[ptxdist] [PATCH] SBoM: CycloneDX: fix missing defusedxml dependency

[ptxdist] [PATCH] SBoM: CycloneDX: fix missing defusedxml dependency

[Bruno Thomsen]

Enabling CycloneDX report generation on a clean host environment result
in missing defusedxml python3 module.

------------------------------
target: image-root-tgz.reports
------------------------------
Traceback (most recent call last):
  File "/usr/local/lib/ptxdist-2025.06.0/scripts/generate-report.py", line 72, in <module>
    main()
    ~~~~^^
  File "/usr/local/lib/ptxdist-2025.06.0/scripts/generate-report.py", line 59, in main
    from report.cyclonedx_sbom import CycloneDXSbomGenerator
  File "/usr/local/lib/ptxdist-2025.06.0/scripts/report/cyclonedx_sbom.py", line 11, in <module>
    from cyclonedx.factory.license import LicenseFactory
  File "/builds/emperor/ptxdist/platform-emperor/sysroot-host/usr/lib/system-python3/lib64/python3.13/site-packages/cyclonedx/factory/license.py", line 21, in <module>
    from ..model.license import DisjunctiveLicense, LicenseExpression
  File "/builds/emperor/ptxdist/platform-emperor/sysroot-host/usr/lib/system-python3/lib64/python3.13/site-packages/cyclonedx/model/__init__.py", line 36, in <module>
    import serializable
  File "/builds/emperor/ptxdist/platform-emperor/sysroot-host/usr/lib/system-python3/lib64/python3.13/site-packages/serializable/__init__.py", line 47, in <module>
    from defusedxml import ElementTree as SafeElementTree  # type:ignore[import-untyped]
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
ModuleNotFoundError: No module named 'defusedxml'
make: *** [/usr/local/lib/ptxdist-2025.06.0/rules/post/ptxd_make_world_report.make:18: /builds/emperor/ptxdist/platform-emperor/state/image-root-tgz.reports] Error 1

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
---
 rules/host-report-tools.in | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/host-report-tools.in b/rules/host-report-tools.in
index 873fdafcd..eee45f232 100644
--- a/rules/host-report-tools.in
+++ b/rules/host-report-tools.in
@@ -8,4 +8,5 @@ config HOST_REPORT_TOOLS
 	select HOST_SYSTEM_PYTHON3_PYYAML
 	select HOST_SYSTEM_PYTHON3_CPE				if PROJECT_CPE_REPORT_DEPS
 	select HOST_SYSTEM_PYTHON3_CYCLONEDX_PYTHON_LIB		if PROJECT_CYCLONEDX_REPORT_DEPS
+	select HOST_PYTHON3_DEFUSEDXML				if PROJECT_CYCLONEDX_REPORT_DEPS
 

base-commit: 9ad1014959a974ff761772cff7a850d1e6dc4806
prerequisite-patch-id: 0547cb947306962b60156a1e583975b2d182d072
-- 
2.49.0

Re: [ptxdist] [APPLIED] SBoM: CycloneDX: fix missing defusedxml dependency

[Michael Olbrich]

Thanks, applied as efddb708b206fcb9c6d5067d48933d169b339ba1.

Michael

[sent from post-receive hook]

On Mon, 30 Jun 2025 18:14:51 +0200, Bruno Thomsen <bruno.thomsen@gmail.com> wrote:
> Enabling CycloneDX report generation on a clean host environment result
> in missing defusedxml python3 module.
> 
> ------------------------------
> target: image-root-tgz.reports
> ------------------------------
> Traceback (most recent call last):
>   File "/usr/local/lib/ptxdist-2025.06.0/scripts/generate-report.py", line 72, in <module>
>     main()
>     ~~~~^^
>   File "/usr/local/lib/ptxdist-2025.06.0/scripts/generate-report.py", line 59, in main
>     from report.cyclonedx_sbom import CycloneDXSbomGenerator
>   File "/usr/local/lib/ptxdist-2025.06.0/scripts/report/cyclonedx_sbom.py", line 11, in <module>
>     from cyclonedx.factory.license import LicenseFactory
>   File "/builds/emperor/ptxdist/platform-emperor/sysroot-host/usr/lib/system-python3/lib64/python3.13/site-packages/cyclonedx/factory/license.py", line 21, in <module>
>     from ..model.license import DisjunctiveLicense, LicenseExpression
>   File "/builds/emperor/ptxdist/platform-emperor/sysroot-host/usr/lib/system-python3/lib64/python3.13/site-packages/cyclonedx/model/__init__.py", line 36, in <module>
>     import serializable
>   File "/builds/emperor/ptxdist/platform-emperor/sysroot-host/usr/lib/system-python3/lib64/python3.13/site-packages/serializable/__init__.py", line 47, in <module>
>     from defusedxml import ElementTree as SafeElementTree  # type:ignore[import-untyped]
>     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> ModuleNotFoundError: No module named 'defusedxml'
> make: *** [/usr/local/lib/ptxdist-2025.06.0/rules/post/ptxd_make_world_report.make:18: /builds/emperor/ptxdist/platform-emperor/state/image-root-tgz.reports] Error 1
> 
> Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
> Message-Id: <20250618192335.17780-1-bruno.thomsen@gmail.com>
> [mol: adapt to renamed package]
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/host-report-tools.in b/rules/host-report-tools.in
> index 873fdafcd4a4..ba9e9501aa1d 100644
> --- a/rules/host-report-tools.in
> +++ b/rules/host-report-tools.in
> @@ -8,4 +8,5 @@ config HOST_REPORT_TOOLS
>  	select HOST_SYSTEM_PYTHON3_PYYAML
>  	select HOST_SYSTEM_PYTHON3_CPE				if PROJECT_CPE_REPORT_DEPS
>  	select HOST_SYSTEM_PYTHON3_CYCLONEDX_PYTHON_LIB		if PROJECT_CYCLONEDX_REPORT_DEPS
> +	select HOST_SYSTEM_PYTHON3_DEFUSEDXML			if PROJECT_CYCLONEDX_REPORT_DEPS
>