[PATCH yocto-autobuilder-helper 1/2] config.json: remove meta-gplv2 from the check-layer job

[PATCH yocto-autobuilder-helper 1/2] config.json: remove meta-gplv2 from the check-layer job

[Ross Burton]

The meta-gplv2 layer is deprecated in master, so remove it from the
check-layer job.

Signed-off-by: Ross Burton <ross.burton@arm.com>
---
 config.json | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/config.json b/config.json
index afae5e9..7f7c2ad 100644
--- a/config.json
+++ b/config.json
@@ -857,7 +857,7 @@
             "TEMPLATE" : "reproducible"
         },
         "check-layer" : {
-            "NEEDREPOS" : ["poky", "meta-gplv2", "meta-mingw"],
+            "NEEDREPOS" : ["poky", "meta-mingw"],
             "step1" : {
                 "EXTRACMDS" : ["yocto-check-layer-wrapper ../meta-poky"]
             },
@@ -866,9 +866,6 @@
             },
             "step3" : {
                 "EXTRACMDS" : ["yocto-check-layer-wrapper ../meta-mingw"]
-            },
-            "step4" : {
-                "EXTRACMDS" : ["yocto-check-layer-wrapper ../meta-gplv2"]
             }
         },
         "check-layer-nightly" : {
-- 
2.25.1

[PATCH yocto-autobuilder-helper 2/2] config.json: remove non-gpl3 job

[Ross Burton]

meta-gplv2 is deprecated, so remove it from the autobuilder in master.

Signed-off-by: Ross Burton <ross.burton@arm.com>
---
 config.json | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/config.json b/config.json
index 7f7c2ad..c16812b 100644
--- a/config.json
+++ b/config.json
@@ -753,17 +753,6 @@
                 "BBTARGETS" : "build-appliance-image"
             }
         },
-        "non-gpl3" : {
-            "NEEDREPOS" : ["poky", "meta-gplv2"],
-            "MACHINE" : "qemux86",
-            "BBTARGETS" : "core-image-minimal core-image-full-cmdline",
-            "extravars" : [
-                "require conf/distro/include/disable-gplv3.inc"
-            ],
-            "EXTRACMDS" : [
-                "../../yocto-autobuilder-helper/scripts/check-gplv3"
-            ]
-        },
         "no-x11" : {
             "MACHINE" : "qemux86-64",
             "BBTARGETS" : "core-image-full-cmdline core-image-weston world",
-- 
2.25.1

Re: [yocto] [PATCH yocto-autobuilder-helper 2/2] config.json: remove non-gpl3 job

[Alexander Kanavin]

Where and how the decision was made?

Alex

On Wed, 6 Jul 2022 at 16:04, Ross Burton <ross.burton@arm.com> wrote:
>
> meta-gplv2 is deprecated, so remove it from the autobuilder in master.
>
> Signed-off-by: Ross Burton <ross.burton@arm.com>
> ---
>  config.json | 11 -----------
>  1 file changed, 11 deletions(-)
>
> diff --git a/config.json b/config.json
> index 7f7c2ad..c16812b 100644
> --- a/config.json
> +++ b/config.json
> @@ -753,17 +753,6 @@
>                  "BBTARGETS" : "build-appliance-image"
>              }
>          },
> -        "non-gpl3" : {
> -            "NEEDREPOS" : ["poky", "meta-gplv2"],
> -            "MACHINE" : "qemux86",
> -            "BBTARGETS" : "core-image-minimal core-image-full-cmdline",
> -            "extravars" : [
> -                "require conf/distro/include/disable-gplv3.inc"
> -            ],
> -            "EXTRACMDS" : [
> -                "../../yocto-autobuilder-helper/scripts/check-gplv3"
> -            ]
> -        },
>          "no-x11" : {
>              "MACHINE" : "qemux86-64",
>              "BBTARGETS" : "core-image-full-cmdline core-image-weston world",
> --
> 2.25.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#57463): https://lists.yoctoproject.org/g/yocto/message/57463
> Mute This Topic: https://lists.yoctoproject.org/mt/92207108/1686489
> Group Owner: yocto+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [alex.kanavin@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>

Re: [yocto] [PATCH yocto-autobuilder-helper 2/2] config.json: remove non-gpl3 job

[Ross Burton]

On 6 Jul 2022, at 15:13, Alexander Kanavin <alex.kanavin@gmail.com> wrote:
> Where and how the decision was made?

Maybe ‘deprecated’ isn’t quite the right word to use here.

However, meta-gpl2 is unmaintained.  It has no active maintainers, and is worked on only when absolutely needed: in the last year there’s been one actual bug fix, the rest of the commits were related to metadata changes to core (license, override syntax, etc).

By definition all of the software in meta-gplv2 is obsolete and almost certainly has security issues, but nobody is maintaining it.

This has been bought up both here repeatedly, and in the Members calls.  Nobody has shown willing to adopt the layer, fix any outstanding security issues, and maintain it.

We likely need to discuss this again before formally deprecating it, but this shouldn’t be a surprise to anyone. Is there anyone who actually cares enough about meta-gplv2 to maintain it?  This should be taken to oe-arch.

Ross