diff mbox series

[wrynose,14/28] sbom-cve-check-update-db: Exclude recipes from rm_work

Message ID 480c6440f3947ef6deb6d1a00ae3aa46f1e74571.1790494949.git.yoann.congal@smile.fr
State New
Headers show
Series [wrynose,01/28] go: upgrade 1.26.7 -> 1.26.8 | expand

Commit Message

Yoann Congal Sept. 27, 2026, 7:43 a.m. UTC 
From: Benjamin Robin <benjamin.robin@bootlin.com>

If the "rm_work" task runs on these recipes, the next execution of the
do_sbom_cve_check task would force the CVE databases to be extracted
again. Excluding the recipes from "rm_work" allows the build system to
remember that the unpack and patch tasks were already executed, so
it does not run them a second time. Extracting the CVE databases is
slow, and it also removes the database "index", which sbom-cve-check
has to regenerate — an even slower step.

Keeping WORKDIR around is cheap: for the recipes downloading the CVE
databases, it stays below 400 kB (not counting the "temp" directory,
which rm_work leaves in place anyway).

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(From OE-Core rev: 3b81e8bc30552359125f2ca40f36ad11ce8ee969)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 .../recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc
index fbdc561e8c6..2efc080b932 100644
--- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc
+++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc
@@ -2,6 +2,7 @@ 
 
 INHIBIT_DEFAULT_DEPS = "1"
 EXCLUDE_FROM_WORLD = "1"
+RM_WORK_EXCLUDE += "${PN}"
 
 inherit native
 require conf/sbom-cve-check-config.inc