Bug 7476

Summary: Improve license manifest description
Product: [Documentation] Development Manual Reporter: Paul Eggleton <bluelightning>
Component: developmentAssignee: Simone Weiß <simone.p.weiss>
Status: RESOLVED FIXED QA Contact:
Severity: enhancement    
Priority: Medium CC: bluelightning, elizabeth.flanagan, idadelm, paul, randy.macleod, ross.burton, sgw, simone.p.weiss, tracy.graydon, vineela.tummalapalli
Version: 1.8   
Target Milestone: Future   
Hardware: All   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: Yes (doc changes required)

Description Paul Eggleton 2015-03-18 10:11:15 UTC
We could do with a bit more detail in the "Maintaining Open Source License Compliance..." section in the dev manual. In particular, we need to decribe exactly what files we write out for images and packages and what they should be expected to contain.
Comment 1 Scott Rifenbark 2016-03-22 18:16:08 UTC
Tracy... Once I have this information I can get it into the dev-manual. 

Thanks, 
Scott
Comment 2 Mark Morton 2020-05-06 09:38:31 UTC
This bug is five years old - where can I get current information concerning the open source files and packages? Does the archiver class not fit this requirement? See https://www.yoctoproject.org/docs/3.1/mega-manual/mega-manual.html#maintaining-open-source-license-compliance-during-your-products-lifecycle
Comment 3 Stephen K Jolley 2020-05-07 07:24:16 UTC
Vineela,

Can you answer Mark's question?
Comment 4 Randy MacLeod 2020-05-07 07:53:47 UTC
Paul do you have any tips for Mark?
Comment 5 Vineela 2020-06-03 15:53:50 UTC
The content in Mega manual to me looks good.
Paul can you please provide the required inputs.
Comment 6 Randy MacLeod 2020-06-04 07:59:51 UTC
Looking for someone to work on this bug.
Comment 7 Ida Delphine 2020-10-12 03:19:15 UTC
Will love to work on this bug.
Comment 8 Ida Delphine 2020-10-12 03:23:02 UTC
(In reply to comment #6)
> Looking for someone to work on this bug.

Will love to.
Comment 9 Ross Burton 2022-10-20 15:17:05 UTC
Turns out the relevant section of the documentation does need an update.  Specifically it's been expanded a lot since this bug was filed, but now recommends using meta-spdxscanner instead of the integrated SPDX class.

https://docs.yoctoproject.org/dev-manual/common-tasks.html#providing-spdx-files
Comment 10 Simone Weiß 2024-01-24 21:30:35 UTC
(In reply to Ross Burton from comment #9)
> Turns out the relevant section of the documentation does need an update. 
> Specifically it's been expanded a lot since this bug was filed, but now
> recommends using meta-spdxscanner instead of the integrated SPDX class.
> 
> https://docs.yoctoproject.org/dev-manual/common-tasks.html#providing-spdx-
> files

Checked the current state of the documentation. https://docs.yoctoproject.org/dev/dev-manual/sbom.html#creating-a-software-bill-of-materials already recommends to use SPDX class. I would consider the Bug as obsolete/fixed already. Ross if you agree, I would suggest closing this bug, else a hint what is missing would be appreciated.
Comment 11 Simone Weiß 2024-02-02 05:40:11 UTC
OK checked docu vs create-spdx.bbclass. It is potrayed in the manual that just inheriting create-spdx in the conf will produce a spdx.json in ´ tmp/deploy/images/MACHINE/. That is not where I found the json on trying, it was in tmp/deploy/spdx/MACHINE not in images. At least that I will update for the documentation.
Comment 12 Simone Weiß 2024-02-05 16:01:10 UTC
Checked again with clean workspace, will just add notes for the new talk and reformat the options to make them more clear.
Comment 13 Randy MacLeod 2025-02-14 16:46:22 UTC
bulk change to add Saul's non-WR address.
Comment 14 Randy MacLeod 2025-02-14 16:48:24 UTC
Bulk change: Remove Saul's old WR address.