{"id":9315,"url":"https://patchwork.libcamera.org/api/1.1/patches/9315/?format=json","web_url":"https://patchwork.libcamera.org/patch/9315/","project":{"id":1,"url":"https://patchwork.libcamera.org/api/1.1/projects/1/?format=json","name":"libcamera","link_name":"libcamera","list_id":"libcamera_core","list_email":"libcamera-devel@lists.libcamera.org","web_url":"","scm_url":"","webscm_url":""},"msgid":"<20200813203608.26814-1-andrey.konovalov@linaro.org>","date":"2020-08-13T20:36:08","name":"[libcamera-devel,meta-multimedia,v4] libcamera: fix packaging and installation","commit_ref":null,"pull_url":null,"state":"not-applicable","archived":false,"hash":"618f1d45eac74b203eec633dbfa73c848f9b3128","submitter":{"id":25,"url":"https://patchwork.libcamera.org/api/1.1/people/25/?format=json","name":"Andrey Konovalov","email":"andrey.konovalov@linaro.org"},"delegate":null,"mbox":"https://patchwork.libcamera.org/patch/9315/mbox/","series":[{"id":1218,"url":"https://patchwork.libcamera.org/api/1.1/series/1218/?format=json","web_url":"https://patchwork.libcamera.org/project/libcamera/list/?series=1218","date":"2020-08-13T20:36:08","name":"[libcamera-devel,meta-multimedia,v4] libcamera: fix packaging and installation","version":4,"mbox":"https://patchwork.libcamera.org/series/1218/mbox/"}],"comments":"https://patchwork.libcamera.org/api/patches/9315/comments/","check":"pending","checks":"https://patchwork.libcamera.org/api/patches/9315/checks/","tags":{},"headers":{"Return-Path":"<libcamera-devel-bounces@lists.libcamera.org>","X-Original-To":"parsemail@patchwork.libcamera.org","Delivered-To":"parsemail@patchwork.libcamera.org","Received":["from lancelot.ideasonboard.com (lancelot.ideasonboard.com\n\t[92.243.16.209])\n\tby patchwork.libcamera.org (Postfix) with ESMTPS id 18867BD87C\n\tfor <parsemail@patchwork.libcamera.org>;\n\tThu, 13 Aug 2020 20:36:32 +0000 (UTC)","from lancelot.ideasonboard.com (localhost [IPv6:::1])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTP id 8FC4C615F4;\n\tThu, 13 Aug 2020 22:36:31 +0200 (CEST)","from mail-lj1-x243.google.com (mail-lj1-x243.google.com\n\t[IPv6:2a00:1450:4864:20::243])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTPS id E6A236055A\n\tfor <libcamera-devel@lists.libcamera.org>;\n\tThu, 13 Aug 2020 22:36:30 +0200 (CEST)","by mail-lj1-x243.google.com with SMTP id v4so7685909ljd.0\n\tfor <libcamera-devel@lists.libcamera.org>;\n\tThu, 13 Aug 2020 13:36:30 -0700 (PDT)","from localhost.localdomain (37-144-159-139.broadband.corbina.ru.\n\t[37.144.159.139]) by smtp.googlemail.com with ESMTPSA id\n\tn29sm1442090lfi.9.2020.08.13.13.36.29\n\t(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n\tThu, 13 Aug 2020 13:36:29 -0700 (PDT)"],"Authentication-Results":"lancelot.ideasonboard.com;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=linaro.org header.i=@linaro.org\n\theader.b=\"vNgCbRdW\"; dkim-atps=neutral","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google;\n\th=from:to:cc:subject:date:message-id;\n\tbh=dvn/IwqLA+3PH4BKODk/zOnnDdgbBvpTRDgFYMP1JH8=;\n\tb=vNgCbRdW484fNR3yZuknZHE44eln9gutzaHVYYaPdwM9cgGpSiy9/rIle3omvay/rp\n\tv+Ky/h0x3V35kQSQcuwIa9XAiAANotxAYa1Z1dA8TOtta4HQpc9b02sERfiUDazFXAHm\n\tsuP+WnsYMI+lYeVqNKM63qqgsOjXRiMeRvuNAp3CkQy2cRcZQCyKjOQY5JyIorbxKRks\n\tE0X0zDcf9nnHOLfZHZY0yL/N2KoUYc9p1rMwkFVqkrfxCFmPM5d/Dz5+SyE/4vpvsgO/\n\tWedBHcBiFGFhXHcESX3vxkeZPg46dy0wX+CuLechrvyERWeHwQln+aP6k3mrRQRHGdNg\n\tAW8Q==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:from:to:cc:subject:date:message-id;\n\tbh=dvn/IwqLA+3PH4BKODk/zOnnDdgbBvpTRDgFYMP1JH8=;\n\tb=JjXaWVrbv2WTWeEjhnI/hxDaH5pMEU6+tSFyDGsTJLceCIsj7JBcrrLWctiOet3eLb\n\tSxphHZA4yqGE8bPK4GUestNtyU+Iy7Bwz15N5NkmGds9hR3yfWnbrfZf1hUDzO5LfZRl\n\thvEBIOVXFBIibonAMA7gDUvUW4A3JyPf5g7t5DtnWsROgPwcIMN5mBgB5sIQx1HEf5Sz\n\tdJUYr9PUw3P4F1a2+QioAtKHbW7wafvKdn5QwwAUyxCbD3zTRf83h/SnSwvwrFyyyS9I\n\tHoOEMERcdV4lSrgFjwh4Mqe5SW8cQWxs/e8+u4hp269tOJ6BxYllkEgL/aQvCqYRCswO\n\tuHRA==","X-Gm-Message-State":"AOAM532xRIz4OZ9jnpbBy7rsdrcSE9MKWKk9BtyJ6Cpqwlt0ryWTxLob\n\tbnTiizDb4v7EhHxUjjXS+RJt0w==","X-Google-Smtp-Source":"ABdhPJzGxBA0PhthWUt1flPrVng4nIor1DREaCyLQQmfR8qCInIkzs4s2oKK7nq5KxlBblFVd3iWvg==","X-Received":"by 2002:a2e:81d9:: with SMTP id\n\ts25mr2768909ljg.104.1597350990286; \n\tThu, 13 Aug 2020 13:36:30 -0700 (PDT)","From":"Andrey Konovalov <andrey.konovalov@linaro.org>","To":"openembedded-devel@lists.openembedded.org","Date":"Thu, 13 Aug 2020 23:36:08 +0300","Message-Id":"<20200813203608.26814-1-andrey.konovalov@linaro.org>","X-Mailer":"git-send-email 2.17.1","Subject":"[libcamera-devel] [meta-multimedia][PATCH v4] libcamera: fix\n\tpackaging and installation","X-BeenThere":"libcamera-devel@lists.libcamera.org","X-Mailman-Version":"2.1.29","Precedence":"list","List-Id":"<libcamera-devel.lists.libcamera.org>","List-Unsubscribe":"<https://lists.libcamera.org/options/libcamera-devel>,\n\t<mailto:libcamera-devel-request@lists.libcamera.org?subject=unsubscribe>","List-Archive":"<https://lists.libcamera.org/pipermail/libcamera-devel/>","List-Post":"<mailto:libcamera-devel@lists.libcamera.org>","List-Help":"<mailto:libcamera-devel-request@lists.libcamera.org?subject=help>","List-Subscribe":"<https://lists.libcamera.org/listinfo/libcamera-devel>,\n\t<mailto:libcamera-devel-request@lists.libcamera.org?subject=subscribe>","Cc":"libcamera-devel@lists.libcamera.org, raj.khem@gmail.com,\n\tmadhavan.krishnan@linaro.org","MIME-Version":"1.0","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"libcamera-devel-bounces@lists.libcamera.org","Sender":"\"libcamera-devel\" <libcamera-devel-bounces@lists.libcamera.org>"},"content":"libcamera checks if RPATH or RUNPATH dynamic tag is present in\nlibcamera.so. If it does, it assumes that libcamera binaries are\nrun directly from the build directory without installing them, and\ntries to use resorces like IPA modules from the build directory.\nMainline meson strips RPATH/RUNPATH out from libcamera.so file\nat install time. But openembedded-core patches meson to disable\nRPATH/RUNPATH removal. That's why  we need to remove this tag manually\nin do_install_append().\n\nIPA module is signed (with openssl dgst) after it is built. But\nduring packaging the OE build system 1) splits out debugging info,\nand 2) strips the binaries. So the IPA module so file installed\nisn't the one which the signature was calculated against. Then\nthe signature check fails, and libcamera tries to run the IPA\nmodule isolated (in a sandbox), which doesn't work if the IPA\nmodule wasn't designed to run isolated. The solution is to\nrecalculate the IPA modules signatures in ${PKGD} after do_package().\n\nSigned-off-by: Andrey Konovalov <andrey.konovalov@linaro.org>\n---\n Changes in v4:\n  - Some of the quotation marks removed to let bitbake to expand\n    the variables properly.\n\n Changes in v3:\n  - As suggested by Laurent Pinchart, use ipa-sign-install.sh script\n    to recalculate the signatures instead of ipa-sign.sh.\n\n Changes in v2:\n  - Recalculate the IPA modules signatures after do_package()\n    instead of disabling stripping and splitting libcamera package\n\n .../recipes-multimedia/libcamera/libcamera.bb | 19 ++++++++++++++++++-\n 1 file changed, 18 insertions(+), 1 deletion(-)","diff":"diff --git a/meta-multimedia/recipes-multimedia/libcamera/libcamera.bb b/meta-multimedia/recipes-multimedia/libcamera/libcamera.bb\nindex af2d3b4e1..c66c93ec5 100644\n--- a/meta-multimedia/recipes-multimedia/libcamera/libcamera.bb\n+++ b/meta-multimedia/recipes-multimedia/libcamera/libcamera.bb\n@@ -18,13 +18,30 @@ PV = \"202006+git${SRCPV}\"\n \n S = \"${WORKDIR}/git\"\n \n-DEPENDS = \"python3-pyyaml-native udev gnutls boost\"\n+DEPENDS = \"python3-pyyaml-native udev gnutls boost chrpath-native\"\n DEPENDS += \"${@bb.utils.contains('DISTRO_FEATURES', 'qt', 'qtbase qtbase-native', '', d)}\"\n \n RDEPENDS_${PN} = \"${@bb.utils.contains('DISTRO_FEATURES', 'wayland qt', 'qtwayland', '', d)}\"\n \n inherit meson pkgconfig python3native\n \n+do_install_append() {\n+    chrpath -d ${D}${libdir}/libcamera.so\n+}\n+\n+addtask do_recalculate_ipa_signatures_package after do_package before do_packagedata\n+do_recalculate_ipa_signatures_package() {\n+    local modules\n+    for module in $(find ${PKGD}/usr/lib/libcamera -name \"*.so.sign\"); do\n+        module=\"${module%.sign}\"\n+        if [ -f \"${module}\" ] ; then\n+            modules=\"${modules} ${module}\"\n+        fi\n+    done\n+\n+    ${S}/src/ipa/ipa-sign-install.sh ${B}/src/ipa-priv-key.pem \"${modules}\"\n+}\n+\n FILES_${PN}-dev = \"${includedir} ${libdir}/pkgconfig\"\n FILES_${PN} += \" ${libdir}/libcamera.so\"\n \n","prefixes":["libcamera-devel","meta-multimedia","v4"]}