linux/poky.git/meta/classes/create-spdx.bbclass, branch yocto-4.0.14

classes/create-spdx: Add SPDX_PRETTY option

2023-01-06T17:33:23+00:00

Adds an option to make the SPDX more human-readable (at the expense of a larger files) (From OE-Core rev: e680a7402edec2803b03c56590c9d08d07497c73) Signed-off-by: Joshua Watt Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 4799594b26f77ed259dc661bf077519b338390c8) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: default share_src for shared sources

2022-12-01T19:35:05+00:00

if a source is using work-shared but isn't a kernel, like for instance llvm-source from meta-clang, share_src was previously undefined leading to a crash of the python code. Default to WORKDIR and just override it in case the source being a kernel recipe. Additionally changes the variable names in the following, as they imply that it's only about the kernel, which is not the case in every case (From OE-Core rev: 34fa68a0b07328c4ed4eef81f8cde80137a91f18) (From OE-Core rev: 5b2ee67e3a5587b4c7d97d2a9bc00022d1eedae3) Signed-off-by: Konrad Weihmann On-behalf-of: Avnet Embedded Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx.bbclass: remove unused SPDX_INCLUDE_PACKAGED

2022-11-20T08:19:17+00:00

[YOCTO #14948] (From OE-Core rev: 742c83402203ecc6ef9298b8a717e7a06cd2bd30) Signed-off-by: Michael Opdenacker Signed-off-by: Alexandre Belloni (cherry picked from commit 89f1abd5e00807cf179ddf658f74d48119523b0c) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: Remove ";name=..." for downloadLocation

2022-11-10T14:39:24+00:00

(From OE-Core rev: 8a13c860338a4b1d7d971760c467f2f2d3ee393a) Signed-off-by: Keiya Nobuta Signed-off-by: Alexandre Belloni (cherry picked from commit bbecab53d1b27f3bb8c5882cb0ec39b04ef300a3) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: handle links to inaccessible locations

2022-08-28T06:51:30+00:00

When a link is pointing to location inaccessible to build user (e.g. "/root/something"), filepath.is_file() throws "PermissionError: [Errno 13] Permission denied". Fix this by first checking if it is a link. (From OE-Core rev: 9661656987e547290cecb94cbf9b34335ae9d903) Signed-off-by: Peter Marko Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit e105befbe4ee0d85e94c2048a744f0373e2dbcdf) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: ignore packing control files from ipk and deb

2022-08-23T14:22:52+00:00

Otherwise spdx can have references for data that is not packed in the package delivered because this contol data is temporarly and only exist while the package is been write. During do_package_write_ipk task in do_package_ipk the control files is cleaned up at the end. This can create a race condiction when the do_create_spdx task runs the add_package_files function and these files is been deleted at same time in the task do_package_write_ipk. ERROR: alsa-topology-conf-1.2.5.1-r0 do_create_spdx: Error executing a python function in exec_func_python() autogenerated: The stack trace of python calls that resulted in this exception/failure was: File: 'exec_func_python() autogenerated', lineno: 2, function: 0001: *** 0002:do_create_spdx(d) 0003: File: '/srv/oe/build/conf/../../layers/openembedded-core/meta/classes/create-spdx.bbclass', lineno: 567, function: do_create_spdx 0563: package_doc.add_relationship(package_doc, "DESCRIBES", spdx_package) 0564: 0565: package_archive = deploy_dir_spdx / "packages" / (package_doc.name + ".tar.zst") 0566: with optional_tarfile(package_archive, archive_packaged) as archive: *** 0567: package_files = add_package_files( 0568: d, 0569: package_doc, 0570: spdx_package, 0571: pkgdest / package, File: '/srv/oe/build/conf/../../layers/openembedded-core/meta/classes/create-spdx.bbclass', lineno: 234, function: add_package_files 0230: info.mtime = source_date_epoch 0231: 0232: archive.addfile(info, f) 0233: *** 0234: sha1 = bb.utils.sha1_file(filepath) 0235: sha1s.append(sha1) 0236: spdx_file.checksums.append(oe.spdx.SPDXChecksum( 0237: algorithm="SHA1", 0238: checksumValue=sha1, File: '/srv/oe/bitbake/lib/bb/utils.py', lineno: 559, function: sha1_file 0555: """ 0556: Return the hex string representation of the SHA1 checksum of the filename 0557: """ 0558: import hashlib *** 0559: return _hasher(hashlib.sha1(), filename) 0560: 0561:def sha384_file(filename): 0562: """ 0563: Return the hex string representation of the SHA384 checksum of the filename File: '/srv/oe/bitbake/lib/bb/utils.py', lineno: 528, function: _hasher 0524: 0525:def _hasher(method, filename): 0526: import mmap 0527: *** 0528: with open(filename, "rb") as f: 0529: try: 0530: with mmap.mmap(f.fileno(), 0, access=mmap.ACCESS_READ) as mm: 0531: for chunk in iter(lambda: mm.read(8192), b''): 0532: method.update(chunk) Exception: FileNotFoundError: [Errno 2] No such file or directory: '/srv/oe/build/tmp-lmp/work/all-lmp-linux/alsa-topology-conf/1.2.5.1-r0/packages-split/alsa-topology-conf/CONTROL/control' ERROR: Logfile of failure stored in: /srv/oe/build/tmp-lmp/work/all-lmp-linux/alsa-topology-conf/1.2.5.1-r0/temp/log.do_create_spdx.998864 INFO: recipe alsa-topology-conf-1.2.5.1-r0: task do_create_spdx: Failed (From OE-Core rev: 90799920339e121c9fdf385258927f8d6a6405eb) Signed-off-by: Jose Quaresma Signed-off-by: Luca Ceresoli (cherry picked from commit 0bfe403f46fd568910a727982c3ff528e3d5c8bc) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: Fix supplier field

2022-08-23T14:22:52+00:00

The correct field name is "supplier" according to SPDX schema. The "supplier" field translates to "PackageSupplier", but that's for tag-value format. (From OE-Core rev: 504b50aec662f177fea452e05e29af8b36ca69fc) Signed-off-by: Mihai Lindner Signed-off-by: Richard Purdie (cherry picked from commit ca8db0e0a2860ac1e3f537471fa71b43c3be0a58) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: delete virtual/kernel dependency to fix FreeRTOS build

2022-05-04T12:07:34+00:00

When building FreeRTOS this dependency generates an error because bitbake cannot find any provider for "virtual/kernel". >From a dependency analysis the task is executed independently from this so it can be safely removed. This patch has been discussed in this ML thread: https://lists.openembedded.org/g/openembedded-core/topic/90602531 (From OE-Core rev: ec31ce4751e45e98730165d64eb74fc98eab8c85) Signed-off-by: Davide Gardenal Signed-off-by: Richard Purdie (cherry picked from commit 1c02b768a71ec88bfe1cc0c4443683de8b66056e) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: fix error when symlink cannot be created

2022-04-28T16:07:18+00:00

If IMAGE_NAME and IMAGE_LINK_NAME are the same an exception is raised in image_combine_spdx because it cannot create a symlink with the same exact path of the original file. In that case there is no point in creating a link in the first place. Refactor image_combine_spdx to avoid code duplication (From OE-Core rev: dfb49be6b586e3901a4398b46c914d80dcdd029b) Signed-off-by: Davide Gardenal Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit 88f76bba705007a7fcda506c79f743060d8f2e52) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: Avoid regex warning by quoting correctly

2022-03-29T14:59:29+00:00

create-spdx.bbclass:43: DeprecationWarning: invalid escape sequence \W lic_regex = re.compile(b'^\W*SPDX-License-Identifier:\s*([ \w\d.()+-]+?)(?:\s+\W*)?$', re.MULTILINE) (From OE-Core rev: 5dfb26d45f69c4d5dc4b6fcef084b830ef9dbf4c) Signed-off-by: Richard Purdie Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie