libmatthew not compatible with cve-check on world (meta-java)

The module affected: meta-java and oniro in general

What is the action to reproduce the bug?

Clone oniro

$ TEMPLATECONF=../oniro/flavours/linux . ./oe-core/oe-init-build-env build-oniro-linux
$ bitbake --runonly=do_cve_check world

What is the result you see?

ERROR: Nothing PROVIDES 'classpath' (but /oniroproject-current/oe-core/../meta-java/recipes-core/libmatthew/libmatthew_0.8.bb DEPENDS on or otherwise requires it)
classpath was skipped: missing required distro feature 'x11' (not in DISTRO_FEATURES)
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'dbus-java', 'libmatthew', 'classpath']

What is the result you expect?

The command should generate a complete cve-check report for oniro and finish without any errors

The issue is blocking for security analysis.

Frequency?

always

Tested version

Oniro 1ec86d19

Do you know any workaround of this issue?

no

Do you have a fix for this issue?

no

added IssueBug needs-investigation teammaintenance labels

CC @esben @robertd @agherzan

CC @aszpilko

changed iteration to Oniro Core Iterations Aug 1, 2022 - Aug 31, 2022

changed milestone to %goofy beta

assigned to @agherzan

set weight to 5

added teamsystems label and removed teammaintenance label

added SeverityCritical label

The same issue prevents running yocto-check-layer in the Oniro context:

Loading cache...done.
Loaded 4784 entries from dependency cache.
Parsing recipes...done.
Parsing of 3101 .bb files complete (3100 cached, 1 parsed). 4785 targets, 587 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies
ERROR: Nothing PROVIDES 'classpath' (but /oniro-eclipse/oniroproject/oe-core/../meta-java/recipes-core/libmatthew/libmatthew_0.8.bb DEPENDS on or otherwise requires it)
classpath was skipped: missing required distro feature 'x11' (not in DISTRO_FEATURES)
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'libmatthew', 'classpath']

added Doing label

removed needs-investigation label

meta-java fixes:

• master

  • https://lists.openembedded.org/g/openembedded-devel/message/98289
  • https://lists.openembedded.org/g/openembedded-devel/message/98290
  • https://lists.openembedded.org/g/openembedded-devel/message/98291

• kirkstone

  • https://lists.openembedded.org/g/openembedded-devel/message/98292
  • https://lists.openembedded.org/g/openembedded-devel/message/98293
  • https://lists.openembedded.org/g/openembedded-devel/message/98294

meta-virtualization fixes:

• master

  • https://lists.yoctoproject.org/g/meta-virtualization/message/7526

• kirkstone

  • https://lists.yoctoproject.org/g/meta-virtualization/message/7527

meta-virtualization merged the fixes.

Waitng for kirkstone then. @landgraf does the update script support meta-virtualization (ie. do we need to update the layer list) ?

@mrybczyn the script is project-agnostic it tries to check all repos which are specified in default.xml with fixed revision. There's no hardcoded list of project or something like this in the script.

https://git.ostc-eu.org/OSTC/planning/maintenance/-/blob/main/scripts/update_upstream_revision.py#L26

meta-virtualization also merged it in kirkstone. We are waiting for meta-java.

@landgraf great. we're waiting for the patches to reach kirkstone branches around then

Given that upstream is not as responsive as initially hoped, I have proposed an MR to bring these pending fixes in staging: #795 and create an issue #795 to track upstream catch up. In this way, we can close this when the staging MR gets merged.

mentioned in merge request !296 (merged)

marked this issue as related to #795

mentioned in commit 3b4db908

closed with merge request !296 (merged)

kalpa@onirocluster2:~/oniroproject/build-oniro-linux$ bitbake --runonly=do_cve_check world
Loading cache: 100% |                                                                                                           | ETA:  --:--:--
Loaded 0 entries from dependency cache.
Parsing recipes: 100% |##########################################################################################################| Time: 0:02:33
Parsing of 3312 .bb files complete (0 cached, 3312 parsed). 5037 targets, 609 skipped, 0 masked, 0 errors.
Removing 3 recipes from the core2-64 sysroot: 100% |#############################################################################| Time: 0:00:04
Removing 3 recipes from the qemux86_64 sysroot: 100% |###########################################################################| Time: 0:00:00
Removing 3 recipes from the x86_64 sysroot: 100% |###############################################################################| Time: 0:00:02
NOTE: Resolving any missing task queue dependencies
ERROR: Nothing PROVIDES 'udisks2' (but /home/kalpa/oniroproject/oe-core/../meta-ledge-secure/meta-ledge-secure/recipes-security/clevis/clevis_git.bb DEPENDS on or otherwise requires it)
udisks2 was skipped: missing required distro feature 'polkit' (not in DISTRO_FEATURES)
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'clevis', 'udisks2']

Summary: There were 2 ERROR messages, returning a non-zero exit code.

@agherzan I'm facing this error, is something that will be fix with the new issue fixing?

It is not related to this issue. It is another issue that was introduced in the meanwhile. See #796

Ok thanks, so how can I validate this issue? Have I to wait for the #796 to be fixed?

@mrybczyn could provide you with a workaround for the new issue.

I create a new ticket for this.. it's going to be long and the next one is in meta-virtualization again :)

removed Doing label

kalpa@onirocluster2:~/oniroproject/build-oniro-linux$ bitbake --runonly=do_cve_check world
Loading cache: 100% |#########################################################################################################################################| Time: 0:00:01
Loaded 4956 entries from dependency cache.
Parsing recipes: 100% |#######################################################################################################################################| Time: 0:00:01
Parsing of 3273 .bb files complete (3263 cached, 10 parsed). 4962 targets, 637 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies
NOTE: Multiple providers are available for runtime ssh (dropbear, openssh)
Consider defining a PREFERRED_RPROVIDER entry to match ssh
ERROR: Nothing RPROVIDES 'virtual/runc' (but /home/kalpa/oniroproject/oe-core/../meta-ledge-secure/meta-ledge-secure/recipes-samples/packagegroups/packagegroup-ledge-containers.bb RDEPENDS on or otherwise requires it)
NOTE: Runtime target 'virtual/runc' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['virtual/runc']
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'packagegroup-ledge-containers', 'virtual/runc']

Summary: There were 2 ERROR messages, returning a non-zero exit code.

@agherzan @mrybczyn something related to this or to #796? I can't validate this issue to remove it from the backlog of open issues

@lucafavaretto this is another issue. I will create a new ticket to group all of this series

so this issue could be fixed but blocked by other issues? (e.g. #851 and #796)

Yes, created a high level task. And I'm back working on the ledge stuff so fixing this in the process

perfect, thanks

changed milestone to %goofy general availability

removed iteration Oniro Core Iterations Aug 1, 2022 - Aug 31, 2022