From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id 2PuzMb1ss2Qm/QAASxT56A (envelope-from ) for ; Sun, 16 Jul 2023 06:06:21 +0200 Received: from aspmx1.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id CN2iMb1ss2QybwAA9RJhRA (envelope-from ) for ; Sun, 16 Jul 2023 06:06:21 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 5B58645BBF for ; Sun, 16 Jul 2023 06:06:21 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debian.org header.s=1.vagrant.user header.b="oZR/bgBV"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1689480381; a=rsa-sha256; cv=none; b=K0qr5jyYhZQ5sELS5FDW95+vN/4rKOQVLYW8MoTZhjlXWGlCPZtFaR9PyyCl5DNstAQWPp jDR/RU2byy/s/LcS0NI5wQrthhoVWnYpFCpD4I49sObTfbVoGryc6WURhMsrLgb3DawVDJ YsujyInoyxe0HX/fROBVh10OvBTdzOm7CSI/LzOUHiH2BqlovqSvw3cIE0RxSBnZjb4qd5 qytjtdLb0m6Q1TW0y396jh6JUC5TeywEFMjH8D1l/L9+29CHwZIP0XFF1ursHt87Zq61NM XwiLutYYs67EOlHsGUXfbLMwwxsXIJJ32WOu/FMoasdpg+pP9z6W2zlNGjUSNA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debian.org header.s=1.vagrant.user header.b="oZR/bgBV"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1689480381; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=pz1GrSLZmxtd48fKdt28Pm1oR3uAdcxuTGWBNc081AE=; b=TSb6962CiZqmZuH5wU4yOofekK7695Z9VRzWIsPpC4YNE3/hYHVvkZ4Hvi7CBcUoelcbPx UdG8SSDUP2VYWuDvR1BL+9OoVmDxArG/ioPAePVTsq8WlufDheK3RED0i9gtMguB9yWve3 UpL19GKEvGnIiNrAj0T0jf1/rcFVSssVbrIsI8GFZAFYEg/MbTeFBtaRFITL8FgGrzw8Aq jjcZcmoBmTQv/GQrORDgt6SpufpmSaRE8icuVsLN5tI4W81pnZCdSpr0PTc5BGRzkrns4L Pyqeb9QGHTw5fesQOZDYsjWPlUlcPhYNIrPf9Bn+lnl/bOd6UuQMkpJXzJ3rFw== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qKt1K-0004iy-ML; Sun, 16 Jul 2023 00:06:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qKt1H-0004ht-5X for guix-patches@gnu.org; Sun, 16 Jul 2023 00:06:03 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qKt1G-0003Tq-Rv for guix-patches@gnu.org; Sun, 16 Jul 2023 00:06:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qKt1G-0000og-Fk for guix-patches@gnu.org; Sun, 16 Jul 2023 00:06:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#64149] [PATCH v3 2/6] gnu: u-boot: Update to 2023.07.02. Resent-From: Vagrant Cascadian Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 16 Jul 2023 04:06:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 64149 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: To: Maxim Cournoyer Cc: 64149@debbugs.gnu.org, ludo@gnu.org, efraim@flashner.co.il Received: via spool by 64149-submit@debbugs.gnu.org id=B64149.16894803173068 (code B ref 64149); Sun, 16 Jul 2023 04:06:02 +0000 Received: (at 64149) by debbugs.gnu.org; 16 Jul 2023 04:05:17 +0000 Received: from localhost ([127.0.0.1]:46329 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qKt0X-0000nQ-1B for submit@debbugs.gnu.org; Sun, 16 Jul 2023 00:05:17 -0400 Received: from cascadia.aikidev.net ([173.255.214.101]:46030) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qKt0S-0000n9-G5 for 64149@debbugs.gnu.org; Sun, 16 Jul 2023 00:05:16 -0400 Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50]) (Authenticated sender: vagrant@cascadia.debian.net) by cascadia.aikidev.net (Postfix) with ESMTPSA id E64571AA7B; Sat, 15 Jul 2023 21:05:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=debian.org; s=1.vagrant.user; t=1689480303; bh=lWP9RJLl7h7GIE0LsBWvG86eTdx6NYrAXYnAz8cG2u8=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=oZR/bgBVH2k03Bwt9NQ3lXyZYdzaYv9IvQrXK1KlUwPVDnu5ujBrL3eFT7pq2vTcG fmdvokD/GzxqB0jXgAK85ac3D12KzBxVEIAiTLje08i2roaTAbPIogJtIer9RCzQ2T wz12J1P8Dydq5tmOR8bBHkXsZmQB030zRQYbyBLrUQrwsS65OAi9WsiIQx4v0Wsne/ NGB0Oft7t3t7w4zFjTXBcstNG5GMM6MOLE8Qae7NTrxXfmAAHzCtwiQp9nTju9/CXG Xpkrf0wdivrhjXBGc77eUqOqPPXp647fbSXd6zMQ25TJXC9D5BqEoxMxk65LmgMtUB mQKj+nb/VWoFw== From: Vagrant Cascadian In-Reply-To: <87fs5ov9oj.fsf@gmail.com> References: <874jm95gmz.fsf@wireframe> <20230712145206.298746-1-vagrant@debian.org> <20230712145206.298746-2-vagrant@debian.org> <87a5vxx5dc.fsf@gmail.com> <87sf9p3hge.fsf@wireframe> <87fs5ov9oj.fsf@gmail.com> Date: Sat, 15 Jul 2023 21:04:59 -0700 Message-ID: <87ilak33is.fsf@wireframe> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -5.23 X-Migadu-Scanner: mx2.migadu.com X-Spam-Score: -5.23 X-Migadu-Queue-Id: 5B58645BBF X-TUID: 6zYSMAFTdwZ/ --=-=-= Content-Type: text/plain On 2023-07-15, Maxim Cournoyer wrote: > Vagrant Cascadian writes: >> On 2023-07-14, Maxim Cournoyer wrote: >>> vagrant@debian.org writes: >>>> @@ -1230,7 +1257,8 @@ (define-public u-boot-rockpro64-rk3399 >>>> "CONFIG_SATA_SIL=y" >>>> "CONFIG_SCSI=y" >>>> "CONFIG_SCSI_AHCI=y" >>>> - "CONFIG_DM_SCSI=y")))) >>>> + "CONFIG_DM_SCSI=y" >>>> + "# CONFIG_SPL_FIT_SIGNATURE is not set")))) >>>> (package >>>> (inherit base) >>>> (arguments >>>> @@ -1240,6 +1268,13 @@ (define-public u-boot-rockpro64-rk3399 >>>> (add-after 'unpack 'set-environment >>>> (lambda* (#:key inputs #:allow-other-keys) >>>> (setenv "BL31" (search-input-file inputs "/bl31.elf")))) >>>> + ;; Disable SPL FIT signatures, due to GPLv2 and Openssl license >>>> + ;; incompatibilities >>>> + (add-after 'unpack 'disable-spl-fit-signature >>>> + (lambda _ >>>> + (substitute* "configs/rockpro64-rk3399_defconfig" >>>> + (("CONFIG_SPL_FIT_SIGNATURE=y") >>>> + "# CONFIG_SPL_FIT_SIGNATURE is not set")))) >>> >>> Are you sure this really disables SPL_FIT_SIGNATURE? The #:configs >>> arguments goes through 'verify-config', which ensures an unset value >>> doesn't get pulled as a dependency of other options, if I recall >>> correctly. >> >> Without this, it spits out a nasty error, I think because >> CONFIG_SPL_FIT_SIGNATURE is effectively defined multiple times >> (e.g. "=y" in the defconfig, and "# ... is not set" in the additional >> guix options?) and maybe verify-config fails in that situation? Sorry I >> don't have the error handy, but it was easy enough to trigger by >> dropping the 'disable-spl-fit-signature phase. > > Hm. In my experience this means some other option is pulling in (by > means of kconfig dependency resolution) the CONFIG_SPL_FIT_SIGNATURE > option and would need to also be disabled. When faced with this problem > I usually end up navigating the 'make menuconfig' kconfig interface and > inspecting dependencies for the option at hand. Only modifying the config in 'disable-spl-fit-signature works alone, if I recall correctly, but I left in the the stuff with verify-config to have an extra safety check. Without adding openssl to one of the inputs, the build should fail regardless, so maybe only including the 'disable-spl-fit-signature is sufficient. live well, vagrant --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZLNsawAKCRDcUY/If5cW qjXzAQDtaMG8x5wsNiKurebpRddjFaORGDG9ldLDayKIZlivRgD/Rr1KIa9yVvD5 5vldFCR6ij1+6Cf10BzVLNhc1xXt6QU= =E2zI -----END PGP SIGNATURE----- --=-=-=--