yocto-check-layer does't pass: wrong dependencies in efibootmgr in packagegroup-efi-secureboot

The module affected

Oniro general by meta-secure-core

What is the action to reproduce the bug?

Run any yocto-check-layer on a well-known YP layer, eg.

yocto-check-layer --dependency /oniro/repo/meta-openembedded/ -d ../meta-security/meta-hardening/ 

What is the result you see?

Loading cache...done.
Loaded 4900 entries from dependency cache.
Parsing recipes...done.
Parsing of 3222 .bb files complete (3221 cached, 1 parsed). 4901 targets, 590 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies
ERROR: Nothing RPROVIDES 'efibootmgr' (but /oniro/repo/oe-core/../meta-secure-core/meta-efi-secure-boot/recipes-base/packagegroups/packagegroup-efi-secure-boot.bb RDEPENDS on or otherwise requires it)
efibootmgr was skipped: incompatible with host x86_64-oniro-linux-musl (not in COMPATIBLE_HOST)
NOTE: Runtime target 'efibootmgr' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['efibootmgr']
ERROR: Required build target 'meta-world-pkgdata' has no buildable providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata', 'packagegroup-efi-secure-boot', 'efibootmgr']

What is the result you expect?

Should pass

Frequency?

always

Tested version

Oniro 4c0160e8 Also reported by TechArena participants

Do you know any workaround of this issue?

Remove meta-ledge-secure for x86 builds for now OR remove the packagegroup for now as not used in Oniro

Do you have a fix for this issue?

no

added IssueBug needs-investigation teammaintenance labels

assigned to @mrybczyn

changed the description

mentioned in issue #840

added SeverityNormal label

removed teammaintenance label

added teamsecurity label

Fixing with !380 (closed)

added Doing label

removed needs-investigation label

unassigned @mrybczyn