[OE-core][wrynose][PATCH] cmake-native: use bundled nghttp2 with bundled curl

[OE-core][wrynose][PATCH] cmake-native: use bundled nghttp2 with bundled curl

[Deepak Rathore -X (deeratho - E INFOCHIPS PRIVATE LIMITED at Cisco)]

From: Himanshu Jadon <hjadon@cisco.com>

cmake.inc enables system library lookup through
CMAKE_USE_SYSTEM_LIBRARIES=1. cmake-native already keeps curl bundled,
but it did not also disable system nghttp2 lookup. With CMake 4.4.x,
the bundled cmcurl configure can enable nghttp2 when headers are found
on the host. The later compile uses only the OE native sysroot, so the
build can fail with:

  fatal error: nghttp2/nghttp2.h: No such file or directory

Disable system nghttp2 lookup for cmake-native also. This keeps it
consistent with the existing bundled curl setting instead of adding a
new native dependency because the host happened to expose nghttp2
during configure.

Add the bundled cmnghttp2 license checksum because the native build now
uses that copy explicitly.

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0b20ba549d6f17af40b9877eb9ab0c52ca62a18c)
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
---
 meta/recipes-devtools/cmake/cmake-native_4.3.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb b/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb
index a859cef151..911155773c 100644
--- a/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb
+++ b/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb
@@ -15,6 +15,7 @@ LIC_FILES_CHKSUM:append = " \
     file://Utilities/cmlibrhash/COPYING;md5=a8c2a557a5c53b1c12cddbee98c099af \
     file://Utilities/cmlibuv/LICENSE;md5=ad93ca1fffe931537fcf64f6fcce084d \
     file://Utilities/cmcurl/COPYING;md5=72f4e9890e99e68d77b7e40703d789b8 \
+    file://Utilities/cmnghttp2/COPYING;md5=764abdf30b2eadd37ce47dcbce0ea1ec \
     file://Utilities/cmcppdap/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
 "
 
@@ -34,6 +35,7 @@ EXTRA_OECMAKE += "\
     -DCMAKE_DISABLE_FIND_PACKAGE_Libidn2=ON \
     -DENABLE_ACL=0 -DHAVE_ACL_LIBACL_H=0 \
     -DHAVE_SYS_ACL_H=0 \
+    -DCMAKE_USE_SYSTEM_LIBRARY_NGHTTP2=0 \
 "
 
 # Ensure e2fsprogs isn't found on the host to remove a build dependency and reproducible builds.
-- 
2.53.0

[OE-core][wrynose][PATCH] grub: disable grub-protect for native builds

[Deepak Rathore -X (deeratho - E INFOCHIPS PRIVATE LIMITED at Cisco)]

From: Himanshu Jadon <hjadon@cisco.com>

grub-native fails on hosts where libtasn1 headers are not available
when configure tries to build grub-protect:

  util/grub-protect.c:25:10: fatal error:
  libtasn1.h: No such file or directory

grub-protect is an optional utility for sealing disk-encryption keys
using the TPM2 key protector. It is not used by the GRUB native tools
staged for Yocto recipe execution.

Disable grub-protect for class-native so grub-native does not depend on
libtasn1. This keeps the native build focused on the tools needed by
Yocto and avoids adding another native library dependency only for an
unused utility.

Target and nativesdk builds keep the upstream default, so image and SDK
behaviour is unchanged.

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9290ca0517e5a8888ee8a695a87c0d7e7b5ea377)
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
---
 meta/recipes-bsp/grub/grub2.inc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc
index 0656489ead..466c772e5b 100644
--- a/meta/recipes-bsp/grub/grub2.inc
+++ b/meta/recipes-bsp/grub/grub2.inc
@@ -73,6 +73,8 @@ EXTRA_OECONF = "--with-platform=${GRUBPLATFORM} \
                 --disable-werror \
 "
 
+EXTRA_OECONF:append:class-native = " --disable-grub-protect"
+
 PACKAGECONFIG ??= ""
 PACKAGECONFIG[grub-mount] = "--enable-grub-mount,--disable-grub-mount,fuse"
 PACKAGECONFIG[device-mapper] = "--enable-device-mapper,--disable-device-mapper,libdevmapper"
-- 
2.53.0

Re: [OE-core][wrynose][PATCH] cmake-native: use bundled nghttp2 with bundled curl

[Yoann Congal]

On Thu Aug 27, 2026 at 8:26 AM CEST, Deepak Rathore via lists.openembedded.org wrote:
> From: Himanshu Jadon <hjadon@cisco.com>
>
> cmake.inc enables system library lookup through
> CMAKE_USE_SYSTEM_LIBRARIES=1. cmake-native already keeps curl bundled,
> but it did not also disable system nghttp2 lookup. With CMake 4.4.x,
> the bundled cmcurl configure can enable nghttp2 when headers are found
> on the host. The later compile uses only the OE native sysroot, so the
> build can fail with:
>
>   fatal error: nghttp2/nghttp2.h: No such file or directory

Hello,

Wrynose is in 4.3.1, not 4.4.x. Do we still need this patch? If so, can
you add a backport note (below the "cherry picked" line) explaining why,
in a v2?

Thanks!

>
> Disable system nghttp2 lookup for cmake-native also. This keeps it
> consistent with the existing bundled curl setting instead of adding a
> new native dependency because the host happened to expose nghttp2
> during configure.
>
> Add the bundled cmnghttp2 license checksum because the native build now
> uses that copy explicitly.
>
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
> (cherry picked from commit 0b20ba549d6f17af40b9877eb9ab0c52ca62a18c)
> Signed-off-by: Deepak Rathore <deeratho@cisco.com>
> ---
>  meta/recipes-devtools/cmake/cmake-native_4.3.1.bb | 2 ++
>  1 file changed, 2 insertions(+)

Regards,
-- 
Yoann Congal
Smile ECS

Re: [OE-core][wrynose][PATCH] cmake-native: use bundled nghttp2 with bundled curl

[Deepak Rathore -X (deeratho - E INFOCHIPS PRIVATE LIMITED at Cisco)]

[-- Attachment #1: Type: text/plain, Size: 1995 bytes --]

Hi Yoann,

Thanks for your review.

Let me check your comment and send the v2 patch.

Regards,
Deepak
________________________________
From: Yoann Congal <yoann.congal@smile.fr>
Sent: Tuesday, September 8, 2026 7:55 PM
To: Deepak Rathore -X (deeratho - E INFOCHIPS PRIVATE LIMITED at Cisco) <deeratho@cisco.com>; openembedded-core@lists.openembedded.org <openembedded-core@lists.openembedded.org>
Subject: Re: [OE-core][wrynose][PATCH] cmake-native: use bundled nghttp2 with bundled curl

On Thu Aug 27, 2026 at 8:26 AM CEST, Deepak Rathore via lists.openembedded.org wrote:
> From: Himanshu Jadon <hjadon@cisco.com>
>
> cmake.inc enables system library lookup through
> CMAKE_USE_SYSTEM_LIBRARIES=1. cmake-native already keeps curl bundled,
> but it did not also disable system nghttp2 lookup. With CMake 4.4.x,
> the bundled cmcurl configure can enable nghttp2 when headers are found
> on the host. The later compile uses only the OE native sysroot, so the
> build can fail with:
>
>   fatal error: nghttp2/nghttp2.h: No such file or directory

Hello,

Wrynose is in 4.3.1, not 4.4.x. Do we still need this patch? If so, can
you add a backport note (below the "cherry picked" line) explaining why,
in a v2?

Thanks!

>
> Disable system nghttp2 lookup for cmake-native also. This keeps it
> consistent with the existing bundled curl setting instead of adding a
> new native dependency because the host happened to expose nghttp2
> during configure.
>
> Add the bundled cmnghttp2 license checksum because the native build now
> uses that copy explicitly.
>
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
> (cherry picked from commit 0b20ba549d6f17af40b9877eb9ab0c52ca62a18c)
> Signed-off-by: Deepak Rathore <deeratho@cisco.com>
> ---
>  meta/recipes-devtools/cmake/cmake-native_4.3.1.bb | 2 ++
>  1 file changed, 2 insertions(+)

Regards,
--
Yoann Congal
Smile ECS


[-- Attachment #2: Type: text/html, Size: 4315 bytes --]

[OE-core][wrynose][PATCH v2] cmake-native: use bundled nghttp2 with bundled curl

[Deepak Rathore -X (deeratho - E INFOCHIPS PRIVATE LIMITED at Cisco)]

From: Himanshu Jadon <hjadon@cisco.com>

cmake.inc enables system library lookup through
CMAKE_USE_SYSTEM_LIBRARIES=1. cmake-native already keeps curl bundled,
but it did not also disable system nghttp2 lookup. With CMake 4.3.1,
the bundled cmcurl configure can enable nghttp2 when headers are found
on the host. The later compile uses only the OE native sysroot, so the
build can fail with:

  fatal error: nghttp2/nghttp2.h: No such file or directory

Disable system nghttp2 lookup for cmake-native also. This keeps it
consistent with the existing bundled curl setting instead of adding a
new native dependency because the host happened to expose nghttp2
during configure.

Add the bundled cmnghttp2 license checksum because the native build now
uses that copy explicitly.

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0b20ba549d6f17af40b9877eb9ab0c52ca62a18c)
Backport note:
CMake 4.3.1 used by Wrynose has the same behavior: with
CMAKE_USE_SYSTEM_LIBRARIES=1 and system curl disabled,
CMAKE_USE_SYSTEM_NGHTTP2 defaults to ON. If the host provides nghttp2,
configure records the host include and library paths, while do_compile
uses only the OE native sysroot. Therefore this setting is needed for
Wrynose as well.
Signed-off-by: Deepak Rathore <deeratho@cisco.com>
---
Changes in v2:
- Clarify that the host nghttp2 detection failure also affects CMake 4.3.1
  used by Wrynose.
- Add a backport note explaining why the setting is required on Wrynose.

 meta/recipes-devtools/cmake/cmake-native_4.3.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb b/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb
index a859cef151..911155773c 100644
--- a/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb
+++ b/meta/recipes-devtools/cmake/cmake-native_4.3.1.bb
@@ -15,6 +15,7 @@ LIC_FILES_CHKSUM:append = " \
     file://Utilities/cmlibrhash/COPYING;md5=a8c2a557a5c53b1c12cddbee98c099af \
     file://Utilities/cmlibuv/LICENSE;md5=ad93ca1fffe931537fcf64f6fcce084d \
     file://Utilities/cmcurl/COPYING;md5=72f4e9890e99e68d77b7e40703d789b8 \
+    file://Utilities/cmnghttp2/COPYING;md5=764abdf30b2eadd37ce47dcbce0ea1ec \
     file://Utilities/cmcppdap/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57 \
 "
 
@@ -34,6 +35,7 @@ EXTRA_OECMAKE += "\
     -DCMAKE_DISABLE_FIND_PACKAGE_Libidn2=ON \
     -DENABLE_ACL=0 -DHAVE_ACL_LIBACL_H=0 \
     -DHAVE_SYS_ACL_H=0 \
+    -DCMAKE_USE_SYSTEM_LIBRARY_NGHTTP2=0 \
 "
 
 # Ensure e2fsprogs isn't found on the host to remove a build dependency and reproducible builds.
-- 
2.53.0

Re: [wrynose][PATCH] cmake-native: use bundled nghttp2 with bundled curl

[Deepak Rathore]

[-- Attachment #1: Type: text/plain, Size: 2422 bytes --]

Hi Yoann,

I have sent the updated v2 patch: openembedded-core@lists.openembedded.org | [wrynose][PATCH v2] cmake-native: use bundled nghttp2 with bundled curl ( https://lists.openembedded.org/g/openembedded-core/topic/121162511 )

Regards,
Deepak
On Wed, Sep 9, 2026 at 11:29 AM, Deepak Rathore wrote:

> 
> Hi Yoann,
> 
> Thanks for your review.
> 
> Let me check your comment and send the v2 patch.
> 
> Regards,
> Deepak
> 
> *From:* Yoann Congal <yoann.congal@smile.fr>
> *Sent:* Tuesday, September 8, 2026 7:55 PM
> *To:* Deepak Rathore -X (deeratho - E INFOCHIPS PRIVATE LIMITED at Cisco)
> <deeratho@cisco.com>; openembedded-core@lists.openembedded.org
> <openembedded-core@lists.openembedded.org>
> *Subject:* Re: [OE-core][wrynose][PATCH] cmake-native: use bundled nghttp2
> with bundled curl
> 
> On Thu Aug 27, 2026 at 8:26 AM CEST, Deepak Rathore via
> lists.openembedded.org wrote:
> > From: Himanshu Jadon <hjadon@cisco.com>
> >
> > cmake.inc enables system library lookup through
> > CMAKE_USE_SYSTEM_LIBRARIES=1. cmake-native already keeps curl bundled,
> > but it did not also disable system nghttp2 lookup. With CMake 4.4.x,
> > the bundled cmcurl configure can enable nghttp2 when headers are found
> > on the host. The later compile uses only the OE native sysroot, so the
> > build can fail with:
> >
> >   fatal error: nghttp2/nghttp2.h: No such file or directory
> 
> Hello,
> 
> Wrynose is in 4.3.1, not 4.4.x. Do we still need this patch? If so, can
> you add a backport note (below the "cherry picked" line) explaining why,
> in a v2?
> 
> Thanks!
> 
> >
> > Disable system nghttp2 lookup for cmake-native also. This keeps it
> > consistent with the existing bundled curl setting instead of adding a
> > new native dependency because the host happened to expose nghttp2
> > during configure.
> >
> > Add the bundled cmnghttp2 license checksum because the native build now
> > uses that copy explicitly.
> >
> > Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> > Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
> > (cherry picked from commit 0b20ba549d6f17af40b9877eb9ab0c52ca62a18c)
> > Signed-off-by: Deepak Rathore <deeratho@cisco.com>
> > ---
> >  meta/recipes-devtools/cmake/cmake-native_4.3.1.bb | 2 ++
> >  1 file changed, 2 insertions(+)
> 
> Regards,
> --
> Yoann Congal
> Smile ECS
> 
> 
>

[-- Attachment #2: Type: text/html, Size: 4475 bytes --]