[OE-core][wrynose 10/38] grub: disable grub-protect for native builds
From: Yoann Congal <hidden>
Date: 2026-09-09 07:30:12
Subsystem:
the rest · Maintainer:
Linus Torvalds
From: Himanshu Jadon <redacted> grub-native fails on hosts where libtasn1 headers are not available when configure tries to build grub-protect: util/grub-protect.c:25:10: fatal error: libtasn1.h: No such file or directory grub-protect is an optional utility for sealing disk-encryption keys using the TPM2 key protector. It is not used by the GRUB native tools staged for Yocto recipe execution. Disable grub-protect for class-native so grub-native does not depend on libtasn1. This keeps the native build focused on the tools needed by Yocto and avoids adding another native library dependency only for an unused utility. Target and nativesdk builds keep the upstream default, so image and SDK behaviour is unchanged. Signed-off-by: Himanshu Jadon <redacted> Signed-off-by: Richard Purdie <redacted> (cherry picked from commit 9290ca0517e5a8888ee8a695a87c0d7e7b5ea377) Signed-off-by: Deepak Rathore <redacted> Signed-off-by: Yoann Congal <redacted> --- meta/recipes-bsp/grub/grub2.inc | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/meta/recipes-bsp/grub/grub2.inc b/meta/recipes-bsp/grub/grub2.inc
index 0656489ead3..466c772e5bf 100644
--- a/meta/recipes-bsp/grub/grub2.inc
+++ b/meta/recipes-bsp/grub/grub2.inc@@ -73,6 +73,8 @@ EXTRA_OECONF = "--with-platform=${GRUBPLATFORM} \ --disable-werror \ " +EXTRA_OECONF:append:class-native = " --disable-grub-protect" + PACKAGECONFIG ??= "" PACKAGECONFIG[grub-mount] = "--enable-grub-mount,--disable-grub-mount,fuse" PACKAGECONFIG[device-mapper] = "--enable-device-mapper,--disable-device-mapper,libdevmapper"