#yocto on 2025-08-03 — irc logs at libera.catirclogs.org

2023-07-05 09:29 LetoThe2nd changed the topic of #yocto to: Welcome to the Yocto Project | Learn more: https://www.yoctoproject.org | Community: https://www.yoctoproject.org/community | IRC logs: http://irc.yoctoproject.org/irc/ | Having difficulty on the list, with someone on the list or on IRC, contact Yocto Project Community Manager Letothe2nd | CoC: https://www.yoctoproject.org/community/code-of-conduct

00:00 Articulus5 has joined #yocto

00:02 Articulus has quit [Read error: Connection reset by peer]

00:03 geoff__ has quit [Ping timeout: 252 seconds]

00:32 qschulz has quit [Remote host closed the connection]

00:34 geoffhp has joined #yocto

00:35 qschulz has joined #yocto

01:00 pidge has joined #yocto

01:01 pidge_ has quit [Ping timeout: 276 seconds]

01:07 olani has quit [Ping timeout: 260 seconds]

01:33 <khem> I think this reproducibility failure is due to one of rburton 's cleanup patch where its trying to remove python deps especially "clang: no need to depend on python3native/python3targetconfig"

01:37 <khem> one of the reason to use a contained python env during build is exactly for this reason but at that time lldb was the instigator

01:38 <khem> lldb_find_python_module and find_python_module are the ones which casue this variability

01:40 <khem> it runs 'execute_process(COMMAND "${Python3_EXECUTABLE}" "-c" "import ${module}"' to detect the modules

01:45 <khem> which will be wrong for nativesdk and target builds for sure

01:59 jclsn has quit [Ping timeout: 272 seconds]

02:01 jclsn has joined #yocto

03:21 kergoth has joined #yocto

05:32 _whitelogger has joined #yocto

05:44 jmd has joined #yocto

06:31 Chaser has joined #yocto

06:57 _whitelogger has joined #yocto

07:10 frgo has joined #yocto

07:12 frgo has quit [Read error: Connection reset by peer]

07:12 frgo_ has joined #yocto

07:20 wmills__ has joined #yocto

07:20 frgo_ has quit [Read error: Connection reset by peer]

07:21 frgo has joined #yocto

07:21 frgo has quit [Read error: Connection reset by peer]

07:21 frgo has joined #yocto

07:22 wmills_ has quit [Ping timeout: 245 seconds]

07:24 frgo has quit [Read error: Connection reset by peer]

07:25 frgo has joined #yocto

07:26 frgo has quit [Read error: Connection reset by peer]

07:26 frgo_ has joined #yocto

07:35 zeemate has joined #yocto

07:38 frgo_ has quit [Read error: Connection reset by peer]

08:23 goliath has joined #yocto

09:27 Chaser has quit [Quit: Textual IRC Client: www.textualapp.com]

10:03 zeemate has quit [Ping timeout: 245 seconds]

10:33 savolla has joined #yocto

10:33 ray-san has joined #yocto

10:34 ray-san2 has quit [Ping timeout: 240 seconds]

10:35 ray-san has quit [Read error: Connection reset by peer]

10:39 savolla has quit [Quit: WeeChat 4.7.0]

10:47 ablu has quit [Ping timeout: 252 seconds]

10:50 ablu has joined #yocto

10:57 florian has joined #yocto

10:59 pita has joined #yocto

11:11 florian has quit [Ping timeout: 260 seconds]

11:23 florian has joined #yocto

11:34 florian has quit [Ping timeout: 272 seconds]

12:16 RyanEatmon has quit [Remote host closed the connection]

12:17 RyanEatmon has joined #yocto

12:36 ptsneves has joined #yocto

12:39 ptsneves1 has joined #yocto

12:41 ptsneves has quit [Ping timeout: 252 seconds]

12:41 ptsneves1 is now known as ptsneves

13:20 ptsneves1 has joined #yocto

13:20 savolla has joined #yocto

13:22 ptsneves has quit [Ping timeout: 252 seconds]

13:22 ptsneves1 is now known as ptsneves

13:41 <derRichard> can you recommend a nice tool to view/analyze the spdx.json files from a yocto build?

13:41 <derRichard> i hoped sbomaudit is useful but it seems to operate only on single files

14:01 ptsneves has quit [Ping timeout: 260 seconds]

14:15 Xagen has quit [Ping timeout: 260 seconds]

14:16 Xagen has joined #yocto

14:26 pita has quit [Ping timeout: 260 seconds]

14:26 pita has joined #yocto

14:54 <Crofton> hmmm

14:54 <Crofton> I'd love a good answer to that

14:56 <Crofton> https://blog.savoirfairelinux.com/en-ca/2025/savoir-faire-linux-announces-the-open-source-release-of-vulnscout-io/

14:56 <Crofton> comes to mind, but I ahve never tried it

15:20 pita has quit [Read error: Connection reset by peer]

15:20 pita has joined #yocto

15:42 ptsneves has joined #yocto

16:00 ptsneves has quit [Read error: Connection reset by peer]

16:46 pidge has quit [Quit: ZNC - https://znc.in]

16:47 pidge has joined #yocto

17:28 pidge has quit [Quit: ZNC - https://znc.in]

17:32 pidge has joined #yocto

19:05 vvn has joined #yocto

19:25 pita has quit [Remote host closed the connection]

19:46 jkale has joined #yocto

19:46 joekale has quit [Read error: Connection reset by peer]

19:46 jkale is now known as joekale

20:27 Articulus5 is now known as Articulus

20:33 <derRichard> Crofton: in this case i care more about licences than vuls

20:34 <Crofton> I wish I had a better answer

20:36 druppy has joined #yocto

20:42 <RP> derRichard: I know tools are still being developed, JPEW may have pointers

20:44 <derRichard> RP: let me put it differently, how can i know that the files generared by the spdx class are sane? reading the by hand is kind of painful

20:45 <RP> derRichard: that is a bit different and I think JPEW can point at the tools he uses with the files

20:45 <derRichard> ok :-)

20:58 sgw has joined #yocto

21:05 makurz has joined #yocto

21:29 savolla has quit [Quit: WeeChat 4.7.0]

21:30 goliath has quit [Quit: SIGSEGV]

21:38 vvn has quit [Quit: WeeChat 4.6.3]

22:07 druppy has quit [Ping timeout: 248 seconds]

22:18 makurz has quit [Remote host closed the connection]

22:56 jmd has quit [Remote host closed the connection]