Re: [OE-core] [PATCH 0/3] SPDX: Add annotations to relationship

On 11/4/21 3:50 PM, Richard Purdie wrote:

On Thu, 2021-11-04 at 15:45 -0500, Joshua Watt wrote:

quoted

On 11/4/21 3:43 PM, Richard Purdie wrote:

quoted

On Thu, 2021-11-04 at 20:00 +0000, Jose Quaresma wrote:

quoted

Richard Purdie [off-list ref] escreveu no dia quinta,
28/10/2021 à(s) 21:58:

quoted

On Thu, 2021-10-28 at 08:47 -1000, Steve Sakoman wrote:

quoted

On Tue, Oct 26, 2021 at 10:41 PM Jose Quaresma [off-list ref]

wrote:

quoted

quoted

Hi all,

There are any plans or is it possible to backport the SBOM/SPDX to the

dunfell branch?

quoted

I'm going to yield to Saul as to whether he thinks this is
desirable/possible or not.

The packagedata changes are pretty invasive unfortunately and likely not
something you're going to want in dunfell sadly.

Thanks for the clarification.

I have been thinking a bit more about this. I did wonder if we should consider a
mixin layer of some kind for it that could work with dunfell?

We could host it, it is just a question of writing the mixin layer and
maintaining it.

I don't think it's going to be possible with a pure mixin layer, since
it relies on the extended package data?

I suspect that could perhaps be patched in through a layer though? You might
choose to drop the compression piece or do it differently for the backport?

I'm not sure if a layer could hook in well enough to get the data 
needed...  maybe worth an experiment though


With a backport, I would probably either use GZip compression or no 
compression. The zstd compression was designed as a drop in replacement 
for Gzip if we wanted to go that route.

Cheers,

Richard