Re: [OE-core][PATCH v5 5/6] Add SPDX deploy tasks to various recipes

[Mikko Rapeli <mikko.rapeli@linaro.org>]

On Mon, Oct 26, 2026 at 03:45:25PM -0600, Joshua Watt via lists.openembedded.org wrote:
> Adds SPDX deploy tasks to many recipes to record their output when
> consumed in an SBoM

I think this should be the default in deploy.bbclass.

The class is used to deploy files to "build output". A lot of BSP etc
recipes use the class for this purpose and they are currently missing in SPDX
output unless some output packages go to image rootfs.

I think capturing too much data in SPDX is less of a problem than not capturing
enough. Thus deploy.bbclass should support SPDX output by default, when SPDX
is enabled.

If there are other very good reasons for not enabling this by default, then
I think the commit message should say that.

Cheers,

-Mikko

> Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
> ---
>  meta/classes-recipe/barebox.bbclass           | 1 +
>  meta/classes-recipe/devicetree.bbclass        | 1 +
>  meta/classes-recipe/kernel-fit-image.bbclass  | 1 +
>  meta/classes-recipe/kernel.bbclass            | 1 +
>  meta/recipes-bsp/grub/grub-efi_2.14.bb        | 1 +
>  meta/recipes-bsp/opensbi/opensbi_1.9.bb       | 1 +
>  meta/recipes-bsp/u-boot/u-boot.inc            | 1 +
>  meta/recipes-core/systemd/systemd-boot_262.bb | 2 +-
>  8 files changed, 8 insertions(+), 1 deletion(-)
> 
> diff --git a/meta/classes-recipe/barebox.bbclass b/meta/classes-recipe/barebox.bbclass
> index 3980849b53..252e97fa65 100644
> --- a/meta/classes-recipe/barebox.bbclass
> +++ b/meta/classes-recipe/barebox.bbclass
> @@ -165,5 +165,6 @@ barebox_do_deploy () {
>          fi
>  }
>  addtask deploy after do_compile
> +SPDX_DEPLOY_TASKS += "do_deploy"
>  
>  EXPORT_FUNCTIONS do_configure do_compile do_install do_deploy
> diff --git a/meta/classes-recipe/devicetree.bbclass b/meta/classes-recipe/devicetree.bbclass
> index 4fe389bed8..affbf115c2 100644
> --- a/meta/classes-recipe/devicetree.bbclass
> +++ b/meta/classes-recipe/devicetree.bbclass
> @@ -166,6 +166,7 @@ devicetree_do_deploy() {
>      done
>  }
>  addtask deploy before do_build after do_install
> +SPDX_DEPLOY_TASKS += "do_deploy"
>  
>  EXPORT_FUNCTIONS do_compile do_install do_deploy
>  
> diff --git a/meta/classes-recipe/kernel-fit-image.bbclass b/meta/classes-recipe/kernel-fit-image.bbclass
> index 7b2bcd4673..d0f7274e70 100644
> --- a/meta/classes-recipe/kernel-fit-image.bbclass
> +++ b/meta/classes-recipe/kernel-fit-image.bbclass
> @@ -260,3 +260,4 @@ do_deploy() {
>      fi
>  }
>  addtask deploy after do_compile before do_build
> +SPDX_DEPLOY_TASKS += "do_deploy"
> diff --git a/meta/classes-recipe/kernel.bbclass b/meta/classes-recipe/kernel.bbclass
> index 0a6d754108..14c71dec54 100644
> --- a/meta/classes-recipe/kernel.bbclass
> +++ b/meta/classes-recipe/kernel.bbclass
> @@ -840,6 +840,7 @@ kernel_do_deploy() {
>  do_deploy[prefuncs] += "read_subpackage_metadata"
>  
>  addtask deploy after do_install do_populate_sysroot do_packagedata
> +SPDX_DEPLOY_TASKS += "do_deploy"
>  
>  EXPORT_FUNCTIONS do_deploy
>  
> diff --git a/meta/recipes-bsp/grub/grub-efi_2.14.bb b/meta/recipes-bsp/grub/grub-efi_2.14.bb
> index d19b33b504..8d8671614a 100644
> --- a/meta/recipes-bsp/grub/grub-efi_2.14.bb
> +++ b/meta/recipes-bsp/grub/grub-efi_2.14.bb
> @@ -99,6 +99,7 @@ do_deploy() {
>  }
>  
>  addtask deploy after do_install before do_build
> +SPDX_DEPLOY_TASKS += "do_deploy"
>  
>  FILES:${PN} = "${libdir}/grub/${GRUB_TARGET}-efi \
>                 ${datadir}/grub \
> diff --git a/meta/recipes-bsp/opensbi/opensbi_1.9.bb b/meta/recipes-bsp/opensbi/opensbi_1.9.bb
> index 96167f7c73..bb35f906b2 100644
> --- a/meta/recipes-bsp/opensbi/opensbi_1.9.bb
> +++ b/meta/recipes-bsp/opensbi/opensbi_1.9.bb
> @@ -49,6 +49,7 @@ do_deploy () {
>  }
>  
>  addtask deploy before do_build after do_install
> +SPDX_DEPLOY_TASKS += "do_deploy"
>  
>  FILES:${PN} += "/share/opensbi/*/${RISCV_SBI_PLAT}/firmware/fw_jump.*"
>  FILES:${PN} += "/share/opensbi/*/${RISCV_SBI_PLAT}/firmware/fw_payload.*"
> diff --git a/meta/recipes-bsp/u-boot/u-boot.inc b/meta/recipes-bsp/u-boot/u-boot.inc
> index b9f61a185c..1c9911ff6e 100644
> --- a/meta/recipes-bsp/u-boot/u-boot.inc
> +++ b/meta/recipes-bsp/u-boot/u-boot.inc
> @@ -474,3 +474,4 @@ uboot_deploy_spl () {
>  }
>  
>  addtask deploy before do_build after do_compile
> +SPDX_DEPLOY_TASKS += "do_deploy"
> diff --git a/meta/recipes-core/systemd/systemd-boot_262.bb b/meta/recipes-core/systemd/systemd-boot_262.bb
> index bab2e7ae27..c9bc3e2a91 100644
> --- a/meta/recipes-core/systemd/systemd-boot_262.bb
> +++ b/meta/recipes-core/systemd/systemd-boot_262.bb
> @@ -71,4 +71,4 @@ do_deploy () {
>  }
>  
>  addtask deploy before do_build after do_compile
> -
> +SPDX_DEPLOY_TASKS += "do_deploy"
> -- 
> 2.56.0
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#248698): https://lists.openembedded.org/g/openembedded-core/message/248698
> Mute This Topic: https://lists.openembedded.org/mt/121950655/7159507
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [mikko.rapeli@linaro.org]
> -=-=-=-=-=-=-=-=-=-=-=-
>