpng)"
+
+# ---------------------------------------------------------------------------
+# Sato desktop (~25 recipes) - Matchbox, webkit, desktop UI
+# ---------------------------------------------------------------------------
+BBMASK += "/meta/recipes-sato/"
+
+# ---------------------------------------------------------------------------
+# RT kernel (~4 recipes) - Real-time kernel, not needed for containers
+# ---------------------------------------------------------------------------
+BBMASK += "/meta/recipes-rt/"
+
+# ---------------------------------------------------------------------------
+# Orphaned bbappends in other layers (base recipes masked above)
+# ---------------------------------------------------------------------------
+# meta-yocto-bsp bbappend for masked oe-core graphics
+BBMASK += "meta-yocto-bsp/recipes-graphics/xorg-xserver/xserver-xf86-config"
+# meta-erlang bbappend for oe-core mesa (mesa is kept, but libglu not needed)
+BBMASK += "meta-erlang/recipes-graphics/mesa/libglu"
diff --git a/conf/distro/include/vruntime-bbmask.inc b/conf/distro/include/vruntime-bbmask.inc
new file mode 100644
index 00000000..8eaf44df
--- /dev/null
+++ b/conf/distro/include/vruntime-bbmask.inc
@@ -0,0 +1,143 @@
+# SPDX-FileCopyrightText: Copyright (C) 2025 Bruce Ashfield
+#
+# SPDX-License-Identifier: MIT
+#
+# BBMASK for meta-virtualization layer in vruntime multiconfig builds.
+#
+# Masks recipes not needed by vdkr (docker) or vpdmn (podman) container
+# runtime images. Only affects vruntime multiconfig parsing; main build
+# is unaffected.
+#
+# Generated from bitbake -g dependency graph analysis.
+#
+# KEPT (.bb recipes): aardvark-dns, catatonit, conmon, containerd,
+#   container-host-config, crun, docker-moby, netavark, podman, runc,
+#   skopeo, tini, vcontainer/*, cni, slirp4netns
+# KEPT (bbappends only): busybox, initscripts, libxcrypt, sysvinit,
+#   go-md2man, qemu, yajl, iptables, libseccomp, linux/linux-yocto, bind
+
+# ---------------------------------------------------------------------------
+# Virtualization platforms (not containers)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-extended/xen/"
+BBMASK += "meta-virtualization/recipes-extended/xvisor/"
+BBMASK += "meta-virtualization/recipes-extended/kvmtool/"
+BBMASK += "meta-virtualization/recipes-extended/libvirt/"
+BBMASK += "meta-virtualization/recipes-extended/libvmi/"
+BBMASK += "meta-virtualization/recipes-extended/virt-manager/"
+BBMASK += "meta-virtualization/recipes-extended/virt-viewer/"
+BBMASK += "meta-virtualization/recipes-extended/virt-what/"
+BBMASK += "meta-virtualization/recipes-extended/vhost-device/"
+BBMASK += "meta-virtualization/recipes-extended/dev86/"
+BBMASK += "meta-virtualization/recipes-extended/seabios/"
+BBMASK += "meta-virtualization/recipes-extended/vgabios/"
+BBMASK += "meta-virtualization/recipes-extended/upx/"
+BBMASK += "meta-virtualization/recipes-extended/uxen/"
+BBMASK += "meta-virtualization/recipes-extended/ipxe/"
+BBMASK += "meta-virtualization/recipes-extended/diod/"
+BBMASK += "meta-virtualization/recipes-extended/libibverbs/"
+BBMASK += "meta-virtualization/recipes-extended/virtiofsd/"
+
+# ---------------------------------------------------------------------------
+# Infrastructure / monitoring
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-extended/ceph/"
+BBMASK += "meta-virtualization/recipes-extended/cloud-init/"
+BBMASK += "meta-virtualization/recipes-extended/cockpit-machines/"
+BBMASK += "meta-virtualization/recipes-extended/nagios/"
+BBMASK += "meta-virtualization/recipes-extended/oath/"
+BBMASK += "meta-virtualization/recipes-extended/irqbalance/"
+
+# ---------------------------------------------------------------------------
+# Container images / bundles / cross-deploy (main build only)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-extended/images/"
+BBMASK += "meta-virtualization/recipes-extended/container-bundles/"
+BBMASK += "meta-virtualization/recipes-extended/container-cross-deploy/"
+
+# ---------------------------------------------------------------------------
+# Not in dependency graph (rootless/overlay helpers not RDEPENDS)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-extended/fuse-overlayfs/"
+BBMASK += "meta-virtualization/recipes-extended/rootlesskit/"
+
+# ---------------------------------------------------------------------------
+# Container orchestration / tools not in vruntime
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-containers/kubernetes/"
+BBMASK += "meta-virtualization/recipes-containers/k3s/"
+BBMASK += "meta-virtualization/recipes-containers/cri-o/"
+BBMASK += "meta-virtualization/recipes-containers/cri-tools/"
+BBMASK += "meta-virtualization/recipes-containers/docker-compose/"
+BBMASK += "meta-virtualization/recipes-containers/podman-compose/"
+BBMASK += "meta-virtualization/recipes-containers/podman-tui/"
+BBMASK += "meta-virtualization/recipes-containers/nerdctl/"
+BBMASK += "meta-virtualization/recipes-containers/buildah/"
+BBMASK += "meta-virtualization/recipes-containers/singularity/"
+BBMASK += "meta-virtualization/recipes-containers/lxc/"
+BBMASK += "meta-virtualization/recipes-containers/lxcfs/"
+BBMASK += "meta-virtualization/recipes-containers/criu/"
+BBMASK += "meta-virtualization/recipes-containers/docker-distribution/"
+
+# ---------------------------------------------------------------------------
+# Container tooling not used by vdkr/vpdmn
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-containers/cgroup-lite/"
+BBMASK += "meta-virtualization/recipes-containers/riddler/"
+BBMASK += "meta-virtualization/recipes-containers/umoci/"
+BBMASK += "meta-virtualization/recipes-containers/sloci-image/"
+BBMASK += "meta-virtualization/recipes-containers/oci-image-tools/"
+BBMASK += "meta-virtualization/recipes-containers/oci-runtime-spec/"
+BBMASK += "meta-virtualization/recipes-containers/oci-runtime-tools/"
+BBMASK += "meta-virtualization/recipes-containers/oci-systemd-hook/"
+BBMASK += "meta-virtualization/recipes-containers/oci-image-spec/"
+BBMASK += "meta-virtualization/recipes-containers/oci-base-images/"
+BBMASK += "meta-virtualization/recipes-containers/container-registry/"
+BBMASK += "meta-virtualization/recipes-containers/go-digest/"
+BBMASK += "meta-virtualization/recipes-containers/go-errors/"
+BBMASK += "meta-virtualization/recipes-containers/go-spf13-cobra/"
+BBMASK += "meta-virtualization/recipes-containers/go-spf13-pflag/"
+
+# ---------------------------------------------------------------------------
+# Other categories not needed
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-demo/"
+BBMASK += "meta-virtualization/recipes-graphics/"
+BBMASK += "meta-virtualization/recipes-core/kata-containers/"
+BBMASK += "meta-virtualization/recipes-core/runx/"
+BBMASK += "meta-virtualization/recipes-networking/openvswitch/"
+BBMASK += "meta-virtualization/recipes-networking/netns/"
+BBMASK += "meta-virtualization/recipes-networking/passt/"
+
+# ---------------------------------------------------------------------------
+# Dev recipes not needed (keep qemu & yajl bbappends, keep linux bbappends)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-virtualization/recipes-devtools/python/"
+BBMASK += "meta-virtualization/recipes-devtools/go-dirhash-native/"
+BBMASK += "meta-virtualization/recipes-devtools/yq/"
+BBMASK += "meta-virtualization/recipes-kernel/lopper/"
+
+# Individual go libraries not needed by vruntime builds
+BBMASK += "meta-virtualization/recipes-devtools/go/go-connections"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-capability"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-build"
+BBMASK += "meta-virtualization/recipes-devtools/go/compose-file"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-cli"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-context"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-logrus"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-libtrust"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-patricia"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-systemd"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-pty"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-dbus"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-distribution"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-metalinter"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-mux"
+BBMASK += "meta-virtualization/recipes-devtools/go/grpc-go"
+BBMASK += "meta-virtualization/recipes-devtools/go/go-fsnotify"
+# go-md2man KEPT (crun, conmon DEPENDS on go-md2man-native)
+
+# ---------------------------------------------------------------------------
+# Orphaned bbappends in other layers (base recipes masked above)
+# ---------------------------------------------------------------------------
+BBMASK += "meta-openstack/recipes-extended/libvirt/"
diff --git a/conf/distro/vruntime.conf b/conf/distro/vruntime.conf
index a489a7a2..17355361 100644
--- a/conf/distro/vruntime.conf
+++ b/conf/distro/vruntime.conf
@@ -14,6 +14,13 @@
 
 require conf/distro/poky.conf
 
+# Mask recipes not needed by vruntime container runtime builds.
+# Generated from bitbake -g dependency graph analysis.
+# Each file can be commented out independently to disable masking for that layer.
+require conf/distro/include/vruntime-bbmask.inc
+require conf/distro/include/vruntime-bbmask-oe-core.inc
+require conf/distro/include/vruntime-bbmask-meta-oe.inc
+
 DISTRO = "vruntime"
 DISTRO_NAME = "VRuntime Minimal"
 DISTRO_VERSION = "1.0"