[PATCH] debianize: set appropriate Standards-Version for each debian suite

[srinuv...@siemens.com]

From: srinuvasan <srinuv...@siemens.com>

The Standards-Version field in debian/control declares the Debian Policy
version that the package complies with. Currently, the custom source packages
use a hard-coded Standards-Version: 3.9.6, which is obsolete and does not align
with the policies of newer Debian releases

Update the packaging to set the correct Standards-Version dynamically based on
the target Debian suite, ensuring compliance with the appropriate Debian Policy
version for each release.

Signed-off-by: srinuvasan <srinuv...@siemens.com>
---
meta/classes/debianize.bbclass | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/meta/classes/debianize.bbclass b/meta/classes/debianize.bbclass
index 1f54e8f9..0d7b804b 100644
--- a/meta/classes/debianize.bbclass
+++ b/meta/classes/debianize.bbclass
@@ -83,11 +83,18 @@ deb_create_control[vardeps] += "DEBIANIZE_BUILD_DEPENDS \
DEBIAN_RULES_REQUIRES_ROOT"
deb_create_control() {
# Add Source section
+ case "${BASE_DISTRO_CODENAME}" in
+ buster) STANDARDS_VERSION="4.3.0" ;;
+ bullseye) STANDARDS_VERSION="4.5.1" ;;
+ bookworm) STANDARDS_VERSION="4.6.2" ;;
+ trixie|sid|*) STANDARDS_VERSION="4.7.2" ;;
+ esac
+
cat << EOF > ${S}/debian/control
Source: ${BPN}
Section: ${@ deb_list_beautify(d, 'DEBIAN_SECTION')}
Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${STANDARDS_VERSION}
Maintainer: ${MAINTAINER}
Build-Depends: ${@ deb_list_beautify(d, 'DEBIANIZE_BUILD_DEPENDS')}
EOF
--
2.39.5

[Florian Bezdeka]

Hm... But that means that downstream users might end up with a
different standard version for their package after updating isar the
next time.

I'm expecting build failures here and there. Quite sure that not all
packages / recipes out there will fulfill the newer standards.

Maybe add a short note to the API changelog? An available quick fix
would be to overwrite STANDARDS_VERSION in the affected recipes.

[srinuv...@siemens.com]

From: srinuvasan <srinuv...@siemens.com>

The Standards-Version field in debian/control declares the Debian Policy
version that the package complies with. Currently, the custom source packages
use a hard-coded Standards-Version: 3.9.6, which is obsolete and does not align
with the policies of newer Debian releases

Update the packaging to set the correct Standards-Version dynamically based on
the target Debian suite, ensuring compliance with the appropriate Debian Policy
version for each release.

Signed-off-by: srinuvasan <srinuv...@siemens.com>
---

RECIPE-API-CHANGELOG.md | 7 +++++++
meta/classes/debianize.bbclass | 14 ++++++++++++--
2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md
index cf04fa5c..bb5f9b9c 100644
--- a/RECIPE-API-CHANGELOG.md
+++ b/RECIPE-API-CHANGELOG.md
@@ -242,6 +242,13 @@ consumption by imaging classes.
Additional build dependencies of auto-debianized packages can now be defined
by setting DEBIAN_BUILD_DEPENDS.

+### Add STANDARDS_VERSION as a deb_debianize parameter
+
+By default, the Standards-Version field in the debian/control file is automatically
+set based on the corresponding Debian suite.
+If you need to override this default value, you can do so by defining
+the STANDARDS_VERSION variable in your recipe.
+
### Separation of ${S} and ${D} in dpkg-raw

${S} can now be used for checking out sources without being linked implicitly
diff --git a/meta/classes/debianize.bbclass b/meta/classes/debianize.bbclass
index 1f54e8f9..2fad991a 100644
--- a/meta/classes/debianize.bbclass
+++ b/meta/classes/debianize.bbclass
@@ -80,14 +80,24 @@ deb_create_control[vardeps] += "DEBIANIZE_BUILD_DEPENDS \
DEBIAN_BREAKS \
DEBIAN_BUILT_USING \
DEBIAN_CONFLICTS \
- DEBIAN_RULES_REQUIRES_ROOT"
+ DEBIAN_RULES_REQUIRES_ROOT \
+ STANDARDS_VERSION"

deb_create_control() {
# Add Source section

+ if [ -z "${STANDARDS_VERSION}" ]; then

+ case "${BASE_DISTRO_CODENAME}" in
+ buster) STANDARDS_VERSION="4.3.0" ;;
+ bullseye) STANDARDS_VERSION="4.5.1" ;;
+ bookworm) STANDARDS_VERSION="4.6.2" ;;
+ trixie|sid|*) STANDARDS_VERSION="4.7.2" ;;
+ esac

+ fi
+

cat << EOF > ${S}/debian/control
Source: ${BPN}
Section: ${@ deb_list_beautify(d, 'DEBIAN_SECTION')}
Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${STANDARDS_VERSION}
Maintainer: ${MAINTAINER}
Build-Depends: ${@ deb_list_beautify(d, 'DEBIANIZE_BUILD_DEPENDS')}
EOF
--

2.39.5

[Jan Kiszka]

On 29.10.25 13:02, srinuvasan.a via isar-users wrote:
> From: srinuvasan <srinuv...@siemens.com>
>
> The Standards-Version field in debian/control declares the Debian Policy
> version that the package complies with. Currently, the custom source packages
> use a hard-coded Standards-Version: 3.9.6, which is obsolete and does not align
> with the policies of newer Debian releases
>

We have a lot of hand-written control files with that version in isar
and isar-cip-core in addition. Any plans for addressing those as well?

BTW, what is the concrete impact of not having a recent version? Missing
that from this description.

Jan

Siemens AG, Foundational Technologies
Linux Expert Center

[Srinuvasan Arjunan]

On Wed, Oct 29, 2025 at 8:55 PM 'Jan Kiszka' via isar-users <isar-...@googlegroups.com> wrote:

On 29.10.25 13:02, srinuvasan.a via isar-users wrote:
> From: srinuvasan <srinuv...@siemens.com>
>
> The Standards-Version field in debian/control declares the Debian Policy
> version that the package complies with. Currently, the custom source packages
> use a hard-coded Standards-Version: 3.9.6, which is obsolete and does not align
> with the policies of newer Debian releases
>

We have a lot of hand-written control files with that version in isar
and isar-cip-core in addition. Any plans for addressing those as well?

    Yes we will address.

    If you have your own control file which is not generated by ISAR, we could update the

    standards version manually via STANDARDS_VERSION variable.

    If a control file generated by ISAR, then it automatically sets the standards version

    based on the suite wise.

BTW, what is the concrete impact of not having a recent version? Missing
that from this description.

  Will send V3 with the concrete reason for why we have this updated standards version. 

   Many thanks,

   Srinu

--
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/dcca39d2-4275-4e0a-ae61-de34748c22a5%40siemens.com.

[srinuv...@siemens.com]

From: srinuvasan <srinuv...@siemens.com>

The Standards-Version field in debian/control declares the Debian Policy
version that the package complies with. Currently, the custom source packages
use a hard-coded Standards-Version: 3.9.6, which is obsolete and does not align
with the policies of newer Debian releases

Update the packaging to set the correct Standards-Version dynamically based on
the target Debian suite, ensuring compliance with the appropriate Debian Policy
version for each release.

Debian Policy evolves over time, newer versions may add, remove, or deprecate
control fields and packaging behaviors. Using an outdated Standards-Version
can miss required or recommended fields, leading to QA or functional issues.

Examples:
- Rules-Requires-Root (Policy 4.1.0): declares if root privileges are needed
during debian/rules execution, improves reproducibility and isolation.
- Homepage (Policy 3.9.3): provides upstream project link for better metadata.

Older Standards-Version(Policy 3.9.6) may trigger lintian warnings such as:
W: source: missing-rules-requires-root-field
W: source: missing-homepage-field

Keeping Standards-Version current ensures clean builds, QA compliance,
and future compatibility.

2.39.5

[srinuv...@siemens.com]

index cf04fa5c..9ddb8ae6 100644

--- a/RECIPE-API-CHANGELOG.md
+++ b/RECIPE-API-CHANGELOG.md
@@ -242,6 +242,13 @@ consumption by imaging classes.
Additional build dependencies of auto-debianized packages can now be defined
by setting DEBIAN_BUILD_DEPENDS.

+### Add DEBIAN_STANDARDS_VERSION as a deb_debianize parameter

+
+By default, the Standards-Version field in the debian/control file is automatically
+set based on the corresponding Debian suite.
+If you need to override this default value, you can do so by defining

+the DEBIAN_STANDARDS_VERSION variable in your recipe.

+
### Separation of ${S} and ${D} in dpkg-raw

${S} can now be used for checking out sources without being linked implicitly
diff --git a/meta/classes/debianize.bbclass b/meta/classes/debianize.bbclass

index 1f54e8f9..4caf0ce5 100644

--- a/meta/classes/debianize.bbclass
+++ b/meta/classes/debianize.bbclass
@@ -80,14 +80,24 @@ deb_create_control[vardeps] += "DEBIANIZE_BUILD_DEPENDS \
DEBIAN_BREAKS \
DEBIAN_BUILT_USING \
DEBIAN_CONFLICTS \
- DEBIAN_RULES_REQUIRES_ROOT"
+ DEBIAN_RULES_REQUIRES_ROOT \

+ DEBIAN_STANDARDS_VERSION"

deb_create_control() {
# Add Source section

+ if [ -z "${DEBIAN_STANDARDS_VERSION}" ]; then

+ case "${BASE_DISTRO_CODENAME}" in

+ buster) DEBIAN_STANDARDS_VERSION="4.3.0" ;;
+ bullseye) DEBIAN_STANDARDS_VERSION="4.5.1" ;;
+ bookworm) DEBIAN_STANDARDS_VERSION="4.6.2" ;;
+ trixie|sid|*) DEBIAN_STANDARDS_VERSION="4.7.2" ;;

+ esac
+ fi
+
cat << EOF > ${S}/debian/control
Source: ${BPN}
Section: ${@ deb_list_beautify(d, 'DEBIAN_SECTION')}
Priority: optional
-Standards-Version: 3.9.6

+Standards-Version: ${DEBIAN_STANDARDS_VERSION}

[Isaac True]

> + if [ -z "${DEBIAN_STANDARDS_VERSION}" ]; then
> + case "${BASE_DISTRO_CODENAME}" in
> + buster) DEBIAN_STANDARDS_VERSION="4.3.0" ;;
> + bullseye) DEBIAN_STANDARDS_VERSION="4.5.1" ;;
> + bookworm) DEBIAN_STANDARDS_VERSION="4.6.2" ;;
> + trixie|sid|*) DEBIAN_STANDARDS_VERSION="4.7.2" ;;
> + esac
> + fi

I wonder if it might be better to do this using BitBake variable
overrides, like:

DEBIAN_STANDARDS_VERSION:buster = "4.3.0"
DEBIAN_STANDARDS_VERSION:bullseye = "4.5.1"
... etc
DEBIAN_STANDARDS_VERSION = "4.7.2"

What do you think?

Apart from that, this is missing the distro codenames for Ubuntu,
meaning it would use the default 'DEBIAN_STANDARDS_VERSION = "4.7.2"'
for all Ubuntu releases, which I'm pretty sure would break older
releases like focal.

I guess the default should probably be the lowest standards versions
supported by all releases, rather than the newest.

Cheers,
Isaac

Isaac True
emlix GmbH, https://www.emlix.com
Fon +49 228 94 77 96 94
Bachstraße 6, 53115 Bonn, Germany
Sitz der Gesellschaft: Göttingen, Amtsgericht Göttingen HR B 3160
Geschäftsfuehrung: Heike Jordan, Dr. Uwe Kracke
Ust-IdNr.: DE 205 198 055

emlix - smart embedded open source

[Srinuvasan Arjunan]

On Mon, Nov 3, 2025 at 8:26 PM 'Isaac True' via isar-users <isar-...@googlegroups.com> wrote:

 > +    if [ -z "${DEBIAN_STANDARDS_VERSION}" ]; then
 > +            case "${BASE_DISTRO_CODENAME}" in
 > +                    buster)   DEBIAN_STANDARDS_VERSION="4.3.0" ;;
 > +                    bullseye) DEBIAN_STANDARDS_VERSION="4.5.1" ;;
 > +                    bookworm) DEBIAN_STANDARDS_VERSION="4.6.2" ;;
 > +                    trixie|sid|*) DEBIAN_STANDARDS_VERSION="4.7.2" ;;
 > +            esac
 > +    fi

I wonder if it might be better to do this using BitBake variable
overrides, like:

DEBIAN_STANDARDS_VERSION:buster = "4.3.0"
DEBIAN_STANDARDS_VERSION:bullseye = "4.5.1"
... etc
DEBIAN_STANDARDS_VERSION = "4.7.2"

What do you think?

   Yes this approach also looks good to me, let me refactor the code. 

Apart from that, this is missing the distro codenames for Ubuntu,
meaning it would use the default 'DEBIAN_STANDARDS_VERSION = "4.7.2"'
for all Ubuntu releases, which I'm pretty sure would break older
releases like focal.

I guess the default should probably be the lowest standards versions
supported by all releases, rather than the newest.

    Sure, I will update the default one to the lowest standards, thanks. 

--
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+...@googlegroups.com.

To view this discussion visit https://groups.google.com/d/msgid/isar-users/a4e3ee35-2f88-47e8-af7a-93fd2e0aba68%40emlix.com.

[srinuv...@siemens.com]

From: srinuvasan <srinuv...@siemens.com>

The Standards-Version field in debian/control declares the Debian Policy
version that the package complies with. Currently, the custom source packages
use a hard-coded Standards-Version: 3.9.6, which is obsolete and does not align
with the policies of newer Debian releases

Update the packaging to set the correct Standards-Version dynamically based on
the target Debian suite, ensuring compliance with the appropriate Debian Policy
version for each release.

Debian Policy evolves over time, newer versions may add, remove, or deprecate
control fields and packaging behaviors. Using an outdated Standards-Version
can miss required or recommended fields, leading to QA or functional issues.

Examples:
- Rules-Requires-Root (Policy 4.1.0): declares if root privileges are needed
during debian/rules execution, improves reproducibility and isolation.
- Homepage (Policy 3.9.3): provides upstream project link for better metadata.

Older Standards-Version(Policy 3.9.6) may trigger lintian warnings such as:
W: source: missing-rules-requires-root-field
W: source: missing-homepage-field

Keeping Standards-Version current ensures clean builds, QA compliance,
and future compatibility.

Signed-off-by: srinuvasan <srinuv...@siemens.com>
---

RECIPE-API-CHANGELOG.md | 8 ++++++++
meta/classes/debianize.bbclass | 12 ++++++++++--
2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md
index cf04fa5c..31512561 100644
--- a/RECIPE-API-CHANGELOG.md
+++ b/RECIPE-API-CHANGELOG.md
@@ -242,6 +242,14 @@ consumption by imaging classes.

Additional build dependencies of auto-debianized packages can now be defined
by setting DEBIAN_BUILD_DEPENDS.

+### Add DEBIAN_STANDARDS_VERSION as a deb_debianize parameter
+
+By default, the Standards-Version field in the debian/control file is automatically
+set based on the corresponding Debian suite.
+If you need to override this default value, you can do so by defining
+the DEBIAN_STANDARDS_VERSION variable in your recipe.

+E.x: `DEBIAN_STANDARDS_VERSION:<suite-name> = <version>`

+
### Separation of ${S} and ${D} in dpkg-raw

${S} can now be used for checking out sources without being linked implicitly
diff --git a/meta/classes/debianize.bbclass b/meta/classes/debianize.bbclass

index 1f54e8f9..247489ea 100644
--- a/meta/classes/debianize.bbclass
+++ b/meta/classes/debianize.bbclass
@@ -24,6 +24,13 @@ MAINTAINER ??= "Unknown maintainer <unk...@example.com>"

DEBIANIZE_BUILD_DEPENDS ?= "debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS}"

+DEBIAN_STANDARDS_VERSION:buster ?= "4.3.0"
+DEBIAN_STANDARDS_VERSION:bullseye ?= "4.5.1"
+DEBIAN_STANDARDS_VERSION:bookworm ?= "4.6.2"
+DEBIAN_STANDARDS_VERSION:trixie ?= "4.7.2"
+DEBIAN_STANDARDS_VERSION:sid ?= "4.7.2"
+DEBIAN_STANDARDS_VERSION ?= "3.9.6"
+
deb_add_changelog() {
changelog_v="${CHANGELOG_V}"
timestamp="${DEBIAN_CHANGELOG_TIMESTAMP}"
@@ -80,14 +87,15 @@ deb_create_control[vardeps] += "DEBIANIZE_BUILD_DEPENDS \

DEBIAN_BREAKS \
DEBIAN_BUILT_USING \
DEBIAN_CONFLICTS \
- DEBIAN_RULES_REQUIRES_ROOT"
+ DEBIAN_RULES_REQUIRES_ROOT \
+ DEBIAN_STANDARDS_VERSION"
deb_create_control() {
# Add Source section

cat << EOF > ${S}/debian/control
Source: ${BPN}
Section: ${@ deb_list_beautify(d, 'DEBIAN_SECTION')}
Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}
Maintainer: ${MAINTAINER}
Build-Depends: ${@ deb_list_beautify(d, 'DEBIANIZE_BUILD_DEPENDS')}
EOF
--

2.39.5

[Jan Kiszka]

Maybe even put that into meta/conf/distro/debian*.conf, similar to
DISTRO_GCC? Or define DEBIAN_STANDARDS_VERSION_DEFAULT there and do

DEBIAN_STANDARDS_VERSION ?= "${DEBIAN_STANDARDS_VERSION_DEFAULT}"

here.

> deb_add_changelog() {
> changelog_v="${CHANGELOG_V}"
> timestamp="${DEBIAN_CHANGELOG_TIMESTAMP}"
> @@ -80,14 +87,15 @@ deb_create_control[vardeps] += "DEBIANIZE_BUILD_DEPENDS \
> DEBIAN_BREAKS \
> DEBIAN_BUILT_USING \
> DEBIAN_CONFLICTS \
> - DEBIAN_RULES_REQUIRES_ROOT"
> + DEBIAN_RULES_REQUIRES_ROOT \
> + DEBIAN_STANDARDS_VERSION"
> deb_create_control() {
> # Add Source section
> cat << EOF > ${S}/debian/control
> Source: ${BPN}
> Section: ${@ deb_list_beautify(d, 'DEBIAN_SECTION')}
> Priority: optional
> -Standards-Version: 3.9.6
> +Standards-Version: ${DEBIAN_STANDARDS_VERSION}
> Maintainer: ${MAINTAINER}
> Build-Depends: ${@ deb_list_beautify(d, 'DEBIANIZE_BUILD_DEPENDS')}
> EOF

Jan

[srinuv...@siemens.com]

From: srinuvasan <srinuv...@siemens.com>

The Standards-Version field in debian/control declares the Debian Policy
version that the package complies with. Currently, the custom source packages
use a hard-coded Standards-Version: 3.9.6, which is obsolete and does not align
with the policies of newer Debian releases

Update the packaging to set the correct Standards-Version dynamically based on
the target Debian suite, ensuring compliance with the appropriate Debian Policy
version for each release.

Debian Policy evolves over time, newer versions may add, remove, or deprecate
control fields and packaging behaviors. Using an outdated Standards-Version
can miss required or recommended fields, leading to QA or functional issues.

Examples:
- Rules-Requires-Root (Policy 4.1.0): declares if root privileges are needed
during debian/rules execution, improves reproducibility and isolation.
- Homepage (Policy 3.9.3): provides upstream project link for better metadata.

Older Standards-Version(Policy 3.9.6) may trigger lintian warnings such as:
W: source: missing-rules-requires-root-field
W: source: missing-homepage-field

Keeping Standards-Version current ensures clean builds, QA compliance,
and future compatibility.

Signed-off-by: srinuvasan <srinuv...@siemens.com>
---

RECIPE-API-CHANGELOG.md | 9 +++++++++
meta-isar/conf/distro/raspios-bookworm.conf | 2 ++
meta-isar/conf/distro/raspios-bullseye.conf | 2 ++
meta-isar/conf/distro/ubuntu-focal.conf | 2 ++
meta-isar/conf/distro/ubuntu-jammy.conf | 2 ++
meta-isar/conf/distro/ubuntu-noble.conf | 2 ++
meta/classes/debianize.bbclass | 6 ++++--
meta/conf/distro/debian-bookworm.conf | 2 ++
meta/conf/distro/debian-bullseye.conf | 2 ++
meta/conf/distro/debian-buster.conf | 2 ++
meta/conf/distro/debian-sid-ports.conf | 2 ++
meta/conf/distro/debian-sid.conf | 2 ++
meta/conf/distro/debian-trixie.conf | 2 ++
13 files changed, 35 insertions(+), 2 deletions(-)

diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md
index 1826667a..34194b39 100644
--- a/RECIPE-API-CHANGELOG.md
+++ b/RECIPE-API-CHANGELOG.md
@@ -242,6 +242,15 @@ consumption by imaging classes.

Additional build dependencies of auto-debianized packages can now be defined
by setting DEBIAN_BUILD_DEPENDS.

+### Add DEBIAN_STANDARDS_VERSION as a deb_debianize parameter
+
+By default, the Standards-Version field in the debian/control file is automatically
+set based on the corresponding Debian suite.
+If you need to override this default value, you can do so by defining
+the DEBIAN_STANDARDS_VERSION variable in your recipe.
+
+E.x: `DEBIAN_STANDARDS_VERSION:<suite-name> = <version>`
+
### Separation of ${S} and ${D} in dpkg-raw

${S} can now be used for checking out sources without being linked implicitly

diff --git a/meta-isar/conf/distro/raspios-bookworm.conf b/meta-isar/conf/distro/raspios-bookworm.conf
index 079dba24..edba011f 100644
--- a/meta-isar/conf/distro/raspios-bookworm.conf
+++ b/meta-isar/conf/distro/raspios-bookworm.conf
@@ -25,3 +25,5 @@ THIRD_PARTY_APT_KEYS += "http://archive.raspberrypi.org/debian/raspberrypi.gpg.k
COMPAT_DISTRO_ARCH:arm64 = "armhf"

DISTRO_GCC = "12"
+
+DEBIAN_STANDARDS_VERSION ?= "4.6.2"
diff --git a/meta-isar/conf/distro/raspios-bullseye.conf b/meta-isar/conf/distro/raspios-bullseye.conf
index a362289d..60782f67 100644
--- a/meta-isar/conf/distro/raspios-bullseye.conf
+++ b/meta-isar/conf/distro/raspios-bullseye.conf
@@ -28,3 +28,5 @@ COMPAT_DISTRO_ARCH:arm64 = "armhf"
DISTRO_GCC = "10"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.5.1"
diff --git a/meta-isar/conf/distro/ubuntu-focal.conf b/meta-isar/conf/distro/ubuntu-focal.conf
index 81728dec..155644c1 100644
--- a/meta-isar/conf/distro/ubuntu-focal.conf
+++ b/meta-isar/conf/distro/ubuntu-focal.conf
@@ -10,3 +10,5 @@ BASE_DISTRO_CODENAME = "focal"
DISTRO_GCC = "9"

DEBIAN_COMPAT = "12"
+
+DEBIAN_STANDARDS_VERSION ?= "4.5.0"
diff --git a/meta-isar/conf/distro/ubuntu-jammy.conf b/meta-isar/conf/distro/ubuntu-jammy.conf
index afc4a731..492ab126 100644
--- a/meta-isar/conf/distro/ubuntu-jammy.conf
+++ b/meta-isar/conf/distro/ubuntu-jammy.conf
@@ -10,3 +10,5 @@ BASE_DISTRO_CODENAME = "jammy"
DISTRO_GCC = "11"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.6.0"
diff --git a/meta-isar/conf/distro/ubuntu-noble.conf b/meta-isar/conf/distro/ubuntu-noble.conf
index 531f085f..5a9bd100 100644
--- a/meta-isar/conf/distro/ubuntu-noble.conf
+++ b/meta-isar/conf/distro/ubuntu-noble.conf
@@ -10,3 +10,5 @@ BASE_DISTRO_CODENAME = "noble"
DISTRO_GCC = "13"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.7.0"
diff --git a/meta/classes/debianize.bbclass b/meta/classes/debianize.bbclass
index 1f54e8f9..e29bfb1e 100644
--- a/meta/classes/debianize.bbclass
+++ b/meta/classes/debianize.bbclass
@@ -17,6 +17,7 @@ DEBIAN_BREAKS ??= ""
DEBIAN_BUILT_USING ??= ""
DEBIAN_MULTI_ARCH ??= "no"
DEBIAN_COMPAT ??= "10"
+DEBIAN_STANDARDS_VERSION ??= "3.9.6"
DEBIAN_CHANGELOG_TIMESTAMP ??= "3600"
DEBIAN_RULES_REQUIRES_ROOT ??= ""
DESCRIPTION ??= "must not be empty"
@@ -80,14 +81,15 @@ deb_create_control[vardeps] += "DEBIANIZE_BUILD_DEPENDS \

DEBIAN_BREAKS \
DEBIAN_BUILT_USING \
DEBIAN_CONFLICTS \
- DEBIAN_RULES_REQUIRES_ROOT"
+ DEBIAN_RULES_REQUIRES_ROOT \
+ DEBIAN_STANDARDS_VERSION"
deb_create_control() {
# Add Source section
cat << EOF > ${S}/debian/control
Source: ${BPN}
Section: ${@ deb_list_beautify(d, 'DEBIAN_SECTION')}
Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}
Maintainer: ${MAINTAINER}
Build-Depends: ${@ deb_list_beautify(d, 'DEBIANIZE_BUILD_DEPENDS')}
EOF

diff --git a/meta/conf/distro/debian-bookworm.conf b/meta/conf/distro/debian-bookworm.conf
index ee8f2ced..fc5fd5cc 100644
--- a/meta/conf/distro/debian-bookworm.conf
+++ b/meta/conf/distro/debian-bookworm.conf
@@ -15,3 +15,5 @@ DISTRO_KERNELS ?= "4kc-malta 5kc-malta 686 686-pae amd64 arm64 armmp \
DISTRO_GCC = "12"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.6.2"
diff --git a/meta/conf/distro/debian-bullseye.conf b/meta/conf/distro/debian-bullseye.conf
index ee4ecca2..8bda582a 100644
--- a/meta/conf/distro/debian-bullseye.conf
+++ b/meta/conf/distro/debian-bullseye.conf
@@ -17,3 +17,5 @@ DISTRO_KERNELS ?= "4kc-malta 5kc-malta 686 686-pae amd64 arm64 armmp \
DISTRO_GCC = "10"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.5.1"
diff --git a/meta/conf/distro/debian-buster.conf b/meta/conf/distro/debian-buster.conf
index cd58710b..49a073c6 100644
--- a/meta/conf/distro/debian-buster.conf
+++ b/meta/conf/distro/debian-buster.conf
@@ -13,3 +13,5 @@ DISTRO_KERNELS ?= "686 686-pae amd64 arm64 armmp armmp-lpae cloud-amd64 \
DISTRO_GCC = "8"

DEBIAN_COMPAT = "12"
+
+DEBIAN_STANDARDS_VERSION ?= "4.3.0"
diff --git a/meta/conf/distro/debian-sid-ports.conf b/meta/conf/distro/debian-sid-ports.conf
index 940dc051..e141327c 100644
--- a/meta/conf/distro/debian-sid-ports.conf
+++ b/meta/conf/distro/debian-sid-ports.conf
@@ -25,3 +25,5 @@ THIRD_PARTY_APT_KEYS += "${DEBIAN_PORTS_KEYS}"
IMAGE_PREINSTALL += "init"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.7.2"
diff --git a/meta/conf/distro/debian-sid.conf b/meta/conf/distro/debian-sid.conf
index 081ec7b4..c76b15e4 100644
--- a/meta/conf/distro/debian-sid.conf
+++ b/meta/conf/distro/debian-sid.conf
@@ -20,3 +20,5 @@ DISTRO_KERNELS ?= "5kc-malta 686 686-pae alpha-generic alpha-smp amd64 arm64 \
DISTRO_GCC = "13"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.7.2"
diff --git a/meta/conf/distro/debian-trixie.conf b/meta/conf/distro/debian-trixie.conf
index b3677f45..999e38a3 100644
--- a/meta/conf/distro/debian-trixie.conf
+++ b/meta/conf/distro/debian-trixie.conf
@@ -17,3 +17,5 @@ DISTRO_KERNELS ?= "5kc-malta amd64 arm64 armmp armmp-lpae cloud-amd64 \
DISTRO_GCC = "14"

DEBIAN_COMPAT = "13"
+
+DEBIAN_STANDARDS_VERSION ?= "4.7.2"
--
2.39.5

[srinuv...@siemens.com]

From: srinuvasan <srinuv...@siemens.com>

Many packages were still built using the outdated Debian Policy version 3.9.6.
Updating to the current Standards-Version ensures compliance with modern
Debian policy, avoids QA and policy compliance warnings, and prevents the
packages from appearing unmaintained.

Signed-off-by: srinuvasan <srinuv...@siemens.com>
---
meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl | 2 +-
.../optee-examples/optee-examples-stm32mp15x_3.21.0.bb | 2 +-
meta/recipes-bsp/optee-client/files/debian/control.tmpl | 2 +-
meta/recipes-bsp/optee-client/optee-client-custom.inc | 2 +-
meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl | 2 +-
meta/recipes-bsp/optee-ftpm/optee-ftpm.inc | 3 ++-
meta/recipes-bsp/optee-os/files/debian/control.tmpl | 2 +-
meta/recipes-bsp/optee-os/optee-os.inc | 2 +-
meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl | 2 +-
.../trusted-firmware-a/trusted-firmware-a-custom.inc | 2 +-
meta/recipes-bsp/u-boot/files/debian/control.tmpl | 2 +-
meta/recipes-bsp/u-boot/u-boot-custom.inc | 2 +-
meta/recipes-kernel/linux-module/files/debian/control.tmpl | 2 +-
meta/recipes-kernel/linux-module/module.inc | 3 ++-
14 files changed, 16 insertions(+), 14 deletions(-)

diff --git a/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl
index 9b930157..b9edcb6a 100644
--- a/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl
+++ b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl
@@ -1,7 +1,7 @@
Source: ${PN}
Section: admin

Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}

Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
Rules-Requires-Root: no
diff --git a/meta-isar/recipes-bsp/optee-examples/optee-examples-stm32mp15x_3.21.0.bb b/meta-isar/recipes-bsp/optee-examples/optee-examples-stm32mp15x_3.21.0.bb
index f734e6eb..013153c4 100644
--- a/meta-isar/recipes-bsp/optee-examples/optee-examples-stm32mp15x_3.21.0.bb
+++ b/meta-isar/recipes-bsp/optee-examples/optee-examples-stm32mp15x_3.21.0.bb
@@ -43,7 +43,7 @@ DEBIAN_BUILD_DEPENDS ?= " \
optee-os-tadevkit-${OPTEE_NAME}"

TEMPLATE_FILES = "debian/control.tmpl debian/rules.tmpl"
-TEMPLATE_VARS += "DEBIAN_BUILD_DEPENDS OPTEE_PLATFORM TA_DEV_KIT_DIR DEBIAN_COMPAT"
+TEMPLATE_VARS += "DEBIAN_BUILD_DEPENDS OPTEE_PLATFORM TA_DEV_KIT_DIR DEBIAN_COMPAT DEBIAN_STANDARDS_VERSION"

do_prepare_build() {
cp -r ${WORKDIR}/debian ${S}/
diff --git a/meta/recipes-bsp/optee-client/files/debian/control.tmpl b/meta/recipes-bsp/optee-client/files/debian/control.tmpl
index 4cf11231..e3864407 100644
--- a/meta/recipes-bsp/optee-client/files/debian/control.tmpl
+++ b/meta/recipes-bsp/optee-client/files/debian/control.tmpl
@@ -7,7 +7,7 @@ Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}),
pkg-config,
uuid-dev,
xsltproc
-Standards-Version: 4.5.1
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}
Section: libs
Homepage: https://github.com/OP-TEE/optee_client
Rules-Requires-Root: no
diff --git a/meta/recipes-bsp/optee-client/optee-client-custom.inc b/meta/recipes-bsp/optee-client/optee-client-custom.inc
index 8a97af58..e54c8763 100644
--- a/meta/recipes-bsp/optee-client/optee-client-custom.inc
+++ b/meta/recipes-bsp/optee-client/optee-client-custom.inc
@@ -23,7 +23,7 @@ TEE_FS_PARENT_PATH ?= "/var/lib/optee-client/data/tee"
RPMB_EMU ?= "0"

TEMPLATE_FILES = "debian/rules.tmpl debian/control.tmpl"
-TEMPLATE_VARS += "DEBIAN_COMPAT TEE_FS_PARENT_PATH RPMB_EMU"
+TEMPLATE_VARS += "DEBIAN_COMPAT TEE_FS_PARENT_PATH RPMB_EMU DEBIAN_STANDARDS_VERSION"

do_prepare_build[cleandirs] += "${S}/debian"
do_prepare_build() {
diff --git a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl b/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl
index 3e8e6920..7f41b5c4 100644
--- a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl
+++ b/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl
@@ -1,7 +1,7 @@
Source: ${PN}
Section: misc

Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}

Maintainer: Unknown maintainer <unk...@example.com>
Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS}
Rules-Requires-Root: no
diff --git a/meta/recipes-bsp/optee-ftpm/optee-ftpm.inc b/meta/recipes-bsp/optee-ftpm/optee-ftpm.inc
index d7d00ae1..2c854efc 100644
--- a/meta/recipes-bsp/optee-ftpm/optee-ftpm.inc
+++ b/meta/recipes-bsp/optee-ftpm/optee-ftpm.inc
@@ -42,7 +42,8 @@ TEMPLATE_VARS += "DEBIAN_BUILD_DEPENDS \
TA_CPU \
TA_DEV_KIT_DIR \
MS_TPM_20_REF_DIR \
- OPTEE_FTPM_SRCDIR"
+ OPTEE_FTPM_SRCDIR \
+ DEBIAN_STANDARDS_VERSION"

do_prepare_build() {
rm -rf "${S}/debian"
diff --git a/meta/recipes-bsp/optee-os/files/debian/control.tmpl b/meta/recipes-bsp/optee-os/files/debian/control.tmpl
index 2a3076d3..e6a9df30 100644
--- a/meta/recipes-bsp/optee-os/files/debian/control.tmpl
+++ b/meta/recipes-bsp/optee-os/files/debian/control.tmpl
@@ -1,7 +1,7 @@
Source: ${PN}
Section: admin

Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}

Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
Rules-Requires-Root: no
diff --git a/meta/recipes-bsp/optee-os/optee-os.inc b/meta/recipes-bsp/optee-os/optee-os.inc
index eac75ae8..a534ddf4 100644
--- a/meta/recipes-bsp/optee-os/optee-os.inc
+++ b/meta/recipes-bsp/optee-os/optee-os.inc
@@ -23,7 +23,7 @@ DEBIAN_PACKAGE_NAME ?= "optee-os-${OPTEE_NAME}"
DEBIAN_BUILD_DEPENDS ?= "python3-pycryptodome:native, python3-pyelftools"

TEMPLATE_FILES = "debian/control.tmpl debian/rules.tmpl"
-TEMPLATE_VARS += "DEBIAN_COMPAT DEBIAN_PACKAGE_NAME OPTEE_NAME DEBIAN_BUILD_DEPENDS OPTEE_PLATFORM OPTEE_EXTRA_BUILDARGS"
+TEMPLATE_VARS += "DEBIAN_COMPAT DEBIAN_PACKAGE_NAME OPTEE_NAME DEBIAN_BUILD_DEPENDS OPTEE_PLATFORM OPTEE_EXTRA_BUILDARGS DEBIAN_STANDARDS_VERSION"

# split strip platform flavor, if any, from the specified platform string
OPTEE_PLATFORM_BASE = "${@d.getVar('OPTEE_PLATFORM').split('-')[0]}"
diff --git a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl
index 5de639d9..903da980 100644
--- a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl
+++ b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl
@@ -1,7 +1,7 @@
Source: ${PN}
Section: admin

Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}

Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
Rules-Requires-Root: no
diff --git a/meta/recipes-bsp/trusted-firmware-a/trusted-firmware-a-custom.inc b/meta/recipes-bsp/trusted-firmware-a/trusted-firmware-a-custom.inc
index 9f143b13..07a03dd6 100644
--- a/meta/recipes-bsp/trusted-firmware-a/trusted-firmware-a-custom.inc
+++ b/meta/recipes-bsp/trusted-firmware-a/trusted-firmware-a-custom.inc
@@ -24,7 +24,7 @@ PROVIDES += "trusted-firmware-a-${TF_A_NAME}"

TEMPLATE_FILES = "debian/control.tmpl debian/rules.tmpl"
TEMPLATE_VARS += "DEBIAN_COMPAT \
- TF_A_NAME DEBIAN_BUILD_DEPENDS TF_A_PLATFORM TF_A_EXTRA_BUILDARGS"
+ TF_A_NAME DEBIAN_BUILD_DEPENDS TF_A_PLATFORM TF_A_EXTRA_BUILDARGS DEBIAN_STANDARDS_VERSION"

do_prepare_build() {
cp -r ${WORKDIR}/debian ${S}/
diff --git a/meta/recipes-bsp/u-boot/files/debian/control.tmpl b/meta/recipes-bsp/u-boot/files/debian/control.tmpl
index 58f59ce6..b68e0d65 100644
--- a/meta/recipes-bsp/u-boot/files/debian/control.tmpl
+++ b/meta/recipes-bsp/u-boot/files/debian/control.tmpl
@@ -1,7 +1,7 @@
Source: ${PN}
Section: admin

Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}

Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
Rules-Requires-Root: no
diff --git a/meta/recipes-bsp/u-boot/u-boot-custom.inc b/meta/recipes-bsp/u-boot/u-boot-custom.inc
index 2d6dd8e0..c6b3e8cf 100644
--- a/meta/recipes-bsp/u-boot/u-boot-custom.inc
+++ b/meta/recipes-bsp/u-boot/u-boot-custom.inc
@@ -26,7 +26,7 @@ U_BOOT_EXTRA_BUILDARGS ??= "BL31=${BL31} TEE=${TEE}"

TEMPLATE_FILES = "debian/control.tmpl debian/rules.tmpl"
TEMPLATE_VARS += "MACHINE DEBIAN_BUILD_DEPENDS U_BOOT_CONFIG U_BOOT_BIN \
- U_BOOT_EXTRA_BUILDARGS DEBIAN_COMPAT"
+ U_BOOT_EXTRA_BUILDARGS DEBIAN_COMPAT DEBIAN_STANDARDS_VERSION"

U_BOOT_TOOLS_PACKAGE ?= "0"
U_BOOT_CONFIG_PACKAGE ?= "0"
diff --git a/meta/recipes-kernel/linux-module/files/debian/control.tmpl b/meta/recipes-kernel/linux-module/files/debian/control.tmpl
index 95e6e84a..d8f4aded 100644
--- a/meta/recipes-kernel/linux-module/files/debian/control.tmpl
+++ b/meta/recipes-kernel/linux-module/files/debian/control.tmpl
@@ -1,7 +1,7 @@
Source: ${PN}
Section: kernel

Priority: optional
-Standards-Version: 3.9.6
+Standards-Version: ${DEBIAN_STANDARDS_VERSION}

Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS}
Maintainer: ${MAINTAINER}
Rules-Requires-Root: no
diff --git a/meta/recipes-kernel/linux-module/module.inc b/meta/recipes-kernel/linux-module/module.inc
index d2a41766..093ea19f 100644
--- a/meta/recipes-kernel/linux-module/module.inc
+++ b/meta/recipes-kernel/linux-module/module.inc
@@ -68,7 +68,8 @@ TEMPLATE_VARS += " \
SIGNATURE_HASHFN \
SIGNATURE_SIGNWITH \
PN \
- DEBIAN_COMPAT"
+ DEBIAN_COMPAT \
+ DEBIAN_STANDARDS_VERSION"

# Add custom cflags to the kernel build
KCFLAGS ?= "-fdebug-prefix-map=${CURDIR}=. -fmacro-prefix-map=${CURDIR}=."
--
2.39.5

[Jan Kiszka]

Looks fairly good to me now.

Bonus for enlightening all those "side-distros" in meta-isar/conf/distro
as well.