[oe] [meta-python][PATCH 2/2] python3-grpcio-channelz: new recipe
gRPC channelz is used to expose runtime statistics for administration and debugging purposes. Signed-off-by: Jan Luebbe --- .../python/python3-grpcio-channelz_1.62.2.bb | 16 1 file changed, 16 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb diff --git a/meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb b/meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb new file mode 100644 index ..ed5ede4252a1 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-grpcio-channelz_1.62.2.bb @@ -0,0 +1,16 @@ +DESCRIPTION = "Google gRPC channelz" +HOMEPAGE = "http://www.grpc.io/; +SECTION = "devel/python" + +LICENSE = "Apache-2.0" +LIC_FILES_CHKSUM = "file://PKG-INFO;beginline=8;endline=8;md5=7145f7cdd263359b62d342a02f005515" + +inherit pypi setuptools3 + +DEPENDS += "python3-grpcio" + +SRC_URI[sha256sum] = "6e4ac2c43d76b245c5f66d98f523db08786b186128a655ee6f20a30a7e68e4f9" + +RDEPENDS:${PN} = "python3-grpcio" + +BBCLASSEXTEND = "native nativesdk" -- 2.39.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110980): https://lists.openembedded.org/g/openembedded-devel/message/110980 Mute This Topic: https://lists.openembedded.org/mt/106782858/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-python][PATCH 1/2] python3-grpcio-reflection: new recipe
gRPC reflection allows tools like grpcurl and postman to use a service without having the respective .proto files. Signed-off-by: Jan Luebbe --- .../python/python3-grpcio-reflection_1.62.2.bb | 16 1 file changed, 16 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb diff --git a/meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb b/meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb new file mode 100644 index ..478c5b33ecd9 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-grpcio-reflection_1.62.2.bb @@ -0,0 +1,16 @@ +DESCRIPTION = "Google gRPC reflection" +HOMEPAGE = "http://www.grpc.io/; +SECTION = "devel/python" + +LICENSE = "Apache-2.0" +LIC_FILES_CHKSUM = "file://PKG-INFO;beginline=8;endline=8;md5=7145f7cdd263359b62d342a02f005515" + +inherit pypi setuptools3 + +DEPENDS += "python3-grpcio" + +SRC_URI[sha256sum] = "2dd44806d68d0006636529bda573012b19a42281478c2d051cdaaebb91e2516c" + +RDEPENDS:${PN} = "python3-grpcio" + +BBCLASSEXTEND = "native nativesdk" -- 2.39.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#110979): https://lists.openembedded.org/g/openembedded-devel/message/110979 Mute This Topic: https://lists.openembedded.org/mt/106782856/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [meta-oe][PATCH] signing.bbclass: don't export OPENSSL environment variables globally
On Wed, 2023-09-20 at 16:33 +0200, Ahmad Fatoum wrote: > OPENSSL_{MODULES,ENGINES,CONF} and SSL_CERT_{DIR,FILE} are currently > exported globally for any recipe that inherits signing. This not only > affects the tasks that use the signing infrastructure, but also unrelated > tasks like e.g. do_fetch. Avoid this by exporting the variables only > for these tasks that actually call signing_prepare. > > This resolves a breakage I observed on Ubuntu 18.04, where the host > tool wget is called with the environment variables set and then fails > with a SSL error (exit code 5). > > Signed-off-by: Ahmad Fatoum Reviewed-by: Jan Lübbe > --- > meta-oe/classes/signing.bbclass | 12 ++-- > 1 file changed, 6 insertions(+), 6 deletions(-) > > diff --git a/meta-oe/classes/signing.bbclass b/meta-oe/classes/signing.bbclass > index 5c74a319e4f9..79944e3fe91c 100644 > --- a/meta-oe/classes/signing.bbclass > +++ b/meta-oe/classes/signing.bbclass > @@ -224,6 +224,12 @@ signing_import_install() { > } > > signing_prepare() { > +export OPENSSL_MODULES="${STAGING_LIBDIR_NATIVE}/ossl-modules" > +export OPENSSL_ENGINES="${STAGING_LIBDIR_NATIVE}/engines-3" > +export OPENSSL_CONF="${STAGING_LIBDIR_NATIVE}/ssl-3/openssl.cnf" > +export SSL_CERT_DIR="${STAGING_LIBDIR_NATIVE}/ssl-3/certs" > +export SSL_CERT_FILE="${STAGING_LIBDIR_NATIVE}/ssl-3/cert.pem" > + > if [ -f ${OPENSSL_CONF} ]; then > echo "Using '${OPENSSL_CONF}' for OpenSSL configuration" > else > @@ -308,9 +314,3 @@ signing_get_module() { > python () { > signing_class_prepare(d) > } > - > -export OPENSSL_MODULES="${STAGING_LIBDIR_NATIVE}/ossl-modules" > -export OPENSSL_ENGINES="${STAGING_LIBDIR_NATIVE}/engines-3" > -export OPENSSL_CONF="${STAGING_LIBDIR_NATIVE}/ssl-3/openssl.cnf" > -export SSL_CERT_DIR="${STAGING_LIBDIR_NATIVE}/ssl-3/certs" > -export SSL_CERT_FILE="${STAGING_LIBDIR_NATIVE}/ssl-3/cert.pem" -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0| Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917- | -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#105390): https://lists.openembedded.org/g/openembedded-devel/message/105390 Mute This Topic: https://lists.openembedded.org/mt/101486519/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-networking][PATCH 1/2] atftp: upgrade from 0.7.5 to 0.8.0
Signed-off-by: Jan Luebbe --- .../recipes-daemons/atftp/{atftp_0.7.5.bb => atftp_0.8.0.bb}| 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-daemons/atftp/{atftp_0.7.5.bb => atftp_0.8.0.bb} (96%) diff --git a/meta-networking/recipes-daemons/atftp/atftp_0.7.5.bb b/meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb similarity index 96% rename from meta-networking/recipes-daemons/atftp/atftp_0.7.5.bb rename to meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb index f893a4d6dcaf..359d8b365ff3 100644 --- a/meta-networking/recipes-daemons/atftp/atftp_0.7.5.bb +++ b/meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb @@ -4,7 +4,7 @@ HOMEPAGE = "http://packages.debian.org/atftp; LICENSE = "GPL-2.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=f65159f73e603f89d6867d43191900e5" -SRCREV = "00921e75728e3681b051c2e48c59e36c6cfa2e97" +SRCREV = "d5c27eb7a9695d83569767e27ef69674173db39a" SRC_URI = "git://git.code.sf.net/p/atftp/code;branch=master \ file://atftpd.init \ -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#101144): https://lists.openembedded.org/g/openembedded-devel/message/101144 Mute This Topic: https://lists.openembedded.org/mt/97050073/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-networking][PATCH 2/2] atftp: use https for git repository access
Signed-off-by: Jan Luebbe --- meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb b/meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb index 359d8b365ff3..507621795f92 100644 --- a/meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb +++ b/meta-networking/recipes-daemons/atftp/atftp_0.8.0.bb @@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=f65159f73e603f89d6867d43191900e5" SRCREV = "d5c27eb7a9695d83569767e27ef69674173db39a" -SRC_URI = "git://git.code.sf.net/p/atftp/code;branch=master \ +SRC_URI = "git://git.code.sf.net/p/atftp/code;branch=master;protocol=https \ file://atftpd.init \ file://atftpd.service \ " -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#101145): https://lists.openembedded.org/g/openembedded-devel/message/101145 Mute This Topic: https://lists.openembedded.org/mt/97050074/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH v2] smemstat: add recipe
This is useful to see which processes use physical memory. Signed-off-by: Jan Luebbe --- Changed since v2: - use make install for installation (suggested by Martin Jansa) - inherit bash-completion as make install also installs the bash-completion script - drop empty do_configure function --- .../smemstat/smemstat_0.02.11.bb | 22 +++ 1 file changed, 22 insertions(+) create mode 100644 meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb diff --git a/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb b/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb new file mode 100644 index ..21f315b1c257 --- /dev/null +++ b/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb @@ -0,0 +1,22 @@ +SUMMARY = "smemstat reports the physical memory usage taking into consideration shared memory" +HOMEPAGE = "https://github.com/ColinIanKing/smemstat; +LICENSE = "GPL-2.0-or-later" + +LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" + +DEPENDS = "ncurses" + +SRC_URI = "git://github.com/ColinIanKing/smemstat.git;protocol=https;branch=master" +SRCREV = "9eea7504ab33783d804c4ed9237e299effb68874" + +S = "${WORKDIR}/git" + +inherit bash-completion + +do_compile () { +oe_runmake smemstat +} + +do_install () { +oe_runmake DESTDIR=${D} install +} -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#101076): https://lists.openembedded.org/g/openembedded-devel/message/101076 Mute This Topic: https://lists.openembedded.org/mt/96961909/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [yocto] [oe] [meta-oe][PATCH 1/2] smemstat: add recipe
On Tue, 2023-02-14 at 14:33 +0100, Martin Jansa wrote: > FWIW: this was in meta-luneos for a while: > https://github.com/webOS-ports/meta-webos-ports/blob/master/meta-luneos/recipes-devtools/smemstat/smemstat_git.bb > > since > https://github.com/webOS-ports/meta-webos-ports/commit/9c73ce110a6cd97a476c6be > ff10f9d8648cffea6 Ah, I could probably pick the install via make DESTDIR=${D}. > I didn't compare the output from your version, but does it set the VERSION > correctly now? It seems to work: root@qemux86-64:~# smemstat -h smemstat, version 0.02.11 ... Regards, Jan > Regards, > > On Tue, Feb 14, 2023 at 2:14 PM Jan Luebbe wrote: > > This is useful to see which processes use physical memory. > > > > Signed-off-by: Jan Luebbe > > --- > > .../smemstat/smemstat_0.02.11.bb | 27 +++ > > 1 file changed, 27 insertions(+) > > create mode 100644 meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb > > > > diff --git a/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb b/meta- > > oe/recipes-devtools/smemstat/smemstat_0.02.11.bb > > new file mode 100644 > > index ..37015ce6bdc1 > > --- /dev/null > > +++ b/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb > > @@ -0,0 +1,27 @@ > > +SUMMARY = "smemstat reports the physical memory usage taking into > > consideration shared memory" > > +HOMEPAGE = "https://github.com/ColinIanKing/smemstat; > > +LICENSE = "GPL-2.0-or-later" > > + > > +LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" > > + > > +DEPENDS = "ncurses" > > + > > +SRC_URI = > > "git://github.com/ColinIanKing/smemstat.git;protocol=https;branch=master" > > +SRCREV = "9eea7504ab33783d804c4ed9237e299effb68874" > > + > > +S = "${WORKDIR}/git" > > + > > +do_configure () { > > + : > > +} > > + > > +do_compile () { > > + oe_runmake > > +} > > + > > +do_install () { > > + install -d -m 755 ${D}${sbindir} > > + install -m 755 ${B}/smemstat ${D}${sbindir}/ > > + install -d -m 755 ${D}${mandir}/man8 > > + install -m 644 ${S}/smemstat.8 ${D}${mandir}/man8/ > > +} -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0| Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917- | -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#101075): https://lists.openembedded.org/g/openembedded-devel/message/101075 Mute This Topic: https://lists.openembedded.org/mt/96961058/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH 1/2] smemstat: add recipe
This is useful to see which processes use physical memory. Signed-off-by: Jan Luebbe --- .../smemstat/smemstat_0.02.11.bb | 27 +++ 1 file changed, 27 insertions(+) create mode 100644 meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb diff --git a/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb b/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb new file mode 100644 index ..37015ce6bdc1 --- /dev/null +++ b/meta-oe/recipes-devtools/smemstat/smemstat_0.02.11.bb @@ -0,0 +1,27 @@ +SUMMARY = "smemstat reports the physical memory usage taking into consideration shared memory" +HOMEPAGE = "https://github.com/ColinIanKing/smemstat; +LICENSE = "GPL-2.0-or-later" + +LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" + +DEPENDS = "ncurses" + +SRC_URI = "git://github.com/ColinIanKing/smemstat.git;protocol=https;branch=master" +SRCREV = "9eea7504ab33783d804c4ed9237e299effb68874" + +S = "${WORKDIR}/git" + +do_configure () { + : +} + +do_compile () { + oe_runmake +} + +do_install () { + install -d -m 755 ${D}${sbindir} + install -m 755 ${B}/smemstat ${D}${sbindir}/ + install -d -m 755 ${D}${mandir}/man8 + install -m 644 ${S}/smemstat.8 ${D}${mandir}/man8/ +} -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#101071): https://lists.openembedded.org/g/openembedded-devel/message/101071 Mute This Topic: https://lists.openembedded.org/mt/96959306/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH 2/2] linux-serial-test: add recipe
This is a collection of tests for serial ports and their drivers. Signed-off-by: Jan Luebbe --- .../linux-serial-test/linux-serial-test_git.bb | 13 + 1 file changed, 13 insertions(+) create mode 100644 meta-oe/recipes-test/linux-serial-test/linux-serial-test_git.bb diff --git a/meta-oe/recipes-test/linux-serial-test/linux-serial-test_git.bb b/meta-oe/recipes-test/linux-serial-test/linux-serial-test_git.bb new file mode 100644 index ..7f08a82d6180 --- /dev/null +++ b/meta-oe/recipes-test/linux-serial-test/linux-serial-test_git.bb @@ -0,0 +1,13 @@ +DESCRIPTION = "Linux Serial Test Application" +HOMEPAGE = "https://github.com/cbrake/linux-serial-test; +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://LICENSES/MIT;md5=544799d0b492f119fa04641d1b8868ed" + +SRC_URI = "git://github.com/cbrake/linux-serial-test.git;protocol=https;branch=master" + +PV = "0+git${SRCPV}" +SRCREV = "cacd2790eae7bf4767d4243f5b31134698d3b20d" + +S = "${WORKDIR}/git" + +inherit cmake -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#101072): https://lists.openembedded.org/g/openembedded-devel/message/101072 Mute This Topic: https://lists.openembedded.org/mt/96959307/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] add signing.bbclass as infrastructure for build artifact signing
This adds common infrastructure to access and used asymmetric keys to sign build artifacts. The approach and implementation was presented at the recent OpenEmbedded Workshop: https://pretalx.com/openembedded-workshop-2023/talk/3C8MFF/ A working demo setup for verified boot based on qemu is available at https://github.com/jluebbe/meta-code-signing. Signed-off-by: Jan Luebbe --- meta-oe/classes/signing.bbclass | 316 1 file changed, 316 insertions(+) create mode 100644 meta-oe/classes/signing.bbclass diff --git a/meta-oe/classes/signing.bbclass b/meta-oe/classes/signing.bbclass new file mode 100644 index ..5c74a319e4f9 --- /dev/null +++ b/meta-oe/classes/signing.bbclass @@ -0,0 +1,316 @@ +# +# Copyright Jan Luebbe +# +# SPDX-License-Identifier: MIT +# + +# This class provides a common workflow to use asymmetric (i.e. RSA) keys to +# sign artifacts. Usually, the keys are either stored as simple files in the +# file system or on a HSM (Hardware Security Module). While files are easy to +# use, it's hard to verify that no copies of the private have been made and +# only authorized persons are able to use the key. Use of an HSM addresses +# these risks by only allowing use of the key via an API (often PKCS #11). The +# standard way of referring to a specific key in an HSM are PKCS #11 URIs (RFC +# 7512). +# +# Many software projects support signing using PKCS #11 keys, but configuring +# this is very project specific. Furthermore, as physical HSMs are not very +# widespread, testing code signing in CI is not simple. To solve this at the +# build system level, this class takes the approach of always using PKCS #11 at +# the recipe level. For cases where the keys are available as files (i.e. test +# keys in CI), they are imported into SoftHSM (a HSM emulation library). +# +# Recipes access the available keys via a specific role. So, depending on +# whether we're building during development or for release, a given role can +# refer to different keys. +# Each key recipe PROVIDES a virtual package corresponding to the role, allowing +# the user to select one of multiple keys for a role when needed. +# +# For use with a real HSM, a PKCS #11 URI can be set (i.e. in local.conf) to +# override the SoftHSM key with the real one: +# +# SIGNING_PKCS11_URI[fit] = "pkcs11:serial=DENK0200554;object=ptx-dev-rauc=123456" +# SIGNING_PKCS11_MODULE[fit] = "/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so" +# +# Examples for defining roles and importing keys: +# +# meta-code-signing/recipes-security/signing-keys/dummy-rsa-key-native.bb +# meta-code-signing-demo/recipes-security/ptx-dev-keys/ptx-dev-keys-native_git.bb +# +# Examples for using keys for signing: +# +# meta-code-signing-demo/recipes-security/fit-image/linux-fit-image.bb +# meta-code-signing-demo/recipes-core/bundles/update-bundle.bb +# +# Examples for using keys for authentication: +# +# meta-code-signing-demo/recipes-security/fit-image/barebox_%.bbappend +# meta-code-signing-demo/recipes-core/rauc/rauc_%.bbappend +# +# Examples for using keys for both signing and authentication: +# +# meta-code-signing-demo/recipes-kernel/linux/linux-yocto_6.1.bbappend + +SIGNING_PKCS11_URI ?= "" +SIGNING_PKCS11_MODULE ?= "" + +DEPENDS += "softhsm-native libp11-native opensc-native openssl-native" + +def signing_class_prepare(d): +import os.path + +def export(role, k, v): +k = k % (role, ) +d.setVar(k, v) +d.setVarFlag(k, "export", "1") + +roles = set() +roles |= (d.getVarFlags("SIGNING_PKCS11_URI") or {}).keys() +roles |= (d.getVarFlags("SIGNING_PKCS11_MODULE") or {}).keys() +for role in roles: +if not set(role).issubset("abcdefghijklmnopqrstuvwxyz0123456789_"): +bb.fatal("key role name '%s' must consist of only [a-z0-9_]" % (role,)) + +pkcs11_uri = d.getVarFlag("SIGNING_PKCS11_URI", role) or d.getVar("SIGNING_PKCS11_URI") +if not pkcs11_uri.startswith("pkcs11:"): +bb.fatal("URI for key role '%s' must start with 'pkcs11:'" % (role,)) + +pkcs11_module = d.getVarFlag("SIGNING_PKCS11_MODULE", role) or d.getVar("SIGNING_PKCS11_MODULE") +if not os.path.isfile(pkcs11_module): +bb.fatal("module path for key role '%s' must be an existing file" % (role,)) + +if pkcs11_uri and not pkcs11_module: +bb.warn("SIGNING_PKCS11_URI[%s] is set without SIGNING_PKCS11_MODULE[%s]" % (role, role)) +if pkcs11_module and not pkcs11_uri: +bb.warn("SIGNING_PKCS11_MODULE[%s] is set without SIGNING_PKCS11_URI[%s]" % (role, role)) + +export(role, "SIGNING_PKCS11_URI_%s_", pkcs11_uri) +export(role, "SIGNING_PKCS11_MODULE_%s_", pkcs11_module) + +s
[oe] [meta-oe][PATCH] opensc: fix private key import
Importing private keys into a PKCS#11 token is broken with OpenSC 0.23.0 and OpenSSL 3. Fix it by backporting the corresponding upstream fixes. Signed-off-by: Jan Luebbe --- ...1-pkcs11-tool-Fix-private-key-import.patch | 33 ...g-more-information-on-OpenSSL-errors.patch | 54 +++ .../recipes-support/opensc/opensc_0.23.0.bb | 2 + 3 files changed, 89 insertions(+) create mode 100644 meta-oe/recipes-support/opensc/files/0001-pkcs11-tool-Fix-private-key-import.patch create mode 100644 meta-oe/recipes-support/opensc/files/0002-pkcs11-tool-Log-more-information-on-OpenSSL-errors.patch diff --git a/meta-oe/recipes-support/opensc/files/0001-pkcs11-tool-Fix-private-key-import.patch b/meta-oe/recipes-support/opensc/files/0001-pkcs11-tool-Fix-private-key-import.patch new file mode 100644 index ..e270a8e2e6c6 --- /dev/null +++ b/meta-oe/recipes-support/opensc/files/0001-pkcs11-tool-Fix-private-key-import.patch @@ -0,0 +1,33 @@ +From 6f868bbcd9e65447f459f74381c09d1e315a32f6 Mon Sep 17 00:00:00 2001 +From: Jakub Jelen +Date: Thu, 1 Dec 2022 20:08:53 +0100 +Subject: [PATCH 1/2] pkcs11-tool: Fix private key import + +Upstream-Status: Backport +--- + src/tools/pkcs11-tool.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c +index aae205fe2cd6..cfee8526d5b0 100644 +--- a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c +@@ -3669,13 +3669,13 @@ parse_rsa_pkey(EVP_PKEY *pkey, int private, struct rsakey_info *rsa) + RSA_get0_factors(r, _p, _q); + RSA_get0_crt_params(r, _dmp1, _dmq1, _iqmp); + #else +- if (EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_FACTOR1, _d) != 1 || ++ if (EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_D, _d) != 1 || + EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_FACTOR1, _p) != 1 || + EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_FACTOR2, _q) != 1 || + EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_EXPONENT1, _dmp1) != 1 || + EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_EXPONENT2, _dmq1) != 1 || +- EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_EXPONENT3, _iqmp) != 1) { + util_fatal("OpenSSL error during RSA private key parsing"); ++ EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_COEFFICIENT1, _iqmp) != 1) { + } + #endif + RSA_GET_BN(rsa, private_exponent, r_d); +-- +2.30.2 + diff --git a/meta-oe/recipes-support/opensc/files/0002-pkcs11-tool-Log-more-information-on-OpenSSL-errors.patch b/meta-oe/recipes-support/opensc/files/0002-pkcs11-tool-Log-more-information-on-OpenSSL-errors.patch new file mode 100644 index ..880a13ac6149 --- /dev/null +++ b/meta-oe/recipes-support/opensc/files/0002-pkcs11-tool-Log-more-information-on-OpenSSL-errors.patch @@ -0,0 +1,54 @@ +From 4b5702409e7feea8cb410254285c120c57c10e1b Mon Sep 17 00:00:00 2001 +From: Jakub Jelen +Date: Thu, 1 Dec 2022 20:11:41 +0100 +Subject: [PATCH 2/2] pkcs11-tool: Log more information on OpenSSL errors + +Upstream-Status: Backport +--- + src/tools/pkcs11-tool.c | 15 ++- + 1 file changed, 6 insertions(+), 9 deletions(-) + +diff --git a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c +index cfee8526d5b0..f2e6b1dd91cd 100644 +--- a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c +@@ -3641,10 +3641,8 @@ parse_rsa_pkey(EVP_PKEY *pkey, int private, struct rsakey_info *rsa) + const BIGNUM *r_dmp1, *r_dmq1, *r_iqmp; + r = EVP_PKEY_get1_RSA(pkey); + if (!r) { +- if (private) +- util_fatal("OpenSSL error during RSA private key parsing"); +- else +- util_fatal("OpenSSL error during RSA public key parsing"); ++ util_fatal("OpenSSL error during RSA %s key parsing: %s", private ? "private" : "public", ++ ERR_error_string(ERR_peek_last_error(), NULL)); + } + + RSA_get0_key(r, _n, _e, NULL); +@@ -3654,10 +3652,8 @@ parse_rsa_pkey(EVP_PKEY *pkey, int private, struct rsakey_info *rsa) + BIGNUM *r_dmp1 = NULL, *r_dmq1 = NULL, *r_iqmp = NULL; + if (EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_N, _n) != 1 || + EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_RSA_E, _e) != 1) { +- if (private) +- util_fatal("OpenSSL error during RSA private key parsing"); +- else +- util_fatal("OpenSSL error during RSA public key parsing"); ++ util_fatal("OpenSSL error during RSA %s key parsing: %s", private ? "private" : "public", ++ ERR_error_string(ERR_peek_last_error(), NULL)); +
[oe] [meta-oe][PATCH v2] extract-cert: add recipe
The extract-cert tool is used to fetch the X.509 certificate associated with a key from a PKCS#11 token (such as a HSM or YubiKey). This version is derived from certs/extract-cert in the Linux kernel as a stand-alone tool to make it available when signing other software components besides the kernel. Signed-off-by: Jan Luebbe --- v1->v2: Renamed from _git.bb to _0.3.bb and removed 'PR = "0.3"' line as requested by Khem Raj. .../extract-cert/extract-cert_0.3.bb | 14 ++ 1 file changed, 14 insertions(+) create mode 100644 meta-oe/recipes-devtools/extract-cert/extract-cert_0.3.bb diff --git a/meta-oe/recipes-devtools/extract-cert/extract-cert_0.3.bb b/meta-oe/recipes-devtools/extract-cert/extract-cert_0.3.bb new file mode 100644 index ..a4cd7ad1577a --- /dev/null +++ b/meta-oe/recipes-devtools/extract-cert/extract-cert_0.3.bb @@ -0,0 +1,14 @@ +SUMMARY = "small helper program to extract X.509 certificates from PKCS#11 tokens" +LICENSE = "LGPL-2.1-or-later" +LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c" + +DEPENDS = "openssl" + +SRC_URI = "git://git.pengutronix.de/git/extract-cert;protocol=https;branch=master;" +SRCREV = "d652b4e8279aef2a85f58676ab472744bafeafc9" + +S = "${WORKDIR}/git" + +inherit meson pkgconfig + +BBCLASSEXTEND = "native nativesdk" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100901): https://lists.openembedded.org/g/openembedded-devel/message/100901 Mute This Topic: https://lists.openembedded.org/mt/96672091/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] extract-cert: add recipe
The extract-cert tool is used to fetch the X.509 certificate associated with a key from a PKCS#11 token (such as a HSM or YubiKey). This version is derived from certs/extract-cert in the Linux kernel as a stand-alone tool to make it available when signing other software components besides the kernel. Signed-off-by: Jan Luebbe --- .../extract-cert/extract-cert_git.bb | 16 1 file changed, 16 insertions(+) create mode 100644 meta-oe/recipes-devtools/extract-cert/extract-cert_git.bb diff --git a/meta-oe/recipes-devtools/extract-cert/extract-cert_git.bb b/meta-oe/recipes-devtools/extract-cert/extract-cert_git.bb new file mode 100644 index ..b2007eb8214f --- /dev/null +++ b/meta-oe/recipes-devtools/extract-cert/extract-cert_git.bb @@ -0,0 +1,16 @@ +SUMMARY = "small helper program to extract X.509 certificates from PKCS#11 tokens" +LICENSE = "LGPL-2.1-or-later" +LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c" + +DEPENDS = "openssl" + +SRC_URI = "git://git.pengutronix.de/git/extract-cert;protocol=https;branch=master;" +SRCREV = "d652b4e8279aef2a85f58676ab472744bafeafc9" + +PV = "0.3" + +S = "${WORKDIR}/git" + +inherit meson pkgconfig + +BBCLASSEXTEND = "native nativesdk" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100875): https://lists.openembedded.org/g/openembedded-devel/message/100875 Mute This Topic: https://lists.openembedded.org/mt/96649870/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH 1/2] softhsm: avoid unnecessary check for native sqlite binary
SoftHSMv2 actually only uses the sqlite library. With the check for the sqlite3 binary, building with the DB backend would mean depending on sqlite-native. Signed-off-by: Jan Luebbe --- ...unnecessary-check-for-sqlite3-binary.patch | 40 +++ .../recipes-security/softhsm/softhsm_2.6.1.bb | 4 +- 2 files changed, 43 insertions(+), 1 deletion(-) create mode 100644 meta-oe/recipes-security/softhsm/files/0001-avoid-unnecessary-check-for-sqlite3-binary.patch diff --git a/meta-oe/recipes-security/softhsm/files/0001-avoid-unnecessary-check-for-sqlite3-binary.patch b/meta-oe/recipes-security/softhsm/files/0001-avoid-unnecessary-check-for-sqlite3-binary.patch new file mode 100644 index ..7dddcdb78b09 --- /dev/null +++ b/meta-oe/recipes-security/softhsm/files/0001-avoid-unnecessary-check-for-sqlite3-binary.patch @@ -0,0 +1,40 @@ +From 88d968346184058df18dc69171dcd4fd612c2341 Mon Sep 17 00:00:00 2001 +From: Jan Luebbe +Date: Mon, 30 Jan 2023 12:48:23 +0100 +Subject: [PATCH] avoid unnecessary check for sqlite3 binary + +Only the library is used, not the sqlite3 binary. Drop this check to simplify +cross-compilation (as no native sqlite3 binary is needed). + +Upstream-Status: Submitted [https://github.com/opendnssec/SoftHSMv2/pull/694] +--- + m4/acx_sqlite3.m4 | 6 -- + 1 file changed, 6 deletions(-) + +diff --git a/m4/acx_sqlite3.m4 b/m4/acx_sqlite3.m4 +index fd942a75e1a6..17c126d161f5 100644 +--- a/m4/acx_sqlite3.m4 b/m4/acx_sqlite3.m4 +@@ -4,19 +4,13 @@ AC_DEFUN([ACX_SQLITE3],[ + [ + SQLITE3_INCLUDES="-I$withval/include" + SQLITE3_LIBDIRS="-L$withval/lib" +- AC_PATH_PROGS(SQLITE3, sqlite3, sqlite3, $withval/bin) + + ],[ + SQLITE3_INCLUDES="" + SQLITE3_LIBDIRS="" +- AC_PATH_PROGS(SQLITE3, sqlite3, sqlite3, $PATH) + ]) + + +- if ! test -x "$SQLITE3"; then +- AC_MSG_ERROR([sqlite3 command not found]) +- fi +- + AC_MSG_CHECKING(what are the SQLite3 includes) + AC_MSG_RESULT($SQLITE3_INCLUDES) + +-- +2.30.2 + diff --git a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb index d7bcd4f03bb2..44e51fda9181 100644 --- a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb +++ b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb @@ -5,7 +5,9 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=ef3f77a3507c3d91e75b9f2bdaee4210" DEPENDS = "sqlite3" -SRC_URI = "https://dist.opendnssec.org/source/softhsm-2.6.1.tar.gz; +SRC_URI = "https://dist.opendnssec.org/source/softhsm-2.6.1.tar.gz \ + file://0001-avoid-unnecessary-check-for-sqlite3-binary.patch \ +" SRC_URI[sha256sum] = "61249473054bcd1811519ef9a989a880a7bdcc36d317c9c25457fc614df475f2" inherit autotools pkgconfig siteinfo -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100860): https://lists.openembedded.org/g/openembedded-devel/message/100860 Mute This Topic: https://lists.openembedded.org/mt/96626605/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH 2/2] softhsm: enable objectstore backend
We already depend on sqlite, but the objectstore backend using it is not enabled by default. Add the necessary configure option. The db backend is more robust when accessing the objectstore from many parallel processes (such as during kernel module signing). Signed-off-by: Jan Luebbe --- meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb index 44e51fda9181..2c68ba984fe3 100644 --- a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb +++ b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb @@ -13,6 +13,7 @@ SRC_URI[sha256sum] = "61249473054bcd1811519ef9a989a880a7bdcc36d317c9c25457fc614d inherit autotools pkgconfig siteinfo EXTRA_OECONF += " --with-sqlite3=${STAGING_DIR_HOST}/usr" +EXTRA_OECONF += " --with-objectstore-backend-db" EXTRA_OECONF += "${@oe.utils.conditional('SITEINFO_BITS', '64', ' --enable-64bit', '', d)}" PACKAGECONFIG ?= "ecc eddsa pk11 openssl" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100859): https://lists.openembedded.org/g/openembedded-devel/message/100859 Mute This Topic: https://lists.openembedded.org/mt/96626603/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [meta-oe][PATCH] softhsm: enable objectstore backend
On Wed, 2023-01-25 at 08:56 -0800, Khem Raj wrote: > seeing a build failure > > https://autobuilder.yoctoproject.org/typhoon/#/builders/88/builds/2389/steps/15/logs/stdio It is looking for the sqlite3 binary during configure: https://github.com/opendnssec/SoftHSMv2/blob/2.6.1/m4/acx_sqlite3.m4#L12 This worked for me, as sqlite3 was leaking in from the host. It doesn't actually use the binary though, from a quick look at least. What's the better fix? DEPEND on sqlite3-native or remove the AC_PATH_PROGS check? Thanks, Jan > On Tue, Jan 24, 2023 at 5:13 AM Jan Luebbe wrote: > > > > We already depend on sqlite, but the objectstore backend using it is not > > enabled by default. Add the necessary configure option. > > > > The db backend is more robust when accessing the objectstore from many > > parallel processes (such as during kernel module signing). > > > > Signed-off-by: Jan Luebbe > > --- > > meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb | 1 + > > 1 file changed, 1 insertion(+) > > > > diff --git a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb > > b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb > > index d7bcd4f03bb2..1fded8df3dbb 100644 > > --- a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb > > +++ b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb > > @@ -11,6 +11,7 @@ SRC_URI[sha256sum] = > > "61249473054bcd1811519ef9a989a880a7bdcc36d317c9c25457fc614d > > inherit autotools pkgconfig siteinfo > > > > EXTRA_OECONF += " --with-sqlite3=${STAGING_DIR_HOST}/usr" > > +EXTRA_OECONF += " --with-objectstore-backend-db" > > EXTRA_OECONF += "${@oe.utils.conditional('SITEINFO_BITS', '64', ' > > --enable-64bit', '', d)}" > > > > PACKAGECONFIG ?= "ecc eddsa pk11 openssl" > > -- > > 2.30.2 > > > > > > > > > > -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0| Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917- | -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100781): https://lists.openembedded.org/g/openembedded-devel/message/100781 Mute This Topic: https://lists.openembedded.org/mt/96496618/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] opensc: fix homepage URL
The opensc-project.org domain has not been active for a long time [1], so use the current wiki (which is also linked from the projects GitHub landing page). [1] https://opensc-devel.narkive.com/48b09iig/www-opensc-project-org Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/opensc/opensc_0.23.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-support/opensc/opensc_0.23.0.bb b/meta-oe/recipes-support/opensc/opensc_0.23.0.bb index 078e4e686840..b0f147c798d0 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.23.0.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.23.0.bb @@ -6,7 +6,7 @@ keys on the smart card is possible with PKCS\ such as the FINEID (Finnish Electronic IDentity) card. Swedish Posten\ eID cards have also been confirmed to work." -HOMEPAGE = "http://www.opensc-project.org/opensc/; +HOMEPAGE = "https://github.com/OpenSC/OpenSC/wiki; SECTION = "System Environment/Libraries" LICENSE = "LGPL-2.0-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=cb8aedd3bced19bd8026d96a8b6876d7" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100723): https://lists.openembedded.org/g/openembedded-devel/message/100723 Mute This Topic: https://lists.openembedded.org/mt/96497152/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] pcsc-lite: fix homepage URL
pcsclite.alioth.debian.org is not resolvable, so use the URL indicated in the README.md file. Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb b/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb index dc572e46b4f2..c84c94dd5b2f 100644 --- a/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb +++ b/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb @@ -1,5 +1,5 @@ SUMMARY = "PC/SC Lite smart card framework and applications" -HOMEPAGE = "http://pcsclite.alioth.debian.org/; +HOMEPAGE = "https://pcsclite.apdu.fr/; LICENSE = "BSD-3-Clause & GPL-3.0-or-later" LICENSE:${PN} = "BSD-3-Clause" LICENSE:${PN}-lib = "BSD-3-Clause" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100722): https://lists.openembedded.org/g/openembedded-devel/message/100722 Mute This Topic: https://lists.openembedded.org/mt/96497025/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] softhsm: enable objectstore backend
We already depend on sqlite, but the objectstore backend using it is not enabled by default. Add the necessary configure option. The db backend is more robust when accessing the objectstore from many parallel processes (such as during kernel module signing). Signed-off-by: Jan Luebbe --- meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb index d7bcd4f03bb2..1fded8df3dbb 100644 --- a/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb +++ b/meta-oe/recipes-security/softhsm/softhsm_2.6.1.bb @@ -11,6 +11,7 @@ SRC_URI[sha256sum] = "61249473054bcd1811519ef9a989a880a7bdcc36d317c9c25457fc614d inherit autotools pkgconfig siteinfo EXTRA_OECONF += " --with-sqlite3=${STAGING_DIR_HOST}/usr" +EXTRA_OECONF += " --with-objectstore-backend-db" EXTRA_OECONF += "${@oe.utils.conditional('SITEINFO_BITS', '64', ' --enable-64bit', '', d)}" PACKAGECONFIG ?= "ecc eddsa pk11 openssl" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100721): https://lists.openembedded.org/g/openembedded-devel/message/100721 Mute This Topic: https://lists.openembedded.org/mt/96496618/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] pcsc-lite: fix native build
The native build fails during configure with: checking for flex... no checking for lex... no configure: error: no lex or flex found Add flex-native to DEPENDS to provide it. Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb b/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb index fd232c1b6328..dc572e46b4f2 100644 --- a/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb +++ b/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.9.9.bb @@ -9,7 +9,7 @@ LICENSE:${PN}-dbg = "BSD-3-Clause & GPL-3.0-or-later" LICENSE:${PN}-spy = "GPL-3.0-or-later" LICENSE:${PN}-spy-dev = "GPL-3.0-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=628c01ba985ecfa21677f5ee2d5202f6" -DEPENDS = "autoconf-archive-native" +DEPENDS = "autoconf-archive-native flex-native" SRC_URI = "https://pcsclite.apdu.fr/files/${BP}.tar.bz2; SRC_URI[sha256sum] = "cbcc3b34c61f53291cecc0d831423c94d437b188eb2b97b7febc08de1c914e8a" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#100720): https://lists.openembedded.org/g/openembedded-devel/message/100720 Mute This Topic: https://lists.openembedded.org/mt/96496571/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH v2] gensio: upgrade 2.3.1 -> 2.5.2
Version 2.5.2 contains an include sys/unistd.h, which is not available with musl, so fix the include path. Signed-off-by: Jan Luebbe --- ...01-tools-gensiot-Fix-build-with-musl.patch | 29 +++ .../{gensio_2.3.1.bb => gensio_2.5.2.bb} | 6 ++-- 2 files changed, 33 insertions(+), 2 deletions(-) create mode 100644 meta-oe/recipes-connectivity/gensio/files/0001-tools-gensiot-Fix-build-with-musl.patch rename meta-oe/recipes-connectivity/gensio/{gensio_2.3.1.bb => gensio_2.5.2.bb} (85%) diff --git a/meta-oe/recipes-connectivity/gensio/files/0001-tools-gensiot-Fix-build-with-musl.patch b/meta-oe/recipes-connectivity/gensio/files/0001-tools-gensiot-Fix-build-with-musl.patch new file mode 100644 index ..93831c380f72 --- /dev/null +++ b/meta-oe/recipes-connectivity/gensio/files/0001-tools-gensiot-Fix-build-with-musl.patch @@ -0,0 +1,29 @@ +From 823b6754a4d7655480b6e8576a9d0037f842d653 Mon Sep 17 00:00:00 2001 +From: Jan Luebbe +Date: Thu, 25 Aug 2022 12:19:16 +0200 +Subject: [PATCH] tools:gensiot: Fix build with musl + +According to POSIX getpid() is available in unistd.h, not sys/unistd.h. + +Upstream-Status: Submitted [https://github.com/cminyard/gensio/pull/47] +Signed-off-by: Jan Luebbe +--- + tools/gensiotool.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/tools/gensiotool.c b/tools/gensiotool.c +index cac531bb4b74..ab0bb9583f9f 100644 +--- a/tools/gensiotool.c b/tools/gensiotool.c +@@ -44,7 +44,7 @@ + #include + #include + #include +-#include ++#include + #include + #endif + +-- +2.30.2 + diff --git a/meta-oe/recipes-connectivity/gensio/gensio_2.3.1.bb b/meta-oe/recipes-connectivity/gensio/gensio_2.5.2.bb similarity index 85% rename from meta-oe/recipes-connectivity/gensio/gensio_2.3.1.bb rename to meta-oe/recipes-connectivity/gensio/gensio_2.5.2.bb index a6e0075538c3..9de21209caf5 100644 --- a/meta-oe/recipes-connectivity/gensio/gensio_2.3.1.bb +++ b/meta-oe/recipes-connectivity/gensio/gensio_2.5.2.bb @@ -5,9 +5,11 @@ LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=a0fd36908af843bcee10cb6dfc47fa67 \ file://COPYING;md5=bae3019b4c6dc4138c217864bd04331f \ " -SRCREV = "c500d8705c517f96e591c060105a789f053d2b7a" +SRCREV = "b6cd354afe6d5f63bc859c94fd3a455a3cdf0449" -SRC_URI = "git://github.com/cminyard/gensio;protocol=https;branch=master" +SRC_URI = "git://github.com/cminyard/gensio;protocol=https;branch=master \ + file://0001-tools-gensiot-Fix-build-with-musl.patch \ +" S = "${WORKDIR}/git" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#98433): https://lists.openembedded.org/g/openembedded-devel/message/98433 Mute This Topic: https://lists.openembedded.org/mt/93249119/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-networking][PATCH] chrony: add support for config and source snippet includes
This makes it simpler to set specific config options or custom sources by adding snippet files to /etc/chrony/conf.d/ or /etc/chrony/sources.d/ instead of modifying a copy of the full configuration file. As new snippets can be added from separate recipes, targeted changes can be done in multiple layers. These specific directories are also used in Debian's default configuration. It is not an error if they are missing. Signed-off-by: Jan Luebbe --- meta-networking/recipes-support/chrony/chrony/chrony.conf | 7 +++ 1 file changed, 7 insertions(+) diff --git a/meta-networking/recipes-support/chrony/chrony/chrony.conf b/meta-networking/recipes-support/chrony/chrony/chrony.conf index 8d226d31a5e5..d11e2d406925 100644 --- a/meta-networking/recipes-support/chrony/chrony/chrony.conf +++ b/meta-networking/recipes-support/chrony/chrony/chrony.conf @@ -1,3 +1,6 @@ +# Load config files matching the /etc/chrony/conf.d/*.conf pattern. +confdir /etc/chrony/conf.d + # Use public NTP servers from the pool.ntp.org project. # Please consider joining the pool project if possible by running your own # server(s). @@ -17,6 +20,10 @@ pool 0.openembedded.pool.ntp.org iburst # gpios = <_gpio_0 56 0>; # }; +# Load source files matching the /etc/chrony/sources.d/*.sources pattern. +# These can be reloaded using 'chronyc reload sources'. +sourcedir /etc/chrony/sources.d + # In first three updates step the system clock instead of slew # if the adjustment is larger than 1 second. makestep 1.0 3 -- 2.20.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#98420): https://lists.openembedded.org/g/openembedded-devel/message/98420 Mute This Topic: https://lists.openembedded.org/mt/93230192/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] gensio: upgrade 2.3.1 -> 2.5.2
Signed-off-by: Jan Luebbe --- .../gensio/{gensio_2.3.1.bb => gensio_2.5.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-connectivity/gensio/{gensio_2.3.1.bb => gensio_2.5.2.bb} (93%) diff --git a/meta-oe/recipes-connectivity/gensio/gensio_2.3.1.bb b/meta-oe/recipes-connectivity/gensio/gensio_2.5.2.bb similarity index 93% rename from meta-oe/recipes-connectivity/gensio/gensio_2.3.1.bb rename to meta-oe/recipes-connectivity/gensio/gensio_2.5.2.bb index a6e0075538c3..9e8af18e258b 100644 --- a/meta-oe/recipes-connectivity/gensio/gensio_2.3.1.bb +++ b/meta-oe/recipes-connectivity/gensio/gensio_2.5.2.bb @@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=a0fd36908af843bcee10cb6dfc47fa67 \ file://COPYING;md5=bae3019b4c6dc4138c217864bd04331f \ " -SRCREV = "c500d8705c517f96e591c060105a789f053d2b7a" +SRCREV = "b6cd354afe6d5f63bc859c94fd3a455a3cdf0449" SRC_URI = "git://github.com/cminyard/gensio;protocol=https;branch=master" -- 2.20.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#98417): https://lists.openembedded.org/g/openembedded-devel/message/98417 Mute This Topic: https://lists.openembedded.org/mt/93228653/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [meta-gnome][PATCH 1/2] geary: initial add recipe
Hi Markus, On Tue, 2022-01-25 at 14:28 +0100, Markus Volk wrote: > Hi Jan, > > it is also allowed to use tags here. > > SRCREV= "gnome-40.0" fetches the same code as > > SRCREV = "e561775c1580a9f60a726355b2b897bfc9cb3382" That's only true as long as nobody modifies that tag in the upstream repository and isn't cryptographically secure. As far as I can see, no existing recipe in meta-oe or oe-core uses a tag as SRCREV. Additionally, https://docs.yoctoproject.org/singleindex.html#term-SRCREV warns: "Note that if you want to build a fixed revision and you want to avoid performing a query on the remote repository every time BitBake parses your recipe, you should specify a SRCREV that is a full revision identifier and not just a tag." Regards, Jan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#95072): https://lists.openembedded.org/g/openembedded-devel/message/95072 Mute This Topic: https://lists.openembedded.org/mt/88611343/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [oe] [meta-gnome][PATCH 1/2] geary: initial add recipe
Hi Markus, On Thu, 2022-01-20 at 21:26 +0100, Markus Volk wrote: ... > +inherit meson pkgconfig mime-xdg gtk-icon-cache gobject-introspection vala > + > +SRC_URI = " \ > + git://github.com/GNOME/geary.git;nobranch=1;protocol=https \ > +" > + > +S = "${WORKDIR}/git" > +SRCREV = "gnome-${PV}" perhaps I'm missing something, but shouldn't this be a git commit hash? Regards, Jan -- Pengutronix e.K. | | Steuerwalder Str. 21 | http://www.pengutronix.de/ | 31137 Hildesheim, Germany | Phone: +49-5121-206917-0| Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917- | -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#95056): https://lists.openembedded.org/g/openembedded-devel/message/95056 Mute This Topic: https://lists.openembedded.org/mt/88611343/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH] snappy: use main branch to fix fetch failure
The project has renamed the master branch to main. Signed-off-by: Jan Luebbe --- meta-oe/recipes-extended/snappy/snappy_1.1.9.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-extended/snappy/snappy_1.1.9.bb b/meta-oe/recipes-extended/snappy/snappy_1.1.9.bb index 252ba9f3dc69..0d58345d7a8c 100644 --- a/meta-oe/recipes-extended/snappy/snappy_1.1.9.bb +++ b/meta-oe/recipes-extended/snappy/snappy_1.1.9.bb @@ -10,7 +10,7 @@ compression ratio." LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://COPYING;md5=f62f3080324a97b3159a7a7e61812d0c" -SRC_URI = "gitsm://github.com/google/snappy.git;protocol=https;branch=master \ +SRC_URI = "gitsm://github.com/google/snappy.git;protocol=https;branch=main \ file://0001-Add-inline-with-SNAPPY_ATTRIBUTE_ALWAYS_INLINE.patch \ " SRCREV = "2b63814b15a2aaae54b7943f0cd935892fae628f" -- 2.30.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#95034): https://lists.openembedded.org/g/openembedded-devel/message/95034 Mute This Topic: https://lists.openembedded.org/mt/88647656/21656 Group Owner: openembedded-devel+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[oe] [meta-oe][PATCH 3/6] opensc: use pcsc-lite instead of openct by default
OpenCT upstream maintenance seems to have stopped and OpenSC upstream uses pcsc-lite by default in their configure script. Add PACKAGECONFIGs for each and select pcsc by default. As the openct package depends on pcsc-lite by itself, this avoids an unnecessary package in the default case. Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/opensc/opensc_0.19.0.bb | 9 ++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/meta-oe/recipes-support/opensc/opensc_0.19.0.bb b/meta-oe/recipes-support/opensc/opensc_0.19.0.bb index bc1722e394f6..440859a37a93 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.19.0.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.19.0.bb @@ -16,20 +16,23 @@ SRCREV = "f1691fc91fc113191c3a8aaf5facd6983334ec47" SRC_URI = "git://github.com/OpenSC/OpenSC \ file://0001-Remove-redundant-logging.patch \ " -DEPENDS = "openct pcsc-lite virtual/libiconv openssl" +DEPENDS = "virtual/libiconv openssl" S = "${WORKDIR}/git" inherit autotools pkgconfig bash-completion EXTRA_OECONF = " \ --disable-static \ ---enable-openct \ ---disable-pcsc \ --disable-ctapi \ --disable-doc \ " EXTRA_OEMAKE = "DESTDIR=${D}" +PACKAGECONFIG ??= "pcsc" + +PACKAGECONFIG[openct] = "--enable-openct,--disable-openct,openct" +PACKAGECONFIG[pcsc] = "--enable-pcsc,--disable-pcsc,pcsc-lite" + RDEPENDS_${PN} = "readline" FILES_${PN} += "\ -- 2.24.0 -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-oe][PATCH 1/6] openct: merge do_install and do_install_append
There is no reason why both should be used in the same recipe. Merge them. Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/openct/openct_0.6.20.bb | 6 ++ 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/meta-oe/recipes-support/openct/openct_0.6.20.bb b/meta-oe/recipes-support/openct/openct_0.6.20.bb index 67b7c2975302..08b2e3c23236 100644 --- a/meta-oe/recipes-support/openct/openct_0.6.20.bb +++ b/meta-oe/recipes-support/openct/openct_0.6.20.bb @@ -56,10 +56,6 @@ FILES_${PN}-dbg += " \ INSANE_SKIP_${PN} += "dev-deps" -do_install_append() { -rm -r ${D}/${localstatedir}/run -} - do_install () { rm -rf ${D} install -d ${D}/etc @@ -87,4 +83,6 @@ do_install () { install -dm 755 ${D}${localstatedir}/run/openct touch ${D}${localstatedir}/run/openct/status chmod 644 ${D}${localstatedir}/run/openct/status + +rm -r ${D}/${localstatedir}/run } -- 2.24.0 -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-oe][PATCH 6/6] softhsm: add recipe
This is useful for consolidation of code-signing interfaces when building an image with verified boot mechanisms or signed update artifacts. It can also be used on the target as a backend for software which uses the PKCS#11 API to access private key material. Signed-off-by: Jan Luebbe --- .../recipes-security/softhsm/softhsm_git.bb| 18 ++ 1 file changed, 18 insertions(+) create mode 100644 meta-oe/recipes-security/softhsm/softhsm_git.bb diff --git a/meta-oe/recipes-security/softhsm/softhsm_git.bb b/meta-oe/recipes-security/softhsm/softhsm_git.bb new file mode 100644 index ..3236cb9a6097 --- /dev/null +++ b/meta-oe/recipes-security/softhsm/softhsm_git.bb @@ -0,0 +1,18 @@ +SUMMARY = "PKCS#11 HSM/Token Emulator" +HOMEPAGE = "https://www.opendnssec.org/softhsm/; +LICENSE = "BSD-2-Clause & ISC" +LIC_FILES_CHKSUM = "file://LICENSE;md5=ef3f77a3507c3d91e75b9f2bdaee4210" +DEPENDS = "openssl" +PV = "2.5.0" + +SRC_URI = "git://github.com/opendnssec/SoftHSMv2.git;branch=master" +SRCREV = "369df0383d101bc8952692c2a368ac8bc887d1b4" + +S = "${WORKDIR}/git" + +inherit autotools pkgconfig + +# EdDSA requires OpenSSL >= 1.1.1 +EXTRA_OECONF = "--enable-eddsa --disable-gost" + +BBCLASSEXTEND = "native" -- 2.24.0 -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-oe][PATCH 5/6] libp11: add support for native builds
This is needed as a dependency when using SoftHSM from the PKCS#11 OpenSSL engine for code singing. Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/libp11/libp11_0.4.10.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-support/libp11/libp11_0.4.10.bb b/meta-oe/recipes-support/libp11/libp11_0.4.10.bb index b40223e8abcb..fc2ec9935f56 100644 --- a/meta-oe/recipes-support/libp11/libp11_0.4.10.bb +++ b/meta-oe/recipes-support/libp11/libp11_0.4.10.bb @@ -24,3 +24,5 @@ do_install_append () { FILES_${PN} += "${libdir}/engines*/pkcs11.so" FILES_${PN}-dev += "${libdir}/engines*/libpkcs11${SOLIBSDEV}" + +BBCLASSEXTEND="native" -- 2.24.0 -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-oe][PATCH 4/6] opensc: add support for native builds
This is needed as a dependency when using SoftHSM from the PKCS#11 OpenSSL engine for code singing. Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/opensc/opensc_0.19.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-support/opensc/opensc_0.19.0.bb b/meta-oe/recipes-support/opensc/opensc_0.19.0.bb index 440859a37a93..6354ca3f48ff 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.19.0.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.19.0.bb @@ -45,3 +45,5 @@ FILES_${PN}-dev += "\ ${libdir}/pkcs11/onepin-opensc-pkcs11.so \ ${libdir}/pkcs11/pkcs11-spy.so \ " + +BBCLASSEXTEND="native" -- 2.24.0 -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-oe][PATCH 2/6] pcsc-lite: add support for native builds
This is needed as a dependency when using SoftHSM from the PKCS#11 OpenSSL engine for code singing. Add a udev PACKAGECONFIG, as this is only useful on the target. Also don't RRECOMMEND ccid for the native variant. Signed-off-by: Jan Luebbe --- meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.8.25.bb | 9 ++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.8.25.bb b/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.8.25.bb index a87c228a8374..33f7f839cb1b 100644 --- a/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.8.25.bb +++ b/meta-oe/recipes-support/pcsc-lite/pcsc-lite_1.8.25.bb @@ -9,7 +9,6 @@ LICENSE_${PN}-dbg = "BSD & GPLv3+" LICENSE_${PN}-spy = "GPLv3+" LICENSE_${PN}-spy-dev = "GPLv3+" LIC_FILES_CHKSUM = "file://COPYING;md5=628c01ba985ecfa21677f5ee2d5202f6" -DEPENDS = "udev" SRC_URI = "https://pcsclite.apdu.fr/files/${BP}.tar.bz2; SRC_URI[md5sum] = "c20650a36062ab1689f37f3302c988f2" @@ -19,19 +18,21 @@ inherit autotools systemd pkgconfig EXTRA_OECONF = " \ --disable-libusb \ ---enable-libudev \ --enable-usbdropdir=${libdir}/pcsc/drivers \ " S = "${WORKDIR}/pcsc-lite-${PV}" -PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" +PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)} udev" +PACKAGECONFIG_class-native ??= "" PACKAGECONFIG[systemd] = ",--disable-libsystemd,systemd," +PACKAGECONFIG[udev] = "--enable-libudev,--disable-libudev,udev" PACKAGES = "${PN} ${PN}-dbg ${PN}-dev ${PN}-lib ${PN}-doc ${PN}-spy ${PN}-spy-dev" RRECOMMENDS_${PN} = "ccid" +RRECOMMENDS_${PN}_class-native = "" FILES_${PN} = "${sbindir}/pcscd" FILES_${PN}-lib = "${libdir}/libpcsclite*${SOLIBS}" @@ -50,3 +51,5 @@ RREPLACES_${PN} += "${PN}-systemd" RCONFLICTS_${PN} += "${PN}-systemd" SYSTEMD_SERVICE_${PN} = "pcscd.socket" RDEPENDS_${PN}-spy +="python" + +BBCLASSEXTEND="native" -- 2.24.0 -- ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-devel
[oe] [meta-java][PATCH] icedtea6-native: fix build with gcc 4.6
Signed-off-by: Jan Luebbe j...@pengutronix.de --- ...-booleans-from-methods-returning-pointers.patch | 12 ++ .../icedtea-remove-mimpure-option-to-gcc.patch | 187 recipes-core/icedtea/icedtea6-native_1.8.11.bb |6 +- 3 files changed, 204 insertions(+), 1 deletion(-) create mode 100644 meta-java/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-dont-return-booleans-from-methods-returning-pointers.patch create mode 100644 meta-java/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-remove-mimpure-option-to-gcc.patch diff --git a/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-dont-return-booleans-from-methods-returning-pointers.patch b/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-dont-return-booleans-from-methods-returning-pointers.patch new file mode 100644 index 000..315f074 --- /dev/null +++ b/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-dont-return-booleans-from-methods-returning-pointers.patch @@ -0,0 +1,12 @@ +diff -ur openjdk.orig/hotspot/src/share/vm/opto/loopnode.cpp openjdk/hotspot/src/share/vm/opto/loopnode.cpp +--- openjdk.orig/hotspot/src/share/vm/opto/loopnode.cpp2011-11-14 17:07:36.0 -0500 openjdk/hotspot/src/share/vm/opto/loopnode.cpp 2012-01-30 11:25:10.648080484 -0500 +@@ -546,7 +546,7 @@ + Node* CountedLoopNode::match_incr_with_optional_truncation( + Node* expr, Node** trunc1, Node** trunc2, const TypeInt** trunc_type) { + // Quick cutouts: +- if (expr == NULL || expr-req() != 3) return false; ++ if (expr == NULL || expr-req() != 3) return NULL; + + Node *t1 = NULL; + Node *t2 = NULL; diff --git a/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-remove-mimpure-option-to-gcc.patch b/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-remove-mimpure-option-to-gcc.patch new file mode 100644 index 000..b680b31 --- /dev/null +++ b/recipes-core/icedtea/icedtea6-native-1.8.11/icedtea-remove-mimpure-option-to-gcc.patch @@ -0,0 +1,187 @@ +diff --git a/corba/make/common/shared/Compiler-gcc.gmk b/corba/make/common/shared/Compiler-gcc.gmk +index d1e16da..7ef5dda 100644 +--- openjdk.orig/corba/make/common/shared/Compiler-gcc.gmk openjdk/corba/make/common/shared/Compiler-gcc.gmk +@@ -95,7 +95,7 @@ ifeq ($(PLATFORM), linux) + endif + endif + # Option used to create a shared library +- SHARED_LIBRARY_FLAG = -shared -mimpure-text ++ SHARED_LIBRARY_FLAG = -shared + SUN_COMP_VER := $(shell $(CC) --verbose 21 ) + + endif +diff --git a/jdk/make/common/shared/Compiler-gcc.gmk b/jdk/make/common/shared/Compiler-gcc.gmk +index dc6f757..6c1922b 100644 +--- openjdk.orig/jdk/make/common/shared/Compiler-gcc.gmk openjdk/jdk/make/common/shared/Compiler-gcc.gmk +@@ -132,7 +132,7 @@ ifeq ($(PLATFORM), linux) + REQUIRED_GCC_VER = 4.0.* + endif + # Option used to create a shared library +- SHARED_LIBRARY_FLAG = -shared -mimpure-text ++ SHARED_LIBRARY_FLAG = -shared + SUN_COMP_VER := $(shell $(CC) --verbose 21 ) + + endif +diff --git a/jdk/src/share/demo/jvmti/compiledMethodLoad/sample.makefile.txt b/jdk/src/share/demo/jvmti/compiledMethodLoad/sample.makefile.txt +index a759dc7..d9871c2 100644 +--- openjdk.orig/jdk/src/share/demo/jvmti/compiledMethodLoad/sample.makefile.txt openjdk/jdk/src/share/demo/jvmti/compiledMethodLoad/sample.makefile.txt +@@ -90,7 +90,7 @@ ifeq ($(OSNAME), linux) + OBJECTS=$(SOURCES:%.c=%.o) + # Library name and options needed to build it + LIBRARY=lib$(LIBNAME).so +-LDFLAGS=-Wl,-soname=$(LIBRARY) -static-libgcc -mimpure-text ++LDFLAGS=-Wl,-soname=$(LIBRARY) -static-libgcc + # Libraries we are dependent on + LIBRARIES=-lc + # Building a shared library +diff --git a/jdk/src/share/demo/jvmti/gctest/sample.makefile.txt b/jdk/src/share/demo/jvmti/gctest/sample.makefile.txt +index 8a8e40a..a0edfbd 100644 +--- openjdk.orig/jdk/src/share/demo/jvmti/gctest/sample.makefile.txt openjdk/jdk/src/share/demo/jvmti/gctest/sample.makefile.txt +@@ -90,7 +90,7 @@ ifeq ($(OSNAME), linux) + OBJECTS=$(SOURCES:%.c=%.o) + # Library name and options needed to build it + LIBRARY=lib$(LIBNAME).so +-LDFLAGS=-Wl,-soname=$(LIBRARY) -static-libgcc -mimpure-text ++LDFLAGS=-Wl,-soname=$(LIBRARY) -static-libgcc + # Libraries we are dependent on + LIBRARIES=-lc + # Building a shared library +diff --git a/jdk/src/share/demo/jvmti/heapTracker/sample.makefile.txt b/jdk/src/share/demo/jvmti/heapTracker/sample.makefile.txt +index e102fba..00fb0d2 100644 +--- openjdk.orig/jdk/src/share/demo/jvmti/heapTracker/sample.makefile.txt openjdk/jdk/src/share/demo/jvmti/heapTracker/sample.makefile.txt +@@ -94,7 +94,7 @@ ifeq ($(OSNAME), linux) + OBJECTS=$(SOURCES:%.c=%.o) + # Library name and options needed to build it + LIBRARY=lib$(LIBNAME).so +-LDFLAGS=-Wl,-soname=$(LIBRARY) -static-libgcc -mimpure-text ++LDFLAGS=-Wl,-soname=$(LIBRARY) -static-libgcc + # Libraries
[oe] [meta-java][PATCH] classpath: avoid picking up gmp.h from the host
Signed-off-by: Jan Luebbe j...@pengutronix.de --- recipes-core/classpath/classpath.inc |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/recipes-core/classpath/classpath.inc b/recipes-core/classpath/classpath.inc index 4c3174b..1a8093e 100644 --- a/recipes-core/classpath/classpath.inc +++ b/recipes-core/classpath/classpath.inc @@ -21,7 +21,7 @@ RPROVIDES_${PN} = ${PBN} RPROVIDES_${PN}-common = ${PBN}-common RPROVIDES_${PN}-gtk = ${PBN}-awt -PR = r0 +PR = r1 SRC_URI = ${GNU_MIRROR}/classpath/classpath-${PV}.tar.gz @@ -37,6 +37,7 @@ EXTRA_OECONF = \ --with-vm=java \ --disable-Werror \ --with-antlr-jar=${STAGING_DATADIR_JAVA_NATIVE}/antlr.jar \ + --with-gmp=${STAGING_LIBDIR}/.. \ --disable-alsa \ --disable-dssi \ --disable-qt4-peer \ -- 1.7.10.4 ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-devel
[oe] [meta-java][PATCH] llvm2.8: fix llvm compile error by including unistd.h
Thanks to Jaap de Jong and Khem Raj for reporing the problem and suggesting the fix. Signed-off-by: Jan Luebbe j...@pengutronix.de --- recipes-core/llvm/llvm2.8/add-unistd.patch | 12 recipes-core/llvm/llvm2.8_2.8.bb |3 +++ 2 files changed, 15 insertions(+) create mode 100644 recipes-core/llvm/llvm2.8/add-unistd.patch diff --git a/recipes-core/llvm/llvm2.8/add-unistd.patch b/recipes-core/llvm/llvm2.8/add-unistd.patch new file mode 100644 index 000..1c51b30 --- /dev/null +++ b/recipes-core/llvm/llvm2.8/add-unistd.patch @@ -0,0 +1,12 @@ +Index: llvm-2.8/lib/ExecutionEngine/JIT/Intercept.cpp +=== +--- llvm-2.8.orig/lib/ExecutionEngine/JIT/Intercept.cpp2012-05-14 18:31:21.008318473 +0200 llvm-2.8/lib/ExecutionEngine/JIT/Intercept.cpp 2012-05-14 18:32:53.523734850 +0200 +@@ -19,6 +19,7 @@ + #include llvm/Support/ErrorHandling.h + #include llvm/System/DynamicLibrary.h + #include llvm/Config/config.h ++#include unistd.h + using namespace llvm; + + // AtExitHandlers - List of functions to call when the program exits, diff --git a/recipes-core/llvm/llvm2.8_2.8.bb b/recipes-core/llvm/llvm2.8_2.8.bb index 310e94e..3459885 100644 --- a/recipes-core/llvm/llvm2.8_2.8.bb +++ b/recipes-core/llvm/llvm2.8_2.8.bb @@ -4,9 +4,12 @@ require llvm.inc LICENSE = NCSA LIC_FILES_CHKSUM = file://LICENSE.TXT;md5=0ac5f799a2d89477c75b0a378b221855 +PR = r1 + SRC_URI += \ file://30may-llvm2.8-pr399-ppc-arm.patch \ file://0019-issue6065.patch \ +file://add-unistd.patch \ SRC_URI_append_arm = file://llvm-mc_disable.patch -- 1.7.10 ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-devel
[oe] [meta-java][PATCH] jamvm: work around min heap size greater than max error
On system with large amounts of RAM (such as 96GB), the default initial heap size is larger than the max heap size specified in some build commands. Set min_heap to the max_heap value in those cases instead. Signed-off-by: Jan Luebbe j...@pengutronix.de --- recipes-core/jamvm/jamvm/jamvm-minmax-heap.patch | 15 +++ recipes-core/jamvm/jamvm_git.bb |3 ++- 2 files changed, 17 insertions(+), 1 deletion(-) create mode 100644 recipes-core/jamvm/jamvm/jamvm-minmax-heap.patch diff --git a/recipes-core/jamvm/jamvm/jamvm-minmax-heap.patch b/recipes-core/jamvm/jamvm/jamvm-minmax-heap.patch new file mode 100644 index 000..bf0fda5 --- /dev/null +++ b/recipes-core/jamvm/jamvm/jamvm-minmax-heap.patch @@ -0,0 +1,15 @@ +diff --git a/src/jam.c b/src/jam.c +index b76ce8b..dc5eac3 100644 +--- a/src/jam.c b/src/jam.c +@@ -133,9 +133,7 @@ int parseCommandLine(int argc, char *argv[], InitArgs *args) { + for(i = 1; i argc; i++) { + if(*argv[i] != '-') { + if(args-min_heap args-max_heap) { +-printf(Minimum heap size greater than max!\n); +-status = 1; +-goto exit; ++args-min_heap = args-max_heap; + } + + if(args-props_count) { diff --git a/recipes-core/jamvm/jamvm_git.bb b/recipes-core/jamvm/jamvm_git.bb index 2a4213b..7b28600 100644 --- a/recipes-core/jamvm/jamvm_git.bb +++ b/recipes-core/jamvm/jamvm_git.bb @@ -6,11 +6,12 @@ require jamvm.inc SRCREV = 4617da717ecb05654ea5bb9572338061106a414d PV = 1.5.5+1.6.0-devel+git${SRCPV} -PR = r1 +PR = r2 SRC_URI = git://git.berlios.de/jamvm;protocol=git \ file://jamvm-jni_h-noinst.patch \ file://libffi.patch \ + file://jamvm-minmax-heap.patch \ S = ${WORKDIR}/git -- 1.7.10 ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-devel
[oe] [PATCH 2/3] geos: add recipe
Signed-off-by: Jan Luebbe jlue...@debian.org --- meta-oe/recipes-navigation/geos/geos.inc | 15 +++ meta-oe/recipes-navigation/geos/geos_3.3.2.bb |7 +++ 2 files changed, 22 insertions(+), 0 deletions(-) create mode 100644 meta-oe/recipes-navigation/geos/geos.inc create mode 100644 meta-oe/recipes-navigation/geos/geos_3.3.2.bb diff --git a/meta-oe/recipes-navigation/geos/geos.inc b/meta-oe/recipes-navigation/geos/geos.inc new file mode 100644 index 000..30ad554 --- /dev/null +++ b/meta-oe/recipes-navigation/geos/geos.inc @@ -0,0 +1,15 @@ +DESCRIPTION = GEOS - Geometry Engine, Open Source +HOMEPAGE = http://trac.osgeo.org/geos/; +SECTION = libs + +INC_PR = r0 + +LICENSE = LGPLv2.1+ +LIC_FILES_CHKSUM = file://COPYING;md5=7fbc338309ac38fefcd64b04bb903e34 + +SRC_URI = http://download.osgeo.org/geos/geos-${PV}.tar.bz2; + +inherit autotools pkgconfig + +FILES_${PN} += ${libdir}/libgeos-${PV}.so + diff --git a/meta-oe/recipes-navigation/geos/geos_3.3.2.bb b/meta-oe/recipes-navigation/geos/geos_3.3.2.bb new file mode 100644 index 000..e57ca6b --- /dev/null +++ b/meta-oe/recipes-navigation/geos/geos_3.3.2.bb @@ -0,0 +1,7 @@ +require geos.inc + +PR = ${INC_PR}.0 + +SRC_URI[md5sum] = 5b7270c73fd1c516f368af8fd1962323 +SRC_URI[sha256sum] = ec64d3a92540a1618aa3b91dc1235caae1c370ec23afd59a2734062bf182ed5b + -- 1.7.9.1 ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-devel
[oe] [PATCH 1/3] proj: add recipe
Signed-off-by: Jan Luebbe jlue...@debian.org --- meta-oe/recipes-navigation/proj/proj.inc | 13 + meta-oe/recipes-navigation/proj/proj_4.7.0.bb |7 +++ 2 files changed, 20 insertions(+), 0 deletions(-) create mode 100644 meta-oe/recipes-navigation/proj/proj.inc create mode 100644 meta-oe/recipes-navigation/proj/proj_4.7.0.bb diff --git a/meta-oe/recipes-navigation/proj/proj.inc b/meta-oe/recipes-navigation/proj/proj.inc new file mode 100644 index 000..f6275d1 --- /dev/null +++ b/meta-oe/recipes-navigation/proj/proj.inc @@ -0,0 +1,13 @@ +DESCRIPTION = PROJ.4 - Cartographic Projections Library +HOMEPAGE = http://trac.osgeo.org/proj/; +SECTION = libs + +INC_PR = r0 + +LICENSE = MIT +LIC_FILES_CHKSUM = file://COPYING;md5=74d9aaec5fa0cd734341e8c4dc91b608 + +SRC_URI = http://download.osgeo.org/proj/proj-${PV}.tar.gz; + +inherit autotools pkgconfig + diff --git a/meta-oe/recipes-navigation/proj/proj_4.7.0.bb b/meta-oe/recipes-navigation/proj/proj_4.7.0.bb new file mode 100644 index 000..8e4f901 --- /dev/null +++ b/meta-oe/recipes-navigation/proj/proj_4.7.0.bb @@ -0,0 +1,7 @@ +require proj.inc + +PR = ${INC_PR}.0 + +SRC_URI[md5sum] = 927d34623b52e0209ba2bfcca18fe8cd +SRC_URI[sha256sum] = fc5440002a496532bfaf423c28bdfaf9e26cc96c84ccefcdefde911efbd98986 + -- 1.7.9.1 ___ Openembedded-devel mailing list Openembedded-devel@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-devel
[oe] [PATCH 3/3] libspatialite: add recipe
Signed-off-by: Jan Luebbe jlue...@debian.org --- .../libspatialite/libspatialite.inc| 16 ++ .../fix-the-configure-script-and-freexl.patch | 200 .../libspatialite/libspatialite_3.0.1.bb |9 + 3 files changed, 225 insertions(+), 0 deletions(-) create mode 100644 meta-oe/recipes-navigation/libspatialite/libspatialite.inc create mode 100644 meta-oe/recipes-navigation/libspatialite/libspatialite/fix-the-configure-script-and-freexl.patch create mode 100644 meta-oe/recipes-navigation/libspatialite/libspatialite_3.0.1.bb diff --git a/meta-oe/recipes-navigation/libspatialite/libspatialite.inc b/meta-oe/recipes-navigation/libspatialite/libspatialite.inc new file mode 100644 index 000..f51b3a5 --- /dev/null +++ b/meta-oe/recipes-navigation/libspatialite/libspatialite.inc @@ -0,0 +1,16 @@ +DESCRIPTION = Library extending the SQLite core to support fully fledged Spatial SQL capabilities +HOMEPAGE = https://www.gaia-gis.it/fossil/libspatialite/; +SECTION = libs +DEPENDS = proj geos + +INC_PR = r0 + +LICENSE = MPLv1.1 GPLv2+ LGPLv2.1+ +LIC_FILES_CHKSUM = file://COPYING;md5=0e92e1a36cc384b60f5b31dde0bdd39e + +SRC_URI = http://www.gaia-gis.it/gaia-sins/libspatialite-sources/libspatialite-${PV}.tar.gz; + +inherit autotools pkgconfig + +EXTRA_OECONF = --enable-freexl=no + diff --git a/meta-oe/recipes-navigation/libspatialite/libspatialite/fix-the-configure-script-and-freexl.patch b/meta-oe/recipes-navigation/libspatialite/libspatialite/fix-the-configure-script-and-freexl.patch new file mode 100644 index 000..0cd0c3f --- /dev/null +++ b/meta-oe/recipes-navigation/libspatialite/libspatialite/fix-the-configure-script-and-freexl.patch @@ -0,0 +1,200 @@ +From upstream fossil repo, extracted via git, dropping configure.ac for amalgamation + +From: sandro sandro +Date: Sat, 21 Jan 2012 16:53:28 + +Subject: [PATCH] fixing the ./configure script: --enable-geocallbacks=no is + the new default and fixing some flaws for + --enable-freexl=no + +--- + configure | 20 ++-- + configure.ac| 20 ++-- + src/shapefiles/shapefiles.c |2 ++ + 4 files changed, 32 insertions(+), 30 deletions(-) + +diff --git a/configure b/configure +index e8cf620..917bfca 100755 +--- a/configure b/configure +@@ -1410,7 +1410,7 @@ Optional Features: + optimize for fast installation [default=yes] + --disable-libtool-lock avoid locking (might break parallel builds) + --enable-mathsqlenables SQL math functions [default=yes] +- --enable-geocallbacks enables geometry callbacks [default=yes] ++ --enable-geocallbacks enables geometry callbacks [default=no] + --enable-proj enables PROJ.4 inclusion [default=yes] + --enable-geos enables GEOS inclusion [default=yes] + --enable-geosadvanced enables GEOS advanced features [default=yes] +@@ -16980,7 +16980,7 @@ ac_config_files=$ac_config_files Makefile src/Makefile src/headers/Makefile src + if test ${enable_mathsql+set} = set; then : + enableval=$enable_mathsql; + else +- mathsql=yes ++ enable_mathsql=yes + fi + + if test x$enable_mathsql != xno; then +@@ -16998,10 +16998,10 @@ fi + if test ${enable_geocallbacks+set} = set; then : + enableval=$enable_geocallbacks; + else +- geocallbacks=yes ++ enable_geocallbacks=no + fi + +-if test x$enable_geocallbacks != xno; then ++if test x$enable_geocallbacks == xyes; then + OMIT_GEOCALLBACKS_FLAGS= + { $as_echo $as_me:${as_lineno-$LINENO}: checking for sqlite3_rtree_geometry_callback in -lsqlite3 5 + $as_echo_n checking for sqlite3_rtree_geometry_callback in -lsqlite3... 6; } +@@ -17063,7 +17063,7 @@ fi + if test ${enable_proj+set} = set; then : + enableval=$enable_proj; + else +- proj=yes ++ enable_proj=yes + fi + + if test x$enable_proj != xno; then +@@ -17153,7 +17153,7 @@ fi + if test ${enable_geos+set} = set; then : + enableval=$enable_geos; + else +- geos=yes ++ enable_geos=yes + fi + + if test x$enable_geos != xno; then +@@ -17237,7 +17237,7 @@ fi + if test ${enable_geosadvanced+set} = set; then : + enableval=$enable_geosadvanced; + else +- geosadvanced=yes ++ enable_geosadvanced=yes + fi + + if test x$enable_geosadvanced != xno; then +@@ -17316,7 +17316,7 @@ fi + if test ${enable_iconv+set} = set; then : + enableval=$enable_iconv; + else +- geos=yes ++ enable_iconv=yes + fi + + if test x$enable_iconv != xno; then +@@ -17579,7 +17579,7 @@ fi + if test ${enable_freexl+set} = set; then : + enableval=$enable_freexl; + else +- proj=yes ++ enable_freexl=yes + fi + + if test x$enable_freexl != xno; then +@@ -17669,7 +17669,7 @@ fi + if test ${enable_epsg+set} = set; then : + enableval=$enable_epsg; + else +- epsg=yes ++ enable_epsg=yes + fi + + if test x$enable_epsg != xno; then +diff --git a/configure.ac b/configure.ac +index 216cc9f..69cb6c5 100644 +--- a/configure.ac b/configure.ac +@@ -79,7 +79,7