[1/8] meta/recipes-kernel/linux: Use proper SSL toolkit (libssl3t64) for Trixie

Message ID 20250816105921.3428140-2-srinuvasan.a@siemens.com
State Superseded, archived
Headers show
Series Add Trixie support for various machines | expand

Commit Message

srinuvasan.a Aug. 16, 2025, 10:59 a.m. UTC
From: srinuvasan <srinuvasan.a@siemens.com>

Custom kernel recipe builds were failing on Trixie due to a dependency
on the unavailable libssl3 package. Updated to use the correct
libssl3t64 package for Trixie builds.

Signed-off-by: srinuvasan <srinuvasan.a@siemens.com>
---
 meta/recipes-kernel/linux/linux-custom.inc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

Comments

Quirin Gylstorff Aug. 21, 2025, 11:28 a.m. UTC | #1
On 8/16/25 12:59, srinuvasan.a via isar-users wrote:
> From: srinuvasan <srinuvasan.a@siemens.com>
> 
> Custom kernel recipe builds were failing on Trixie due to a dependency
> on the unavailable libssl3 package. Updated to use the correct
> libssl3t64 package for Trixie builds.
> 
> Signed-off-by: srinuvasan <srinuvasan.a@siemens.com>
> ---
>   meta/recipes-kernel/linux/linux-custom.inc | 3 ++-
>   1 file changed, 2 insertions(+), 1 deletion(-)
> 
> diff --git a/meta/recipes-kernel/linux/linux-custom.inc b/meta/recipes-kernel/linux/linux-custom.inc
> index 01e9bff7..f55e2f29 100644
> --- a/meta/recipes-kernel/linux/linux-custom.inc
> +++ b/meta/recipes-kernel/linux/linux-custom.inc
> @@ -35,9 +35,10 @@ KERNEL_DEBIAN_DEPENDS ?= "initramfs-tools | linux-initramfs-tool, \
>                             kmod, \
>                             linux-base (>= 4.3~),"
>   
> -LIBSSL_DEP = "libssl3"
>   LIBSSL_DEP:buster = "libssl1.1"
>   LIBSSL_DEP:bullseye = "libssl1.1"
> +LIBSSL_DEP:bookworm = "libssl3"
> +LIBSSL_DEP = "libssl3t64"

 >   >   KERNEL_HEADERS_DEBIAN_DEPENDS ?= "libc6, \
>                                     ${LIBSSL_DEP},"


The kernel_headers should not have any dependency to libc6 or libssl*. 
As the header package does not contain any binary which uses libssl3/libc6.

In Debian upstream libssl is used by the Kbuild package. After my 
current analysis the binary dependency is missing in ISAR as the macro 
${shlibs:Depends} does not add the dependency.

Quirin
Srinuvasan Arjunan Aug. 21, 2025, 11:53 a.m. UTC | #2
On Thu, Aug 21, 2025 at 4:58 PM 'Quirin Gylstorff' via isar-users <
isar-users@googlegroups.com> wrote:

>
>
> On 8/16/25 12:59, srinuvasan.a via isar-users wrote:
> > From: srinuvasan <srinuvasan.a@siemens.com>
> >
> > Custom kernel recipe builds were failing on Trixie due to a dependency
> > on the unavailable libssl3 package. Updated to use the correct
> > libssl3t64 package for Trixie builds.
> >
> > Signed-off-by: srinuvasan <srinuvasan.a@siemens.com>
> > ---
> >   meta/recipes-kernel/linux/linux-custom.inc | 3 ++-
> >   1 file changed, 2 insertions(+), 1 deletion(-)
> >
> > diff --git a/meta/recipes-kernel/linux/linux-custom.inc
> b/meta/recipes-kernel/linux/linux-custom.inc
> > index 01e9bff7..f55e2f29 100644
> > --- a/meta/recipes-kernel/linux/linux-custom.inc
> > +++ b/meta/recipes-kernel/linux/linux-custom.inc
> > @@ -35,9 +35,10 @@ KERNEL_DEBIAN_DEPENDS ?= "initramfs-tools |
> linux-initramfs-tool, \
> >                             kmod, \
> >                             linux-base (>= 4.3~),"
> >
> > -LIBSSL_DEP = "libssl3"
> >   LIBSSL_DEP:buster = "libssl1.1"
> >   LIBSSL_DEP:bullseye = "libssl1.1"
> > +LIBSSL_DEP:bookworm = "libssl3"
> > +LIBSSL_DEP = "libssl3t64"
>
>  >   >   KERNEL_HEADERS_DEBIAN_DEPENDS ?= "libc6, \
> >                                     ${LIBSSL_DEP},"
>
>
> The kernel_headers should not have any dependency to libc6 or libssl*.
> As the header package does not contain any binary which uses libssl3/libc6.
>
> In Debian upstream libssl is used by the Kbuild package. After my
> current analysis the binary dependency is missing in ISAR as the macro
> ${shlibs:Depends} does not add the dependency.
>
> Quirin
>

  Thanks Quirin for the analysis, I will check from my end and update the
patch accordingly.

  Thanks,
  Srinu

>
> --
> You received this message because you are subscribed to the Google Groups
> "isar-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to isar-users+unsubscribe@googlegroups.com.
> To view this discussion visit
> https://groups.google.com/d/msgid/isar-users/b9f497bc-68e9-4d09-9e1d-05d38399a716%40siemens.com
> .
>
Quirin Gylstorff Aug. 21, 2025, 12:46 p.m. UTC | #3
On 8/21/25 13:53, Srinuvasan Arjunan wrote:
> 
> 
> On Thu, Aug 21, 2025 at 4:58 PM 'Quirin Gylstorff' via isar-users <isar- 
> users@googlegroups.com <mailto:isar-users@googlegroups.com>> wrote:
> 
> 
> 
>     On 8/16/25 12:59, srinuvasan.a via isar-users wrote:
>      > From: srinuvasan <srinuvasan.a@siemens.com
>     <mailto:srinuvasan.a@siemens.com>>
>      >
>      > Custom kernel recipe builds were failing on Trixie due to a
>     dependency
>      > on the unavailable libssl3 package. Updated to use the correct
>      > libssl3t64 package for Trixie builds.
>      >
>      > Signed-off-by: srinuvasan <srinuvasan.a@siemens.com
>     <mailto:srinuvasan.a@siemens.com>>
>      > ---
>      >   meta/recipes-kernel/linux/linux-custom.inc | 3 ++-
>      >   1 file changed, 2 insertions(+), 1 deletion(-)
>      >
>      > diff --git a/meta/recipes-kernel/linux/linux-custom.inc b/meta/
>     recipes-kernel/linux/linux-custom.inc
>      > index 01e9bff7..f55e2f29 100644
>      > --- a/meta/recipes-kernel/linux/linux-custom.inc
>      > +++ b/meta/recipes-kernel/linux/linux-custom.inc
>      > @@ -35,9 +35,10 @@ KERNEL_DEBIAN_DEPENDS ?= "initramfs-tools |
>     linux-initramfs-tool, \
>      >                             kmod, \
>      >                             linux-base (>= 4.3~),"
>      >
>      > -LIBSSL_DEP = "libssl3"
>      >   LIBSSL_DEP:buster = "libssl1.1"
>      >   LIBSSL_DEP:bullseye = "libssl1.1"
>      > +LIBSSL_DEP:bookworm = "libssl3"
>      > +LIBSSL_DEP = "libssl3t64"
> 
>       >   >   KERNEL_HEADERS_DEBIAN_DEPENDS ?= "libc6, \
>      >                                     ${LIBSSL_DEP},"
> 
> 
>     The kernel_headers should not have any dependency to libc6 or libssl*.
>     As the header package does not contain any binary which uses
>     libssl3/libc6.
> 
>     In Debian upstream libssl is used by the Kbuild package. After my
>     current analysis the binary dependency is missing in ISAR as the macro
>     ${shlibs:Depends} does not add the dependency.
> 
>     Quirin
> 
> 
>    Thanks Quirin for the analysis, I will check from my end and update 
> the patch accordingly.

I already test my patch. You don't need to adapt anything.

Quirin
> 
>    Thanks,
>    Srinu
> 
> 
>     -- 
>     You received this message because you are subscribed to the Google
>     Groups "isar-users" group.
>     To unsubscribe from this group and stop receiving emails from it,
>     send an email to isar-users+unsubscribe@googlegroups.com
>     <mailto:isar-users%2Bunsubscribe@googlegroups.com>.
>     To view this discussion visit https://groups.google.com/d/msgid/
>     isar-users/b9f497bc-68e9-4d09-9e1d-05d38399a716%40siemens.com
>     <https://groups.google.com/d/msgid/isar-users/
>     b9f497bc-68e9-4d09-9e1d-05d38399a716%40siemens.com>.
>

Patch

diff --git a/meta/recipes-kernel/linux/linux-custom.inc b/meta/recipes-kernel/linux/linux-custom.inc
index 01e9bff7..f55e2f29 100644
--- a/meta/recipes-kernel/linux/linux-custom.inc
+++ b/meta/recipes-kernel/linux/linux-custom.inc
@@ -35,9 +35,10 @@  KERNEL_DEBIAN_DEPENDS ?= "initramfs-tools | linux-initramfs-tool, \
                           kmod, \
                           linux-base (>= 4.3~),"
 
-LIBSSL_DEP = "libssl3"
 LIBSSL_DEP:buster = "libssl1.1"
 LIBSSL_DEP:bullseye = "libssl1.1"
+LIBSSL_DEP:bookworm = "libssl3"
+LIBSSL_DEP = "libssl3t64"
 
 KERNEL_HEADERS_DEBIAN_DEPENDS ?= "libc6, \
                                   ${LIBSSL_DEP},"