<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugzilla.yoctoproject.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugzilla.yoctoproject.org/"
          
          maintainer="it-coreprojects-helpdesk@linuxfoundation.org"
>

    <bug>
          <bug_id>12066</bug_id>
          
          <creation_ts>2017-09-08 04:21:48 +0000</creation_ts>
          <short_desc>Locked signature change triggers taskhash mismatch error</short_desc>
          <delta_ts>2026-02-10 20:08:14 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>7</classification_id>
          <classification>Build System, Metadata &amp; Runtime</classification>
          <product>BitBake</product>
          <component>bitbake</component>
          <version>2.4</version>
          <rep_platform>x86</rep_platform>
          <op_sys>Multiple</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard>RETEST</status_whiteboard>
          <keywords></keywords>
          <priority>Medium+</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>6.0 M2</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Paul Eggleton">bluelightning</reporter>
          <assigned_to name="Randy MacLeod">randy.macleod</assigned_to>
          <cc>poky.bs.watcher</cc>
    
    <cc>poky.watcher</cc>
    
    <cc>randy.macleod</cc>
          
          
          <cf_os>---</cf_os>
          <cf_regression_type>---</cf_regression_type>
          
          <cf_docchange>No (bug/feature does not impact docs)</cf_docchange>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>76680</commentid>
    <comment_count>0</comment_count>
    <who name="Paul Eggleton">bluelightning</who>
    <bug_when>2017-09-08 04:21:48 +0000</bug_when>
    <thetext>If you enable locked signatures and a signature differs, you always get a taskhash mismatch error even if it&apos;s set to warn (or ignore) on mismatch.

A quick example (I picked lighttpd for no particular reason other than it doesn&apos;t have too many dependencies):

--------- snip ---------
SIGGEN_LOCKEDSIGS_TASKSIG_CHECK = &quot;warn&quot;
SIGGEN_LOCKEDSIGS_t-core2-64 = &quot;\
    lighttpd:do_fetch:deadbeefdeadbeefdeadbeefdeadbeef \
    &quot;
SIGGEN_LOCKEDSIGS_TYPES_qemux86-64 = &quot;t-core2-64&quot;
--------- snip ---------

If you run bitbake lighttpd, this generates the expected warning:

WARNING: The lighttpd:do_fetch sig is computed to be 06afc9089e48717a68a2f911c49fa035, but the sig is locked to deadbeefdeadbeefdeadbeefdeadbeef in SIGGEN_LOCKEDSIGS_t-core2-64

However you also get:

ERROR: lighttpd-1.4.45-r0 do_fetch: Taskhash mismatch 06afc9089e48717a68a2f911c49fa035 versus deadbeefdeadbeefdeadbeefdeadbeef for /home/paul/poky/poky/meta/recipes-extended/lighttpd/lighttpd_1.4.45.bb.do_fetch
ERROR: Taskhash mismatch 06afc9089e48717a68a2f911c49fa035 versus deadbeefdeadbeefdeadbeefdeadbeef for /home/paul/poky/poky/meta/recipes-extended/lighttpd/lighttpd_1.4.45.bb.do_fetch

We don&apos;t need to see the latter error - in fact it looks as if we&apos;re getting it twice - perhaps once from cooker and then again from the worker, I&apos;m not sure.

(This is the underlying cause of bug 11883, but we want the signatures to be unlocked in that case so that can be fixed independently of this).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>96790</commentid>
    <comment_count>1</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2023-10-24 14:24:19 +0000</bug_when>
    <thetext>Bulk move from 4.99 or 0.00 to 5.99</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>103606</commentid>
    <comment_count>2</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2025-12-18 16:29:27 +0000</bug_when>
    <thetext>Sundeep, this is likely fixed. Please have someone check.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>104225</commentid>
    <comment_count>3</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2026-02-10 20:08:14 +0000</bug_when>
    <thetext>Resolved as per notes below.
It&apos;s not clear to me which commit fixed the issue and
it&apos;s not worth digging/bisecting since this isn&apos;t a commonly used feature, IMO.
If you want a backport, please ask or better still do the bisect to find the fix commit.

The bug:
  you always get a taskhash mismatch *error* even 
  if it&apos;s set to warn (or ignore) on mismatch.

Test:
❯ cd .../oe-core.git
❯ git log --oneline -1
6ce19709f7 (HEAD -&gt; master, origin/master, origin/HEAD) oe/utils: filter license packages


In a build directory, we can now use bblock:
❯ bblock -t do_fetch lighttpd

# edit the file to change the hash to 0xdeadbeef...beef

❯ cat conf/bblock.conf
# Generated by bblock
SIGGEN_LOCKEDSIGS_TASKSIG_CHECK = &quot;warn&quot;
SIGGEN_LOCKEDSIGS_TYPES += &quot;${PACKAGE_ARCHS}&quot;

SIGGEN_LOCKEDSIGS_x86-64-v3 += &quot;lighttpd:do_fetch:deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef&quot;


--

❯ bitbake lighttpd
Loading cache: 100% |##########################################################################################################################################################| Time: 0:00:00
Loaded 1958 entries from dependency cache.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION           = &quot;2.16.0&quot;
BUILD_SYS            = &quot;x86_64-linux&quot;
NATIVELSBSTRING      = &quot;ubuntu-22.04&quot;
TARGET_SYS           = &quot;x86_64-oe-linux&quot;
MACHINE              = &quot;qemux86-64&quot;
DISTRO               = &quot;nodistro&quot;
DISTRO_VERSION       = &quot;nodistro.0&quot;
TUNE_FEATURES        = &quot;m64 x86-64-v3&quot;
TARGET_FPU           = &quot;&quot;
meta                 = &quot;master:6ce19709f7835ee5cd7915e181f89397975236c8&quot;

Sstate summary: Wanted 10 Local 0 Mirrors 0 Missed 10 Current 395 (0% match, 97% complete)#####################################################################                | ETA:  0:00:00
WARNING: The lighttpd:do_fetch sig is computed to be b9b9a88a9b40b5deee0b2c7120f2487c315f3a4cbd4a476188fcdf21e712542e, but the sig is locked to deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadb3
Initialising tasks: 100% |#####################################################################################################################################################| Time: 0:00:01
NOTE: Executing Tasks
NOTE: Tasks Summary: Attempted 1176 tasks of which 1156 didn&apos;t need to be rerun and all succeeded.

Summary: There was 1 WARNING message.

rmacleod in 🌐 ala-lpggp3 in yocto/b/rust-sdk-target took 22s 
❯ echo $?
0


-------------------------------------------------------------------------

bonus points, check that error works:
# edit file then:
❯ grep error conf/bblock.conf
SIGGEN_LOCKEDSIGS_TASKSIG_CHECK = &quot;error&quot;

❯ bitbake -c cleansstate lighttpd

❯ bitbake lighttpd
Loading cache: 100% |##########################################################################################################################################################| Time: 0:00:00
Loaded 1958 entries from dependency cache.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION           = &quot;2.16.0&quot;
BUILD_SYS            = &quot;x86_64-linux&quot;
NATIVELSBSTRING      = &quot;ubuntu-22.04&quot;
TARGET_SYS           = &quot;x86_64-oe-linux&quot;
MACHINE              = &quot;qemux86-64&quot;
DISTRO               = &quot;nodistro&quot;
DISTRO_VERSION       = &quot;nodistro.0&quot;
TUNE_FEATURES        = &quot;m64 x86-64-v3&quot;
TARGET_FPU           = &quot;&quot;
meta                 = &quot;master:6ce19709f7835ee5cd7915e181f89397975236c8&quot;

Sstate summary: Wanted 10 Local 0 Mirrors 0 Missed 10 Current 395 (0% match, 97% complete)#####################################################################                | ETA:  0:00:00
ERROR: The lighttpd:do_fetch sig is computed to be b9b9a88a9b40b5deee0b2c7120f2487c315f3a4cbd4a476188fcdf21e712542e, but the sig is locked to deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbee3

Summary: There was 1 ERROR message, returning a non-zero exit code.

rmacleod in 🌐 ala-lpggp3 in yocto/b/rust-sdk-target took 4s 
❯ echo $?
1</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>