| Message ID | 20250824092952.289402-1-thomas.petazzoni@bootlin.com |
|---|---|
| State | New |
| Headers | show |
| Series | linux: select host-openssl for all architectures when building latest version | expand |
Hello Thomas, All, Le 24/08/2025 à 11:29, Thomas Petazzoni via buildroot a écrit : > Since at least Linux 6.16, but possibly earlier, host-openssl is now > needed on the vast majority (if not all?) CPU architectures. It seems related to signature tools build for the host that are now enabled by default: CONFIG_MODULE_SIG_KEY and CONFIG_MODULE_SIG_FORMAT: $(obj)/signing_key.x509: $(filter-out $(PKCS11_URI),$(CONFIG_MODULE_SIG_KEY)) $(obj)/extract-cert FORCE certs/extract-cert.c:21:#include <openssl/bio.h> hostprogs-always-$(CONFIG_MODULE_SIG_FORMAT) += sign-file scripts/sign-file.c:25:#include <openssl > > Indeed, in order to fix build issues, we would have to add: armeb, > microblaze, loongarch, m68k, mips, mipsel, mips64, mips64el, powerpc, > powerpc64, powerpc64el, riscv, s390, and possibly others. > > So intead, when "latest kernel" is used with the default architecture > configuration, always select host-openssl independently of the > selected architectures. Nowadays, even bootloaders (u-boot) needs host-openssl (BR2_TARGET_UBOOT_NEEDS_OPENSSL) Reviewed-by: Romain Naour <romain.naour@smile.fr> Best regards, Romain > > Fixes: > > https://autobuild.buildroot.net/results/9a314e759f7640d760003e46f86153300478ec60/ (mipsel) > https://autobuild.buildroot.net/results/3bcc674ea5a7cdf031200b0cd2f9f71400ba391c/ (mips64el) > https://autobuild.buildroot.net/results/b24983fd91f408de56479b7d7d57fc9fd3333d7d/ (s390) > https://autobuild.buildroot.net/results/b262fc6f67a9fed55faffcdd580d89f4664e1e16/ (powerpc64) > https://autobuild.buildroot.net/results/45da1538457b18671fa18efe3e1aa57a15561370/ (m68k) > https://autobuild.buildroot.net/results/0a457375d2509f1b29a449dfa50f29fc7e56e568/ (armeb) > https://autobuild.buildroot.net/results/814ca5f048827a635dea0199878fa82d5012b649/ (loongarch64) > https://autobuild.buildroot.net/results/b684d0b37e5187aa9b31693356f8515857d19f7a/ (microblaze) > > Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> > --- > linux/Config.in | 5 ++--- > 1 file changed, 2 insertions(+), 3 deletions(-) > > diff --git a/linux/Config.in b/linux/Config.in > index b4b0295dfe..56473d1b03 100644 > --- a/linux/Config.in > +++ b/linux/Config.in > @@ -175,12 +175,11 @@ config BR2_LINUX_KERNEL_USE_DEFCONFIG > > config BR2_LINUX_KERNEL_USE_ARCH_DEFAULT_CONFIG > bool "Use the architecture default configuration" > - # We know that the default configuration on some architectures > + # We know that the default configuration on many architectures > # requires host-openssl, so select it for the latest kernel > # version. This is mainly needed to fix autobuilder testing. > select BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL if \ > - BR2_LINUX_KERNEL_LATEST_VERSION && \ > - (BR2_aarch64 || BR2_aarch64_be || BR2_arcle || BR2_arceb || BR2_sparc || BR2_x86_64) > + BR2_LINUX_KERNEL_LATEST_VERSION > help > This option will use the default configuration for the > selected architecture. I.e, it is equivalent to running
diff --git a/linux/Config.in b/linux/Config.in index b4b0295dfe..56473d1b03 100644 --- a/linux/Config.in +++ b/linux/Config.in @@ -175,12 +175,11 @@ config BR2_LINUX_KERNEL_USE_DEFCONFIG config BR2_LINUX_KERNEL_USE_ARCH_DEFAULT_CONFIG bool "Use the architecture default configuration" - # We know that the default configuration on some architectures + # We know that the default configuration on many architectures # requires host-openssl, so select it for the latest kernel # version. This is mainly needed to fix autobuilder testing. select BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL if \ - BR2_LINUX_KERNEL_LATEST_VERSION && \ - (BR2_aarch64 || BR2_aarch64_be || BR2_arcle || BR2_arceb || BR2_sparc || BR2_x86_64) + BR2_LINUX_KERNEL_LATEST_VERSION help This option will use the default configuration for the selected architecture. I.e, it is equivalent to running
Since at least Linux 6.16, but possibly earlier, host-openssl is now needed on the vast majority (if not all?) CPU architectures. Indeed, in order to fix build issues, we would have to add: armeb, microblaze, loongarch, m68k, mips, mipsel, mips64, mips64el, powerpc, powerpc64, powerpc64el, riscv, s390, and possibly others. So intead, when "latest kernel" is used with the default architecture configuration, always select host-openssl independently of the selected architectures. Fixes: https://autobuild.buildroot.net/results/9a314e759f7640d760003e46f86153300478ec60/ (mipsel) https://autobuild.buildroot.net/results/3bcc674ea5a7cdf031200b0cd2f9f71400ba391c/ (mips64el) https://autobuild.buildroot.net/results/b24983fd91f408de56479b7d7d57fc9fd3333d7d/ (s390) https://autobuild.buildroot.net/results/b262fc6f67a9fed55faffcdd580d89f4664e1e16/ (powerpc64) https://autobuild.buildroot.net/results/45da1538457b18671fa18efe3e1aa57a15561370/ (m68k) https://autobuild.buildroot.net/results/0a457375d2509f1b29a449dfa50f29fc7e56e568/ (armeb) https://autobuild.buildroot.net/results/814ca5f048827a635dea0199878fa82d5012b649/ (loongarch64) https://autobuild.buildroot.net/results/b684d0b37e5187aa9b31693356f8515857d19f7a/ (microblaze) Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> --- linux/Config.in | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-)