From patchwork Mon Nov 10 10:23:47 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 74104 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3D780CCFA13 for ; Mon, 10 Nov 2025 10:24:13 +0000 (UTC) Received: from mail-pf1-f172.google.com (mail-pf1-f172.google.com [209.85.210.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.45220.1762770246422887124 for ; Mon, 10 Nov 2025 02:24:06 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=lpEFx390; spf=pass (domain: gmail.com, ip: 209.85.210.172, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f172.google.com with SMTP id d2e1a72fcca58-7af603c06easo2550603b3a.0 for ; Mon, 10 Nov 2025 02:24:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1762770246; x=1763375046; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=/pzM0rxTfKeztimDohHNAbEaPEv5b5bqd51A713Dr94=; b=lpEFx390igIb39s6cAKCoryCBzWTTuDC0bIn4nQ7RNmbBxeFMowca4e4EcuLGwB5s5 IyNQPj8dymaAo9Ny7a7tQ21gyVWV/Xaq4wA8WT0UlMfTEcRaMFwpNHQWf6S4iZHgy/Lz t9JcTVSjGuWnFvrOJrZoT4LvGitFaoOpFV0UwMzw3OZpbuh4Ch2rRyxYV/BUCX4TTtGS LYaneHVcUkwrsNYNbNeuf9pNurc6nT+4E8Z+MVVwERzf7c4FEhI/Jx04tEB+vhXxaDdK fLSrU/8eFiC/U0wWTkJM+esi8GxiBi2q4mmvPb8U0SqV0dzU1HccKtmv9S3tVmUIFykN Tncg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762770246; x=1763375046; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=/pzM0rxTfKeztimDohHNAbEaPEv5b5bqd51A713Dr94=; b=lNRcgDsujjej5mqapHMf4u0ix8xGPnoe2XS12VgSjcqwHAdOH13ZFzDK0cDpnNH7vR 1ZMX2/C3lHTXDlqkWuM38n/wHrL8Xdj6hnic4cyTQyRxkOog71HDAjD2AQ3vaz5dHkyv eCozUsIih56UuZ8wpg6FrD1/sZ65dFSZ3RNbrxDPdhVQ9pcLHl4VDhpOsRH0SabDbIYC c3hbaSIls4qX1m0FAfi7g8m/8OVh0I7bxg12CdZUOuVVSAl/ILmvSC72nAp2PydxpwUL tap00XanVi4+9UucaQXJIXaNjXc1NuUvTesXyqK9I8M2pXtHd17ZZTIdI3qNic2bueii Kslg== X-Gm-Message-State: AOJu0YyJyR5FimBKRe5BFeF+nG+/AG9BXxtwv6N8Fsk8KrU2tc7C1P// PUAa4NZgfNWj8R62FiV3cmeFWhIq2z4JEt1eY5iVmCDvYWYA/DIpLhN42YElzw== X-Gm-Gg: ASbGncsUql/LnbC141nnYyLhiuc2Dwg2oLbgJevLM1gtHNP/HyU7VTMJX91DrJeATus 6hiWykqkBwgdEPWlt7CcBm35LWocNB+lHGQJwfDgwQTDcYfBDc8TBvDYFkVd0Q8Y9s1swWZZ4W5 0T2f1YdjgfBs5fKS2mEiSwEfVNoMpbMoeudia909ktxXPtc1ZtVfG5qNCUZCtzagQkGALB1K/Q2 Adwxx+EhqedBJMQWUiBdf//91acCIeSfjR+QTQbIO7GlnDQgYmq5TQnCxXsbe/JDy0neAAGfjQY luz6TksU2cbG9HAaML8Ni+lSfHS6PPbu0IIO3ZdUvOhLTJPG6d/CJsnyHw2DF/WLL5uPzx7lIP8 iyEEruYPc4rCEJ9DhDvstq2iTpsFN5x6z2MI430uNKjhK6ZlN0zo0zZ9Tw8WGEq4BawF1hdjv/7 /lBuvDiicCRxzOkQ== X-Google-Smtp-Source: AGHT+IGcr6ZDGYpX4xDaFuoPg5GSfdiL/qljEb17IqutkjMiTIzCpGbMo69mv9yv9pm/StN+tfQe+g== X-Received: by 2002:a05:6a20:9c92:b0:263:616e:b61d with SMTP id adf61e73a8af0-352b8382a14mr12966183637.23.1762770245598; Mon, 10 Nov 2025 02:24:05 -0800 (PST) Received: from NVAPF55DW0D-IPD.. ([147.161.216.248]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-ba8f9ed21desm12753677a12.11.2025.11.10.02.24.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 10 Nov 2025 02:24:05 -0800 (PST) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Ankur Tyagi Subject: [OE-core][walnascar][PATCH 1/5] webkitgtk: upgrade 2.48.2 -> 2.48.7 Date: Mon, 10 Nov 2025 23:23:47 +1300 Message-ID: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 10 Nov 2025 10:24:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/226113 From: Ankur Tyagi Bug fixes in the stable 2.48 series: https://www.webkitgtk.org/2025/05/28/webkitgtk2.48.3-released.html https://www.webkitgtk.org/2025/07/30/webkitgtk2.48.4-released.html https://www.webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html https://www.webkitgtk.org/2025/09/03/webkitgtk2.48.6-released.html https://www.webkitgtk.org/2025/09/24/webkitgtk2.48.7-released.html Signed-off-by: Ankur Tyagi --- .../webkit/{webkitgtk_2.48.2.bb => webkitgtk_2.48.7.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-sato/webkit/{webkitgtk_2.48.2.bb => webkitgtk_2.48.7.bb} (98%) diff --git a/meta/recipes-sato/webkit/webkitgtk_2.48.2.bb b/meta/recipes-sato/webkit/webkitgtk_2.48.7.bb similarity index 98% rename from meta/recipes-sato/webkit/webkitgtk_2.48.2.bb rename to meta/recipes-sato/webkit/webkitgtk_2.48.7.bb index 75a39558db..179fb18693 100644 --- a/meta/recipes-sato/webkit/webkitgtk_2.48.2.bb +++ b/meta/recipes-sato/webkit/webkitgtk_2.48.7.bb @@ -19,7 +19,7 @@ SRC_URI = "https://www.webkitgtk.org/releases/${BPN}-${PV}.tar.xz \ file://0001-Fix-build-errors-on-RISCV-https-bugs.webkit.org-show.patch \ file://fix-ftbfs-riscv64.patch \ " -SRC_URI[sha256sum] = "ec58f6dfc25d3b360388e192f865068d69aab09b4d7df021f90e314d2fa54f37" +SRC_URI[sha256sum] = "2c62aebb608e09f930a539f3623a5cc8023b5068029f42a208f45f9124da6e30" inherit cmake pkgconfig gobject-introspection perlnative features_check upstream-version-is-even gi-docgen From patchwork Mon Nov 10 10:23:48 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 74106 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 59759CCFA1E for ; Mon, 10 Nov 2025 10:24:13 +0000 (UTC) Received: from mail-pf1-f182.google.com (mail-pf1-f182.google.com [209.85.210.182]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.45276.1762770248465899581 for ; Mon, 10 Nov 2025 02:24:08 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=A6HtLT/h; spf=pass (domain: gmail.com, ip: 209.85.210.182, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f182.google.com with SMTP id d2e1a72fcca58-782e93932ffso2296651b3a.3 for ; Mon, 10 Nov 2025 02:24:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1762770248; x=1763375048; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=YgtnqA47BJR29e/XiiH39A0PjIXhU1r6MLH/H2bipLs=; b=A6HtLT/hdRIpPV67jQtKr3XU5TTUU6LAGLNBo9W3gSumrmZfJlSh6RZINimRXxGgZd VzJxzkg+NK+3Koz75HTSGneGBzaV0YqxndQ6yJEvSLJIgmOe9fs5Aq++J82swX3dmhdR VOgWOVNFob7la9p8IHfHJbktWeoN82V3vEwJ12YQrm4DHmOGUEzP0x0rZRVDoTPIw1a+ IAWUBT95V0AnCWjypSCV4BA/hfuFLBhrVQuEn1xNY7GSbf6kzirNrCNaW2FMQvSsfxB2 cQ4zExCejRnPjnaPF7bT9XvU5VQTPO5sN9nJFQxHaXneKmzyY9YrWHMc83lr5d4/Qfo5 i2Xw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762770248; x=1763375048; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=YgtnqA47BJR29e/XiiH39A0PjIXhU1r6MLH/H2bipLs=; b=vB8hTG/9hLBTppvdetBpW/BeScgI3hD94kQ1Q2osLoGz4/m57fszjjf2y5teqWGUWV tKeY8HvEhmlVFeNK5Hyj7ZQUlupbdO4AiQ9JXKEx65a3VptP4JHQ9HTlSc00MiQcXw2C 7iAyg6QU36IcxfmZKLclbnccp2cMiuqZbbLMWLw1ovqXl7J+Gi1ITSUCodGcVFv45q3M 0276dPAylj3MyYyoMCot8KOPQLDBPa4WwKLl92XEjDi/HiHhOj1CkbotLJFmhHYAUY06 dbgWzevA2Nug/TowFdkqQu6nn22v+dSUbigm/p63RS/4F8rpsa+AI5bb85U6QFsnT8M1 Oerw== X-Gm-Message-State: AOJu0Yx3Tx6hbKNaRmFPeO0vVJCc8XV9F+kc/eVsXJPwLzks8NpGYl0Q nxxqiQjaHBd0H7D/sknd9l6MItzjDhwGEEK3zzgofMgREv051YktAqy5e8332w== X-Gm-Gg: ASbGncvQR88ajuew/U9PyMBR24yLfuGik8wsSjcmHbdYnqQmwONiD3pLiOb+HnDRnJw AbvfaLzdQtlkfVOTh7O5cnj55L4eNfrRBTFb1OQHoZdWROPiVvxXBVI/BOZibV1O5UB3Lqi14sy mjbVO+QbjRobJ0dy+3JHGx1xSz70VUS8ks/VplX8T1uUJ99SbT9WL4SvC2x+Nz6jT6x8x0kgRk9 9Fpxhw8juOp/NERNQJJcnOgz0IF+MQNNx922O5PwIorQahkU+uiMm3uOLneoh0YNHBGK5+4VqOJ GQgZ3RJv4UAmCBVn91Q/YRjIo+1cEgw0J+dC7xGp6USPpdW/Oa9lP6Bfo2i0OYQHbqLol2yWvxL JcGq32WilG1gHpMEfDupolA5EyEuS9N5P7MSNcFwX8uPs3cLDKM/4WU0ElAiC6s4ojcpj8Izn8s penoRJZ3NGUjW4Hg== X-Google-Smtp-Source: AGHT+IH5poS2ja+Cd9EJCQSbIPoluyReyP3XqoQs2Ljy85c38F/2UZqsHWGzJllYvaQjTBfcqxdktA== X-Received: by 2002:a05:6a20:12c3:b0:352:eede:89cd with SMTP id adf61e73a8af0-353a18b84e4mr10458236637.17.1762770247733; Mon, 10 Nov 2025 02:24:07 -0800 (PST) Received: from NVAPF55DW0D-IPD.. ([147.161.216.248]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-ba8f9ed21desm12753677a12.11.2025.11.10.02.24.06 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 10 Nov 2025 02:24:07 -0800 (PST) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Ankur Tyagi Subject: [OE-core][walnascar][PATCH 2/5] wireless-regdb: upgrade 2025.02.10 -> 2025.10.07 Date: Mon, 10 Nov 2025 23:23:48 +1300 Message-ID: <20251110102359.2917153-2-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> References: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 10 Nov 2025 10:24:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/226114 From: Ankur Tyagi Signed-off-by: Ankur Tyagi --- ...ireless-regdb_2025.02.20.bb => wireless-regdb_2025.10.07.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2025.02.20.bb => wireless-regdb_2025.10.07.bb} (94%) diff --git a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.02.20.bb b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.10.07.bb similarity index 94% rename from meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.02.20.bb rename to meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.10.07.bb index 09fff768c4..68ae3b0464 100644 --- a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.02.20.bb +++ b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.10.07.bb @@ -5,7 +5,7 @@ LICENSE = "ISC" LIC_FILES_CHKSUM = "file://LICENSE;md5=07c4f6dea3845b02a18dc00c8c87699c" SRC_URI = "https://www.kernel.org/pub/software/network/${BPN}/${BP}.tar.xz" -SRC_URI[sha256sum] = "57f8e7721cf5a880c13ae0c202edbb21092a060d45f9e9c59bcd2a8272bfa456" +SRC_URI[sha256sum] = "d4c872a44154604c869f5851f7d21d818d492835d370af7f58de8847973801c3" inherit bin_package allarch From patchwork Mon Nov 10 10:23:49 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 74105 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 52AF7CCF9E3 for ; Mon, 10 Nov 2025 10:24:13 +0000 (UTC) Received: from mail-pl1-f170.google.com (mail-pl1-f170.google.com [209.85.214.170]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.45222.1762770251559955516 for ; Mon, 10 Nov 2025 02:24:11 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=ZhXic/e4; spf=pass (domain: gmail.com, ip: 209.85.214.170, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-2953e415b27so24928045ad.2 for ; Mon, 10 Nov 2025 02:24:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1762770251; x=1763375051; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=8vgiGcOZsTWeomkwjTNaZ02W8mbt0yyk+skBLffZTDo=; b=ZhXic/e4IMMPSL21InlwxSqqr+Dd3lgsqqOSOgdOMY4HPi8dVkhZGTx2N7Hxh7kMun HMUSkwL1OF0xSvecW2q38EYH6e1xhADTqcufLQiW4aRTwEKHerleQA76QmBku/JOSXMS oLjqoQ8oZEJzFa+slQ4Xr8yOPuF66WcxP+laeYQ8Pszf0aCYlDdlUrSsVHih6xO4+Ylo FH3qWu87IhQpBK68XhF6A1z+tJ8d+IgI55qSBzzCELwd5mbCelaf99FdwS45tMfxf1Hx ih7z+m1x/Zz4vSJ8lA1a58zCB25VVEcE/gTJ1dY27whwmU8z9ErUGlJdcAW+VW8AfLkv d+9A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762770251; x=1763375051; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=8vgiGcOZsTWeomkwjTNaZ02W8mbt0yyk+skBLffZTDo=; b=X/GV7qfBUYkRYxx2IISZ87pfhzwP8zrAgXb4UA/iVPQ+7rzMRZ1n1+/FMXR7hyJgKB zzvg/LpGM6bsRcsBxYuP3VCqE9l8Qw4ykEfjdeaVsnonHkhPR+bbGNyTCb9/WAyreioO sXEOQ/5kpk5caj9RWy7oxilQfPtPQU5ae/LrqOopf6uX48evTAZIRJtAFiHH3J7uEkPM JL/yYjzvdPgqQkLsnNnugzjZTYNXo5B+jfqBvCRzuVC6r0RWX6PrzyfWuCtqRqVpatTh QvLgy3m6/aVrz7SxzdeqkeL/pUp7oosAS7M+5bc+W8KifhgqTPr93V8DXGKTG7qaJinq IGuw== X-Gm-Message-State: AOJu0YwQGBNVbSj78lx1NlPCwOJ6HojipvxIbusBI75y8iXPTcJZJ43/ bIg8jNxw7n18Ml/5Xqx5uqulBSDaB4WwshI0ekYFB6F9C5Ilcc8OU4+1++E5/w== X-Gm-Gg: ASbGncucv64RAXZQjycoVJnNniCpPnWF3yPMAdJEw1/I/fD8Ufd2NHVAnL5fXc9kAj5 uAZVKudCWEMq1oX1SCXaH2o3l7uqtmivwNhFR1YvPSOvGLeQWJsoTqhcAuQdDRYBklRSaJoTWKu jt0EXUQVQ3b/oL34HOFTABxiGoyJtN2NwcqQGThfFd/DenlL/56D/kglp4ywjTp5MlDZ5hJZEag 19BStxJrA233RZ5+X9dZ0xveT3CQNjfi+JszBI5QPLTPQ383fpBv2//Q6xzFq4TLHz4smqBJxdl FPYQs/P+srdnrfObZoyZrt3FLO+EcGMyggjaihQGQo6nKGsAxJF9lfZA7xPyzbm19kzQAFpQrVW tZm2O1WP55tRV1Gbfpx96VJG9KDkAzijEjo/FShCvfC+Tgkkx6BBcd30uVGgUpQrLb+ls3d1xgo e5Dq7RnPCo+Z1SDe/BQ8/vBMeR X-Google-Smtp-Source: AGHT+IGh4RGxu/WRBixs4wpC0NSvpboFCy1UPTNFHCarZjo9O20B/+GROK8dKbQrlZWbAdukEtzK6Q== X-Received: by 2002:a17:903:19c8:b0:24c:7bc6:7ac7 with SMTP id d9443c01a7336-297e562c902mr101349365ad.18.1762770250752; Mon, 10 Nov 2025 02:24:10 -0800 (PST) Received: from NVAPF55DW0D-IPD.. ([147.161.216.248]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-ba8f9ed21desm12753677a12.11.2025.11.10.02.24.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 10 Nov 2025 02:24:10 -0800 (PST) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Alexander Kanavin , Mathieu Dubois-Briand , Richard Purdie , Ankur Tyagi Subject: [OE-core][walnascar][PATCH 3/5] ca-certificates: submit sysroot patch upstream, drop default-sysroot.patch Date: Mon, 10 Nov 2025 23:23:49 +1300 Message-ID: <20251110102359.2917153-3-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> References: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 10 Nov 2025 10:24:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/226115 From: Alexander Kanavin ca-certificates/0002-update-ca-certificates-use-SYSROOT.patch was using a non-standard environment variable, and was replaced with a patch that adds a command line option (and then this was submitted upstream). ca-certificates recipe was tweaked accordingly, and nothing else in core or meta-oe is using update-ca-certificates. Drop default-sysroot.patch as the use case is unclear: sysroot is explicitly specified in all known invocations of update-ca-certificate, and if there's a place where it isn't, then update-ca-certificates will error out trying to write to /etc, and should be fixed to explicitly specify the sysroot. Signed-off-by: Alexander Kanavin Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 90d9f0ba674d4fe8e9291f0513c13dff3775c545) Signed-off-by: Ankur Tyagi --- ...ca-certificates-add-a-sysroot-option.patch | 36 ++++++++++++ ...2-update-ca-certificates-use-SYSROOT.patch | 46 --------------- ...icates-use-relative-symlinks-from-ET.patch | 18 +++--- .../ca-certificates/default-sysroot.patch | 58 ------------------- .../ca-certificates_20241223.bb | 9 ++- 5 files changed, 49 insertions(+), 118 deletions(-) create mode 100644 meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch delete mode 100644 meta/recipes-support/ca-certificates/ca-certificates/0002-update-ca-certificates-use-SYSROOT.patch delete mode 100644 meta/recipes-support/ca-certificates/ca-certificates/default-sysroot.patch diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch b/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch new file mode 100644 index 0000000000..ba5bb69657 --- /dev/null +++ b/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch @@ -0,0 +1,36 @@ +From d6bb773745c2e95fd1a414e916fbed64e0d8df66 Mon Sep 17 00:00:00 2001 +From: Alexander Kanavin +Date: Mon, 31 Mar 2025 17:42:25 +0200 +Subject: [PATCH] sbin/update-ca-certificates: add a --sysroot option + +This allows using the script in cross-compilation environments +where the script needs to prefix the sysroot to every other +directory it operates on. There are individual options +to set those directories, but using a common prefix option +instead is a lot less clutter and more robust. + +Upstream-Status: Submitted [https://salsa.debian.org/debian/ca-certificates/-/merge_requests/13] +Signed-off-by: Alexander Kanavin +--- + sbin/update-ca-certificates | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates +index 4bb77a0..1e737b9 100755 +--- a/sbin/update-ca-certificates ++++ b/sbin/update-ca-certificates +@@ -59,6 +59,14 @@ do + --hooksdir) + shift + HOOKSDIR="$1";; ++ --sysroot) ++ shift ++ SYSROOT="$1" ++ CERTSCONF="$1/${CERTSCONF}" ++ CERTSDIR="$1/${CERTSDIR}" ++ LOCALCERTSDIR="$1/${LOCALCERTSDIR}" ++ ETCCERTSDIR="$1/${ETCCERTSDIR}" ++ HOOKSDIR="$1/${HOOKSDIR}";; + --help|-h|*) + echo "$0: [--verbose] [--fresh]" + exit;; diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0002-update-ca-certificates-use-SYSROOT.patch b/meta/recipes-support/ca-certificates/ca-certificates/0002-update-ca-certificates-use-SYSROOT.patch deleted file mode 100644 index 48c69f0cbc..0000000000 --- a/meta/recipes-support/ca-certificates/ca-certificates/0002-update-ca-certificates-use-SYSROOT.patch +++ /dev/null @@ -1,46 +0,0 @@ -From cdb53438bae194c1281c31374a901ad7ee460408 Mon Sep 17 00:00:00 2001 -From: Andreas Oberritter -Date: Tue, 19 Mar 2013 17:14:33 +0100 -Subject: [PATCH] update-ca-certificates: use $SYSROOT - -Upstream-Status: Pending - -Signed-off-by: Andreas Oberritter ---- - sbin/update-ca-certificates | 14 +++++++------- - 1 file changed, 7 insertions(+), 7 deletions(-) - -diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates -index 5a0a1da..36cdd9a 100755 ---- a/sbin/update-ca-certificates -+++ b/sbin/update-ca-certificates -@@ -24,12 +24,12 @@ - verbose=0 - fresh=0 - default=0 --CERTSCONF=/etc/ca-certificates.conf --CERTSDIR=/usr/share/ca-certificates --LOCALCERTSDIR=/usr/local/share/ca-certificates -+CERTSCONF=$SYSROOT/etc/ca-certificates.conf -+CERTSDIR=$SYSROOT/usr/share/ca-certificates -+LOCALCERTSDIR=$SYSROOT/usr/local/share/ca-certificates - CERTBUNDLE=ca-certificates.crt --ETCCERTSDIR=/etc/ssl/certs --HOOKSDIR=/etc/ca-certificates/update.d -+ETCCERTSDIR=$SYSROOT/etc/ssl/certs -+HOOKSDIR=$SYSROOT/etc/ca-certificates/update.d - - while [ $# -gt 0 ]; - do -@@ -92,9 +92,9 @@ add() { - PEM="$ETCCERTSDIR/$(basename "$CERT" .crt | sed -e 's/ /_/g' \ - -e 's/[()]/=/g' \ - -e 's/,/_/g').pem" -- if ! test -e "$PEM" || [ "$(readlink "$PEM")" != "$CERT" ] -+ if ! test -e "$PEM" || [ "$(readlink "$PEM")" != "${CERT##$SYSROOT}" ] - then -- ln -sf "$CERT" "$PEM" -+ ln -sf "${CERT##$SYSROOT}" "$PEM" - echo "+$PEM" >> "$ADDED" - fi - # Add trailing newline to certificate, if it is missing (#635570) diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0003-update-ca-certificates-use-relative-symlinks-from-ET.patch b/meta/recipes-support/ca-certificates/ca-certificates/0003-update-ca-certificates-use-relative-symlinks-from-ET.patch index 214f88909a..929945b56f 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates/0003-update-ca-certificates-use-relative-symlinks-from-ET.patch +++ b/meta/recipes-support/ca-certificates/ca-certificates/0003-update-ca-certificates-use-relative-symlinks-from-ET.patch @@ -1,4 +1,4 @@ -From 38d47c53749c6f16d5d7993410b256116e0ee0b8 Mon Sep 17 00:00:00 2001 +From a69933f96a8675369de702bdb55e57dc21f65e7f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9=20Draszik?= Date: Wed, 28 Mar 2018 16:45:05 +0100 Subject: [PATCH] update-ca-certificates: use relative symlinks from @@ -45,26 +45,26 @@ Signed-off-by: André Draszik 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates -index f7d0dbf..97a589c 100755 +index 1e737b9..8510082 100755 --- a/sbin/update-ca-certificates +++ b/sbin/update-ca-certificates -@@ -29,6 +29,7 @@ CERTSDIR=$SYSROOT/usr/share/ca-certificates - LOCALCERTSDIR=$SYSROOT/usr/local/share/ca-certificates +@@ -30,6 +30,7 @@ LOCALCERTSDIR=/usr/local/share/ca-certificates CERTBUNDLE=ca-certificates.crt - ETCCERTSDIR=$SYSROOT/etc/ssl/certs + ETCCERTSDIR=/etc/ssl/certs + HOOKSDIR=/etc/ca-certificates/update.d +FSROOT=../../../ # to get from $ETCCERTSDIR to the root of the file system - HOOKSDIR=$SYSROOT/etc/ca-certificates/update.d while [ $# -gt 0 ]; -@@ -125,9 +126,10 @@ add() { + do +@@ -100,9 +101,10 @@ add() { PEM="$ETCCERTSDIR/$(basename "$CERT" .crt | sed -e 's/ /_/g' \ -e 's/[()]/=/g' \ -e 's/,/_/g').pem" -- if ! test -e "$PEM" || [ "$(readlink "$PEM")" != "${CERT##$SYSROOT}" ] +- if ! test -e "$PEM" || [ "$(readlink "$PEM")" != "$CERT" ] + DST="$(echo ${CERT} | sed -e "s|^$SYSROOT||" -e "s|^/|$FSROOT|" )" + if ! test -e "$PEM" || [ "$(readlink "$PEM")" != "${DST}" ] then -- ln -sf "${CERT##$SYSROOT}" "$PEM" +- ln -sf "$CERT" "$PEM" + ln -sf "${DST}" "$PEM" echo "+$PEM" >> "$ADDED" fi diff --git a/meta/recipes-support/ca-certificates/ca-certificates/default-sysroot.patch b/meta/recipes-support/ca-certificates/ca-certificates/default-sysroot.patch deleted file mode 100644 index c2a54c0096..0000000000 --- a/meta/recipes-support/ca-certificates/ca-certificates/default-sysroot.patch +++ /dev/null @@ -1,58 +0,0 @@ -From 50aadd3eb1c4be43d3decdeb60cede2de5a687be Mon Sep 17 00:00:00 2001 -From: Christopher Larson -Date: Fri, 23 Aug 2013 12:26:14 -0700 -Subject: [PATCH] ca-certificates: add recipe (version 20130610) - -Upstream-Status: Pending - -update-ca-certificates: find SYSROOT relative to its own location - -This makes the script relocatable. ---- - sbin/update-ca-certificates | 33 +++++++++++++++++++++++++++++++++ - 1 file changed, 33 insertions(+) - -diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates -index 2d3e1fe..f7d0dbf 100755 ---- a/sbin/update-ca-certificates -+++ b/sbin/update-ca-certificates -@@ -66,6 +66,39 @@ do - shift - done - -+if [ -z "$SYSROOT" ]; then -+ local_which () { -+ if [ $# -lt 1 ]; then -+ return 1 -+ fi -+ -+ ( -+ IFS=: -+ for entry in $PATH; do -+ if [ -x "$entry/$1" ]; then -+ echo "$entry/$1" -+ exit 0 -+ fi -+ done -+ exit 1 -+ ) -+ } -+ -+ case "$0" in -+ */*) -+ sbindir=$(cd ${0%/*} && pwd) -+ ;; -+ *) -+ sbindir=$(cd $(dirname $(local_which $0)) && pwd) -+ ;; -+ esac -+ prefix=${sbindir%/*} -+ SYSROOT=${prefix%/*} -+ if [ ! -d "$SYSROOT/usr/share/ca-certificates" ]; then -+ SYSROOT= -+ fi -+fi -+ - if [ ! -s "$CERTSCONF" ] - then - fresh=1 diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb b/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb index 7977e3ae5c..749e170548 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb +++ b/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb @@ -16,9 +16,8 @@ PACKAGE_WRITE_DEPS += "openssl-native debianutils-native" SRC_URI[sha256sum] = "dd8286d0a9dd35c756fea5f1df3fed1510fb891f376903891b003cd9b1ad7e03" SRC_URI = "https://snapshot.debian.org/archive/debian/20241223T143500Z/pool/main/c/${BPN}/${BPN}_${PV}.tar.xz \ - file://0002-update-ca-certificates-use-SYSROOT.patch \ file://0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch \ - file://default-sysroot.patch \ + file://0002-sbin-update-ca-certificates-add-a-sysroot-option.patch \ file://0003-update-ca-certificates-use-relative-symlinks-from-ET.patch \ file://0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch \ " @@ -62,7 +61,7 @@ do_install:append:class-target () { } pkg_postinst:${PN}:class-target () { - SYSROOT="$D" $D${sbindir}/update-ca-certificates + $D${sbindir}/update-ca-certificates --sysroot $D } CONFFILES:${PN} += "${sysconfdir}/ca-certificates.conf" @@ -71,11 +70,11 @@ CONFFILES:${PN} += "${sysconfdir}/ca-certificates.conf" # we just run update-ca-certificate from do_install() for nativesdk. CONFFILES:${PN}:append:class-nativesdk = " ${sysconfdir}/ssl/certs/ca-certificates.crt" do_install:append:class-nativesdk () { - SYSROOT="${D}${SDKPATHNATIVE}" ${D}${sbindir}/update-ca-certificates + ${D}${sbindir}/update-ca-certificates --sysroot ${D}${SDKPATHNATIVE} } do_install:append:class-native () { - SYSROOT="${D}${base_prefix}" ${D}${sbindir}/update-ca-certificates + ${D}${sbindir}/update-ca-certificates --sysroot ${D}${base_prefix} } RDEPENDS:${PN}:append:class-target = " openssl-bin openssl" From patchwork Mon Nov 10 10:23:50 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 74107 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 28D6FCCFA13 for ; Mon, 10 Nov 2025 10:24:23 +0000 (UTC) Received: from mail-pf1-f176.google.com (mail-pf1-f176.google.com [209.85.210.176]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.45279.1762770254221386282 for ; Mon, 10 Nov 2025 02:24:14 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=H8oXkwPJ; spf=pass (domain: gmail.com, ip: 209.85.210.176, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f176.google.com with SMTP id d2e1a72fcca58-7aae5f2633dso3340925b3a.3 for ; Mon, 10 Nov 2025 02:24:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1762770253; x=1763375053; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=wJVlE/CJqTcEJVAHopim9KesOMsbZVZwkL7eO8Kxxko=; b=H8oXkwPJTL5+Z5FEZTsWaOPgTsidNZMnewQHLkW7Ue0g5wTcxlzwoQmzyyZZppzzaF LeD0HW9aRF0W3HzU1Z+deKRMVDpOUkG4hcHzT586lL2Ut1Irgn1bMttZORsVP41HvWlG E4mAkvNkg6Xg8U2XaYFXQ+cKM6DGqE/VT1WEAwgHFs9XLxpVqJPEckwI6lyiUuRJY7vw vRDDt1WOQ53475PM65gygWZz7HCj21zqzXgUTY3iHco5AmnoU8xD6pEwfNlvlfDlnxQ5 oaLkGSEgOVXOOfrVWEXoU6nvXXV8cFixrumvZxYokFHTUpBXpAhV4lFugGF8Biv13amt JMEA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762770253; x=1763375053; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=wJVlE/CJqTcEJVAHopim9KesOMsbZVZwkL7eO8Kxxko=; b=vCCt/l29IjmoYu+bjV0Hg3L1VKqRSgdMG1vKCjn2wJULDQtPyYkW+eJdoOcmm7+n5Y vc7a0W86pzUle78BHrfZ7Xaaizj5dAs/k/ED+rhNAW09nEmPzphXcQlxVP4xm/3L9ETt s5tl0EIwPdc8YttngW8rMcYUucH/yS6PTWTZGOxDQDIlMTwA+xIjKCdZ7KzTw3agQQR8 TChcHJ3oUJBOgAQTRcVZN1uhVgYFcDubx0rlKS7Sc8gWDrhQ6WXeNlkc5oXqBhIy2BeM ZCten7e4mIUeh/UrEbiL3ve9Y1fyvPHQGGqG++fdDHvohphjEfUDPv6o0jr95jvf+Vr4 3RtQ== X-Gm-Message-State: AOJu0Ywfx62l0sP9VVe5VOPGaYBR2t7bFSxe3wRSWZn7cGLIUlfQKR3r RpS6fg3jGYwajBnqXBmAzRuoJDN03UwIFa1oExZP3MIxATifDPzekSTN03zAjw== X-Gm-Gg: ASbGncv7FZKLhHVJdsyLH9e5Uh+C0G38j+g2TPItQNavjO2mY3Y3Nq1Nw8eK3ZL+P05 ZN9Dcahiu0TalNQF6IDcn3mRCpWi5zEOW9bUvBPJSmeVdytcXNQEP0i1UenZ3Vj7goocUZVykzm AbGd1Zd2HTfw5i7V7wgaOkaPvcD+CGHE3KNai/Jtvp47v+pXLNsgkxT0o1iUoQbN/+0FGQEW9RY KVo1ZqN9cP43Rkb4qsaqT4WLMExol/InSMolkoZ553b+bZlIXssnxvxAGbOM0o+2H9ScT7ogari AQCVZh11vFBQLb5+uWSaMZ0chPrtQaapyAJU9GfHG7XziLOGzy1EXhIuqPgl+TMt3/9XbDebYuO 0+GWzOgTouNUhYexUa+xg5//JgpPX0E7RrYYfe7MLZD+XUVRw/7N+RUYXZ3DRBQlCfq9FPcW9hB ew+nE23ON0qoFvBw== X-Google-Smtp-Source: AGHT+IGzqUd//4+fqgYV6hJSwkt/hwLszac7Xk7M0EHADHQ6nDApMdsqmhHHDrDCsoW9FKbrF8Qwiw== X-Received: by 2002:a05:6a20:5493:b0:353:946f:fd64 with SMTP id adf61e73a8af0-353a385a692mr10101870637.50.1762770253417; Mon, 10 Nov 2025 02:24:13 -0800 (PST) Received: from NVAPF55DW0D-IPD.. ([147.161.216.248]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-ba8f9ed21desm12753677a12.11.2025.11.10.02.24.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 10 Nov 2025 02:24:13 -0800 (PST) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Wang Mingyu , Richard Purdie , Ankur Tyagi Subject: [OE-core][walnascar][PATCH 4/5] ca-certificates: upgrade 20241223 -> 20250419 Date: Mon, 10 Nov 2025 23:23:50 +1300 Message-ID: <20251110102359.2917153-4-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> References: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 10 Nov 2025 10:24:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/226116 From: Wang Mingyu 0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch 0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch refreshed for 20250419 0002-sbin-update-ca-certificates-add-a-sysroot-option.patch removed since it's included in 20250419 Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit e39cc1fb7234bf2b37856296d3c0d10ddf8cae64) Signed-off-by: Ankur Tyagi --- ...ertdata2pem.py-print-a-warning-for-e.patch | 6 ++-- ...icates-don-t-use-Debianisms-in-run-p.patch | 6 ++-- ...ca-certificates-add-a-sysroot-option.patch | 36 ------------------- ...0241223.bb => ca-certificates_20250419.bb} | 3 +- 4 files changed, 7 insertions(+), 44 deletions(-) delete mode 100644 meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch rename meta/recipes-support/ca-certificates/{ca-certificates_20241223.bb => ca-certificates_20250419.bb} (94%) diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch b/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch index da2a247e51..1226508c98 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch +++ b/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch @@ -1,4 +1,4 @@ -From 630736f427c0a1bd0be0b5a2f6d51d63b2c4c9fd Mon Sep 17 00:00:00 2001 +From 743774cd53ed1c45bb660eddacf6dadb5ee3e145 Mon Sep 17 00:00:00 2001 From: Alexander Kanavin Date: Mon, 18 Oct 2021 12:05:49 +0200 Subject: [PATCH] Revert "mozilla/certdata2pem.py: print a warning for expired @@ -16,10 +16,10 @@ Signed-off-by: Alexander Kanavin 3 files changed, 1 insertion(+), 13 deletions(-) diff --git a/debian/changelog b/debian/changelog -index 52d41ca..bdb2c8a 100644 +index dbe3e9c..496e05d 100644 --- a/debian/changelog +++ b/debian/changelog -@@ -138,7 +138,6 @@ ca-certificates (20211004) unstable; urgency=low +@@ -156,7 +156,6 @@ ca-certificates (20211004) unstable; urgency=low - "Trustis FPS Root CA" - "Staat der Nederlanden Root CA - G3" * Blacklist expired root certificate "DST Root CA X3" (closes: #995432) diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch b/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch index cad30929f5..1a29da756f 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch +++ b/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch @@ -1,4 +1,4 @@ -From 348163df412e53b1b7ec3e81ae5f22caa0227c37 Mon Sep 17 00:00:00 2001 +From 63086d41f76b1c3357e23c6509df72d3f75af20c Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Mon, 6 Jul 2015 15:19:41 +0100 Subject: [PATCH] ca-certificates: remove Debianism in run-parts invocation @@ -22,10 +22,10 @@ Signed-off-by: Maciej Borzecki 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates -index 36cdd9a..2d3e1fe 100755 +index 91d8024..1e737b9 100755 --- a/sbin/update-ca-certificates +++ b/sbin/update-ca-certificates -@@ -202,9 +202,7 @@ if [ -d "$HOOKSDIR" ] +@@ -210,9 +210,7 @@ if [ -d "$HOOKSDIR" ] then echo "Running hooks in $HOOKSDIR..." diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch b/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch deleted file mode 100644 index ba5bb69657..0000000000 --- a/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch +++ /dev/null @@ -1,36 +0,0 @@ -From d6bb773745c2e95fd1a414e916fbed64e0d8df66 Mon Sep 17 00:00:00 2001 -From: Alexander Kanavin -Date: Mon, 31 Mar 2025 17:42:25 +0200 -Subject: [PATCH] sbin/update-ca-certificates: add a --sysroot option - -This allows using the script in cross-compilation environments -where the script needs to prefix the sysroot to every other -directory it operates on. There are individual options -to set those directories, but using a common prefix option -instead is a lot less clutter and more robust. - -Upstream-Status: Submitted [https://salsa.debian.org/debian/ca-certificates/-/merge_requests/13] -Signed-off-by: Alexander Kanavin ---- - sbin/update-ca-certificates | 8 ++++++++ - 1 file changed, 8 insertions(+) - -diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates -index 4bb77a0..1e737b9 100755 ---- a/sbin/update-ca-certificates -+++ b/sbin/update-ca-certificates -@@ -59,6 +59,14 @@ do - --hooksdir) - shift - HOOKSDIR="$1";; -+ --sysroot) -+ shift -+ SYSROOT="$1" -+ CERTSCONF="$1/${CERTSCONF}" -+ CERTSDIR="$1/${CERTSDIR}" -+ LOCALCERTSDIR="$1/${LOCALCERTSDIR}" -+ ETCCERTSDIR="$1/${ETCCERTSDIR}" -+ HOOKSDIR="$1/${HOOKSDIR}";; - --help|-h|*) - echo "$0: [--verbose] [--fresh]" - exit;; diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb b/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb similarity index 94% rename from meta/recipes-support/ca-certificates/ca-certificates_20241223.bb rename to meta/recipes-support/ca-certificates/ca-certificates_20250419.bb index 749e170548..fd30b602ae 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb +++ b/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb @@ -14,10 +14,9 @@ DEPENDS:class-nativesdk = "openssl-native" # Need rehash from openssl and run-parts from debianutils PACKAGE_WRITE_DEPS += "openssl-native debianutils-native" -SRC_URI[sha256sum] = "dd8286d0a9dd35c756fea5f1df3fed1510fb891f376903891b003cd9b1ad7e03" +SRC_URI[sha256sum] = "33b44ef78653ecd3f0f2f13e5bba6be466be2e7da72182f737912b81798ba5d2" SRC_URI = "https://snapshot.debian.org/archive/debian/20241223T143500Z/pool/main/c/${BPN}/${BPN}_${PV}.tar.xz \ file://0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch \ - file://0002-sbin-update-ca-certificates-add-a-sysroot-option.patch \ file://0003-update-ca-certificates-use-relative-symlinks-from-ET.patch \ file://0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch \ " From patchwork Mon Nov 10 10:23:51 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 74108 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 28E64CCFA1E for ; Mon, 10 Nov 2025 10:24:23 +0000 (UTC) Received: from mail-pf1-f175.google.com (mail-pf1-f175.google.com [209.85.210.175]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.45224.1762770257313030274 for ; Mon, 10 Nov 2025 02:24:17 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=RxI5Ftxi; spf=pass (domain: gmail.com, ip: 209.85.210.175, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f175.google.com with SMTP id d2e1a72fcca58-7ae4656d6e4so3438518b3a.1 for ; Mon, 10 Nov 2025 02:24:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1762770256; x=1763375056; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=mWA90UVrgbHkFQ7o+LvZAxjia8OhZXib3Eb6tHO/zkk=; b=RxI5Ftxio//es+5yDW+YSBVqGQgy54C36oJFBrh1rQ8Swrz0yH7wTWx/ZuLS4Dm2wy o41fHKvLIMwyfVfkV1ReFm4VhpfjvAPQ9ZbNQ8KAceRgryV9llMGrPXlSIUAOhVwKqqP OxuTmq32PxMuREXP7E3190RNjLGBaKnHJrfZ2eL/CDD/X51hpMLjG2DLuZzECvU2lh2Q eO3SHvVJue4ZdIluX0nkm0PD6+tXm3SZlpdSx3D08LIxuw1+ZgGWnJafqRdatHPAyv/n Prv2/8rub+ChqxdWqueIGCnEN+ojtNFVUpmQzndq8Byaa20KTW5RiyvuGao+z1aBHjwq Tj5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762770256; x=1763375056; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=mWA90UVrgbHkFQ7o+LvZAxjia8OhZXib3Eb6tHO/zkk=; b=u/JVJZnM89Kvqlx4H2aXslANMWuEs3ZEMosbiXb3Os726RP4UGdMXIU/GkrG0QArFD AqrdOWPau2TCc5f5IuXmXhnskuzwzLbGe4EpEnhX/P2gZzWQh1V7rU5y2bMOKVnXFQJX bUitPsw3lxFw6hPyWcFf284tinFJZcbNYk2EeuIRqBR70knfcjS2FBSPo6+esfSu6JqJ TR+tn3htmaHDGeHgZTgvo7KmBw2drz4UMxnXOosxAhCj1Q54YJLb5/fxeBsBbZjcmouK sS75dGPtkG7BYLRyBxirLT8jtC8fx4bNwnN6jAjSR2NBJVuciliuIgiztqXokP3ofArk fRVg== X-Gm-Message-State: AOJu0YzpwySYT/j2ek2hnKkraECAgq+bvCu1Ag1s1b8UV+hk+pBXygBZ /XQjc74o03rA4fZTsOWhKwdEljfB+fnZB/Sf/fJK7jWMIjgjRUVJ2UociXCPXA== X-Gm-Gg: ASbGncv27OBWo862ZYp/qOFF7HAZmDHsMCxxm8v1poEjIu4H9IePoNypCllTo4cTT88 oZ9+/gFwE3J1mEBvgBRHppendlvaD6ylq2z1lUq82IoJkYl8jPMPluxOyzS7hnDFG7lQUTEwcPP c0QWxrB3GeODo23abC1G6fam+ljmABhh+2ubntF07mg76IPCvFQE8rBm5X73caIFDH++BI4TC8N O7VUk6jDXTPbDl51at9WA5BxMPlKZBEjwbOmSxYM37xlhGUH5AR7unFOSlMt9rB1zT2AJOD6g99 LNbLZsBDq01G+hbuHiucC7L4qY8Y814zIvoXFgzssjR0rOgGqC5SPixkIkoGTKUWFizZNAJti0i zbM29bNndJ04+tXZbVM6YVwNORhapXGFH+jMS6BAs+SGh27p9jyYpqAHmozj0STJx9OA8OWxnVm THc0yLrEjCu8V3s5zGPd0yWXRb X-Google-Smtp-Source: AGHT+IHJmAvF6uqfOx27c6RRNYZc9yC0EKVjnOhK4/k8XA8luFTMxkl92G7SsY8o8A/c5uBhkYNDnA== X-Received: by 2002:a05:6a20:394c:b0:351:1cf3:7f20 with SMTP id adf61e73a8af0-353a2a19e18mr9489144637.59.1762770256597; Mon, 10 Nov 2025 02:24:16 -0800 (PST) Received: from NVAPF55DW0D-IPD.. ([147.161.216.248]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-ba8f9ed21desm12753677a12.11.2025.11.10.02.24.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 10 Nov 2025 02:24:16 -0800 (PST) From: ankur.tyagi85@gmail.com To: openembedded-core@lists.openembedded.org Cc: Gyorgy Sarvari , WXbet , Richard Purdie , Ankur Tyagi Subject: [OE-core][walnascar][PATCH 5/5] ca-certificates: fix on-target postinstall script Date: Mon, 10 Nov 2025 23:23:51 +1300 Message-ID: <20251110102359.2917153-5-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> References: <20251110102359.2917153-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 10 Nov 2025 10:24:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/226117 From: Gyorgy Sarvari When the package is installed directly on the machine (instead of installing it in the rootfs directly), the postinstall script fails with the following error: /usr/sbin/update-ca-certificates: line 75: shift: shift count out of range The reason is that the "update-ca-certificates" script is executed with the "--sysroot" argument, and as the sysroot $D is passed. However on the target system this variable doesn't exist, so the argument is passed without this mandatory value, and the execution fails. To avoid this error, check if the $D variable exists, and pass the --sysroot argument only when it does. Reported-by: WXbet Signed-off-by: Gyorgy Sarvari Signed-off-by: Richard Purdie (cherry picked from commit cf39461e97098a1b28693299677888ba7e8bfccf) Signed-off-by: Ankur Tyagi --- .../ca-certificates/ca-certificates_20250419.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb b/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb index fd30b602ae..9b0757f3fa 100644 --- a/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb +++ b/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb @@ -60,7 +60,8 @@ do_install:append:class-target () { } pkg_postinst:${PN}:class-target () { - $D${sbindir}/update-ca-certificates --sysroot $D + [ -n "$D" ] && sysroot_args="--sysroot $D" + $D${sbindir}/update-ca-certificates $sysroot_args } CONFFILES:${PN} += "${sysconfdir}/ca-certificates.conf"