Re: [OE-core][PATCH v2 0/8] Add SPDX 3 Recipe Information

["Mathieu Dubois-Briand" <mathieu.dubois-briand@bootlin.com>]

On Wed Feb 25, 2026 at 12:00 AM CET, Joshua Watt via lists.openembedded.org wrote:
> Changes the SPDX 3 output to include a "recipe" package that describe
> static information available at parse time (without building). This is
> primarily useful for gathering SPDX 3 VEX information about some or all
> recipes, enabling SPDX 3 to be used in place of cve_check.bbclass and
> vex.bbclass.
>
> Special thanks to Benjamin Robin <benjamin.robin@bootlin.com> for
> helping work through this.
>

Hi Joshua,

Thanks for the new version, but I believe we still have some issues.

A first one:

ERROR: docbook-xml-dtd4-native-4.5-r0 do_create_spdx: Error executing a python function in exec_func_python() autogenerated:
...
File: '/srv/pokybuild/yocto-worker/genericx86/build/layers/openembedded-core/meta/lib/oe/spdx30_tasks.py', lineno: 89, function: add_license_text
     0085:        # If it's not SPDX or PD, then NO_GENERIC_LICENSE must be set
     0086:        filename = d.getVarFlag("NO_GENERIC_LICENSE", name)
     0087:        if filename:
     0088:            filename = d.expand("${S}/" + filename)
 *** 0089:            with open(filename, errors="replace") as f:
     0090:                lic.simplelicensing_licenseText = f.read()
     0091:                return lic
     0092:        else:
     0093:            bb.fatal("Cannot find any text for license %s" % name)
Exception: FileNotFoundError: [Errno 2] No such file or directory: '/srv/pokybuild/yocto-worker/genericx86/build/build/tmp/work/x86_64-linux/docbook-xml-dtd4-native/4.5/sources/LICENSE-OASIS'

https://autobuilder.yoctoproject.org/valkyrie/#/builders/19/builds/3253
https://autobuilder.yoctoproject.org/valkyrie/#/builders/20/builds/3217
https://autobuilder.yoctoproject.org/valkyrie/#/builders/74/builds/3224
https://autobuilder.yoctoproject.org/valkyrie/#/builders/95/builds/3204

And a second one:

Initialising tasks...ERROR: Task virtual:multilib:lib32:/srv/pokybuild/yocto-worker/qemux86-world-alt/build/layers/openembedded-core/meta/recipes-core/meta/meta-world-recipe-sbom.bb:do_create_spdx has circular dependency on /srv/pokybuild/yocto-worker/qemux86-world-alt/build/layers/openembedded-core/meta/recipes-core/meta/meta-world-recipe-sbom.bb:do_create_spdx
ERROR: Command execution failed: 1

https://autobuilder.yoctoproject.org/valkyrie/#/builders/17/builds/3086
https://autobuilder.yoctoproject.org/valkyrie/#/builders/59/builds/3253

Can you have a look at these?

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com