diff mbox series

[wrynose,2/5] sbom-cve-check-update-db: Exclude recipes from rm_work

Message ID 20260920191531.113024-2-peter.marko@siemens.com
State New
Headers show
Series [wrynose,1/5] sbom-cve-check-update-nvd-native,sbom-cve-check-update-cvelist-native: upgrade 2026.08.03-000011 -> 2026.08.25-000009 | expand

Commit Message

Peter Marko Sept. 20, 2026, 7:15 p.m. UTC 
From: Benjamin Robin <benjamin.robin@bootlin.com>

If the "rm_work" task runs on these recipes, the next execution of the
do_sbom_cve_check task would force the CVE databases to be extracted
again. Excluding the recipes from "rm_work" allows the build system to
remember that the unpack and patch tasks were already executed, so
it does not run them a second time. Extracting the CVE databases is
slow, and it also removes the database "index", which sbom-cve-check
has to regenerate — an even slower step.

Keeping WORKDIR around is cheap: for the recipes downloading the CVE
databases, it stays below 400 kB (not counting the "temp" directory,
which rm_work leaves in place anyway).

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(From OE-Core rev: 3b81e8bc30552359125f2ca40f36ad11ce8ee969)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 .../recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc
index fbdc561e8c..2efc080b93 100644
--- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc
+++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc
@@ -2,6 +2,7 @@ 
 
 INHIBIT_DEFAULT_DEPS = "1"
 EXCLUDE_FROM_WORLD = "1"
+RM_WORK_EXCLUDE += "${PN}"
 
 inherit native
 require conf/sbom-cve-check-config.inc