SDK made with populate_sdk is broken (openssh not installed?)

Steps to reproduce, on WSL2 running Ubuntu 20.04:

Prepare the system:

sudo apt update
sudo apt upgrade
sudo apt-get install gawk wget git git-core diffstat unzip texinfo gcc-multilib build-essential chrpath socat cpio python python3 python3-pip python3-pexpect python3-git python3-jinja2 libegl1-mesa pylint3 rsync bc bison xz-utils debianutils iputils-ping libsdl1.2-dev xterm language-pack-en coreutils texi2html file docbook-utils python-pysqlite2 help2man desktop-file-utils libgl1-mesa-dev libglu1-mesa-dev mercurial autoconf automake groff curl lzop asciidoc u-boot-tools libreoffice-writer sshpass ssh-askpass zip xz-utils kpartx vim screen python-is-python3
Install repo in ~/bin
mkdir edm_yocto
cd edm_yocto

Download the sources:

repo init -u https://github.com/TechNexion/tn-imx-yocto-manifest.git -b hardknott_5.10.y-stable -m imx-5.10.72-2.2.0-2022Q1.xml
repo sync -j8

Build image and SDK:

WIFI_FIRMWARE=y WIFI_MODULE=qca DISTRO=fsl-imx-wayland MACHINE=pico-imx7 BASEBOARD=pi source tn-setup-release.sh -b build-wayland-pico-imx7 (see log below)
accept the EULA
bitbake imx-image-core (core takes less time than full but the result is the same)
bitbake -c populate_sdk imx-image-core. Note that this completes successfully, but with warnings about openssh-dev not being installed. See log below.

Try building kernel with SDK:

tmp/deploy/sdk/fsl-imx-wayland-glibc-x86_64-imx-image-core-cortexa7t2hf-neon-pico-imx7-toolchain-5.10-hardknott.sh
. /opt/fsl-imx-wayland/5.10-hardknott/environment-setup-cortexa7t2hf-neon-poky-linux-gnueabi
mkdir /tmp/kernel
cp -rpa tmp/work/pico_imx7-poky-linux-gnueabi/linux-tn-imx/5.10.72+gitAUTOINC+acb7450af6-r0/git/* /tmp/kernel
cd /tmp/kernel/5.10.72+gitAUTOINC+acb7450af6-r0
make mrproper
make ARCH=arm imx_v7_defconfig
make -j4 zImage. This fails with:

  HOSTCC  scripts/extract-cert
scripts/extract-cert.c:21:10: fatal error: openssl/bio.h: No such file or directory
   21 | #include <openssl/bio.h>
      |          ^~~~~~~~~~~~~~~

Output of source after the EULA:

Welcome to Freescale Community BSP

The Yocto Project has extensive documentation about OE including a
reference manual which can be found at:
    http://yoctoproject.org/documentation

For more information about OpenEmbedded see their website:
    http://www.openembedded.org/

You can now run 'bitbake <target>'

Common targets are:
    core-image-minimal
    meta-toolchain
    meta-toolchain-sdk
    adt-installer
    meta-ide-support

Your build environment has been configured with:

    MACHINE=pico-imx7
    SDKMACHINE=i686
    DISTRO=fsl-imx-wayland
    EULA=

# TechNexion setup-environment.sh wrapper: Further modification to bblayers.conf and local.conf

# setup i.MX Yocto Project Release layers in bblayers.conf
# setup Technexion i.MX Yocto Project Release Layers in bblayers.conf
# setup NXP nfc release layer in bblayers.conf

# TechNexion Setup BSP Release: Further modification to local.conf and bblayers.conf
Specified DISPLAY_INFO: :0
Specified BASE_BOARD: pi
Specified wifi firmwares: qca
meta-freescale directory found, so use freescale community bsp bblayer instead.

Output of bitbake -c populate_sdk:

bitbake -c populate_sdk imx-image-core
WARNING: Layer nxp-nfc should set LAYERSERIES_COMPAT_nxp-nfc in its conf/layer.conf file to list the core layer names it is compatible with.
WARNING: You have included the meta-virtualization layer, but 'virtualization' has not been enabled in your DISTRO_FEATURES. Some bbappend files may not take effect. See the meta-virtualization README for details on enabling virtualization support.
Loading cache: 100% |####################################################################################| Time: 0:00:00
Loaded 5018 entries from dependency cache.
Parsing recipes: 100% |##################################################################################| Time: 0:00:00
Parsing of 3403 .bb files complete (3402 cached, 1 parsed). 5019 targets, 594 skipped, 5 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION           = "1.50.0"
BUILD_SYS            = "x86_64-linux"
NATIVELSBSTRING      = "ubuntu-20.04"
TARGET_SYS           = "arm-poky-linux-gnueabi"
MACHINE              = "pico-imx7"
DISTRO               = "fsl-imx-wayland"
DISTRO_VERSION       = "5.10-hardknott"
TUNE_FEATURES        = "arm vfp cortexa7 neon thumb callconvention-hard"
TARGET_FPU           = "hard"
meta
meta-poky            = "HEAD:269265c00091fa65f93de6cad32bf24f1e7f72a3"
meta-oe
meta-multimedia
meta-python          = "HEAD:f44e1a2b575826e88b8cb2725e54a7c5d29cf94a"
meta-freescale       = "HEAD:469d6c958c76ea235b3d3c1527e797ce3a7392e3"
meta-freescale-3rdparty = "HEAD:f8150f3b37cb83cba1f9e2378e57bb63e02d4610"
meta-freescale-distro = "HEAD:e6daa26ba1f748326546063d63a085ae671827d9"
meta-bsp
meta-sdk
meta-ml
meta-v2x             = "HEAD:30eff0d5a090d34690f0261b2899d5a5cd94c5ab"
meta-nxp-demo-experience = "HEAD:9dcc11ea9f525cffedbb28895e0abb443e56c3e0"
meta-chromium        = "HEAD:8be1d3a0ba0cf32e61144900597207af5698c10d"
meta-clang           = "HEAD:b0d805060791006d651efd3d7ae3dd5add8f70fe"
meta-gnome
meta-networking
meta-filesystems     = "HEAD:f44e1a2b575826e88b8cb2725e54a7c5d29cf94a"
meta-qt5             = "HEAD:43f8f539d40070a70fe89136db89bf5bb1dfe7ed"
meta-python2         = "HEAD:8db9e4f6ceae33d7a4f55453d31e69f9858af4eb"
meta-virtualization  = "HEAD:7f719ef40896b6c78893add8485fda995b00d51d"
meta-tn-imx-bsp      = "HEAD:b2120c30391111a943c392df8ddbae87db32b2f6"
meta-nxp-nfc         = "HEAD:5d05c57fc8faf3f1bc95c1702e1a6aa78d83412f"

Initialising tasks: 100% |###############################################################################| Time: 0:00:03
Sstate summary: Wanted 438 Local 0 Network 0 Missed 438 Current 1802 (0% match, 80% complete)
Removing 2 stale sstate objects for arch allarch: 100% |#################################################| Time: 0:00:00
Removing 1 stale sstate objects for arch cortexa7t2hf-neon: 100% |#######################################| Time: 0:00:00
Removing 1 stale sstate objects for arch pico_imx7: 100% |###############################################| Time: 0:00:00
NOTE: Executing Tasks
WARNING: imx-image-core-1.0-r0 do_populate_sdk: Unable to install packages. Command '/home/enrico/edm_yocto/build-wayland-pico-imx7/tmp/work/pico_imx7-poky-linux-gnueabi/imx-image-core/1.0-r0/recipe-sysroot-native/usr/bin/apt-get  install --allow-downgrades --allow-remove-essential --allow-change-held-packages --allow-unauthenticated --no-remove acl-dbg acl-dev acl-src alsa-state-dbg alsa-state-dev alsa-tools-dbg alsa-tools-dev alsa-tools-src alsa-utils-dbg alsa-utils-dev alsa-utils-src apt-dbg apt-dev apt-src attr-dbg attr-dev attr-src autoconf-dbg autoconf-dev automake-dbg automake-dev avahi-dbg avahi-dev avahi-src babeltrace-dbg babeltrace-dev babeltrace-src babeltrace2-dbg babeltrace2-dev babeltrace2-src base-files-dbg base-files-dev base-passwd-dbg base-passwd-dev base-passwd-src bashtop-dbg bashtop-dev bc-dbg bc-dev bc-src binutils-dbg binutils-dev binutils-src binutils-staticdev blktrace-dbg blktrace-dev blktrace-src bluez5-dbg bluez5-dev bluez5-src busybox-dbg bzip2-dbg bzip2-dev bzip2-src ca-certificates-dbg ca-certificates-dev can-utils-dbg can-utils-dev can-utils-src ccache-dbg ccache-dev ccache-src cloud-utils-growpart-dbg cloud-utils-growpart-dev connman-dbg connman-dev connman-src cpufrequtils-dbg cpufrequtils-dev cpufrequtils-src cpulimit-dbg cpulimit-dev cpulimit-src create-ap-dbg create-ap-dev crypto-af-alg-dbg crypto-af-alg-dev crypto-af-alg-src cryptodev-module-dbg cryptodev-module-dev cups-dbg cups-dev cups-src curl-dbg curl-dev curl-src db-dbg db-dev db-src dbus-dbg dbus-dev dbus-src diffstat-dbg diffstat-dev diffstat-src diffutils-dbg diffutils-dev diffutils-src dnsmasq-dbg dnsmasq-dev dnsmasq-src dosfstools-dbg dosfstools-dev dosfstools-src dpkg-dbg dpkg-dev dpkg-src dpkg-staticdev dropbear-dbg dropbear-dev dropbear-src dtc-dbg dtc-dev dtc-src dtc-staticdev e2fsprogs-dbg e2fsprogs-dev e2fsprogs-src e2fsprogs-staticdev elfutils-dbg elfutils-dev elfutils-src elfutils-staticdev ethtool-dbg ethtool-dev ethtool-src evtest-dbg evtest-dev evtest-src fb-test-dbg fb-test-dev fbset-dbg fbset-dev fbset-modes-dbg fbset-modes-dev file-dbg file-dev file-src findutils-dbg findutils-dev findutils-src fio-dbg fio-dev fio-src firmwared-dbg firmwared-dev firmwared-src flac-dbg flac-dev flac-src freerdp-dbg freerdp-dev freerdp-src fsl-rc-local-dbg fsl-rc-local-dev gawk-dbg gawk-dev gawk-src gcc-dbg gcc-dev gcc-runtime-dbg gcc-sanitizers-dbg gcc-src gdb-dbg gdb-dev gdb-src get-support-info-dbg get-support-info-dev gettext-dbg gettext-dev gettext-src glibc-locale-dbg glibc-mtrace-dbg glibc-mtrace-dev glmark2-dbg glmark2-dev glmark2-src gobject-introspection-dbg gobject-introspection-dev gobject-introspection-src grep-dbg grep-dev grep-src gtk+3-dbg gtk+3-dev gtk+3-src haveged-dbg haveged-dev haveged-src hdparm-dbg hdparm-dev hdparm-src hicolor-icon-theme-dbg hicolor-icon-theme-dev hostapd-dbg hostapd-dev hostapd-src i2c-tools-dbg i2c-tools-dev i2c-tools-src i2c-tools-staticdev imx-alsa-plugins-dbg imx-alsa-plugins-dev imx-alsa-plugins-src imx-lib-dbg imx-lib-dev imx-lib-src imx-lib-staticdev imx-test-dbg imx-test-dev iozone3-dbg iozone3-dev iperf3-dbg iperf3-dev iperf3-src iproute2-dbg iproute2-dev iproute2-src iptables-dbg iptables-dev iptables-src iw-dbg iw-dev iw-src kbd-dbg kbd-dev kbd-src kernel-tools-dbg kernel-tools-dev kernel-tools-src keyctl-caam-dbg keyctl-caam-dev keyctl-caam-src keyutils-dbg keyutils-dev keyutils-src kmod-dbg kmod-dev kmod-src less-dbg less-dev less-src libaio-dbg libaio-dev libaio-src libaio-staticdev libasound-dbg libasound-dev libasound-src libatk-1.0-dbg libatk-1.0-dev libatk-1.0-src libatomic-staticdev libc-src libc6-staticdev libcairo-dbg libcairo-dev libcairo-src libcap-dbg libcap-dev libcap-ng-dbg libcap-ng-dev libcap-ng-src libcap-src libcap-staticdev libcroco-dbg libcroco-dev libcroco-src libcrypt-dbg libcrypt-dev libcrypt-src libdaemon-dbg libdaemon-dev libdaemon-src libdrm-dbg libdrm-dev libdrm-src libegl-mesa-dev libell-dbg libell-dev libell-src libepoxy-dbg libepoxy-dev libepoxy-src libevdev-dbg libevdev-dev libevdev-src libexpat-dbg libexpat-dev libexpat-src libffi-dbg libffi-dev libffi-src libfontconfig-dbg libfontconfig-dev libfontconfig-src libfreetype-dbg libfreetype-dev libfreetype-src libfribidi-dbg libfribidi-dev libfribidi-src libgbm-dev libgcc-s-dbg libgcc-s-src libgcrypt-dbg libgcrypt-dev libgcrypt-src libgdbm-dbg libgdbm-dev libgdbm-src libgdk-pixbuf-2.0-dbg libgdk-pixbuf-2.0-dev libgdk-pixbuf-2.0-src libglapi-dev libgles2-mesa-dev libglib-2.0-dbg libglib-2.0-dev libglib-2.0-src libgmp-dbg libgmp-dev libgmp-src libgnutls-dbg libgnutls-dev libgnutls-src libgomp-staticdev libgpg-error-dbg libgpg-error-dev libgpg-error-src libgpiod-dbg libgpiod-dev libgpiod-src libharfbuzz-dbg libharfbuzz-dev libharfbuzz-src libidn2-dbg libidn2-dev libidn2-src libinput-dbg libinput-dev libinput-src libjpeg-dbg libjpeg-dev libjpeg-src libjson-c-dbg libjson-c-dev libjson-c-src libjson-c-staticdev liblzo2-dbg liblzo2-dev liblzo2-src libmnl-dbg libmnl-dev libmnl-src libmpc-dbg libmpc-dev libmpc-src libmpfr-dbg libmpfr-dev libmpfr-src libnfc-nci-linux-1-dbg libnfc-nci-linux-1-dev libnl-3-dbg libnl-3-dev libnl-3-src libnsl-dbg libnsl-dev libnsl-src libnss-mdns-dbg libnss-mdns-dev libnss-mdns-src libogg-dbg libogg-dev libogg-src libpam-dbg libpam-dev libpam-src libpcap-dbg libpcap-dev libpcap-src libpcap-staticdev libpcre-dbg libpcre-dev libpcre-src libpixman-1-dbg libpixman-1-dev libpixman-1-src libpng16-dbg libpng16-dev libpng16-src libpopt-dbg libpopt-dev libpopt-src libpython3.9-staticdev libreadline-dbg libreadline-dev libreadline-src libreadline-staticdev libsamplerate0-dbg libsamplerate0-dev libsamplerate0-src libsensors-dev libsensors-staticdev libsndfile-dbg libsndfile-dev libsndfile-src libsocketcan-dbg libsocketcan-dev libsocketcan-src libsqlite3-dev libstdc++-staticdev libtirpc-dbg libtirpc-dev libtirpc-src libtool-dbg libtool-dev libtool-src libubootenv-dbg libubootenv-dev libubootenv-src libubootenv-staticdev libunistring-dbg libunistring-dev libunistring-src libunwind-dbg libunwind-dev libunwind-src libusb-1.0-dbg libusb-1.0-dev libusb-1.0-src libuuid-dbg libuuid-dev libuuid-src libv4l-dev libvorbis-dbg libvorbis-dev libvorbis-src libwrap-dev libwrap-staticdev libxkbcommon-dbg libxkbcommon-dev libxkbcommon-src libxml2-dbg libxml2-dev libxml2-src libz-dbg libz-dev libz-src libz-staticdev linux-firmware-qca-tn-dbg linux-firmware-qca-tn-dev linuxptp-dbg linuxptp-dev linuxptp-src lmbench-dbg lmbench-dev lmbench-src lmbench-staticdev lmsensors-config-dbg lmsensors-config-dev lmsensors-dbg lmsensors-dev lmsensors-src lrzsz-dbg lrzsz-dev lrzsz-src lvm2-dbg lvm2-dev lvm2-src lz4-dbg lz4-dev m4-dbg m4-dev m4-src make-dbg make-dev make-src memtester-dbg memtester-dev memtester-src mesa-dbg mesa-dev mesa-src minicom-dbg minicom-dev minicom-src mmc-utils-dbg mmc-utils-dev mmc-utils-src mobile-broadband-provider-info-dbg mobile-broadband-provider-info-dev mtd-utils-dbg mtd-utils-dev mtd-utils-src mtdev-dbg mtdev-dev mtdev-src nano-dbg nano-dev nano-src ncurses-dbg ncurses-dev ncurses-src ncurses-staticdev neard-dbg neard-dev neard-src net-tools-dbg net-tools-dev net-tools-src netbase-dbg netbase-dev nettle-dbg nettle-dev nettle-src nfs-utils-dbg nfs-utils-dev nfs-utils-src ntag-i2c-tool-dbg ntag-i2c-tool-dev ntp-dbg ntp-dev ntp-src ofono-dbg ofono-dev ofono-src openssh-dbg openssh-dev openssh-src openssl-dbg openssl-dev openssl-src openssl-staticdev opkg-utils-dbg os-release-dbg os-release-dev packagegroup-base-3g-dbg packagegroup-base-3g-dev packagegroup-base-alsa-dbg packagegroup-base-alsa-dev packagegroup-base-bluetooth-dbg packagegroup-base-bluetooth-dev packagegroup-base-dbg packagegroup-base-dev packagegroup-base-extended-dbg packagegroup-base-extended-dev packagegroup-base-ipv6-dbg packagegroup-base-ipv6-dev packagegroup-base-nfc-dbg packagegroup-base-nfc-dev packagegroup-base-nfs-dbg packagegroup-base-nfs-dev packagegroup-base-pci-dbg packagegroup-base-pci-dev packagegroup-base-usbgadget-dbg packagegroup-base-usbgadget-dev packagegroup-base-usbhost-dbg packagegroup-base-usbhost-dev packagegroup-base-vfat-dbg packagegroup-base-vfat-dev packagegroup-base-wifi-dbg packagegroup-base-wifi-dev packagegroup-base-zeroconf-dbg packagegroup-base-zeroconf-dev packagegroup-core-boot-dbg packagegroup-core-boot-dev packagegroup-core-buildessential-dbg packagegroup-core-buildessential-dev packagegroup-core-nfs-server-dbg packagegroup-core-nfs-server-dev packagegroup-core-sdk-dbg packagegroup-core-sdk-dev packagegroup-core-ssh-dropbear-dbg packagegroup-core-ssh-dropbear-dev packagegroup-core-standalone-sdk-target-dbg packagegroup-core-standalone-sdk-target-dev packagegroup-core-tools-debug-dbg packagegroup-core-tools-debug-dev packagegroup-core-tools-profile-dbg packagegroup-core-tools-profile-dev packagegroup-core-weston-dbg packagegroup-core-weston-dev packagegroup-distro-base-dbg packagegroup-distro-base-dev packagegroup-imx-core-tools-dbg packagegroup-imx-core-tools-dev packagegroup-imx-security-dbg packagegroup-imx-security-dev packagegroup-machine-base-dbg packagegroup-machine-base-dev packagegroup-tn-nfc-dbg packagegroup-tn-nfc-dev packagegroup-tn-tools-dbg packagegroup-tn-tools-dev packagegroup-tn-voicehat-dbg packagegroup-tn-voicehat-dev packagegroup-tn-wlan-dbg packagegroup-tn-wlan-dev pango-dbg pango-dev pango-src patch-dbg patch-dev patch-src pciutils-dbg pciutils-dev pciutils-src perf-dbg perf-dev perl-dbg picocom-dbg picocom-dev picocom-src powertop-dbg powertop-dev powertop-src procps-dbg procps-dev procps-src psplash-dbg psplash-dev psplash-src ptpd-dbg ptpd-dev ptpd-src pulseaudio-dbg pulseaudio-dev pulseaudio-src python-dbg python-dev python-src python3-dbg python3-dbus-dbg python3-dbus-dev python3-dbus-src python3-dev python3-pycairo-dbg python3-pycairo-dev python3-pycairo-src python3-pygobject-dbg python3-pygobject-dev python3-pygobject-src python3-src quilt-dbg quilt-dev ramsmp-dbg ramsmp-dev ramsmp-src read-edid-dbg read-edid-dev read-edid-src rpcbind-dbg rpcbind-dev rpcbind-src rsync-dbg rsync-dev rsync-src run-postinsts-dbg run-postinsts-dev sed-dbg sed-dev sed-src shadow-dbg shadow-dev shadow-securetty-dbg shadow-securetty-dev shadow-src shared-mime-info-dbg shared-mime-info-dev shared-mime-info-src slang-dbg slang-dev slang-src spidev-test-dbg spidev-test-dev sqlite3-dbg sqlite3-src strace-dbg strace-dev strace-src stress-ng-dbg stress-ng-dev stress-ng-src stressapptest-dbg stressapptest-dev stressapptest-src sysbench-dbg sysbench-dev sysbench-src systemd-compat-units-dbg systemd-compat-units-dev systemd-conf-dbg systemd-conf-dev systemd-dbg systemd-dev systemd-serialgetty-dbg systemd-serialgetty-dev systemd-src systemtap-dbg systemtap-dev systemtap-src target-sdk-provides-dummy-dbg target-sdk-provides-dummy-dev tcl-dbg tcl-dev tcl-src tcl-staticdev tcp-wrappers-dbg tcp-wrappers-src thermal-imx-test-dbg thermal-imx-test-dev tn-growpart-helper-dbg tn-growpart-helper-dev tn-u-boot-fw-env-dbg tn-u-boot-fw-env-dev u-boot-tn-imx-dbg u-boot-tn-imx-dev udev-extraconf-dbg udev-extraconf-dev udev-rules-imx-dbg udev-rules-imx-dev update-rc.d-dbg update-rc.d-dev usbutils-dbg usbutils-dev usbutils-src util-linux-dbg util-linux-dev util-linux-src v4l-utils-dbg v4l-utils-dev v4l-utils-src valgrind-dbg valgrind-dev valgrind-src valgrind-staticdev voicehat-test-dbg voicehat-test-dev volatile-binds-dbg volatile-binds-dev wayland-dbg wayland-dev wayland-src wayland-utils-dbg wayland-utils-dev wayland-utils-src weston-dbg weston-dev weston-init-dbg weston-init-dev weston-src wireless-tools-dbg wireless-tools-src wpa-supplicant-dbg wpa-supplicant-dev wpa-supplicant-src xkeyboard-config-dbg xkeyboard-config-dev xxhash-dbg xxhash-dev xxhash-src xxhash-staticdev xz-dbg xz-dev xz-src zstd-dbg zstd-dev zstd-src zstd-staticdev' returned 100:
Reading package lists...
Building dependency tree...
Reading state information...
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 openssh-dev : Depends: openssh (= 8.5p1-r0) but it is not installable
               Recommends: libcrypto-dev but it is not installable
               Recommends: openssh-keygen-dev but it is not installable
               Recommends: openssh-misc-dev but it is not installable
               Recommends: openssh-scp-dev but it is not installable
               Recommends: openssh-sftp-dev but it is not installable
               Recommends: openssh-sftp-server-dev but it is not installable
               Recommends: openssh-ssh-dev but it is not installable
               Recommends: openssh-sshd-dev but it is not installable
               Recommends: pam-plugin-keyinit-dev but it is not installable
               Recommends: pam-plugin-loginuid-dev but it is not installable
               Recommends: shadow-sysroot-dev but it is not installable
               Recommends: update-alternatives-opkg-dev but it is not installable
 u-boot-tn-imx : Depends: u-boot-uenv but it is not installable
E: Unable to correct problems, you have held broken packages.

TechNexion / tn-imx-yocto-manifest

SDK made with populate_sdk is broken (openssh not installed?) #28