| Message ID | 20251215155424.237662-1-kamel.bouhara@bootlin.com |
|---|---|
| Headers | show |
| Series | Backport SPDX kernel config and PACKAGECONFIG metadata export | expand |
On Mon, Dec 15, 2025 at 10:54 AM Kamel Bouhara via lists.openembedded.org <kamel.bouhara=bootlin.com@lists.openembedded.org> wrote: > > Hello, > > This series backports upstream commits that add support for exporting kernel > configuration and PACKAGECONFIG features to SPDX 3.0 documents. > regardless of this being opt-in functionality, we should have extra justification for adding features to old releases (LTS or not). Apologies if I missed a discussion where this was already justified and approved, I just can't remember it. This is something that could actually sit in a layer, and not in core, for older releases. Bruce > Upstream commits: > - 228a968e7c47 ("kernel.bbclass: Add task to export kernel configuration to SPDX") > - 7ec61ac40345 ("spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX") > - 2f0ab110d752 ("oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and PACKAGECONFIG") > > Kamel Bouhara (Schneider Electric) (3): > kernel.bbclass: Add task to export kernel configuration to SPDX > spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX > oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and > PACKAGECONFIG > > meta/classes-recipe/kernel.bbclass | 64 ++++++++++++++++++++++++++++ > meta/classes/create-spdx-3.0.bbclass | 11 +++++ > meta/lib/oe/spdx30_tasks.py | 20 +++++++++ > meta/lib/oeqa/selftest/cases/spdx.py | 57 +++++++++++++++++++++++++ > 4 files changed, 152 insertions(+) > > -- > 2.43.0 > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#227743): https://lists.openembedded.org/g/openembedded-core/message/227743 > Mute This Topic: https://lists.openembedded.org/mt/116794215/1050810 > Group Owner: openembedded-core+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [bruce.ashfield@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=- >
On Mon, Dec 15, 2025 at 11:33:09AM -0500, Bruce Ashfield via lists.openembedded.org wrote: > On Mon, Dec 15, 2025 at 10:54 AM Kamel Bouhara via > lists.openembedded.org > <kamel.bouhara=bootlin.com@lists.openembedded.org> wrote: > > > > Hello, > > > > This series backports upstream commits that add support for exporting kernel > > configuration and PACKAGECONFIG features to SPDX 3.0 documents. > > > Hi Bruce, > regardless of this being opt-in functionality, we should have extra > justification for > adding features to old releases (LTS or not). > > Apologies if I missed a discussion where this was already justified > and approved, > I just can't remember it. No worries the justification was discussed in the original upstream submission thread [1]. These patches address a real compliance and auditing need for tracking build-time configuration in SBOMs. Since Scarthgap is our LTS target for the next several years, having these features integrated rather than maintained as out-of-tree patches would significantly help our maintenance burden. > > This is something that could actually sit in a layer, and not in core, for older > releases. > That's certainly an option I'm happy to pursue if maintainers prefer. However, given that: - The features are fully opt-in (both default to "0") - They're already accepted in master - Scarthgap is LTS with active maintenance - The backport is clean with no modifications needed I believe they fit the criteria for LTS backports. Regards, Kamel [1]: https://lists.openembedded.org/g/openembedded-core/topic/114181881#msg220705 > Bruce > > > Upstream commits: > > - 228a968e7c47 ("kernel.bbclass: Add task to export kernel configuration to SPDX") > > - 7ec61ac40345 ("spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX") > > - 2f0ab110d752 ("oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and PACKAGECONFIG") > > > > Kamel Bouhara (Schneider Electric) (3): > > kernel.bbclass: Add task to export kernel configuration to SPDX > > spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX > > oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and > > PACKAGECONFIG > > > > meta/classes-recipe/kernel.bbclass | 64 ++++++++++++++++++++++++++++ > > meta/classes/create-spdx-3.0.bbclass | 11 +++++ > > meta/lib/oe/spdx30_tasks.py | 20 +++++++++ > > meta/lib/oeqa/selftest/cases/spdx.py | 57 +++++++++++++++++++++++++ > > 4 files changed, 152 insertions(+) > > > > -- > > 2.43.0 > > > > > > > > > > > -- > - Thou shalt not follow the NULL pointer, for chaos and madness await > thee at its end > - "Use the force Harry" - Gandalf, Star Trek II > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#227748): https://lists.openembedded.org/g/openembedded-core/message/227748 > Mute This Topic: https://lists.openembedded.org/mt/116794215/5236779 > Group Owner: openembedded-core+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [kamel.bouhara@bootlin.com] > -=-=-=-=-=-=-=-=-=-=-=- > -- Kamel Bouhara, Bootlin Embedded Linux and kernel engineering https://bootlin.com
Hello, This series backports upstream commits that add support for exporting kernel configuration and PACKAGECONFIG features to SPDX 3.0 documents. Upstream commits: - 228a968e7c47 ("kernel.bbclass: Add task to export kernel configuration to SPDX") - 7ec61ac40345 ("spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX") - 2f0ab110d752 ("oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and PACKAGECONFIG") Kamel Bouhara (Schneider Electric) (3): kernel.bbclass: Add task to export kernel configuration to SPDX spdx30_tasks: Add support for exporting PACKAGECONFIG to SPDX oeqa/selftest: oe-selftest: Add SPDX tests for kernel config and PACKAGECONFIG meta/classes-recipe/kernel.bbclass | 64 ++++++++++++++++++++++++++++ meta/classes/create-spdx-3.0.bbclass | 11 +++++ meta/lib/oe/spdx30_tasks.py | 20 +++++++++ meta/lib/oeqa/selftest/cases/spdx.py | 57 +++++++++++++++++++++++++ 4 files changed, 152 insertions(+) -- 2.43.0