Change bb.error to bb.parse.SkipRecipe so the recipe is skipped at parse
time for unsupported architectures, rather than raising a fatal error
that breaks parsing even when the recipe is not in use.
Signed-off-by: Kory Maincent <kory.maincent@bootlin.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The relax-build-requirements patch capped wheel at <0.48.0, which
excludes exactly the wheel 0.48.0 that oe-core now ships, so do_compile
fails its build-requirement check:
ERROR Unmet dependencies ... wheel<0.48.0,>=0.37.1 found: 0.48.0
Drop the wheel upper cap entirely, mirroring the setuptools change
already in this patch: OE provides wheel via DEPENDS and builds with
--no-isolation, so the cap is spurious.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upstream ships its test suite under tests/ (plural), but the recipe
overrode PTEST_PYTEST_DIR to "test" (singular), which doesn't exist in
the source tree. ptest-python-pytest.bbclass's default is already
"tests"; drop the override so the real directory gets installed and
run instead of nothing.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
gevent.monkey.patch_all() internally does "import multiprocessing"
during _gevent_did_monkey_patch (gevent/subprocess.py); without
python3-multiprocessing installed this raises ModuleNotFoundError,
crashing any gunicorn gevent-worker boot. Explains both the direct
import-order test failures and the ConnectionResetError seen in the
control-socket integration tests, since the worker process crashes
mid-boot in both cases.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
python3-misc for timeit, python3-statistics for statistics, both used
by pytest-benchmark's storage/stats machinery.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
tests/test_core.py does GlancesMain(args_begin_at=2) at module import
time, slicing the real process sys.argv. Passing --automake on the
pytest command line (rather than via PYTEST_ADDOPTS) shifted that
slice and broke it; set it via PYTEST_ADDOPTS instead.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Copy docs_src into the ptest tree since scripts/tests import
docs_src.*. Remove the two settings examples that require
python3-pydantic-settings, which meta-openembedded doesn't package.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
test_SigningKey_from_pem_pkcs8v2_EdDSA embeds its PEM fixture as an
indented triple-quoted string, but der.unpem() only recognizes
"-----BEGIN/END-----" markers with no leading whitespace; the indented
END marker gets swallowed into the base64 payload instead of being
stripped, so it fails with "Incorrect padding" regardless of
environment. Upstream test-authoring bug in 0.19.2, not a packaging
issue.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
setuptools3.bbclass and python_setuptools_build_meta.bbclass no longer
add python3-wheel-native to DEPENDS by default, following oe-core
commit e546c697b7 ("classes/setuptools3: remove wheel dependency"),
since setuptools >= 70.1.0 no longer needs the external wheel package
to build a wheel.
This recipe's pyproject.toml/setup.py still declares wheel as a build
requirement, so pyproject-build's --no-isolation dependency check now
fails:
ERROR Unmet dependencies (checked against .../recipe-sysroot-native/usr/bin/nativepython3):
wheel
wanted: any
found: not installed
Add python3-wheel-native to DEPENDS directly to satisfy it.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The current mctp recipe relies on the upstream's conditional build and
install of the mctpd binary if systemd is present, only building the
mctp utility otherwise. Future upstream changes allowing running as
non-root require more control over the build process. We will need to
add a new system user when mctpd is built.
Adding a user requires inheriting useradd, which assumes at least one
user will be created, failing the recipe otherwise. Building without
mctpd would then cause the recipe to fail as conditionally inheriting
useradd seems infeasible.
To make useradd available for the new upstream release, split the recipe
into "mctp" for the utilities and "mctpd" for the daemon, isolating the
systemd dependency to "mctpd".
This makes the two parts of the source explicitly selectable from user
choice, rather than auto-detecting based on the presence of systemd.
This will allow the mctpd daemon to be installed without the mctp
utilities and allow the utilities to be installed without the daemon in
distros without systemd. It will also let us express the useradd rules
only when they're needed for the mctpd installation in the upcoming
version bump.
The mctp/mctpd split cannot be done with different packages within the
same recipe. It would require the systemd and useradd classes be added
to inherit_defer only when mctpd is to be built, and the library
functions cannot be used to detect which packages are built.
Signed-off-by: James Lee james@codeconstruct.com.au
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_install ran make with -e, which gives the environment precedence over
the makefile's own assignments. Every CPPFLAGS and CFLAGS use in the
makefile is +=, seeded from the environment, so -e discarded all of the
makefile's additions: the CPPFLAGS += defining PACKAGE, PACKAGE_BUGREPORT
and VERSION, the conditional -DNLS, -pipe and $(WARNINGS). utils/info.c
and utils/set.c then failed to build with "'PACKAGE' undeclared" while
relinking cpufreq-info and cpufreq-set, which install: pulls in via all:.
Dropping -e also makes do_install and do_compile agree on flags, where
the install-time relink previously produced binaries built differently
from the ones do_compile had made.
-e predates 0001-dont-unset-cflags.patch, back when the makefile assigned
CC/LD/AR/STRIP/RANLIB absolutely and -e was the only way to override them.
That patch is dropped here in favour of setting CC on the make command
line, which outranks a makefile assignment without needing a patch at all.
CC is the only one of those variables the makefile ever references: LD, AR
and RANLIB are assigned but never used, and STRIP only feeds STRIPCMD,
which the recipe already overrides. The patch had carried
Upstream-Status: Pending since 2012 against a project whose last commit
was in 2011.
NLS becomes a PACKAGECONFIG rather than an inline USE_NLS expression so it
can be set per-recipe, defaulting from USE_NLS so existing behaviour is
unchanged. gettext-native is named explicitly because gettext.bbclass
substitutes gettext-minimal-native when USE_NLS is no, and that has no
xgettext/msgmerge for the update-gmo target this enables. The gettext
inherit becomes conditional on the same PACKAGECONFIG, deferred because it
reads a value that does not exist yet at that point in the parse.
AI-Generated: Claude Opus 5 (Claude Code)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
SRC_URI pointed at github.com/emagii/cpufrequtils. The canonical upstream
repository is still live and its master HEAD is exactly the SRCREV pinned
here, a2f0c39d, so the source is unchanged. The kernel.org URL was already
in the recipe, commented out and malformed (unterminated quote). Both git://
and https:// serve it today, so there was no technical reason for the
mirror; https is used per the usual preference.
The pinned revision is 8 commits past the 008 release that the tarball at
kernel.org/pub/linux/utils/kernel/cpufreq/ contains - removal of the /proc
interface, Catalan translations, MAX_LINE_LEN, two x86 aperf fixes, and the
"make NLS optional" commit that introduces the NLS switch this recipe
relies on. PV gains +git so it stops claiming to be the 2010 release.
Shell function bodies are reindented to tabs. No functional change.
AI-Generated: Claude Opus 5 (Claude Code)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
GNUmakefile hardcodes its own CFLAGS= assignment (patched by
0001-Build-so-lib.patch to add -fPIC for the shared-lib build). As a
plain makefile variable, that assignment overrides the CFLAGS bitbake
exports into the build environment -- including the -ffile-prefix-map
flags from DEBUG_PREFIX_MAP. Without those, -g debug info in the
compiled snowball/stemwords/libstemmer.so binaries embeds the absolute
build-tree path, tripping the buildpaths QA check on the -dbg package:
ERROR: libstemmer-3.1.1-r0 do_package_qa: QA Issue: File
/usr/bin/.debug/snowball in package libstemmer-dbg contains
reference to TMPDIR [buildpaths]
Pass CFLAGS via EXTRA_OEMAKE instead, which oe_runmake places on the
make command line and therefore does take precedence over the
makefile's own CFLAGS= assignment.
Verified via cleansstate rebuild: log.do_package_qa no longer contains
any buildpaths warnings, and `strings` on the rebuilt snowball debug
binary no longer contains any build/tmp/work host paths.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
glib-mkenums records the "enumerations from" comment using the
input file's full path (@filename@), embedding the build host's
TMPDIR/HOME path into the installed gladeui-enum-types.c/.h and
tripping the buildpaths QA check:
WARNING: glade-3.40.0-r0 do_package_qa: QA Issue: File
/usr/src/debug/glade/3.40.0/gladeui/gladeui-enum-types.c in
package glade-src contains reference to TMPDIR [buildpaths]
Switch both mkenums templates to @basename@ (supported since glib
2.22), the same fix already used for the analogous gcab-enums
issue. Verified with a clean rebuild: do_package_qa now reports no
buildpaths warnings for glade.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
restinio 0.7.x is a major architectural change from 0.6.x: the release
tarball no longer bundles any of its third-party dependencies
(http_parser, expected-lite, fmt, catch2, sobjectizer). They must now
be supplied externally and resolved through find_package()/system
linkage. This requires two new supporting recipes added in prior
commits: llhttp (replacement for the now-dropped http_parser) and
expected-lite (nonstd::expected backport, now required unconditionally
instead of restinio's old embedded fallback). asio, fmt and catch2
dependencies are already satisfied by existing recipes in the tree.
Recipe changes:
- Release tag format changed from "v.X.Y.Z" to "vX.Y.Z"; update
SRC_URI and SRC_URI[sha256sum] accordingly.
- LIC_FILES_CHKSUM md5 updated for the new tarball's root LICENSE file.
- DEPENDS: drop http-parser, add llhttp and expected-lite.
- EXTRA_OECMAKE: RESTINIO_FIND_DEPS and RESTINIO_USE_EXTERNAL_HTTP_PARSER
were removed upstream. RESTINIO_BENCH renamed to RESTINIO_BENCHMARK,
RESTINIO_ALLOW_SOBJECTIZER renamed to RESTINIO_WITH_SOBJECTIZER (kept
disabled). Added RESTINIO_DEP_STANDALONE_ASIO=find,
RESTINIO_DEP_FMT=find and RESTINIO_DEP_EXPECTED_LITE=find so restinio's
CMakeLists.txt resolves these via find_package() instead of trying to
add_subdirectory() vendored sources that no longer exist in the
tarball. RESTINIO_DEP_LLHTTP=system is used instead of "find" because
llhttp's own CMakeLists.txt only exports an "llhttp::llhttp_shared"
imported target (llhttp::llhttp is just a build-tree ALIAS, never
installed/exported), which restinio's dependency-resolution logic
does not recognize as a valid find_package() target name.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
restinio 0.7.x drops its bundled nonstd::expected backport and
instead requires expected-lite to be supplied externally via
find_package(). Add a new recipe pinned to v0.8.0, the exact
version restinio 0.7.9.1 pins in its externals.rb manifest.
Modeled on the existing span-lite recipe (same author/ecosystem,
same LICENSE.txt boilerplate).
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
restinio 0.7.x drops its bundled http_parser and instead requires
llhttp to be supplied externally via find_package().
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Stay within the 4.23.x stable series (do not touch the sibling
talloc/tdb/tevent/ldb recipes). This picks up two intervening point
releases:
- 4.23.9: bug-fix release (use-after-free in ACL claims/conditions
handling, CTDB read-only record use-after-free/resource leak, RODC
auth fixes, among others).
- 4.23.10: security release fixing CVE-2026-6949 (TSIG/DNS OOB write
crash), CVE-2026-58216 (KDC kpasswd OOB read crash),
CVE-2026-58218 (DNS TKEY cache-flood DoS), CVE-2026-58221 (LDAP
privilege escalation via internal LDB special DNs),
CVE-2026-58222 (LDAP Compare filter used as protected-attribute
disclosure oracle) and CVE-2026-58224 (CTDB protocol
bounds-checking gaps).
- 4.23.11: further bug fixes (DRS memory leak, pthreadpool fork race,
RODC/NTLMv2 trust fixes, CephFS vfs crashes).
All 13 existing patches (including the musl-only pam/getpwent_r ones)
still apply cleanly against 4.23.11 with offset only, no fuzz, so none
needed to be reworked or dropped. LIC_FILES_CHKSUM for COPYING is
unchanged.
Build-verified with cleansstate + full build for qemux86-64.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Bump to the latest snort3 release. Drop
0001-Fix-build-on-c23.patch: the once_flag/call_once C23 name-collision
fix it carried (submitted upstream as snort3 PR #431) is now merged
verbatim upstream (src/loggers/alert_fast.cc already uses
std::once_flag/std::call_once as of this tag), and the patch fails to
apply (reversed/already-applied) against 3.12.2.0.
Keep 0001-cmake-Check-for-HP-libunwind.patch (applies cleanly) and
0001-cmake-Pass-noline-flag-to-flex.patch (applies with offset only,
no fuzz) unchanged.
The ~180 commits between the old and new SRCREV include several
crash/security fixes (use-after-free, heap-buffer-overflow,
null-deref) that are picked up naturally by this version bump.
Build-verified with cleansstate + full build for qemux86-64.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Bump to the 4.6.0 release tarball. As of 4.6.0 upstream introduces
CMake as the recommended build system, but the release tarball still
ships the Autotools build files (configure/Makefile.am) and Autotools
remains fully supported for building from release tarballs (only
deprecated for eventual removal in a future release), so the existing
autotools-brokensep-based recipe continues to work unchanged.
0001-libopts.m4-set-POSIX_SHELL-to-bin-sh.patch kept unchanged, still
needed, applies cleanly.
Build-verified: tcpreplay builds and packages successfully (existing
buildpaths QA warnings for libtcpreplay.pc/defines.h are pre-existing
and expected, WARN not ERROR on this distro).
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Bump to the upstream 2.66 orig tarball (now .orig.tar.gz instead of
.orig.tar.bz2) from Debian.
- ssmtp-bug584162-fix.patch dropped: the fix (dropping trailing '\r'
in standardise() and the header_parse() EOF/empty-header handling)
is already present verbatim in the 2.66 source.
- 0001-ssmtp-Correct-the-null-pointer-assignment-to-char-po.patch
dropped: upstream already initializes all the char pointers with
NULL instead of (char)NULL.
- 0001-Fix-incompatible-pointer-types-error-with-gcc-15.patch
rebased: the call site already casts to (sighandler_t)handler in
2.66, so only the handler() signature hunk is still needed; the
call-site hunk was dropped as it no longer applies and is
unnecessary once the signature takes an int.
- use-DESTDIR.patch rebased: upstream 2.66 already appends $(LDFLAGS)
in the ssmtp link rule, so that hunk was dropped; the DESTDIR
hunks for install/uninstall are still needed and were regenerated
against the new Makefile.in.
- build-ouside_srcdir.patch and 0001-include-libgen.h-for-basename.patch
kept unchanged, still needed, apply cleanly.
Build-verified: ssmtp builds and packages successfully.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Bump to the v2.7.0 tag. Rebase the ptest ICMPv6 skip patch: upstream
added a "needs_root" tag to the "Sending and receiving an
ICMPv6EchoRequest" test's tag line in test/regression.uts, so the
"skipped_ptest" tag now needs to be appended after "needs_root"
rather than replacing the whole line. With this rebase both hunks
apply with offset only (no fuzz).
Build-verified: python3-scapy builds and packages (including
-ptest) successfully.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Drop 0001-Shim-for-renaming-of-GNUTLS_NO_EXTENSIONS-in-GnuTLS-.patch:
it was a workaround for GnuTLS >= 3.8.1 renaming GNUTLS_NO_EXTENSIONS
before a compatibility shim landed upstream; that compatibility shim
is long merged and this openconnect release range no longer needs
the local re-definition (build succeeds without it).
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Bump to the nm-1-58 stable branch. CVE-2026-10805 and the DHCPv4
out-of-bounds read fix are both already included in the 1.58.0 tag
(verified via git merge-base --is-ancestor against upstream), so no
backport patch is required.
- 0002-meson-fix-cross-compilation-issues.patch dropped: merged
upstream verbatim as commit e5d2c7c by the same author, and is an
ancestor of the 1.58.0 tag.
- 0001-linker-scripts-Do-not-export-_IO_stdin_used.patch kept, still
needed, applies with offset only.
- dhclient support was removed upstream (all: drop dhclient code and
build configuration); drop PACKAGECONFIG[dhclient] and update the
NETWORKMANAGER_DHCP_DEFAULT comment accordingly.
- Wireless Extensions (wext) meson option is deprecated and now
errors on -Dwext=true; drop it from PACKAGECONFIG[wifi], keeping
only -Dwifi.
- New CLAT feature defaults to enabled in meson_options.txt and pulls
in libbpf >= 1.3.0; add PACKAGECONFIG[clat] but leave it out of the
default PACKAGECONFIG set so it stays disabled and avoids a new
hard dependency.
- Package the new nm-initrd-generator.sh systemd generator directory
under ${PN}-daemon and make bash an unconditional RDEPENDS since
the generator script requires it regardless of the ifupdown
PACKAGECONFIG setting.
Build-verified: networkmanager and its openvpn/openconnect/
fortisslvpn plugin recipes all build successfully.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Update the Debian-snapshot SRC_URI to snapshot.debian.org's 1.238-1
timestamp (20260519T203124Z). LIC_FILES_CHKSUM is refreshed since
debian/copyright's md5 changed (license text/terms unchanged,
BSD-3-Clause).
0001-fix-netcat-openbsd-ftbfs-with-GCC-15.patch is dropped: Debian's
own quilt-patches/quit-timer.patch (applied before our OE patches via
netcat_do_patch) already changes quit() to take an int sig argument in
1.238-1, making our GCC-15 fix fully redundant.
0001-bundle-own-base64-encode-decode-functions.patch is kept (still
needed, no libc-provided b64_ntop/b64_pton) but rebased: the Makefile
hunk's context line changed from "LIBS=" to "LIBS ?=" and the netcat.c
hunk's context line changed from "static void quit();" to
"static void quit(int sig);" following the quit-timer.patch rebase
upstream; both are updated to apply without fuzz.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
0001-configure.ac-Do-not-emit-compiler-flags-into-object-.patch still
applies cleanly and is still needed: upstream 2.4.3's configure.ac
still adds -grecord-gcc-switches unconditionally under
enable_hardening, which embeds absolute sysroot paths into object
files and breaks reproducibility.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Kory Maincent
Jaipaul Cheernam
Khem Raj
Khem Raj
James Lee
Trevor Gamblin
Eilís Ní Fhlannagáin
Alex Kiernan