Re: [Buildroot] Buildroot 2025.02 released

Re: [Buildroot] Buildroot 2025.02 released

[Peter Korsgaard]

>>>>> "Robert" == Robert Smigielski <ptdropper@gmail.com> writes:

Hi Robert,

 > Hi Buildroot team
 > I run a tiny open source project that also supports CycloneDX SBOM
 > generation for Buildroot. I was part of this email channel but had to
 > drop for work reasons.
 > Glad to be back and offer support. The project I participate with is
 > https://github.com/CycloneDX/cyclonedx-buildroot/ and would like to
 > coordinate with you.

Sorry for the slow response, things have been kind of busy here.

Thanks for reaching out! I have used cyclonedx-buildroot in the past
myself. Regarding coordination, can you give an overview of what the
delta is in the output from cyclonedx-buildroot and our
utils/generate-cyclonedx script? I have added Thomas, author of
generate-cyclonedx here as well.

For Buildroot, having a solid SBOM story out of the box is quite nice,
so I would personally prefer to extend generate-cyclonedx if anything is
missing.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] Buildroot 2025.02 released

[Arnout Vandecappelle via buildroot]

On 15/04/2025 09:24, Peter Korsgaard wrote:
>>>>>> "Robert" == Robert Smigielski <ptdropper@gmail.com> writes:
> Hi Robert,
>
>   > Hi Buildroot team
>   > I run a tiny open source project that also supports CycloneDX SBOM
>   > generation for Buildroot. I was part of this email channel but had to
>   > drop for work reasons.
>   > Glad to be back and offer support. The project I participate with is
>   > https://github.com/CycloneDX/cyclonedx-buildroot/ and would like to
>   > coordinate with you.
>
> Sorry for the slow response, things have been kind of busy here.
>
> Thanks for reaching out! I have used cyclonedx-buildroot in the past
> myself. Regarding coordination, can you give an overview of what the
> delta is in the output from cyclonedx-buildroot and our
> utils/generate-cyclonedx script? I have added Thomas, author of
> generate-cyclonedx here as well.

  I compared the two before applying the generate-cyclonedx code. The usage is 
slightly different - generate-cyclonedx expects show-info output as input, while 
cyclonedx-buildroot calls it internally.

  IIRC, the main differences in the output are:

- CVE exclusions are handled differently (or not at all in cyclonedx-buildroot?)

- generate-cyclonedx includes the patch contents, cyclonedx-buildroot just names 
them

- generate-cyclonedx doesn't add a PURL (but Thomas posted a series for that).


>
> For Buildroot, having a solid SBOM story out of the box is quite nice,
> so I would personally prefer to extend generate-cyclonedx if anything is
> missing.

  Yes, I also looked at just integrating cyclonedx-buildroot. However, that has 
quite a few PyPI dependencies, which we don't like to have for in-tree tools. 
generate-cyclonedx works with pure JSON instead of the cyclonedx python library.


  Regards,
  Arnout


_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] Buildroot 2025.02 released

[Robert Smigielski]

[-- Attachment #1.1: Type: text/plain, Size: 391 bytes --]

Hi Buildroot team

I run a small open source project that also supports CycloneDX SBOM
generation for Buildroot. I am a contributing member of the
CylconeDX organization.

Glad to rejoin this group so I can offer support. The project I participate
with is
https://github.com/CycloneDX/cyclonedx-buildroot/ and would like to
coordinate with the Buildroot organization.

-- 
Robert Smigielski

[-- Attachment #1.2: Type: text/html, Size: 530 bytes --]

[-- Attachment #2: Type: text/plain, Size: 150 bytes --]

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] Buildroot 2025.02 released

[Peter Korsgaard]

Hi,

Buildroot 2025.02 is released - Go download it at:

http://buildroot.net/downloads/buildroot-2025.02.tar.gz

or

http://buildroot.net/downloads/buildroot-2025.02.tar.xz

Or get it from Git:

https://gitlab.com/buildroot.org/buildroot.git (2025.02 tag)

Please give it a spin and report any problems to the mailing list or
bug tracker.

Again a fairly active development cycle with more than 1200 changes and
contributions from 110 unique contributors!

Of noteworthy new features/changes we have:

 - utils/generate-cyclonedx script added to generate SBOMs in
   CycloneDX format. To use it, run

       make show-info | utils/generate-cyclonedx > sbom.json

- Nios2 architecture support removed.

- Toolchain:

  - binutils 2.44 added, binutils 2.43.1 becomes the default.

  - gdb 16.1 added, gdb 15.1 becomes the default.

  - glibc 2.41, uclibc-ng 1.0.51

  - Synopsys external ARC toolchains marked as broken as they
    are not "bare" toolchains, causing various build issues

  - ARM external toolchains bumped to 12.4.rel1 and are now also

- Linux: Support device tree overlays and support custom device tree
  files with Linux >= 6.12, which changed the build logic. For this a
  new BR2_LINUX_KERNEL_CUSTOM_DTS_DIR option has been introduced and the
  existing _CUSTOM_DTS_PATH option deprecated.

- New defconfigs: FriendlyARM NanoPi R3S, NXP imx8mm-evk / imx8mm-ddr4 /
  imx8mp-evk / imx93-evk / ls1043a-rdb / ls1046a-rdb, Orangepi 5 plus,
  Polyhex Debix model A, Raspberrypi zero 2w 64bit, Raxda rock 4SE, STM
  STM32MP135F-DK

- New packages: bmap-writer, cpuinfo, cross-ldd, farmhash, fft2d, fp16,
  gemmlowp, libecoli, libglib2-bootstrap, lynis, nxp-bt-wifi-firmware,
  nxp-mwifiex, panel-mipi-dbi-firmware, parsec, psimd, pthreadpool,
  python-aiohttp-sse-client, python-asyncclick, python-changelog-chug,
  python-telnetlib3, python-waitress, qt6graphs, qt6multimedia,
  qt6quick3d, rnnoise, ruy, snooze, tensorflow-lite, usbip, utfcpp,
  wlr-randr, xilinx-embeddedsw, xnnpack

And the usual package version updates and bug fixes. See the CHANGES
file for details:

https://gitlab.com/buildroot.org/buildroot/-/blob/2025.02/CHANGES

Upgrading from 2024.02.x:

In addition to these changes, for people upgrading from 2024.02.x the
most noteworthy changes since that release can be seen in the
announcements for 2024.05, 2024.08 and 2024.11:

2024.05: https://lore.kernel.org/buildroot/87bk46tjk2.fsf@dell.be.48ers.dk/T/#u
2024.08: https://lore.kernel.org/buildroot/87frqcj3nw.fsf@dell.be.48ers.dk/T/#u
2024.11: https://lore.kernel.org/buildroot/87y0zkhumg.fsf@dell.be.48ers.dk/T/#u

Future:

This release will be become our new long term support releases, which
means it will be supported with security and other important fixes until
at least 2026.02 is out. We are working on extending this support period
to 3 years, which requires funding from companies through the LTS
initiative:

        https://mind.be/buildroot-lts/

The previous 2024.02.x LTS release will see at least one more update
before it becomes EOL in April, so start migration to 2025.02 soon.

The next release will be 2025.05. Expect the first release candidate
in early May and the final release at the end of the month.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot