15843 2025-04-27 16:08:31 +0000 create-spdx-2.2.bbclass broken 2026-03-12 15:21:38 +0000 1 1 7 Build System, Metadata & Runtime OE-Core oe-core other 5.2 x86 Multiple RESOLVED NOTABUG Medium major 5.3 1 michael.opdenacker JPEWhacker ccasciato JPEWhacker michael.opdenacker randy.macleod --- --- Don't know oldest_to_newest 101757 0 5114 michael.opdenacker 2025-04-27 16:08:31 +0000 Created attachment 5114 create-spdx-2.2 error log Greetings, It seems that create-spdx-2.2.bbclass is broken now. When I try to build "core-image-minimal" on poky master, I get this error: Exception: FileNotFoundError: [Errno 2] No such file or directory: '/home/mike/work/yocto/poky/build/tmp/deploy/spdx/3.0.1/core2-64/packages/nettle-src.spdx.json' Time to stop maintaining this version of the class? Cheers Michael 101850 1 randy.macleod 2025-05-01 14:39:44 +0000 Joshua to comment on the mix of spdx2/3. 101851 2 JPEWhacker 2025-05-01 14:44:16 +0000 Something doesn't add up here, because the error file is SPDX 3.0.1, not SPDX 2.2. I'm wondering if maybe you didn't switch from SPDX 3 to SPDX 2 properly? 101860 3 michael.opdenacker 2025-05-01 15:53:01 +0000 Hi Joshua I confirm I have this issue with just this in conf/local.conf: INHERIT += "create-spdx-2.2" Can you try to reproduce this? Cheers Michael. 101861 4 JPEWhacker 2025-05-01 18:29:04 +0000 Ya, I think you're getting both SPDX 2.2 and SPDX 3.0 at the same time (which is not supported). Try adding: INHERIT:remove = "create-spdx" To remove the creation of the default SPDX 3.0. I realize this is probably not ideal, but we've not really had a good proposal for how to let users choose this. 101868 5 michael.opdenacker 2025-05-03 12:44:17 +0000 Hi Joshua I confirm that your suggestion works. I'll post an update to the documentation to make users aware of this. Thanks! Michael. 101869 6 michael.opdenacker 2025-05-03 13:26:55 +0000 By the way, comparing with the current documentation, to update it. I no longer see a toplevel <IMAGE>-<MACHINE>.spdx.json file but only tmp/deploy/images/<machine>/<image>-<machine>.rootfs.spdx.tar.zst archive of indidividual JSON files. Is this the expected output for SPDX 2.2? 104615 7 randy.macleod 2026-03-12 15:21:38 +0000 See previous comments. 5114 2025-04-27 16:08:31 +0000 2025-04-27 16:08:31 +0000 create-spdx-2.2 error log create-spdx-2.2.log text/x-log 3090 michael.opdenacker REVCVUc6IEV4ZWN1dGluZyBweXRob24gZnVuY3Rpb24gc3N0YXRlX3Rhc2tfcHJlZnVuYwpERUJV RzogUHl0aG9uIGZ1bmN0aW9uIHNzdGF0ZV90YXNrX3ByZWZ1bmMgZmluaXNoZWQKREVCVUc6IEV4 ZWN1dGluZyBweXRob24gZnVuY3Rpb24gZG9fY3JlYXRlX3J1bnRpbWVfc3BkeApERUJVRzogRXhl Y3V0aW5nIHB5dGhvbiBmdW5jdGlvbiByZWFkX3N1YnBhY2thZ2VfbWV0YWRhdGEKREVCVUc6IFB5 dGhvbiBmdW5jdGlvbiByZWFkX3N1YnBhY2thZ2VfbWV0YWRhdGEgZmluaXNoZWQKRVJST1I6IEVy cm9yIGV4ZWN1dGluZyBhIHB5dGhvbiBmdW5jdGlvbiBpbiBleGVjX2Z1bmNfcHl0aG9uKCkgYXV0 b2dlbmVyYXRlZDoKClRoZSBzdGFjayB0cmFjZSBvZiBweXRob24gY2FsbHMgdGhhdCByZXN1bHRl ZCBpbiB0aGlzIGV4Y2VwdGlvbi9mYWlsdXJlIHdhczoKRmlsZTogJ2V4ZWNfZnVuY19weXRob24o KSBhdXRvZ2VuZXJhdGVkJywgbGluZW5vOiAyLCBmdW5jdGlvbjogPG1vZHVsZT4KICAgICAwMDAx OgogKioqIDAwMDI6ZG9fY3JlYXRlX3J1bnRpbWVfc3BkeChkKQogICAgIDAwMDM6CkZpbGU6ICcv aG9tZS9taWtlL3dvcmsveW9jdG8vcG9reS9tZXRhL2NsYXNzZXMvY3JlYXRlLXNwZHgtMi4yLmJi Y2xhc3MnLCBsaW5lbm86IDYzNywgZnVuY3Rpb246IGRvX2NyZWF0ZV9ydW50aW1lX3NwZHgKICAg ICAwNjMzOiAgICAgICAgICAgICAgICBjb250aW51ZQogICAgIDA2MzQ6CiAgICAgMDYzNTogICAg ICAgICAgICBwa2dfc3BkeF9wYXRoID0gb2Uuc2JvbS5kb2NfcGF0aChkZXBsb3lfZGlyX3NwZHgs IHBrZ19uYW1lLCBwa2dfYXJjaCwgInBhY2thZ2VzIikKICAgICAwNjM2OgogKioqIDA2Mzc6ICAg ICAgICAgICAgcGFja2FnZV9kb2MsIHBhY2thZ2VfZG9jX3NoYTEgPSBvZS5zYm9tLnJlYWRfZG9j KHBrZ19zcGR4X3BhdGgpCiAgICAgMDYzODoKICAgICAwNjM5OiAgICAgICAgICAgIGZvciBwIGlu IHBhY2thZ2VfZG9jLnBhY2thZ2VzOgogICAgIDA2NDA6ICAgICAgICAgICAgICAgIGlmIHAubmFt ZSA9PSBwa2dfbmFtZToKICAgICAwNjQxOiAgICAgICAgICAgICAgICAgICAgc3BkeF9wYWNrYWdl ID0gcApGaWxlOiAnL2hvbWUvbWlrZS93b3JrL3lvY3RvL3Bva3kvbWV0YS9saWIvb2Uvc2JvbS5w eScsIGxpbmVubzogMTA5LCBmdW5jdGlvbjogcmVhZF9kb2MKICAgICAwMTA1OiAgICAgICAgZWxz ZToKICAgICAwMTA2OiAgICAgICAgICAgIHdpdGggZm4ub3BlbigicmIiKSBhcyBmOgogICAgIDAx MDc6ICAgICAgICAgICAgICAgIHlpZWxkIGYKICAgICAwMTA4OgogKioqIDAxMDk6ICAgIHdpdGgg Z2V0X2ZpbGUoKSBhcyBmOgogICAgIDAxMTA6ICAgICAgICBzaGExID0gaGFzaGxpYi5zaGExKCkK ICAgICAwMTExOiAgICAgICAgd2hpbGUgVHJ1ZToKICAgICAwMTEyOiAgICAgICAgICAgIGNodW5r ID0gZi5yZWFkKDQwOTYpCiAgICAgMDExMzogICAgICAgICAgICBpZiBub3QgY2h1bms6CkZpbGU6 ICcvdXNyL2xpYi9weXRob24zLjEyL2NvbnRleHRsaWIucHknLCBsaW5lbm86IDEzNywgZnVuY3Rp b246IF9fZW50ZXJfXwogICAgIDAxMzM6ICAgICAgICAjIGRvIG5vdCBrZWVwIGFyZ3MgYW5kIGt3 ZHMgYWxpdmUgdW5uZWNlc3NhcmlseQogICAgIDAxMzQ6ICAgICAgICAjIHRoZXkgYXJlIG9ubHkg bmVlZGVkIGZvciByZWNyZWF0aW9uLCB3aGljaCBpcyBub3QgcG9zc2libGUgYW55bW9yZQogICAg IDAxMzU6ICAgICAgICBkZWwgc2VsZi5hcmdzLCBzZWxmLmt3ZHMsIHNlbGYuZnVuYwogICAgIDAx MzY6ICAgICAgICB0cnk6CiAqKiogMDEzNzogICAgICAgICAgICByZXR1cm4gbmV4dChzZWxmLmdl bikKICAgICAwMTM4OiAgICAgICAgZXhjZXB0IFN0b3BJdGVyYXRpb246CiAgICAgMDEzOTogICAg ICAgICAgICByYWlzZSBSdW50aW1lRXJyb3IoImdlbmVyYXRvciBkaWRuJ3QgeWllbGQiKSBmcm9t IE5vbmUKICAgICAwMTQwOgogICAgIDAxNDE6ICAgIGRlZiBfX2V4aXRfXyhzZWxmLCB0eXAsIHZh bHVlLCB0cmFjZWJhY2spOgpGaWxlOiAnL2hvbWUvbWlrZS93b3JrL3lvY3RvL3Bva3kvbWV0YS9s aWIvb2Uvc2JvbS5weScsIGxpbmVubzogMTA2LCBmdW5jdGlvbjogZ2V0X2ZpbGUKICAgICAwMTAy OiAgICBkZWYgZ2V0X2ZpbGUoKToKICAgICAwMTAzOiAgICAgICAgaWYgaXNpbnN0YW5jZShmbiwg aW8uSU9CYXNlKToKICAgICAwMTA0OiAgICAgICAgICAgIHlpZWxkIGZuCiAgICAgMDEwNTogICAg ICAgIGVsc2U6CiAqKiogMDEwNjogICAgICAgICAgICB3aXRoIGZuLm9wZW4oInJiIikgYXMgZjoK ICAgICAwMTA3OiAgICAgICAgICAgICAgICB5aWVsZCBmCiAgICAgMDEwODoKICAgICAwMTA5OiAg ICB3aXRoIGdldF9maWxlKCkgYXMgZjoKICAgICAwMTEwOiAgICAgICAgc2hhMSA9IGhhc2hsaWIu c2hhMSgpCkZpbGU6ICcvdXNyL2xpYi9weXRob24zLjEyL3BhdGhsaWIucHknLCBsaW5lbm86IDEw MTUsIGZ1bmN0aW9uOiBvcGVuCiAgICAgMTAxMTogICAgICAgIHRoZSBidWlsdC1pbiBvcGVuKCkg ZnVuY3Rpb24gZG9lcy4KICAgICAxMDEyOiAgICAgICAgIiIiCiAgICAgMTAxMzogICAgICAgIGlm ICJiIiBub3QgaW4gbW9kZToKICAgICAxMDE0OiAgICAgICAgICAgIGVuY29kaW5nID0gaW8udGV4 dF9lbmNvZGluZyhlbmNvZGluZykKICoqKiAxMDE1OiAgICAgICAgcmV0dXJuIGlvLm9wZW4oc2Vs ZiwgbW9kZSwgYnVmZmVyaW5nLCBlbmNvZGluZywgZXJyb3JzLCBuZXdsaW5lKQogICAgIDEwMTY6 CiAgICAgMTAxNzogICAgZGVmIHJlYWRfYnl0ZXMoc2VsZik6CiAgICAgMTAxODogICAgICAgICIi IgogICAgIDEwMTk6ICAgICAgICBPcGVuIHRoZSBmaWxlIGluIGJ5dGVzIG1vZGUsIHJlYWQgaXQs IGFuZCBjbG9zZSB0aGUgZmlsZS4KRXhjZXB0aW9uOiBGaWxlTm90Rm91bmRFcnJvcjogW0Vycm5v IDJdIE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnk6ICcvaG9tZS9taWtlL3dvcmsveW9jdG8vcG9r eS9idWlsZC90bXAvZGVwbG95L3NwZHgvMy4wLjEvY29yZTItNjQvcGFja2FnZXMvbmV0dGxlLXNy Yy5zcGR4Lmpzb24nCgpERUJVRzogUHl0aG9uIGZ1bmN0aW9uIGRvX2NyZWF0ZV9ydW50aW1lX3Nw ZHggZmluaXNoZWQK