public inbox for openembedded-core@lists.openembedded.org
 help / color / mirror / Atom feed
From: "Mathieu Dubois-Briand" <mathieu.dubois-briand@bootlin.com>
To: "Benjamin Robin" <benjamin.robin@bootlin.com>,
	<openembedded-core@lists.openembedded.org>
Cc: <ross.burton@arm.com>, <peter.marko@siemens.com>,
	<jpewhacker@gmail.com>, <olivier.benjamin@bootlin.com>,
	<antonin.godard@bootlin.com>, <thomas.petazzoni@bootlin.com>
Subject: Re: [PATCH 3/5] python3-spdx-python-model: add recipe
Date: Wed, 25 Feb 2026 10:15:48 +0100	[thread overview]
Message-ID: <DGNXGFFPH2HR.3QDK13M7O8HLX@bootlin.com> (raw)
In-Reply-To: <20260224-add-sbom-cve-check-v1-3-1c76fbd7f01b@bootlin.com>

On Tue Feb 24, 2026 at 4:53 PM CET, Benjamin Robin wrote:
>  - Part of the dependency chain for sbom-cve-check
>
> Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com>
> ---
>  ...enerate-bindings-allow-to-use-local-files.patch | 58 ++++++++++++++++++++++
>  .../python/python3-spdx-python-model_0.0.4.bb      | 37 ++++++++++++++
>  2 files changed, 95 insertions(+)
>
> diff --git a/meta/recipes-devtools/python/python3-spdx-python-model/0001-generate-bindings-allow-to-use-local-files.patch b/meta/recipes-devtools/python/python3-spdx-python-model/0001-generate-bindings-allow-to-use-local-files.patch
> new file mode 100644
> index 000000000000..ec24d7beb3c5
> --- /dev/null
> +++ b/meta/recipes-devtools/python/python3-spdx-python-model/0001-generate-bindings-allow-to-use-local-files.patch
> @@ -0,0 +1,58 @@
> +From 9fb565a0a70c6985fa1efde13cfe7fb4851588ce Mon Sep 17 00:00:00 2001
> +From: Benjamin Robin <benjamin.robin@bootlin.com>
> +Date: Tue, 24 Feb 2026 10:59:25 +0100
> +Subject: [PATCH] generate-bindings: allow to use local files
> +
> +shacl2code needs to download the following URLs during build time:
> + - https://spdx.org/rdf/3.0.1/spdx-model.ttl
> + - https://spdx.org/rdf/3.0.1/spdx-json-serialize-annotations.ttl
> + - https://spdx.org/rdf/3.0.1/spdx-context.jsonld
> +
> +There are a lot of package build tools that do not allow to download
> +a file during the build. So provide a way to use local file:
> +If the environment variable SHACL2CODE_SPDX_DIR is defined, load
> +the SPDX model and SPDX context from the directory specified by this
> +environment variable.
> +
> +Upstream-Status: Submitted [https://github.com/spdx/spdx-python-model/pull/19]
> +
> +Signed-off-by: Benjamin Robin <benjamin.robin@bootlin.com>
> +---

Hi Benjamin,

Thanks for your patch.

It looks like there is some dependency issue with this recipe. We get
the following error on the autobuilder:

ERROR: python3-spdx-python-model-0.0.4-r0 do_compile: Execution of '/srv/pokybuild/yocto-worker/qemux86-world/build/build/tmp/work/x86-64-v3-poky-linux/python3-spdx-python-model/0.0.4/temp/run.do_compile.2119994' failed with exit code 1
...
Log data follows:
| DEBUG: Executing shell function do_compile
| * Getting build dependencies for wheel...
|
| ERROR Missing dependencies:
| 	shacl2code==0.0.24
| 	hatch-build-scripts
| WARNING: exit code 1 from a shell command.
NOTE: recipe lib32-python3-spdx-python-model-0.0.4-r0: task do_compile: Failed

https://autobuilder.yoctoproject.org/valkyrie/#/builders/59/builds/3246
https://autobuilder.yoctoproject.org/valkyrie/#/builders/17/builds/3078
https://autobuilder.yoctoproject.org/valkyrie/#/builders/3/builds/3299

Can you have a look at the issue?

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com



  reply	other threads:[~2026-02-25  9:16 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-02-24 15:53 [PATCH 0/5] sbom-cve-check: add CVE analysis tool and class Benjamin Robin
2026-02-24 15:53 ` [PATCH 1/5] python3-shacl2code: add recipe Benjamin Robin
2026-02-24 15:53 ` [PATCH 2/5] python3-hatch-build-scripts: " Benjamin Robin
2026-02-24 15:53 ` [PATCH 3/5] python3-spdx-python-model: " Benjamin Robin
2026-02-25  9:15   ` Mathieu Dubois-Briand [this message]
2026-02-24 15:53 ` [PATCH 4/5] sbom-cve-check: " Benjamin Robin
2026-02-24 15:53 ` [PATCH 5/5] sbom-cve-check.bbclass: Add class for post-build CVE analysis Benjamin Robin

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=DGNXGFFPH2HR.3QDK13M7O8HLX@bootlin.com \
    --to=mathieu.dubois-briand@bootlin.com \
    --cc=antonin.godard@bootlin.com \
    --cc=benjamin.robin@bootlin.com \
    --cc=jpewhacker@gmail.com \
    --cc=olivier.benjamin@bootlin.com \
    --cc=openembedded-core@lists.openembedded.org \
    --cc=peter.marko@siemens.com \
    --cc=ross.burton@arm.com \
    --cc=thomas.petazzoni@bootlin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox