From patchwork Wed Jan 7 15:00:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 78210 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 21289CFD64B for ; Wed, 7 Jan 2026 15:00:36 +0000 (UTC) Received: from mail-qt1-f181.google.com (mail-qt1-f181.google.com [209.85.160.181]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7739.1767798026671498971 for ; Wed, 07 Jan 2026 07:00:26 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=SYhFB2t5; spf=pass (domain: konsulko.com, ip: 209.85.160.181, mailfrom: scott.murray@konsulko.com) Received: by mail-qt1-f181.google.com with SMTP id d75a77b69052e-4ffa95fc5f1so18274211cf.3 for ; Wed, 07 Jan 2026 07:00:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1767798025; x=1768402825; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=AILFoeLGr24Aoxs0+eHtfgPNJztQiHQD1/vUuQpDkaM=; b=SYhFB2t5fKeJEV4PmyW2eefCSvurOxxv2/cmB/0rypvzVzWKbkgKZpw1wS5KCV4QI3 4/RZunl5wZwl2CIgLiL2SMtGQ8N0TnrgdvSagxw+i8xlXWHtFZWWg5NvVXpTYqs5fuY3 cHJkDjMdeBcnEi6tHNGBvb1U8vWzUNxyiP5/M= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767798025; x=1768402825; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=AILFoeLGr24Aoxs0+eHtfgPNJztQiHQD1/vUuQpDkaM=; b=tdKJNg19lpEsdQAfROOqVREYBpJfO9qz67djnIH4R8VpeUZHOXdO3Vj1AJRSPOilNN v92/f4OQsIh5TswCPh6mM79bIHTpbfuBgnptAOU4/GCGdXhMbLZaSP9fohD/6jlVOlRi sOII6c5Mw+KgoxKaYZYc51REf2OY7LlrkottYBVD4nsgaKOm2BcJEGTGViP7Ne2bYw00 4t7B46VSH8xaeJTtn5SPyOCQD214DbhvTOuLAykrbhk0j/IJhBTdmHJAhO8L+OrvE8d6 zGeSI2ZzzuH0k7hYyaNFWCKGqEpo/AgPjHmtKLLlHkAR02NGb6WT6tNPvudLxILe5wQ8 zYwg== X-Gm-Message-State: AOJu0Yw31Sr+91nTjSi80rqj8Uo76SvNETUytGM+lmwI8uTmsAO81elD YX02Lf+XgFbaWSp0sFtLS4cKNNNhaqXtZMrFq/cTFASaGt56KJ+iBQoar5yn/NLH5zd7ZExNZro IldFK X-Gm-Gg: AY/fxX49PY4N0hElzW6qUFTkVT/hyk+6rjb2L7SccuI5Vi01ZWSm48Y5zsyBd1f3KP+ tDvgsJFvg3y3WWEYD9OqD2uAQkYjBmF9jlydGlZRW5B0nJvTtTN+EjJcJmbL0/I/HCEVI+xTV8P eTRkfFHVX+Q7TlHy4k/5wzxavPAqUdKIQaVe3zfLQKvIZFouptdxihztZJIXodJ0JxNKh9NrsCT TgmQDIyr9G2DJ/RDqjnNDozkKYArPcxXxyh1tMOZG7H4cORRvmJCMl3cKqN/Gsqy/j18LYNob8W sUjzHyq3R14RnaTHMA4dxO0hKj5cjGf+zKxHY9gmCQMr/gRY6+rf3SJ5yfrlyPym6EKNSHrlQyI 6AXLeMKC+TBYzrxHLHQc3cWhUGhy98jYxbgtGAvoelzjPlA8pyHX11/wzSuWEHx+avIwY/+PW5J nXBsxvJGLvG3J2n1wCy58La1DbL/yP+OueTm+HVnLConYXreMxiIC80OVjTPmM9IFVKr5Ff6Fu/ O3t4QS8Yfa7MAN97US+uDRb/BRxR8ZrJvKhy8Q/CF6qmBwqMbO6jhtoPz0MSLA= X-Google-Smtp-Source: AGHT+IEgSlLBBOwqUC1jV3bjP3eo1gZpcF+Q9te4uLm6f3CUXRBpY57GbW4hB73b7PRXBSP6okirJw== X-Received: by 2002:a05:622a:20a:b0:4ff:8da6:2289 with SMTP id d75a77b69052e-4ffb48a8a61mr31427481cf.27.1767798024767; Wed, 07 Jan 2026 07:00:24 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-4ffa8d568cbsm34113551cf.11.2026.01.07.07.00.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Jan 2026 07:00:23 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org, Marta Rybczynska , Anton Antonov Subject: [meta-security][PATCH 1/4] suricata: drop trailing whitespace Date: Wed, 7 Jan 2026 10:00:06 -0500 Message-ID: <2fc3c2748b2edafcab27dc38e988f60aaa2991d6.1767797568.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 Jan 2026 15:00:36 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2908 From: Clayton Casciato Signed-off-by: Clayton Casciato Signed-off-by: Scott Murray --- recipes-ids/suricata/suricata_7.0.13.bb | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/recipes-ids/suricata/suricata_7.0.13.bb b/recipes-ids/suricata/suricata_7.0.13.bb index 0635bf3..7298f1b 100644 --- a/recipes-ids/suricata/suricata_7.0.13.bb +++ b/recipes-ids/suricata/suricata_7.0.13.bb @@ -40,18 +40,18 @@ B = "${S}" PACKAGECONFIG ??= "jansson file pcre2 yaml python pcap cap-ng net" PACKAGECONFIG:append = " ${@bb.utils.contains('DISTRO_FEATURES', 'ptest', 'unittests', '', d)}" -PACKAGECONFIG[pcre2] = "--with-libpcre2-includes=${STAGING_INCDIR} --with-libpcre2-libraries=${STAGING_LIBDIR}, ,libpcre2 ," +PACKAGECONFIG[pcre2] = "--with-libpcre2-includes=${STAGING_INCDIR} --with-libpcre2-libraries=${STAGING_LIBDIR}, ,libpcre2 ," PACKAGECONFIG[yaml] = "--with-libyaml-includes=${STAGING_INCDIR} --with-libyaml-libraries=${STAGING_LIBDIR}, ,libyaml ," -PACKAGECONFIG[pcap] = "--with-libpcap-includes=${STAGING_INCDIR} --with-libpcap-libraries=${STAGING_LIBDIR}, ,libpcap" +PACKAGECONFIG[pcap] = "--with-libpcap-includes=${STAGING_INCDIR} --with-libpcap-libraries=${STAGING_LIBDIR}, ,libpcap" PACKAGECONFIG[cap-ng] = "--with-libcap_ng-includes=${STAGING_INCDIR} --with-libcap_ng-libraries=${STAGING_LIBDIR}, ,libcap-ng , " -PACKAGECONFIG[net] = "--with-libnet-includes=${STAGING_INCDIR} --with-libnet-libraries=${STAGING_LIBDIR}, , libnet," +PACKAGECONFIG[net] = "--with-libnet-includes=${STAGING_INCDIR} --with-libnet-libraries=${STAGING_LIBDIR}, , libnet," PACKAGECONFIG[nfnetlink] = "--with-libnfnetlink-includes=${STAGING_INCDIR} --with-libnfnetlink-libraries=${STAGING_LIBDIR}, ,libnfnetlink ," PACKAGECONFIG[nfq] = "--enable-nfqueue, --disable-nfqueue,libnetfilter-queue," PACKAGECONFIG[jansson] = "--with-libjansson-includes=${STAGING_INCDIR} --with-libjansson-libraries=${STAGING_LIBDIR},,jansson, jansson" PACKAGECONFIG[file] = ",,file, file" -PACKAGECONFIG[python] = "--enable-python, --disable-python, python3, python3-core" -PACKAGECONFIG[unittests] = "--enable-unittests, --disable-unittests," +PACKAGECONFIG[python] = "--enable-python, --disable-python, python3, python3-core" +PACKAGECONFIG[unittests] = "--enable-unittests, --disable-unittests," export logdir = "${localstatedir}/log" @@ -81,7 +81,7 @@ oe_cargo_build () { } do_compile () { - # we do this to bypass the make provided by this pkg + # we do this to bypass the make provided by this pkg # patches Makefile to skip the subdir cargo_do_compile From patchwork Wed Jan 7 15:00:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 78212 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2F3D1CFD64E for ; Wed, 7 Jan 2026 15:00:36 +0000 (UTC) Received: from mail-qt1-f176.google.com (mail-qt1-f176.google.com [209.85.160.176]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7744.1767798028662475160 for ; Wed, 07 Jan 2026 07:00:28 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=AcL2TrDb; spf=pass (domain: konsulko.com, ip: 209.85.160.176, mailfrom: scott.murray@konsulko.com) Received: by mail-qt1-f176.google.com with SMTP id d75a77b69052e-4eda6c385c0so15006931cf.3 for ; Wed, 07 Jan 2026 07:00:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1767798027; x=1768402827; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=x/clH+wkBn/fC4aeLEvr8i/eBJOfx0yZ5n7VJtVgrX4=; b=AcL2TrDb/xu6DT+W2pkUxa2eQ7/dDNY0a93Knez7B4o7U/WU8W6CsHvMT2j0ScGaIa 3q/wEgK0NG/IrilR9CrXVVXjuCP6n5Ttr9lNTOdCW1VRynH9cQxz8JSwhhZE2LORXbh0 06QDKnzmebGD9JTGGqkitLNWsNRzsHliDeb1U= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767798027; x=1768402827; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=x/clH+wkBn/fC4aeLEvr8i/eBJOfx0yZ5n7VJtVgrX4=; b=Klr+7cuOwNbCinluldOqTRlrZFl4NE07fut8z+CNPgJhPpsib3RzMQaJwBoPdsfbM6 qWJ71/MuCjRucqWtl6tfkeCw+snqv0vO4pk1Ag3xdo4TtbNWlJFmNDEwjt1iZ25pz18R 0wG9653Xk+GuVVsGhYmb+5aXwtBt7GAKaQUFeTjdUQUlYUekeyuMlW6YO37mthDDXvsK JkLbWaJ1aTLqMZjebwaMsaAoH3HSRsvzzI/vOnSELo9DZRydGoh8zzRnN+/lfYuZmvGj s6w8DUEESpFA3PgygWdKX2VEI+uHyCtV77ZKrQmp0Aq5AGys69wI1FZEdtd6ewgJej/+ ee0A== X-Gm-Message-State: AOJu0YyxoEppLPqzZwGg7EPahTzUzL8fygk4B4rhU+u30W8FTCfTV3iP WH3u+I13nDcxgJvurwbhK7rmH1guBYPtOCJp0pxl86t6sugo575rQykg6iv6Ok6O7QI3T6bNzwD /ijgJ X-Gm-Gg: AY/fxX6yopnr8/QxQqMeopZEOPX9+KJxgEpOxdYQGpeTRjSGUi5oiLMLIwmmaDKtbLq kICqRZbXwbPSycRuUjdCQJ2HRgLmKB15aIwgMx3RH3BpeKdzZP/wwLlM33k7o9c9yPjJl7wlIhZ gv/oTAE/YBqMQFoIVv5JalPJxzVHC7/FUbq3XSjQiLfyWXT6c54nqJuJ28JXB4xJlToTkGq+Pu2 wHhfBmMWAwWe/0KcGm2DNGrHYQNawe5hVRFMscDydRHoYOaBmiGIHJBjaA68AHBIZuPoMnXHHzg lGzA63+V8onSWsHFyNJdegoWXYD2/RYMdB/JJmQHSeMjBpVairDq0cLgdwwks+mVULiO8m6vw+2 Es3Hy2NPwZkPN8MnX6IFlDJenM2f6YCFBD/SvTCd4kmM+wH+o0REmRDFbfuI6jHI8TAJsVe/AYT SYrOBGQZwp0Xpohjcp6fJbAsyfy8npxCn32rCaaVRHbktewdPz8qBte9NjKWyA6dqBGRrD7VTxM n4pBoAicAUrqR2plAG2hSz4SqSwPt1wgIGlOLylDUwLBFCwSq21 X-Google-Smtp-Source: AGHT+IEpRhXM3KiPPHmypSIWzOYSKsmpKGBpA6jtVFTVnnEzgKMLMjorvGb4a6n9nMgenemtj4l3Mg== X-Received: by 2002:a05:622a:88:b0:4ee:7ee:df70 with SMTP id d75a77b69052e-4ffb4a6069emr36978291cf.80.1767798025752; Wed, 07 Jan 2026 07:00:25 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-4ffa8d568cbsm34113551cf.11.2026.01.07.07.00.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Jan 2026 07:00:25 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org, Marta Rybczynska , Anton Antonov Subject: [meta-security][PATCH 2/4] suricata: update PACKAGECONFIG[jansson] option to required Date: Wed, 7 Jan 2026 10:00:07 -0500 Message-ID: <635238de190ed0281fbdecec6ed3a2a517f71bc6.1767797568.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 Jan 2026 15:00:36 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2910 From: Clayton Casciato jansson is required as of Suricata 5.0: https://github.com/OISF/suricata/commit/e49c40428e1b9f7e5dcdb5857c3978d5cb859fd9 This is still required in the latest release: https://github.com/OISF/suricata/blob/suricata-8.0.2/configure.ac#L828 On exclusion attempt: [...] | checking for jansson.h... no | checking for json_dump_callback in -ljansson... no | | ERROR: Jansson is now required. | | Go get it from your distribution or from: | http://www.digip.org/jansson/ | | Ubuntu/Debian: apt install libjansson-dev | CentOS: yum install jansson-devel | Fedora: dnf install jansson-devel | | NOTE: The following config.log files may provide further information. | NOTE: [...]/poky-whinlatter/build/tmp/work/cortexa57-poky-linux/suricata/7.0.13/sources/suricata-7.0.13/config.log | ERROR: configure failed | WARNING: exit code 1 from a shell command. ERROR: Task ([...]/poky-whinlatter/layers/meta-security/recipes-ids/suricata/suricata_7.0.13.bb:do_configure) failed with exit code '1' Signed-off-by: Clayton Casciato Signed-off-by: Scott Murray --- recipes-ids/suricata/suricata_7.0.13.bb | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/recipes-ids/suricata/suricata_7.0.13.bb b/recipes-ids/suricata/suricata_7.0.13.bb index 7298f1b..469e42d 100644 --- a/recipes-ids/suricata/suricata_7.0.13.bb +++ b/recipes-ids/suricata/suricata_7.0.13.bb @@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;beginline=1;endline=2;md5=c70d8d3310941dcdfcd SRC_URI = "http://www.openinfosecfoundation.org/download/suricata-${PV}.tar.gz" SRC_URI[sha256sum] = "bbc94cf0a297f4560c64569ed72867c799287defdaf6e6572ce769f48dd2559b" -DEPENDS = "lz4 libhtp" +DEPENDS = "jansson lz4 libhtp" SRC_URI += " \ file://volatiles.03_suricata \ @@ -27,6 +27,7 @@ EXTRA_OECONF += " --disable-debug \ --enable-non-bundled-htp \ --disable-suricata-update \ --with-libhtp-includes=${STAGING_INCDIR} --with-libhtp-libraries=${STAGING_LIBDIR} \ + --with-libjansson-includes=${STAGING_INCDIR} --with-libjansson-libraries=${STAGING_LIBDIR} \ " CARGO_SRC_DIR = "rust" @@ -37,7 +38,7 @@ CARGO_BUILD_FLAGS:append = " --offline" B = "${S}" # nfnetlink has a dependancy to meta-networking -PACKAGECONFIG ??= "jansson file pcre2 yaml python pcap cap-ng net" +PACKAGECONFIG ??= "file pcre2 yaml python pcap cap-ng net" PACKAGECONFIG:append = " ${@bb.utils.contains('DISTRO_FEATURES', 'ptest', 'unittests', '', d)}" PACKAGECONFIG[pcre2] = "--with-libpcre2-includes=${STAGING_INCDIR} --with-libpcre2-libraries=${STAGING_LIBDIR}, ,libpcre2 ," @@ -48,7 +49,6 @@ PACKAGECONFIG[net] = "--with-libnet-includes=${STAGING_INCDIR} --with-libnet-lib PACKAGECONFIG[nfnetlink] = "--with-libnfnetlink-includes=${STAGING_INCDIR} --with-libnfnetlink-libraries=${STAGING_LIBDIR}, ,libnfnetlink ," PACKAGECONFIG[nfq] = "--enable-nfqueue, --disable-nfqueue,libnetfilter-queue," -PACKAGECONFIG[jansson] = "--with-libjansson-includes=${STAGING_INCDIR} --with-libjansson-libraries=${STAGING_LIBDIR},,jansson, jansson" PACKAGECONFIG[file] = ",,file, file" PACKAGECONFIG[python] = "--enable-python, --disable-python, python3, python3-core" PACKAGECONFIG[unittests] = "--enable-unittests, --disable-unittests," @@ -138,4 +138,6 @@ PACKAGES =+ "${PN}-python" FILES:${PN} += "${systemd_unitdir} ${sysconfdir}/tmpfiles.d" FILES:${PN}-python = "${bindir}/suricatasc ${PYTHON_SITEPACKAGES_DIR}" +RDEPENDS:${PN} += "jansson" + CONFFILES:${PN} = "${sysconfdir}/suricata/suricata.yaml" From patchwork Wed Jan 7 15:00:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 78211 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2330ECFD64C for ; Wed, 7 Jan 2026 15:00:36 +0000 (UTC) Received: from mail-qk1-f172.google.com (mail-qk1-f172.google.com [209.85.222.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7743.1767798028464234186 for ; Wed, 07 Jan 2026 07:00:28 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=hZmxNXPw; spf=pass (domain: konsulko.com, ip: 209.85.222.172, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f172.google.com with SMTP id af79cd13be357-8b1e54aefc5so183273285a.1 for ; Wed, 07 Jan 2026 07:00:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1767798027; x=1768402827; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Vx7rsy22l8dLMMMSftoNDtb2O19BkozeoTD7M9PIltI=; b=hZmxNXPwIwfSC7+0VzC/ZqD3ydNP6rsMT6bnt+qeiEK4LTmonGN3nGnqs2bdbvMBlu 1O3WldGaCop7n1uH+PS1q86QVFZHo40h2bSe5MfNlxMUUcjeUSRZEcT9X3GCpEsxpelZ 9ivZNpefrq9CxrUTyWYBmSVReJgv8k1LJ8bSA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767798027; x=1768402827; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=Vx7rsy22l8dLMMMSftoNDtb2O19BkozeoTD7M9PIltI=; b=QNx13PAO5mIG80x1hqmAEc4IdE06cI75Zy/9LFZJLFPuApr81YJacdg+XxwbflXduT J6SQxtGCV5J0nj2pSlAGEVUfEeL3xdxeXsNWY0vj8IN6E89OMZpsmyYF3YxCg22+XrOW b9SKClIYRNKPcj+1NVa2U2P9LLyMfTQ256HDUjYJdyqZ8FtVKXkl03IJmXyqb1HxIazm Ijv2MKIAEII7wUrBaNcm+hrHMk6Qf0wb6eQ724qJjf6kJjcRqU52eUWI/X+FXKLOWgTh vZ2dXurPH53b6b7Up8b3IXnjE5W7eZH4TnjzJgQYfHg4aZ58mWWwGxB77NPcI9aGWHcc V/jg== X-Gm-Message-State: AOJu0Yw8a0xHLyY14IFg2LPv0K/uT6s3qitV9OTr4MFSie3OWUmqTuwm RJOTNQ+JAbDlxGHmBX6u6kP7zhQWbDrtveibdp/itMRMIm0czOZxDiXCqLEqh81FKQVghPb0t+H 3flHx X-Gm-Gg: AY/fxX6nszjNrtkjX6iAdquipQQRZjd+yuhls4l3y3wnHUcbHVsQ9hiAUzLxGgx8n8+ 9N/Ofs8nNUHENe+EGvRB6PBH1bUefYRKS3JLCPa5Z88TutKWqn06MpoUIvdnRHdIjcJyoxPjgXY 8TWDwx9JKsyCOvjQ53uChD4a2hH52KLral8tyOEDsZx6QyxyjS8g3Hn9Qzi97vfuJhZE4JtSivX +fnT3p5stUJB7wz1QEqZysGfFKoqSg+gmw5xwi/LeRtXunu2TOA89sDMxO967NLRSaH2kYc9CKp Q/IQlSpMT5ZITXtFqF4SW5QS3BpUCPBCY0LxTk46D1C/VmsyGz6KbhVh7SoX/7N8/GrxBX+XpCV tyPtumbyMm4K8V2M7OuGip5pZmzL3i6CfNQMsCaS+AhRiIVIyGQ0/FxJUbtvkc1XVsj/k5eGOpi VJyZpoTWpVCmVaNdmMOnMVzef1ich/ZmundSMh2YoQuDasm0UeGyp5GxCGhscs62BGPi5AI1kX6 MK/ogxUWE6oTKKWHhkX0FEv+W2Z/3W7C4KBsiEcF3XDQ8jgasn6no/pcMje/uI= X-Google-Smtp-Source: AGHT+IHxuDKlDUmI9gkBEueh4EvpFboxTltoYpgVhnxozw3MrTbBGOOi/7b2eX7N3mHrIGps5UaInQ== X-Received: by 2002:a05:622a:1a86:b0:4e6:ebe3:9403 with SMTP id d75a77b69052e-4ffb4a6d332mr35231341cf.41.1767798026479; Wed, 07 Jan 2026 07:00:26 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-4ffa8d568cbsm34113551cf.11.2026.01.07.07.00.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Jan 2026 07:00:26 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org, Marta Rybczynska , Anton Antonov Subject: [meta-security][PATCH 3/4] meta-parsec: Remove meta-clang dependency Date: Wed, 7 Jan 2026 10:00:08 -0500 Message-ID: <7d0ae0d688d34c1574530cb93c12323ac48f1bb3.1767797568.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 Jan 2026 15:00:36 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2909 Since clang is in openembedded-core now, meta-parsec no longer needs meta-clang. Also updated maintainers in meta-parsec README.md since it had previously been missed. Signed-off-by: Scott Murray --- kas/kas-security-parsec.yml | 4 ---- meta-parsec/README.md | 6 ++---- meta-parsec/conf/layer.conf | 2 +- 3 files changed, 3 insertions(+), 9 deletions(-) diff --git a/kas/kas-security-parsec.yml b/kas/kas-security-parsec.yml index 9a009be..c44a280 100644 --- a/kas/kas-security-parsec.yml +++ b/kas/kas-security-parsec.yml @@ -8,10 +8,6 @@ repos: layers: meta-parsec: - meta-clang: - url: https://github.com/kraj/meta-clang.git - refspec: master - local_conf_header: meta-parsec: | IMAGE_INSTALL:append = " parsec-service parsec-tool" diff --git a/meta-parsec/README.md b/meta-parsec/README.md index a5472ae..913bba7 100644 --- a/meta-parsec/README.md +++ b/meta-parsec/README.md @@ -14,9 +14,6 @@ This layer depends on: URI git://git.yoctoproject.org/meta-security branch: master - URI https://github.com/kraj/meta-clang.git - branch: master - Adding the meta-parsec layer to your build ========================================== @@ -32,7 +29,6 @@ other layers needed. e.g.: /path/to/yocto/meta-yocto-bsp \ /path/to/meta-openembedded/meta-oe \ /path/to/meta-openembedded/meta-python \ - /path/to/meta-clang \ /path/to/meta-security/meta-tpm \ /path/to/meta-security/meta-parsec \ " @@ -257,6 +253,8 @@ $ git config format.subjectPrefix meta-parsec][PATCH Now you can just do 'git send-email origin/master' to send all local patches. Maintainers: Anton Antonov + Scott Murray + Marta Rybczynska License diff --git a/meta-parsec/conf/layer.conf b/meta-parsec/conf/layer.conf index 29a8f11..39d1265 100644 --- a/meta-parsec/conf/layer.conf +++ b/meta-parsec/conf/layer.conf @@ -10,7 +10,7 @@ BBFILE_PRIORITY_parsec-layer = "5" LAYERSERIES_COMPAT_parsec-layer = "whinlatter walnascar scarthgap" -LAYERDEPENDS_parsec-layer = "core clang-layer" +LAYERDEPENDS_parsec-layer = "core" BBLAYERS_LAYERINDEX_NAME_parsec-layer = "meta-parsec" addpylib ${LAYERDIR}/lib oeqa From patchwork Wed Jan 7 15:00:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 78213 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 40E48CFD64E for ; Wed, 7 Jan 2026 15:06:36 +0000 (UTC) Received: from mail-oa1-f50.google.com (mail-oa1-f50.google.com [209.85.160.50]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7899.1767798394694782818 for ; Wed, 07 Jan 2026 07:06:34 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=lGLkOJkV; spf=pass (domain: konsulko.com, ip: 209.85.160.50, mailfrom: scott.murray@konsulko.com) Received: by mail-oa1-f50.google.com with SMTP id 586e51a60fabf-3ff4acb6eebso1394425fac.0 for ; Wed, 07 Jan 2026 07:06:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1767798394; x=1768403194; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=NI0yPXRV/evikperq6Q8CsWur3ENe6yy5LSAnaz+It0=; b=lGLkOJkVotAstPsQxuPHA9/MDmWswifqJTsgC25wMjLjh4rvBSz2sbsIRUq/PCQR0i dZurT+192HBdOt2azqiBm5Ld4aEcnuz58urqWs1Uqf6+ZroQVBG0oHrXfsx9R0gUBgdi s8rA+SacQS0u9mdQN0ldGZNPjYUUeixuVylfU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767798394; x=1768403194; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=NI0yPXRV/evikperq6Q8CsWur3ENe6yy5LSAnaz+It0=; b=TDN0dOEOeUMYWJcW8WeymOX9m1Yj7GNu/3GrsMmvXubFbhBQ8NeUuNvg7H/cRbqkUE p0hCv6TlvXoFZKOvER0o6Y5u8dDLz8v4Wl3BLRtC2DuCTbF4rH6AbnFv9t/46T3TQCZ7 jrIHqjwbIC9hWq7g/MdYUTYWL3c4NG2id7vO96QzAUQhMhgVHbcS76O4REOGgX2PmN4n zZ2O1jHLx3X0XOhrGOqhAa0AP4B6jq9nI3wVZi4Kb1/wJP3xm/qdGxlHqImGatTusPL8 Ja2CZ1f9LsJyBEIB2E14xtvUaH/fUNK22AoqJlE7sAqsk/x1H8JMWdPzGcvhUOMRH3Kg AqEQ== X-Gm-Message-State: AOJu0Yxg/UXKZAP/ZDUDxASzWr/SnXiqrs/KST900TJo7kin9/RvVvUX N+OY7QtVojJxP5Iwlxf2Noqr2emgkrZbYBWemj2DJ4joYs82L/Fh0zXcPMBDSNeaXAeZxchPrCf FiYlf X-Gm-Gg: AY/fxX540YKEaPVjiWXzbtCRabI/+I9Zv/nApnKv7LcQiJOPo7e6KP9D3hibHJULjOI hl9cX/NCNf2qiiDWJssGrwTNQRsrV1ROr+J6r9OGo82O+kFEr8hoj1CY1dxErTFUDzOmfLFw7Iw RxGZj3iBovZ9nKbxXw6r6HzFaqauobIOzwma9KPEff20Lf4gH6Zwsyd5+GAw5Cwv/GOfUksT6H7 nkpVMRSl5Cuj7tu73xC4w3/SiNLnoN6PQ9mRPvJgALWbdvGvxOUSyYxXpCIX5L8Stj1RdXy0CX3 M+KOpwTypd/XekqAPjS4C5KjfyDbu9NaDfMk6aglVA4fDpx8g5WT2+FWg12djob+7/qjGL0BA27 8baHXkiqwE6aiGONOrj2a55oRJ7aesNmM6/B9l8ZDEGm7j8Nt01/ffFQvvYdPQpVtdlZpOJE3QY Idt+IivS8IJ/byLCrM0Z+8Df35nwCpdbMOeM5RwWqIbTWZwXE0O/FD2BPgfFwiCYnS8Px/C794J 2ZYSm8vtPgPylCLrSIaZpRLePE+91g31BIhHMqzX2Khu3LXZJ96 X-Google-Smtp-Source: AGHT+IEacILGCCmwMk5J5OzYcizllgsn+4ThM88FOT9c7x0TDpDiJYTZKr/XKyHWG8+8IOQJ5kU7GQ== X-Received: by 2002:a05:622a:283:b0:4ff:b2cb:a44c with SMTP id d75a77b69052e-4ffb4a7006cmr35173281cf.83.1767798027389; Wed, 07 Jan 2026 07:00:27 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-4ffa8d568cbsm34113551cf.11.2026.01.07.07.00.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Jan 2026 07:00:27 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org, Marta Rybczynska , Anton Antonov Subject: [meta-security][PATCH 4/4] Update kas configuration Date: Wed, 7 Jan 2026 10:00:09 -0500 Message-ID: X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 Jan 2026 15:06:36 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2911 Changes to catch up with current kas and future-proof a bit: * Update the kas configuration file versions to 19 to match kas 4.8.x. * Change refspec to branch to remove deprecation warnings. * Add quoting around URLs to match upstream examples. Signed-off-by: Scott Murray --- kas/kas-security-alt.yml | 2 +- kas/kas-security-base.yml | 18 +++++++++--------- kas/kas-security-dm.yml | 2 +- kas/kas-security-parsec.yml | 2 +- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/kas/kas-security-alt.yml b/kas/kas-security-alt.yml index 8f754ac..2a449c5 100644 --- a/kas/kas-security-alt.yml +++ b/kas/kas-security-alt.yml @@ -1,5 +1,5 @@ header: - version: 9 + version: 19 includes: - kas-security-base.yml diff --git a/kas/kas-security-base.yml b/kas/kas-security-base.yml index 8954896..2ab81aa 100644 --- a/kas/kas-security-base.yml +++ b/kas/kas-security-base.yml @@ -1,5 +1,5 @@ header: - version: 9 + version: 19 distro: poky @@ -12,27 +12,27 @@ repos: meta-hardening: bitbake: - url: https://git.openembedded.org/bitbake - refspec: master + url: "https://git.openembedded.org/bitbake" + branch: master layers: .: disabled openembedded-core: - url: https://git.openembedded.org/openembedded-core - refspec: master + url: "https://git.openembedded.org/openembedded-core" + branch: master layers: meta: poky: - url: https://git.yoctoproject.org/git/meta-yocto - refspec: master + url: "https://git.yoctoproject.org/git/meta-yocto" + branch: master layers: meta-poky: meta-yocto-bsp: meta-openembedded: - url: http://git.openembedded.org/meta-openembedded - refspec: master + url: "http://git.openembedded.org/meta-openembedded" + branch: master layers: meta-oe: meta-perl: diff --git a/kas/kas-security-dm.yml b/kas/kas-security-dm.yml index c03b336..fe74d25 100644 --- a/kas/kas-security-dm.yml +++ b/kas/kas-security-dm.yml @@ -1,5 +1,5 @@ header: - version: 9 + version: 19 includes: - kas-security-base.yml diff --git a/kas/kas-security-parsec.yml b/kas/kas-security-parsec.yml index c44a280..54bf96e 100644 --- a/kas/kas-security-parsec.yml +++ b/kas/kas-security-parsec.yml @@ -1,5 +1,5 @@ header: - version: 9 + version: 19 includes: - kas-security-base.yml