| Message ID | 20261111140047.70020-1-adarsh.jagadish.kamini@est.tech |
|---|---|
| State | Rejected |
| Headers | show |
| Series | dev-manual/packages.rst: document gpg-agent configuration for parallel signing | expand |
Thank you for your submission. Patchtest identified one or more issues with the patch. Please see the log below for more information: --- Testing patch /home/patchtest/share/mboxes/dev-manual-packages.rst-document-gpg-agent-configuration-for-parallel-signing.patch FAIL: test target mailing list: Series sent to the wrong mailing list or some patches from the series correspond to different mailing lists (test_mbox.TestMbox.test_target_mailing_list) PASS: test Signed-off-by presence (test_mbox.TestMbox.test_signed_off_by_presence) PASS: test auh changelog truncation notice (test_mbox.TestMbox.test_auh_changelog_truncation_notice) PASS: test author valid (test_mbox.TestMbox.test_author_valid) PASS: test bugzilla entry format (test_mbox.TestMbox.test_bugzilla_entry_format) PASS: test commit message presence (test_mbox.TestMbox.test_commit_message_presence) PASS: test commit message user tags (test_mbox.TestMbox.test_commit_message_user_tags) PASS: test max line length (test_metadata.TestMetadata.test_max_line_length) PASS: test mbox format (test_mbox.TestMbox.test_mbox_format) PASS: test non-AUH upgrade (test_mbox.TestMbox.test_non_auh_upgrade) PASS: test shortlog format (test_mbox.TestMbox.test_shortlog_format) PASS: test shortlog length (test_mbox.TestMbox.test_shortlog_length) SKIP: pretest pylint: No python related patches, skipping test (test_python_pylint.PyLint.pretest_pylint) SKIP: pretest src uri left files: Patch cannot be merged (test_metadata.TestMetadata.pretest_src_uri_left_files) SKIP: test CVE check ignore: No modified recipes or older target branch, skipping test (test_metadata.TestMetadata.test_cve_check_ignore) SKIP: test CVE tag format: No new source patches introduced (test_patch.TestPatch.test_cve_tag_format) SKIP: test Signed-off-by presence: No new source patches introduced (test_patch.TestPatch.test_signed_off_by_presence) SKIP: test Upstream-Status presence: No new source patches introduced (test_patch.TestPatch.test_upstream_status_presence_format) SKIP: test lic files chksum modified not mentioned: No modified recipes, skipping test (test_metadata.TestMetadata.test_lic_files_chksum_modified_not_mentioned) SKIP: test lic files chksum presence: No added recipes, skipping test (test_metadata.TestMetadata.test_lic_files_chksum_presence) SKIP: test license presence: No added recipes, skipping test (test_metadata.TestMetadata.test_license_presence) SKIP: test pylint: No python related patches, skipping test (test_python_pylint.PyLint.test_pylint) SKIP: test series merge on head: Merge test is disabled for now (test_mbox.TestMbox.test_series_merge_on_head) SKIP: test src uri left files: Patch cannot be merged (test_metadata.TestMetadata.test_src_uri_left_files) SKIP: test summary presence: No added recipes, skipping test (test_metadata.TestMetadata.test_summary_presence) --- Please address the issues identified and submit a new revision of the patch, or alternatively, reply to this email with an explanation of why the patch should be accepted. If you believe these results are due to an error in patchtest, please submit a bug at https://bugzilla.yoctoproject.org/ (use the 'Patchtest' category under 'Yocto Project Subprojects'). For more information on specific failures, see: https://wiki.yoctoproject.org/wiki/Patchtest. Thank you!
diff --git a/documentation/dev-manual/packages.rst b/documentation/dev-manual/packages.rst index 380d806be..f05ade8b4 100644 --- a/documentation/dev-manual/packages.rst +++ b/documentation/dev-manual/packages.rst @@ -905,6 +905,26 @@ related to signed package feeds are available: "ASC", which is the default and specifies ascii armored, and "BIN", which specifies binary. +Configuring the GnuPG Agent +--------------------------- + +Parallel signing can exhaust ``gpg-agent``'s secure memory, causing +"Cannot allocate memory" errors. Add the following to ``gpg-agent.conf`` +in the GnuPG home directory used for signing (``GPG_PATH`` if set, or +GnuPG's default home directory, normally ``~/.gnupg``):: + + auto-expand-secmem + +The OpenEmbedded build system does not set this option. Stop any running +agent for that directory so the next signing operation starts it with +the new configuration: + +.. code-block:: console + + $ gpgconf --homedir /path/to/gpg/home --kill gpg-agent + +Omit ``--homedir /path/to/gpg/home`` to use GnuPG's default home directory. + Testing Packages With ptest ===========================
OE-Core no longer passes auto-expand-secmem through --agent-program. Document how to enable it in gpg-agent.conf and restart the agent to avoid secure-memory exhaustion during parallel signing. [YOCTO #16480] AI-Generated: Uses Kiro (claude-opus-5.5) Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech> --- documentation/dev-manual/packages.rst | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+)