<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugzilla.yoctoproject.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugzilla.yoctoproject.org/"
          
          maintainer="it-coreprojects-helpdesk@linuxfoundation.org"
>

    <bug>
          <bug_id>5399</bug_id>
          
          <creation_ts>2013-10-28 17:21:44 +0000</creation_ts>
          <short_desc>Analyze Sharing PR server between builders with different metadata</short_desc>
          <delta_ts>2026-07-09 15:19:52 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>7</classification_id>
          <classification>Build System, Metadata &amp; Runtime</classification>
          <product>BitBake</product>
          <component>bitbake</component>
          <version>1.6</version>
          <rep_platform>x86</rep_platform>
          <op_sys>Multiple</op_sys>
          <bug_status>ACCEPTED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard> </status_whiteboard>
          <keywords></keywords>
          <priority>Medium</priority>
          <bug_severity>enhancement</bug_severity>
          <target_milestone>Future</target_milestone>
          
          <blocked>5466</blocked>
    
    <blocked>10564</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Martin Jansa">Martin.Jansa</reporter>
          <assigned_to name="Unassigned">unassigned</assigned_to>
          <cc>alejandro.hernandez</cc>
    
    <cc>alexandru.c.georgescu</cc>
    
    <cc>benjamin.esquivel</cc>
    
    <cc>bluelightning</cc>
    
    <cc>chong.lu</cc>
    
    <cc>jessica.zhang</cc>
    
    <cc>jose.a.lamego</cc>
    
    <cc>joshuagloe</cc>
    
    <cc>juan.m.cruz.alcaraz</cc>
    
    <cc>koen</cc>
    
    <cc>leonardo.sandoval.gonzalez</cc>
    
    <cc>poky.bs.watcher</cc>
    
    <cc>poky.watcher</cc>
    
    <cc>randy.macleod</cc>
    
    <cc>richard.purdie</cc>
    
    <cc>sgw</cc>
    
    <cc>tgamblin</cc>
          
          
          <cf_os>---</cf_os>
          <cf_regression_type>---</cf_regression_type>
          
          <cf_docchange>Yes (doc changes required)</cf_docchange>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>38231</commentid>
    <comment_count>0</comment_count>
    <who name="Martin Jansa">Martin.Jansa</who>
    <bug_when>2013-10-28 17:21:44 +0000</bug_when>
    <thetext>Alias access-control for PR server.

It&apos;s not only about restricting write-access to anonymous users, it&apos;s more complicated than that, because it&apos;s not clear what such user should do when his signature is different than what PR server has.

One way is to add another level in EXTENDPRAUTO, but using max(from-r/o-pr-server).your-local-AUTOPR value doesn&apos;t work, because your different local signature isn&apos;t always &quot;newer&quot; than what build server has (and you don&apos;t want to downgrade some packages on target device and cause e.g. unresolved .so dependencies).

Right now I&apos;m exposing writable PR server to local users, which has its own pros and cons.

pros:
- it&apos;s safer to let local users to &quot;bump&quot; it because at least they pre-allocate some number from their signature, so I can be sure that official build server won&apos;t build exactly same .ipk with different signatures

cons:
- 1) if you change busybox.bb and it gets EXTENDPRAUTO bump .1 -&gt; .2
  2) some other change in busybox.bb EXTENDPRAUTO bump .2 -&gt; .3
  3) some local user reports that the change from 1) was incorrect and prepares his own solution which integrates change from 1) and fix EXTENDPRAUTO bump .3 -&gt; .4
  4) maintainer reverts 1) but because of 2) gets new EXTENDPRAUTO bump .4 -&gt; .5
  5) maintainer cherry-picks 3) gets old EXTENDPRAUTO value .4 created by local user in step 3), so the fix is never seen by packagemanager as upgrade from .5

Of course you can get EXTENDPRAUTO going backwards a bit easier if you just push something and then revert it without any other changes - but in this case you can be careful and e.g. manually bump PR or something to create new version, but in previous example you usually don&apos;t know that some local user already pre-allocated .4 with his local signature and your feed is just unlucky to match it exactly - it doesn&apos;t happen often, because usually there are other commits which change signatures more quickly.

Honestly I don&apos;t see how to use PR server from multiple builders with possibly different metadata and get 100% reliable binary feed from that.

My current work-around is to copy prserv.sqlite3 as build artifact for my feeds and encourage users to rather use it as one-time import, rather than using PR server directly (I was doing the same with bb_persist_data.sqlite3 for LOCALCOUNT numbers).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>62453</commentid>
    <comment_count>1</comment_count>
    <who name="Leonardo Sandoval Gonzalez">leonardo.sandoval.gonzalez</who>
    <bug_when>2016-05-25 20:43:43 +0000</bug_when>
    <thetext>Due to limited resources, moving this to 2.3</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>67614</commentid>
    <comment_count>2</comment_count>
    <who name="Leonardo Sandoval Gonzalez">leonardo.sandoval.gonzalez</who>
    <bug_when>2016-10-26 21:54:36 +0000</bug_when>
    <thetext>Martin,

do you know if this issue still apply on 2.2? I am trying to make an space to work on this one and understand current status.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>76237</commentid>
    <comment_count>3</comment_count>
    <who name="Juan Manuel Cruz Alcaraz">juan.m.cruz.alcaraz</who>
    <bug_when>2017-08-29 15:18:30 +0000</bug_when>
    <thetext>(In reply to comment #2)
&gt; Martin,
&gt; 
&gt; do you know if this issue still apply on 2.2? I am trying to make an space
&gt; to work on this one and understand current status.

Martin, does this still apply on 2.5.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>76241</commentid>
    <comment_count>4</comment_count>
    <who name="Martin Jansa">Martin.Jansa</who>
    <bug_when>2017-08-29 15:25:41 +0000</bug_when>
    <thetext>Yes, it still does apply to 2.5.

I don&apos;t use binary feeds anymore, but for anyone who cares about upgrade path in binary feed it&apos;s still broken.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>76245</commentid>
    <comment_count>5</comment_count>
    <who name="Juan Manuel Cruz Alcaraz">juan.m.cruz.alcaraz</who>
    <bug_when>2017-08-29 15:49:45 +0000</bug_when>
    <thetext>*** Bug 10564 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>99105</commentid>
    <comment_count>6</comment_count>
    <who name="Trevor Gamblin">tgamblin</who>
    <bug_when>2024-05-30 15:11:30 +0000</bug_when>
    <thetext>This is still relevant to binary distro work.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>