Re: [PATCH v6 00/10] spdx30: SBOM enrichment and documentation

["Mathieu Dubois-Briand" <mathieu.dubois-briand@bootlin.com>]

On Wed Mar 4, 2026 at 6:05 PM CET, Stefano Tondo wrote:
> This v6 fixes the autobuilder selftest failures (25+ devtool/recipetool
> tests) reported by Mathieu Dubois-Briand for v5. The root cause was a
> reintroduced d.getVar('SRCREV') call in patch 04 ("Add version extraction
> from SRCREV for Git source components") that was accidentally restored
> during the v5 rebase/squash.
>
> Because spdx30_tasks.py is registered via BBIMPORTS, bitbake's code parser
> traces all variable references in its public functions. The d.getVar('SRCREV')
> call caused the signature generator to follow the SRCREV -> AUTOREV
> dependency chain during recipe finalization, triggering "AUTOREV/SRCPV set
> too late" fatal errors for non-git temporary recipes used by recipetool
> and devtool with HTTP sources.
>
> The fix removes the d.getVar('SRCREV') fallback entirely, relying solely on
> fd.revision which is always available for git sources after fetch. A safety
> comment explains why d.getVar('SRCREV') must never be used in this context.
>

Hi Stefano,

Thanks for the new version. We still have two selftest failures:

2026-03-05 19:31:34,702 - oe-selftest - INFO - spdx.SPDX30Check.test_download_location_defensive_handling (subunit.RemotedTestCase)
2026-03-05 19:31:34,703 - oe-selftest - INFO -  ... FAIL
...
2026-03-05 19:31:34,708 - oe-selftest - INFO - testtools.testresult.real._StringException: Traceback (most recent call last):
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/cases/spdx.py", line 451, in test_download_location_defensive_handling
    objset = self.check_recipe_spdx(
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/cases/spdx.py", line 123, in check_recipe_spdx
    return self.check_spdx_file(filename)
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/cases/spdx.py", line 81, in check_spdx_file
    self.assertExists(filename)
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/case.py", line 249, in assertExists
    raise self.failureException(msg)
AssertionError: '/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/build-st-1062472/tmp/deploy/spdx/3.0.1/cortexa57/recipes/recipe-m4.spdx.json' does not exist
...
2026-03-05 21:02:03,859 - oe-selftest - INFO - spdx.SPDX30Check.test_version_extraction_patterns (subunit.RemotedTestCase)
2026-03-05 21:02:03,860 - oe-selftest - INFO -  ... FAIL
...
2026-03-05 21:02:03,860 - oe-selftest - INFO - 5: 42/52 664/676 (12.84s) (2 failed) (spdx.SPDX30Check.test_version_extraction_patterns)
2026-03-05 21:02:03,860 - oe-selftest - INFO - testtools.testresult.real._StringException: Traceback (most recent call last):
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/cases/spdx.py", line 485, in test_version_extraction_patterns
    objset = self.check_recipe_spdx(
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/cases/spdx.py", line 123, in check_recipe_spdx
    return self.check_spdx_file(filename)
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/cases/spdx.py", line 81, in check_spdx_file
    self.assertExists(filename)
  File "/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/layers/openembedded-core/meta/lib/oeqa/selftest/case.py", line 249, in assertExists
    raise self.failureException(msg)
AssertionError: '/srv/pokybuild/yocto-worker/oe-selftest-armhost/build/build-st-1062472/tmp/deploy/spdx/3.0.1/cortexa57/recipes/recipe-tar.spdx.json' does not exist


https://autobuilder.yoctoproject.org/valkyrie/#/builders/23/builds/3458
https://autobuilder.yoctoproject.org/valkyrie/#/builders/35/builds/3339
https://autobuilder.yoctoproject.org/valkyrie/#/builders/48/builds/3228

Can you have a look at these errors?


I also note this test failure, specifically on Fedora:
2026-03-05 18:18:02,472 - oe-selftest - INFO - newlib.NewlibTest.test_newlib (subunit.RemotedTestCase)
2026-03-05 18:18:02,473 - oe-selftest - INFO -  ... FAIL

I seems a bit unrelated, so maybe just an intermittent error.

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com