mirror of
https://git.yoctoproject.org/poky
synced 2026-04-29 00:32:14 +02:00
ref-manual: update buildpaths QA check documentation
The buildpaths QA check is now practically usable and enabled by default, so update the comment and add a section with the warning message since users may start seeing it in their builds. (From yocto-docs rev: a14997e3b8576cd1a6e1c38d13b5b8e05ac03b88) Signed-off-by: Paul Eggleton <paul.eggleton@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
32ba43072b
commit
3dbc1e83f2
@@ -1008,8 +1008,8 @@ Here are the tests you can list with the :term:`WARN_QA` and
|
||||
software, like bootloaders, might need to bypass this check.
|
||||
|
||||
- ``buildpaths:`` Checks for paths to locations on the build host
|
||||
inside the output files. Currently, this test triggers too many false
|
||||
positives and thus is not normally enabled.
|
||||
inside the output files. Not only can these leak information about
|
||||
the build environment, they also hinder binary reproducibility.
|
||||
|
||||
- ``build-deps:`` Determines if a build-time dependency that is
|
||||
specified through :term:`DEPENDS`, explicit
|
||||
|
||||
@@ -748,6 +748,22 @@ Errors and Warnings
|
||||
other things in the patches, those can be discarded.
|
||||
|
||||
|
||||
.. _qa-check-buildpaths:
|
||||
|
||||
- ``File <filename> in package <packagename> contains reference to TMPDIR [buildpaths]``
|
||||
|
||||
This check ensures that build system paths (including :term:`TMPDIR`) do not
|
||||
appear in output files, which not only leaks build system configuration into
|
||||
the target, but also hinders binary reproducibility as the output will change
|
||||
if the build system configuration changes.
|
||||
|
||||
Typically these paths will enter the output through some mechanism in the
|
||||
configuration or compilation of the software being built by the recipe. To
|
||||
resolve this issue you will need to determine how the detected path is
|
||||
entering the output. Sometimes it may require adjusting scripts or code to
|
||||
use a relative path rather than an absolute one, or to pick up the path from
|
||||
runtime configuration or environment variables.
|
||||
|
||||
|
||||
Configuring and Disabling QA Checks
|
||||
===================================
|
||||
|
||||
Reference in New Issue
Block a user