Re: [yocto] How to switch between package version ?

[Mikko Rapeli <mikko.rapeli@linaro.org>]

Hi,

On Thu, Aug 17, 2023 at 09:37:51AM +0200, Alexander Kanavin wrote:
> On Thu, 17 Aug 2023 at 06:41, Mikko Rapeli <mikko.rapeli@linaro.org> wrote:
> > One of the major problems with yocto major updates is that it becomes a big bang,
> > everything must be updated at once. This can be split down and individual layers updated
> > one at a time while keeping poky on the old version. This requires working around
> > layer compatibility, which in many cases is quite artificial and just indiciates that layer
> > is not tested with the other poky versions but it might still just work.
> >
> > I've done this so many times now that I don't see any reason to hide it,
> > also because many non-core layers are simply not maintaining other than master branch
> > exposing users to obsole and insecure SW if they stick to the branch name.
> 
> Getting around LAYERSERIES_COMPAT or using BBMASK in order to update
> layers one at a time is not the problem here. The problem here is that
> a newcomer wants to have an older boost (which is in poky) with a
> newer everything else (which is also in poky). What I'm trying to say,
> nobody stopped and asked, what are they actually trying to do? What
> made them think they need an older boost? Why isn't a newer boost
> suitable? Maybe it is, with a bit of work?

Yes:

On Wed, Aug 16, 2023 at 02:13:39PM +0300, Mikko Rapeli via lists.yoctoproject.org wrote:
> First, I would seriously question and fight back on requirements which dictate using
> old, possibly unmaintained SW versions with a lot of known CVE security vulnerabilities.
> Updating to a new boost version is straight forward work and almost all of the compile
> etc issues can be resolved using Internet search engines since most open source projects
> have also done the same.

We agree on this.

Cheers,

-Mikko