# This class supplys common functions. SPDXEPENDENCY += "${PATCHTOOL}-native:do_populate_sysroot" SPDXEPENDENCY += " wget-native:do_populate_sysroot" SPDXEPENDENCY += " subversion-native:do_populate_sysroot" SPDXEPENDENCY += " git-native:do_populate_sysroot" SPDXEPENDENCY += " lz4-native:do_populate_sysroot" SPDXEPENDENCY += " lzip-native:do_populate_sysroot" SPDXEPENDENCY += " xz-native:do_populate_sysroot" SPDXEPENDENCY += " unzip-native:do_populate_sysroot" SPDXEPENDENCY += " xz-native:do_populate_sysroot" SPDXEPENDENCY += " quilt-native:do_populate_sysroot" SPDXEPENDENCY += " tar-native:do_populate_sysroot" SPDX_DEPLOY_DIR ??= "${DEPLOY_DIR}/spdx" SPDX_TOPDIR ?= "${WORKDIR}/spdx_sstate_dir" SPDX_OUTDIR = "${SPDX_TOPDIR}/${TARGET_SYS}/${PF}/" SPDX_WORKDIR = "${WORKDIR}/spdx_temp/" do_spdx[dirs] = "${WORKDIR}" LICENSELISTVERSION = "2.6" # If ${S} isn't actually the top-level source directory, set SPDX_S to point at # the real top-level directory. SPDX_S ?= "${S}" addtask do_spdx before do_configure after do_patch def exclude_useless_paths(tarinfo): if tarinfo.isdir(): if tarinfo.name.endswith('/temp') or tarinfo.name.endswith('/patches') or tarinfo.name.endswith('/.pc'): return None elif tarinfo.name == 'temp' or tarinfo.name == 'patches' or tarinfo.name == '.pc': return None return tarinfo def spdx_create_tarball(d, srcdir, suffix, ar_outdir): """ create the tarball from srcdir """ import tarfile, shutil # Make sure we are only creating a single tarball for gcc sources #if (d.getVar('SRC_URI') == ""): # return # For the kernel archive, srcdir may just be a link to the # work-shared location. Use os.path.realpath to make sure # that we archive the actual directory and not just the link. srcdir = os.path.realpath(srcdir) bb.utils.mkdirhier(ar_outdir) if suffix: filename = '%s-%s.tar.gz' % (d.getVar('PF'), suffix) else: filename = '%s.tar.gz' % d.getVar('PF') tarname = os.path.join(ar_outdir, filename) bb.note('Creating %s' % tarname) tar = tarfile.open(tarname, 'w:gz') tar.add(srcdir, arcname=os.path.basename(srcdir), filter=exclude_useless_paths) tar.close() #shutil.rmtree(srcdir) return tarname # Run do_unpack and do_patch def spdx_get_src(d): import shutil spdx_workdir = d.getVar('SPDX_WORKDIR') spdx_sysroot_native = d.getVar('STAGING_DIR_NATIVE') pn = d.getVar('PN') # The kernel class functions require it to be on work-shared, so we dont change WORKDIR if not is_work_shared(d): # Change the WORKDIR to make do_unpack do_patch run in another dir. d.setVar('WORKDIR', spdx_workdir) # Restore the original path to recipe's native sysroot (it's relative to WORKDIR). d.setVar('STAGING_DIR_NATIVE', spdx_sysroot_native) # The changed 'WORKDIR' also caused 'B' changed, create dir 'B' for the # possibly requiring of the following tasks (such as some recipes's # do_patch required 'B' existed). bb.utils.mkdirhier(d.getVar('B')) bb.build.exec_func('do_unpack', d) # Copy source of kernel to spdx_workdir if is_work_shared(d): d.setVar('WORKDIR', spdx_workdir) d.setVar('STAGING_DIR_NATIVE', spdx_sysroot_native) src_dir = spdx_workdir + "/" + d.getVar('PN')+ "-" + d.getVar('PV') + "-" + d.getVar('PR') bb.utils.mkdirhier(src_dir) if bb.data.inherits_class('kernel',d): share_src = d.getVar('STAGING_KERNEL_DIR') cmd_copy_share = "cp -rf " + share_src + "/* " + src_dir + "/" cmd_copy_kernel_result = os.popen(cmd_copy_share).read() bb.note("cmd_copy_kernel_result = " + cmd_copy_kernel_result) git_path = src_dir + "/.git" if os.path.exists(git_path): remove_dir_tree(git_path) # Make sure gcc and kernel sources are patched only once if not (d.getVar('SRC_URI') == "" or is_work_shared(d)): bb.build.exec_func('do_patch', d) # Some userland has no source. if not os.path.exists( spdx_workdir ): bb.utils.mkdirhier(spdx_workdir) def create_manifest(info,sstatefile): import shutil shutil.copyfile(sstatefile,info['outfile']) def get_cached_spdx( sstatefile ): import subprocess if not os.path.exists( sstatefile ): return None try: output = subprocess.check_output(['grep', "PackageVerificationCode", sstatefile]) except subprocess.CalledProcessError as e: bb.error("Index creation command '%s' failed with return code %d:\n%s" % (e.cmd, e.returncode, e.output)) return None cached_spdx_info=output.decode('utf-8').split(': ') return cached_spdx_info[1] #Find InfoInLicenseFile and fill into PackageLicenseInfoInLicenseFile. def find_infoinlicensefile(sstatefile): import subprocess import linecache import re info_in_license_file = "" line_nums = [] key_words = ["NOTICE", "README", "readme", "COPYING", "LICENSE"] for key_word in key_words: search_cmd = "grep -n 'FileName: .*" + key_word + "' " + sstatefile search_output = subprocess.Popen(search_cmd, shell=True, stdout=subprocess.PIPE).communicate()[0] bb.note("Search result: " + str(search_output)) if search_output: bb.note("Found " + key_word +" file.") for line in search_output.decode('utf-8').splitlines(): num = line.split(":")[0] line_nums.append(num) else: bb.note("No license info files found.") for line_num in line_nums: line_spdx = linecache.getline(sstatefile, int(line_num)) file_path = line_spdx.split(": ")[1] base_file_name = os.path.basename(file_path) if base_file_name.startswith("NOTICE"): bb.note("Found NOTICE file " + base_file_name) elif base_file_name.startswith("readme"): bb.note("Found readme file " + base_file_name) elif base_file_name.startswith("README"): bb.note("Found README file " + base_file_name) elif base_file_name.startswith("COPYING") or base_file_name.endswith("COPYING"): bb.note("Found COPYING file " + base_file_name) elif base_file_name.startswith("LICENSE"): bb.note("Found LICENSE file: " + base_file_name) else: continue linecache.clearcache() line_no = int(line_num) + 1 line_spdx = linecache.getline(sstatefile, line_no) while not re.match(r'[a-zA-Z]',line_spdx) is None: if not line_spdx.startswith("LicenseInfoInFile"): line_no = line_no + 1 linecache.clearcache() line_spdx = linecache.getline(sstatefile, int(line_no)) continue license = line_spdx.split(": ")[1] license = license.split("\n")[0] file_path = file_path.split("\n")[0] path_list = file_path.split('/') if len(file_path.split('/')) < 4: file_path_simple = file_path.split('/',1)[1] else: file_path_simple = file_path.split('/',2)[2] #license_in_file = file_path + ": " + license license_in_file = "%s%s%s%s" % ("PackageLicenseInfoInLicenseFile: ",file_path_simple,": ",license) license_in_file.replace('\n', '').replace('\r', '') info_in_license_file = info_in_license_file + license_in_file + "\n" line_no = line_no + 1 linecache.clearcache() line_spdx = linecache.getline(sstatefile, int(line_no)) linecache.clearcache() return info_in_license_file ## Add necessary information into spdx file def write_cached_spdx( info,sstatefile, ver_code ): import subprocess infoinlicensefile="" def sed_replace(dest_sed_cmd,key_word,replace_info): dest_sed_cmd = dest_sed_cmd + "-e 's#^" + key_word + ".*#" + \ key_word + replace_info + "#' " return dest_sed_cmd def sed_insert(dest_sed_cmd,key_word,new_line): dest_sed_cmd = dest_sed_cmd + "-e '/^" + key_word \ + r"/a\\" + new_line + "' " return dest_sed_cmd ## Delet ^M in doc format subprocess.call("sed -i -e 's#\r##g' %s" % sstatefile, shell=True) ## Document level information sed_cmd = r"sed -i " spdx_DocumentComment = "SPDX for " + info['pn'] + " version " \ + info['pv'] + "" sed_cmd = sed_replace(sed_cmd,"DocumentComment: ",spdx_DocumentComment) sed_cmd = sed_insert(sed_cmd,"SPDXID:","DocumentName: " + info['pn']+"-"+info['pv']) sed_cmd = sed_insert(sed_cmd,"SPDXID:","DocumentNamespace: http://spdx.org/spdxdocs/SPDXRef-" + info['creator']['Tool']+"-"+info['pn']+"_"+info['pv']) ## Creator information sed_cmd = sed_replace(sed_cmd,"Creator: Tool: ",info['creator']['Tool']) ## Package level information sed_cmd = sed_replace(sed_cmd, "PackageName: ", info['pn']) sed_cmd = sed_insert(sed_cmd, "PackageName: ", "PackageVersion: " + info['pv']) sed_cmd = sed_replace(sed_cmd, "PackageDownloadLocation: ",info['package_download_location']) sed_cmd = sed_insert(sed_cmd, "PackageDownloadLocation: ", "PackageHomePage: " + info['package_homepage']) sed_cmd = sed_insert(sed_cmd, "PackageDownloadLocation: ", "PackageSummary: " + "" + info['package_summary'] + "") sed_cmd = sed_replace(sed_cmd, "PackageVerificationCode: ",ver_code) sed_cmd = sed_insert(sed_cmd, "PackageVerificationCode: ", "PackageDescription: " + "" + info['pn'] + " version " + info['pv'] + "") sed_cmd = sed_insert(sed_cmd, "PackageVerificationCode: ", "PackageComment: \\nModificationRecord: " + info['modified'] + "\\n" + "") for contain in info['package_contains'].split( ): sed_cmd = sed_insert(sed_cmd, "PackageComment:"," \\n\\n## Relationships\\nRelationship: " + info['pn'] + " CONTAINS " + contain) for static_link in info['package_static_link'].split( ): sed_cmd = sed_insert(sed_cmd, "PackageComment:"," \\n\\n## Relationships\\nRelationship: " + info['pn'] + " STATIC_LINK " + static_link) sed_cmd = sed_cmd + sstatefile subprocess.call("%s" % sed_cmd, shell=True) infoinlicensefile = find_infoinlicensefile(sstatefile) for oneline_infoinlicensefile in infoinlicensefile.splitlines(): bb.note("find_infoinlicensefile: " + oneline_infoinlicensefile) sed_cmd = r"sed -i -e 's#\r$##' " sed_cmd = sed_insert(sed_cmd, "ModificationRecord: ", oneline_infoinlicensefile) sed_cmd = sed_cmd + sstatefile subprocess.call("%s" % sed_cmd, shell=True) def is_work_shared(d): pn = d.getVar('PN') return bb.data.inherits_class('kernel', d) or pn.startswith('gcc-source') def remove_dir_tree(dir_name): import shutil try: shutil.rmtree(dir_name) except: pass def remove_file(file_name): try: os.remove(file_name) except OSError as e: pass def list_files(dir ): for root, subFolders, files in os.walk(dir): for f in files: rel_root = os.path.relpath(root, dir) yield rel_root, f return def hash_file(file_name): """ Return the hex string representation of the SHA1 checksum of the filename """ try: import hashlib except ImportError: return None sha1 = hashlib.sha1() with open( file_name, "rb" ) as f: for line in f: sha1.update(line) return sha1.hexdigest() def hash_string(data): import hashlib sha1 = hashlib.sha1() sha1.update(data.encode('utf-8')) return sha1.hexdigest() def get_ver_code(dirname): chksums = [] for f_dir, f in list_files(dirname): try: stats = os.stat(os.path.join(dirname,f_dir,f)) except OSError as e: bb.warn( "Stat failed" + str(e) + "\n") continue chksums.append(hash_file(os.path.join(dirname,f_dir,f))) ver_code_string = ''.join(chksums).lower() ver_code = hash_string(ver_code_string) return ver_code do_spdx[depends] = "${SPDXEPENDENCY}"