Upgrade to release 8.0.0:
- Remove Python 3.8 - 3.10 support
- Fix parameter name in documentation
- Switch from poetry to uv
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Apply minor improvements:
- Do not explicitly set PV
- Use oe.utils.trim_version('${PV}', 2) in the SRC_URI
This work was sponsored by GOVCERT.LU.
Suggested-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
kmscon only counted a GPU as primary when its PCI parent had boot_vga
set, so with gpus=primary it ignored vc4 on the Raspberry Pi 4 and never
showed a terminal. Treat DRM devices on the platform bus as primary,
except for the firmware framebuffer drivers. Tested on a Raspberry Pi 4
booting through EDK2.
AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Preserve existing CMAKE_CXX_FLAGS in the cross-compilation patch so
Yocto's -ffile-prefix-map flags are not discarded, fixing the
do_package_qa buildpaths check. Replace the custom do_install with
do_install:append that only fixes the SONAME symlink layout, letting
cmake_do_install handle the standard installation. Drop the
now-unnecessary INSANE_SKIP:buildpaths overrides.
Signed-off-by: Varun Singhal <varusing@qti.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Reference Python Varlink binding. Fetched from git as 32.1.0 was never
published to PyPI (latest there is 31.0.0 from 2021).
AI-Generated: Claude Opus 5 (Claude Code)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
asyncio Varlink binding with file-descriptor passing; interfaces are
derived from annotated Python classes.
AI-Generated: Claude Opus 5 (Claude Code)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
- ctypes.util.find_library() relies on "ldconfig -p", gcc or ld, none of
which exist on a musl target, so find_library("pcap") returns None
and scapy raises "Cannot find libpcap.so library" even with libpcap
installed. That disabled conf.use_pcap and BPF filter compilation and
failed ten ptests (offline sniff() with filters, tcpdump(), tdecode(),
traceroute). Fall back to loading libpcap.so.1/libpcap.so by name.
- The NetBSD read_routes6() test compares IPv4-compatible IPv6 prefixes
as strings, but musl's inet_ntop() prints ::127.0.0.0 as ::7f00:0.
Normalise the expected values with in6_ptop().
Tested with meta-networking-image-ptest-python3-scapy on qemux86-64
with yoe-musl-systemd-wayland: TOTAL: 1 FAIL: 0.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Three func_tests failed on musl:
- test_1_to_1_sendmsg and test_1_to_1_recvmsg died with SIGSEGV. They
pass (struct msghdr *)-1 and expect EFAULT, but on 64-bit musl the
sendmsg()/recvmsg() wrappers copy the msghdr to clear its padding
before making the syscall. Issue those two calls with syscall(2) so
they test the kernel's handling of the bad pointer.
- test_connectx reported "Association id mismatch: connectx returned 3,
notification returned:240". libsctp exports an unversioned
sctp_connectx alias of the original API next to the VERS_1..VERS_3
versions. musl's dynamic linker does not implement symbol versioning
and binds that alias, so every sctp_connectx() call on musl ran the old
API, which never returns the association id. The alias only serves
binaries linked before libsctp was versioned, so only emit it on
glibc; sctp_connectx@@VERS_3 is then the one musl resolves.
Tested with meta-networking-image-ptest-lksctp-tools on qemux86-64 with
yoe-musl-systemd-wayland: TOTAL: 1 FAIL: 0.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
signing_extract_cert_der() and signing_extract_cert_pem() read the
certificate off the token with 'extract-cert <pkcs11-uri>'. extract-cert
reaches a pkcs11 token through the OpenSSL ENGINE API, which OpenSSL 4.0
removed; meta-oe's own extract-cert now errors "PKCS#11 URIs require
OpenSSL < 4.0" on such input. Both exporters are therefore broken on
OpenSSL 4.
signing_prepare() already configures the pkcs11 provider (OPENSSL_MODULES
plus a provider openssl.cnf), so read the certificate through it with
'openssl storeutl -certs' instead. The class is provider-based on both
OpenSSL 3 and 4, so this needs no version branching. Make _pem the
primitive (storeutl emits PEM) and derive _der from it.
storeutl -certs writes every certificate the URI matches; a signing role
URI is expected to pin a single object, and _der keeps the first cert
should more than one come back.
The class no longer invokes extract-cert; drop it from DEPENDS.
Assisted-by: Claude:claude-opus-4-8
Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
signing_prepare() signs via the pkcs11 provider only: it writes a provider
openssl.cnf and uses OSSL_STORE for native provider access. Nothing invokes
the OpenSSL ENGINE API (no -engine), so the OPENSSL_ENGINES export and the
engines-3 directory check are dead code. The check even hard-fails
(return 1) when engines-3 is absent, which OpenSSL 4.0 no longer ships
(ENGINE API removed) - breaking signing outright although the provider path
is fine. Remove the engine export and the check.
Assisted-by: Claude:claude-opus-4-8
Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The previewer imports GstTag through GObject introspection. Its typelib is
shipped in gstreamer1.0-plugins-base, and without that package
org.gnome.NautilusPreviewer exits at startup with "Typelib file for
namespace 'GstTag', version '1.0' not found".
AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The 0.5.6 source tarball on PyPI now uses the PEP 625 name
python_gnupg-0.5.6.tar.gz.
- Set PYPI_PACKAGE to "python_gnupg"
- Set S explicitly, since the archive still unpacks to
python-gnupg-${PV}
- Set CVE_PRODUCT to "python:python-gnupg" so CVE matching still
works after the PYPI_PACKAGE change
Changelog:
https://github.com/vsajip/python-gnupg/releases/tag/0.5.6
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
test/test1.cf sets "reinitcheck 1s", added upstream only to exercise
the seconds unit. A reinit check brings back every console that is down,
including one taken down on purpose, so test #5, which expects the
console that test #4 downed ("cd") to still be down, has about a second
to attach and query it. On a loaded host, e.g. while testimage runs
several VMs, it loses:
FAIL: conserver #5 (diffs in test5.diff)
-[`shell' -- console is down]
conserver.log shows "[shell] automatic reinitialization" between the
two tests. Reproduced with 2 failures in 20 runs in qemux86-64 with the
host CPUs saturated; instrumenting group.c confirmed the reinit comes
from ReUp(pGE, 2), the reinitcheck timer.
Use "reinitcheck 60s" in the test config, so the seconds unit is still
parsed but the check cannot fire during the ~10 s test run. 40 of 40
runs passed under the same load.
Tested with meta-oe-image-ptest-conserver on qemux86-64 with
yoe-musl-systemd-wayland.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
conserver only needs crypt(). Depending on libxcrypt directly pulls it
in even on musl, whose libc already provides crypt(). Use virtual/crypt
so the libc's preferred provider is used: libxcrypt on glibc, musl
itself on musl.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
- C++14 is now required (was optional C++11).
- test.sh gained a trace check driven by new tests/*.trace files; install
them with the ptest data so it runs.
- Only pull in glibc-gconv-iso8859-* for glibc. They do not exist on
musl, whose iconv has the ISO-8859 conversions built in, so the ptest
package could not be installed there.
Changelog: https://github.com/hunspell/hunspell/compare/v1.7.3...v1.7.4
Tested with meta-oe-image-ptest-hunspell on qemux86-64 with
yoe-musl-systemd-wayland: 170 PASS, 0 FAIL. hunspell-native builds.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add python3-crypt to RDEPENDS: the library now imports hashlib
(_identity.py, pulled in by "import filelock" through the soft and
strict locks).
Changelog: https://github.com/tox-dev/filelock/blob/4.0.4/docs/changelog.rst
4.0.4
- Hostnames differing only past their first 253 escaped characters now
publish distinct soft-lock owners.
4.0.3
- Skip the fork-safety audit hook on CPython 3.10/3.11, where it broke
thread creation under coverage or a debugger.
4.0.2
- Fix OS lock leaks, double closes and false deadlocks from concurrent
acquire()/release() on thread_local=False locks.
- Async read-write locks give each asyncio task its own hold.
4.0.1
- Validate poll_interval at construction, on the setter and on acquire().
4.0.0 (breaking)
- SoftReadWriteLock uses a new on-disk generation-log protocol under
<path>.rw that earlier releases do not see; all participants on a lock
path must be upgraded together. It now requires os.link.
- SoftReadWriteLock exposes a generation fencing token, reports lost
holds through on_compromise, and no longer deadlocks when a holder on
another host dies mid-transition.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
test_close_all_fds closes the socket through the IOLoop's shadow socket
and then reads s.closed. pyzmq implements that by calling
zmq_getsockopt() on the handle, which libzmq's reaper thread may already
have freed. With glibc the memory stays mapped, libzmq's tag check fails
and ENOTSOCK comes back; musl's allocator can unmap it, so the ptest run
segfaults intermittently and loses every result after it:
File ".../tests/test_future.py", line 319 in test_close_all_fds
Segmentation fault (core dumped)
Closing a socket via a shadow and then querying .closed on the original
segfaults on musl every time in a standalone reproducer and survives on
glibc. Skip the test for musl.
Tested with meta-python-image-ptest-python3-pyzmq on qemux86-64 with
yoe-musl-systemd-wayland.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Leon Anavi
Markus Volk
Varun Singhal
Alex Kiernan
Khem Raj
Ankur Tyagi
Johannes Schneider
Tafil Avdyli