[PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Paul Barker]

tar 1.34 (and possibly earlier versions) is unable to extract tarballs
containing read-only files with xattrs. This was fixed upstream, but
it's unlikely at this point that the fix will be backported to RHEL9
related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
affects these distros specifically because they have selinux enabled by
default and this uses xattrs.

The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
installed by the systemd recipe - this file is chmod 0444. This leads to
the following error, typically during do_image_wic (shortened and split
to make it readable):

    subprocess.CalledProcessError: Command
    'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
    tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
    returned non-zero exit status 2.

That error message is likely to confuse users, and the fix is not
obvious. So, error out if tar 1.34 or earlier is present on affected
distros and recommend upgrading or using the buildtools tarball.

Signed-off-by: Paul Barker <paul@pbarker.dev>
---
 meta/classes-global/sanity.bbclass | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/meta/classes-global/sanity.bbclass b/meta/classes-global/sanity.bbclass
index b5d905399b73..2e486966a93b 100644
--- a/meta/classes-global/sanity.bbclass
+++ b/meta/classes-global/sanity.bbclass
@@ -551,6 +551,21 @@ def check_tar_version(sanity_data):
     except subprocess.CalledProcessError as e:
         return "Unable to execute tar --help, exit code %d\n%s\n" % (e.returncode, e.output)
 
+    try:
+        distro = oe.lsb.distro_identifier()
+    except Exception:
+        distro = None
+
+    if distro:
+        rhel9_alike_prefixes = ("rhel-9", "centos-9", "rocky-9", "almalinux-9")
+        rhel9_tar_minimum_version = "1.35"
+        for prefix in rhel9_alike_prefixes:
+            if distro.startswith(prefix) and bb.utils.vercmp_string_op(version, rhel9_tar_minimum_version, "<"):
+                return ("Your version of tar is older than %s and crashes when extracting read-only files with xattrs. "
+                        "Your distro is %s which triggers this bug due to the presence of selinux attributes. "
+                        "Please install a newer version of tar (you could use the project's buildtools-tarball from "
+                        "our last release or use scripts/install-buildtools).\n" % (rhel9_tar_minimum_version, distro))
+
     return None
 
 # We use git parameters and functionality only found in 1.7.8 or later

---
base-commit: e954a94b5b528b2430e8da331107d7d58287f89b
change-id: 20260403-rhel9-tar-8052bfa93d23

Best regards,
--  
Paul Barker

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Quentin Schulz]

Hi Paul,

On 4/3/26 1:54 PM, Paul Barker via lists.openembedded.org wrote:
> tar 1.34 (and possibly earlier versions) is unable to extract tarballs
> containing read-only files with xattrs. This was fixed upstream, but
> it's unlikely at this point that the fix will be backported to RHEL9
> related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
> affects these distros specifically because they have selinux enabled by
> default and this uses xattrs.
> 
> The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
> installed by the systemd recipe - this file is chmod 0444. This leads to
> the following error, typically during do_image_wic (shortened and split
> to make it readable):
> 
>      subprocess.CalledProcessError: Command
>      'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
>      tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
>      returned non-zero exit status 2.
> 
> That error message is likely to confuse users, and the fix is not
> obvious. So, error out if tar 1.34 or earlier is present on affected
> distros and recommend upgrading or using the buildtools tarball.
> 
> Signed-off-by: Paul Barker <paul@pbarker.dev>
> ---
>   meta/classes-global/sanity.bbclass | 15 +++++++++++++++
>   1 file changed, 15 insertions(+)
> 
> diff --git a/meta/classes-global/sanity.bbclass b/meta/classes-global/sanity.bbclass
> index b5d905399b73..2e486966a93b 100644
> --- a/meta/classes-global/sanity.bbclass
> +++ b/meta/classes-global/sanity.bbclass
> @@ -551,6 +551,21 @@ def check_tar_version(sanity_data):
>       except subprocess.CalledProcessError as e:
>           return "Unable to execute tar --help, exit code %d\n%s\n" % (e.returncode, e.output)
>   
> +    try:
> +        distro = oe.lsb.distro_identifier()
> +    except Exception:
> +        distro = None
> +
> +    if distro:
> +        rhel9_alike_prefixes = ("rhel-9", "centos-9", "rocky-9", "almalinux-9")
> +        rhel9_tar_minimum_version = "1.35"
> +        for prefix in rhel9_alike_prefixes:

The commit log doesn't explain why that is specific to centos 9 and 
derivatives.

Did CentOS break tar only for themselves, or is it the only distro with 
that specific broken tar version or is it the only distro with that old 
of a version of tar?

I'm asking because I am not sure we need to filter on the distro AND we 
also probably should update the min version of tar listed in 
documentation/poky.yaml.in in yocto-docs.

Cheers,
Quentin

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Paul Barker]

[-- Attachment #1: Type: text/plain, Size: 3557 bytes --]

On Fri, 2026-04-03 at 14:06 +0200, Quentin Schulz via
lists.openembedded.org wrote:
> Hi Paul,
> 
> On 4/3/26 1:54 PM, Paul Barker via lists.openembedded.org wrote:
> > tar 1.34 (and possibly earlier versions) is unable to extract tarballs
> > containing read-only files with xattrs. This was fixed upstream, but
> > it's unlikely at this point that the fix will be backported to RHEL9
> > related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
> > affects these distros specifically because they have selinux enabled by
> > default and this uses xattrs.
> > 
> > The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
> > installed by the systemd recipe - this file is chmod 0444. This leads to
> > the following error, typically during do_image_wic (shortened and split
> > to make it readable):
> > 
> >      subprocess.CalledProcessError: Command
> >      'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
> >      tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
> >      returned non-zero exit status 2.
> > 
> > That error message is likely to confuse users, and the fix is not
> > obvious. So, error out if tar 1.34 or earlier is present on affected
> > distros and recommend upgrading or using the buildtools tarball.
> > 
> > Signed-off-by: Paul Barker <paul@pbarker.dev>
> > ---
> >   meta/classes-global/sanity.bbclass | 15 +++++++++++++++
> >   1 file changed, 15 insertions(+)
> > 
> > diff --git a/meta/classes-global/sanity.bbclass b/meta/classes-global/sanity.bbclass
> > index b5d905399b73..2e486966a93b 100644
> > --- a/meta/classes-global/sanity.bbclass
> > +++ b/meta/classes-global/sanity.bbclass
> > @@ -551,6 +551,21 @@ def check_tar_version(sanity_data):
> >       except subprocess.CalledProcessError as e:
> >           return "Unable to execute tar --help, exit code %d\n%s\n" % (e.returncode, e.output)
> >   
> > +    try:
> > +        distro = oe.lsb.distro_identifier()
> > +    except Exception:
> > +        distro = None
> > +
> > +    if distro:
> > +        rhel9_alike_prefixes = ("rhel-9", "centos-9", "rocky-9", "almalinux-9")
> > +        rhel9_tar_minimum_version = "1.35"
> > +        for prefix in rhel9_alike_prefixes:
> 
> The commit log doesn't explain why that is specific to centos 9 and 
> derivatives.
> 
> Did CentOS break tar only for themselves, or is it the only distro with 
> that specific broken tar version or is it the only distro with that old 
> of a version of tar?
> 
> I'm asking because I am not sure we need to filter on the distro AND we 
> also probably should update the min version of tar listed in 
> documentation/poky.yaml.in in yocto-docs.

Hi Quentin, thanks for the feedback!

The issue exists in upstream tar, I'm unsure when it was introduced. It
was fixed for 1.35 [1].

We have only seen issues on the autobuilder with rhel9 related distros.
This is tracked by RedHat [2], but a fix is not expected as they don't
want to risk breaking any existing workarounds.

In our bugzilla, this is the remaining error in #16143 [3] after the
pseudo fixes, see comments 23 onwards.

[1]: https://cgit.git.savannah.gnu.org/cgit/tar.git/commit/?id=0b74885e81b90d6ab4890b195dce99ca9109fe59
[2]: https://redhat.atlassian.net/browse/RHEL-158896
[3]: https://bugzilla.yoctoproject.org/show_bug.cgi?id=16143

Best regards,

-- 
Paul Barker


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 252 bytes --]

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Quentin Schulz]

Hi Paul,

On 4/3/26 2:30 PM, Paul Barker wrote:
> On Fri, 2026-04-03 at 14:06 +0200, Quentin Schulz via
> lists.openembedded.org wrote:
>> Hi Paul,
>>
>> On 4/3/26 1:54 PM, Paul Barker via lists.openembedded.org wrote:
>>> tar 1.34 (and possibly earlier versions) is unable to extract tarballs
>>> containing read-only files with xattrs. This was fixed upstream, but
>>> it's unlikely at this point that the fix will be backported to RHEL9
>>> related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
>>> affects these distros specifically because they have selinux enabled by
>>> default and this uses xattrs.
>>>
>>> The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
>>> installed by the systemd recipe - this file is chmod 0444. This leads to
>>> the following error, typically during do_image_wic (shortened and split
>>> to make it readable):
>>>
>>>       subprocess.CalledProcessError: Command
>>>       'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
>>>       tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
>>>       returned non-zero exit status 2.
>>>
>>> That error message is likely to confuse users, and the fix is not
>>> obvious. So, error out if tar 1.34 or earlier is present on affected
>>> distros and recommend upgrading or using the buildtools tarball.
>>>
>>> Signed-off-by: Paul Barker <paul@pbarker.dev>
>>> ---
>>>    meta/classes-global/sanity.bbclass | 15 +++++++++++++++
>>>    1 file changed, 15 insertions(+)
>>>
>>> diff --git a/meta/classes-global/sanity.bbclass b/meta/classes-global/sanity.bbclass
>>> index b5d905399b73..2e486966a93b 100644
>>> --- a/meta/classes-global/sanity.bbclass
>>> +++ b/meta/classes-global/sanity.bbclass
>>> @@ -551,6 +551,21 @@ def check_tar_version(sanity_data):
>>>        except subprocess.CalledProcessError as e:
>>>            return "Unable to execute tar --help, exit code %d\n%s\n" % (e.returncode, e.output)
>>>    
>>> +    try:
>>> +        distro = oe.lsb.distro_identifier()
>>> +    except Exception:
>>> +        distro = None
>>> +
>>> +    if distro:
>>> +        rhel9_alike_prefixes = ("rhel-9", "centos-9", "rocky-9", "almalinux-9")
>>> +        rhel9_tar_minimum_version = "1.35"
>>> +        for prefix in rhel9_alike_prefixes:
>>
>> The commit log doesn't explain why that is specific to centos 9 and
>> derivatives.
>>
>> Did CentOS break tar only for themselves, or is it the only distro with
>> that specific broken tar version or is it the only distro with that old
>> of a version of tar?
>>
>> I'm asking because I am not sure we need to filter on the distro AND we
>> also probably should update the min version of tar listed in
>> documentation/poky.yaml.in in yocto-docs.
> 
> Hi Quentin, thanks for the feedback!
> 
> The issue exists in upstream tar, I'm unsure when it was introduced. It
> was fixed for 1.35 [1].
> 

This is **weird**, because we do have other distros with tar 1.34 and 
they don't seem to be failing (from what I could tell from our bugzilla 
ticket). Debian 12 (bookworm) has it for example according to pkgs.org. 
So either CentOS has a patch for 1.34 that others don't and it breaks 
stuff, or other distros have a patch that CentOS doesn't? I couldn't see 
anything obvious between CentOS-9/Debian-Bookworm so don't know :/

Can you please add this info to the commit log? That we do have other 
distros with 1.34 and they work fine, just the CentOS-9 and its 
derivatives that are failing, hence why we require this only for those 
distros?

Cheers,
Quentin

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Paul Barker]

[-- Attachment #1: Type: text/plain, Size: 4610 bytes --]

On Fri, 2026-04-03 at 14:56 +0200, Quentin Schulz via
lists.openembedded.org wrote:
> Hi Paul,
> 
> On 4/3/26 2:30 PM, Paul Barker wrote:
> > On Fri, 2026-04-03 at 14:06 +0200, Quentin Schulz via
> > lists.openembedded.org wrote:
> > > Hi Paul,
> > > 
> > > On 4/3/26 1:54 PM, Paul Barker via lists.openembedded.org wrote:
> > > > tar 1.34 (and possibly earlier versions) is unable to extract tarballs
> > > > containing read-only files with xattrs. This was fixed upstream, but
> > > > it's unlikely at this point that the fix will be backported to RHEL9
> > > > related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
> > > > affects these distros specifically because they have selinux enabled by
> > > > default and this uses xattrs.
> > > > 
> > > > The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
> > > > installed by the systemd recipe - this file is chmod 0444. This leads to
> > > > the following error, typically during do_image_wic (shortened and split
> > > > to make it readable):
> > > > 
> > > >       subprocess.CalledProcessError: Command
> > > >       'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
> > > >       tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
> > > >       returned non-zero exit status 2.
> > > > 
> > > > That error message is likely to confuse users, and the fix is not
> > > > obvious. So, error out if tar 1.34 or earlier is present on affected
> > > > distros and recommend upgrading or using the buildtools tarball.
> > > > 
> > > > Signed-off-by: Paul Barker <paul@pbarker.dev>
> > > > ---
> > > >    meta/classes-global/sanity.bbclass | 15 +++++++++++++++
> > > >    1 file changed, 15 insertions(+)
> > > > 
> > > > diff --git a/meta/classes-global/sanity.bbclass b/meta/classes-global/sanity.bbclass
> > > > index b5d905399b73..2e486966a93b 100644
> > > > --- a/meta/classes-global/sanity.bbclass
> > > > +++ b/meta/classes-global/sanity.bbclass
> > > > @@ -551,6 +551,21 @@ def check_tar_version(sanity_data):
> > > >        except subprocess.CalledProcessError as e:
> > > >            return "Unable to execute tar --help, exit code %d\n%s\n" % (e.returncode, e.output)
> > > >    
> > > > +    try:
> > > > +        distro = oe.lsb.distro_identifier()
> > > > +    except Exception:
> > > > +        distro = None
> > > > +
> > > > +    if distro:
> > > > +        rhel9_alike_prefixes = ("rhel-9", "centos-9", "rocky-9", "almalinux-9")
> > > > +        rhel9_tar_minimum_version = "1.35"
> > > > +        for prefix in rhel9_alike_prefixes:
> > > 
> > > The commit log doesn't explain why that is specific to centos 9 and
> > > derivatives.
> > > 
> > > Did CentOS break tar only for themselves, or is it the only distro with
> > > that specific broken tar version or is it the only distro with that old
> > > of a version of tar?
> > > 
> > > I'm asking because I am not sure we need to filter on the distro AND we
> > > also probably should update the min version of tar listed in
> > > documentation/poky.yaml.in in yocto-docs.
> > 
> > Hi Quentin, thanks for the feedback!
> > 
> > The issue exists in upstream tar, I'm unsure when it was introduced. It
> > was fixed for 1.35 [1].
> > 
> 
> This is **weird**, because we do have other distros with tar 1.34 and 
> they don't seem to be failing (from what I could tell from our bugzilla 
> ticket). Debian 12 (bookworm) has it for example according to pkgs.org. 
> So either CentOS has a patch for 1.34 that others don't and it breaks 
> stuff, or other distros have a patch that CentOS doesn't? I couldn't see 
> anything obvious between CentOS-9/Debian-Bookworm so don't know :/
> 
> Can you please add this info to the commit log? That we do have other 
> distros with 1.34 and they work fine, just the CentOS-9 and its 
> derivatives that are failing, hence why we require this only for those 
> distros?

Hi Quentin,

The commit message says:

    The issue affects these distros specifically because they have
    selinux enabled by default and this uses xattrs.

We don't see failures on Debian 12 because files typically don't have
xattrs set by the host OS there.

We could require tar 1.35 everywhere, but that will require a lot more
users to install buildtools before they can start a build.

I'm happy to add more info if it's needed. I should also add a Fixes tag
for #16143.

Thanks,

-- 
Paul Barker


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 252 bytes --]

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Quentin Schulz]

Hi Paul,

On 4/3/26 3:06 PM, Paul Barker wrote:
> On Fri, 2026-04-03 at 14:56 +0200, Quentin Schulz via
> lists.openembedded.org wrote:
>> Hi Paul,
>>
>> On 4/3/26 2:30 PM, Paul Barker wrote:
>>> On Fri, 2026-04-03 at 14:06 +0200, Quentin Schulz via
>>> lists.openembedded.org wrote:
>>>> Hi Paul,
>>>>
>>>> On 4/3/26 1:54 PM, Paul Barker via lists.openembedded.org wrote:
>>>>> tar 1.34 (and possibly earlier versions) is unable to extract tarballs
>>>>> containing read-only files with xattrs. This was fixed upstream, but
>>>>> it's unlikely at this point that the fix will be backported to RHEL9
>>>>> related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
>>>>> affects these distros specifically because they have selinux enabled by
>>>>> default and this uses xattrs.
>>>>>
>>>>> The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
>>>>> installed by the systemd recipe - this file is chmod 0444. This leads to
>>>>> the following error, typically during do_image_wic (shortened and split
>>>>> to make it readable):
>>>>>
>>>>>        subprocess.CalledProcessError: Command
>>>>>        'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
>>>>>        tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
>>>>>        returned non-zero exit status 2.
>>>>>
>>>>> That error message is likely to confuse users, and the fix is not
>>>>> obvious. So, error out if tar 1.34 or earlier is present on affected
>>>>> distros and recommend upgrading or using the buildtools tarball.
>>>>>
>>>>> Signed-off-by: Paul Barker <paul@pbarker.dev>
>>>>> ---
>>>>>     meta/classes-global/sanity.bbclass | 15 +++++++++++++++
>>>>>     1 file changed, 15 insertions(+)
>>>>>
>>>>> diff --git a/meta/classes-global/sanity.bbclass b/meta/classes-global/sanity.bbclass
>>>>> index b5d905399b73..2e486966a93b 100644
>>>>> --- a/meta/classes-global/sanity.bbclass
>>>>> +++ b/meta/classes-global/sanity.bbclass
>>>>> @@ -551,6 +551,21 @@ def check_tar_version(sanity_data):
>>>>>         except subprocess.CalledProcessError as e:
>>>>>             return "Unable to execute tar --help, exit code %d\n%s\n" % (e.returncode, e.output)
>>>>>     
>>>>> +    try:
>>>>> +        distro = oe.lsb.distro_identifier()
>>>>> +    except Exception:
>>>>> +        distro = None
>>>>> +
>>>>> +    if distro:
>>>>> +        rhel9_alike_prefixes = ("rhel-9", "centos-9", "rocky-9", "almalinux-9")
>>>>> +        rhel9_tar_minimum_version = "1.35"
>>>>> +        for prefix in rhel9_alike_prefixes:
>>>>
>>>> The commit log doesn't explain why that is specific to centos 9 and
>>>> derivatives.
>>>>
>>>> Did CentOS break tar only for themselves, or is it the only distro with
>>>> that specific broken tar version or is it the only distro with that old
>>>> of a version of tar?
>>>>
>>>> I'm asking because I am not sure we need to filter on the distro AND we
>>>> also probably should update the min version of tar listed in
>>>> documentation/poky.yaml.in in yocto-docs.
>>>
>>> Hi Quentin, thanks for the feedback!
>>>
>>> The issue exists in upstream tar, I'm unsure when it was introduced. It
>>> was fixed for 1.35 [1].
>>>
>>
>> This is **weird**, because we do have other distros with tar 1.34 and
>> they don't seem to be failing (from what I could tell from our bugzilla
>> ticket). Debian 12 (bookworm) has it for example according to pkgs.org.
>> So either CentOS has a patch for 1.34 that others don't and it breaks
>> stuff, or other distros have a patch that CentOS doesn't? I couldn't see
>> anything obvious between CentOS-9/Debian-Bookworm so don't know :/
>>
>> Can you please add this info to the commit log? That we do have other
>> distros with 1.34 and they work fine, just the CentOS-9 and its
>> derivatives that are failing, hence why we require this only for those
>> distros?
> 
> Hi Quentin,
> 
> The commit message says:
> 
>      The issue affects these distros specifically because they have
>      selinux enabled by default and this uses xattrs.
> 

Someone didn't pay attention when reading, and it wasn't you, oops.

But now I'm wondering why Fedora isn't failing? My f43 has SELinux in 
enforcing mode according to `getenforce` and I'm pretty sure it's been 
like that for many releases. So I checked the history in 
https://src.fedoraproject.org/rpms/tar (you have to clone it locally, 
their UI is broken for some part of the history). They had 1.35 in f39 
already, see commit d35459608992 ("Rebase to version 1.35"). We only 
support f39 and later, so that's fine on that side!

Sorry for the noise.

Cheers,
Quentin

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Mathieu Dubois-Briand]

On Fri Apr 3, 2026 at 1:54 PM CEST, Paul Barker wrote:
> tar 1.34 (and possibly earlier versions) is unable to extract tarballs
> containing read-only files with xattrs. This was fixed upstream, but
> it's unlikely at this point that the fix will be backported to RHEL9
> related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
> affects these distros specifically because they have selinux enabled by
> default and this uses xattrs.
>
> The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
> installed by the systemd recipe - this file is chmod 0444. This leads to
> the following error, typically during do_image_wic (shortened and split
> to make it readable):
>
>     subprocess.CalledProcessError: Command
>     'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
>     tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
>     returned non-zero exit status 2.
>
> That error message is likely to confuse users, and the fix is not
> obvious. So, error out if tar 1.34 or earlier is present on affected
> distros and recommend upgrading or using the buildtools tarball.
>
> Signed-off-by: Paul Barker <paul@pbarker.dev>

Hi Paul,

So now, this is failing on several workers. Aren't we using buildtools
on rocky9 / stream9?

https://autobuilder.yoctoproject.org/valkyrie/#/builders/17/builds/3369
https://autobuilder.yoctoproject.org/valkyrie/#/builders/4/builds/3536

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Yoann Congal]

On Fri Apr 3, 2026 at 6:47 PM CEST, Mathieu Dubois-Briand via lists.openembedded.org wrote:
> On Fri Apr 3, 2026 at 1:54 PM CEST, Paul Barker wrote:
>> tar 1.34 (and possibly earlier versions) is unable to extract tarballs
>> containing read-only files with xattrs. This was fixed upstream, but
>> it's unlikely at this point that the fix will be backported to RHEL9
>> related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
>> affects these distros specifically because they have selinux enabled by
>> default and this uses xattrs.
>>
>> The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
>> installed by the systemd recipe - this file is chmod 0444. This leads to
>> the following error, typically during do_image_wic (shortened and split
>> to make it readable):
>>
>>     subprocess.CalledProcessError: Command
>>     'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
>>     tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
>>     returned non-zero exit status 2.
>>
>> That error message is likely to confuse users, and the fix is not
>> obvious. So, error out if tar 1.34 or earlier is present on affected
>> distros and recommend upgrading or using the buildtools tarball.
>>
>> Signed-off-by: Paul Barker <paul@pbarker.dev>
>
> Hi Paul,
>
> So now, this is failing on several workers. Aren't we using buildtools
> on rocky9 / stream9?
You're thinking of "[PATCH yocto-autobuilder-helper] config.json: Use buildtools on RHEL9 derivatives"
https://lore.kernel.org/yocto-patches/20260331-rhel9-v1-1-e5c2cf815386@pbarker.dev/T/#u
... not merged, yet.

>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/17/builds/3369
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/4/builds/3536



>
> Thanks,
> Mathieu


-- 
Yoann Congal
Smile ECS

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Mathieu Dubois-Briand]

On Fri Apr 3, 2026 at 7:07 PM CEST, Yoann Congal via lists.openembedded.org wrote:
> On Fri Apr 3, 2026 at 6:47 PM CEST, Mathieu Dubois-Briand via lists.openembedded.org wrote:
>> On Fri Apr 3, 2026 at 1:54 PM CEST, Paul Barker wrote:
>>> tar 1.34 (and possibly earlier versions) is unable to extract tarballs
>>> containing read-only files with xattrs. This was fixed upstream, but
>>> it's unlikely at this point that the fix will be backported to RHEL9
>>> related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
>>> affects these distros specifically because they have selinux enabled by
>>> default and this uses xattrs.
>>>
>>> The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
>>> installed by the systemd recipe - this file is chmod 0444. This leads to
>>> the following error, typically during do_image_wic (shortened and split
>>> to make it readable):
>>>
>>>     subprocess.CalledProcessError: Command
>>>     'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
>>>     tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
>>>     returned non-zero exit status 2.
>>>
>>> That error message is likely to confuse users, and the fix is not
>>> obvious. So, error out if tar 1.34 or earlier is present on affected
>>> distros and recommend upgrading or using the buildtools tarball.
>>>
>>> Signed-off-by: Paul Barker <paul@pbarker.dev>
>>
>> Hi Paul,
>>
>> So now, this is failing on several workers. Aren't we using buildtools
>> on rocky9 / stream9?
> You're thinking of "[PATCH yocto-autobuilder-helper] config.json: Use buildtools on RHEL9 derivatives"
> https://lore.kernel.org/yocto-patches/20260331-rhel9-v1-1-e5c2cf815386@pbarker.dev/T/#u
> ... not merged, yet.
>

Thanks! For some reason I thought it was merged.

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [OE-core] [PATCH] sanity: Require tar 1.35 or later on rhel9-alike distros

[Richard Purdie]

On Sat, 2026-04-04 at 07:55 +0200, Mathieu Dubois-Briand via lists.openembedded.org wrote:
> On Fri Apr 3, 2026 at 7:07 PM CEST, Yoann Congal via lists.openembedded.org wrote:
> > On Fri Apr 3, 2026 at 6:47 PM CEST, Mathieu Dubois-Briand via lists.openembedded.org wrote:
> > > On Fri Apr 3, 2026 at 1:54 PM CEST, Paul Barker wrote:
> > > > tar 1.34 (and possibly earlier versions) is unable to extract tarballs
> > > > containing read-only files with xattrs. This was fixed upstream, but
> > > > it's unlikely at this point that the fix will be backported to RHEL9
> > > > related distros (CentOS Stream 9, AlmaLinux 9, Rocky Linux 9). The issue
> > > > affects these distros specifically because they have selinux enabled by
> > > > default and this uses xattrs.
> > > > 
> > > > The specific failure we've seen is with the /usr/lib/udev/hwdb.bin file
> > > > installed by the systemd recipe - this file is chmod 0444. This leads to
> > > > the following error, typically during do_image_wic (shortened and split
> > > > to make it readable):
> > > > 
> > > >     subprocess.CalledProcessError: Command
> > > >     'tar --xattrs --xattrs-include='*' -cf - -S -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/rootfs -p . |
> > > >     tar --xattrs --xattrs-include='*' -xf - -C .../tmp/work/qemux86_64-poky-linux/core-image-minimal/1.0/tmp-wic/rootfs2'
> > > >     returned non-zero exit status 2.
> > > > 
> > > > That error message is likely to confuse users, and the fix is not
> > > > obvious. So, error out if tar 1.34 or earlier is present on affected
> > > > distros and recommend upgrading or using the buildtools tarball.
> > > > 
> > > > Signed-off-by: Paul Barker <paul@pbarker.dev>
> > > 
> > > Hi Paul,
> > > 
> > > So now, this is failing on several workers. Aren't we using buildtools
> > > on rocky9 / stream9?
> > You're thinking of "[PATCH yocto-autobuilder-helper] config.json: Use buildtools on RHEL9 derivatives"
> > https://lore.kernel.org/yocto-patches/20260331-rhel9-v1-1-e5c2cf815386@pbarker.dev/T/#u
> > ... not merged, yet.
> > 
> 
> Thanks! For some reason I thought it was merged.

Since we've now proven the sanity test works, I've merged the helper patch.

Cheers,

Richard