Re: [PATCH] meta/classes: generate bill of material from image

[Claudius Heine <claudius.heine.ext@siemens.com>]

Hi Jan,

On 06/08/2019 10.38, Jan Kiszka wrote:
> On 06.08.19 10:07, [ext] Claudius Heine wrote:
>> Hi Quirin,
>>
>> On 05/08/2019 16.07, [ext] Q. Gylstorff wrote:
>>> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
>>>
>>> To create products it is necessary to have a list
>>> of used packages for clearance and to security monitoring.
>>> To get a simple list of packages use dpkg-query and generate
>>> a list with the following pattern:
>>>
>>> source name| source version | binary package name | binary version
>>>
>>> To use it add following line to the local.conf:
>>> ISAR_DO_PACKAGE_LIST ?= "1"
>>
>> I would rather that the commit message would not suggest adding this to the
>> local.conf and instead adding this to the image recipe variable scope, wherever
>> that is a .bb, .bbclass, .bbappend or any .conf file.
> 
> I think the best approach is making this opt-out, generating this list by
> default (as in Yocto) and allowing users to disable it here this way.

I agree. As I commented in my review.

-- 
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de