From patchwork Tue Dec 2 12:23:37 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Quirin Gylstorff X-Patchwork-Id: 328 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 02 Dec 2025 13:24:03 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-ej1-f60.google.com (mail-ej1-f60.google.com [209.85.218.60]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5B2CO2ML020041 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 2 Dec 2025 13:24:02 +0100 Received: by mail-ej1-f60.google.com with SMTP id a640c23a62f3a-b721aa1dac9sf349971766b.0 for ; Tue, 02 Dec 2025 04:24:02 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1764678237; cv=pass; d=google.com; s=arc-20240605; b=EFJTEXz2ghPTTilR/L4rqtQTeTnQOjCMplF8JzeF7WSt6I1Xw3pFBOLhSzZeAg04m+ b6M/cB4JmK3LivZ8xQqHXz14uB1gGaprhEyAcI6t18u84xOI5vrXqNEcgcsusP/drLiK pe5xdAARYRK0PMR0TdufgGoVRX3Az51BIOCR9qXbTrwMw++0iwC4M9P+jqTz0TaZr8qV cghiCVbNFWW9KuGWJ/VQMSo0T4ossRCmKEQzOI3Jmnuyj36uKv2W1PTmQ6ZgcEanMWN9 ny7VAsGL6K8KyccVG8v51V1iOvF+vqliI/rChN/PseRzz7NPy29x8v3l0gD0gREsKyFk RXsQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :message-id:date:subject:to:from:dkim-signature; bh=kA9/bUlxGZ4KcNyQOb9JENHUl2s3jDbmQKL6l9dt1zc=; fh=YH9LgbAzIX0edV5MY9OGcOr6KM4wwZoVNT0dfwjhTXk=; b=iRuWTQxU3hOpKBqYJbH1b45XW3+XDPeaJIm2/KzDl/aXRbZFKZFF+IPbbdzGfSVwOE PbTEFK5N+55P/5yoRAjIGW1/yblgg4eyLBnhB9HhSI4T2bEabze/x//DS2Fdpgpd8Bib d8kWchp6wuy6Geyf9PcHuW7DO0r2UEMu3kpvZqTrDsTZjoKseYYApYFZhl6+1xtuRZ4F pgafdF7TAy4zToQqxHfezQ/rqTG2wOzCfau1MPOBNpSZfSMPPY91ioCm7Kw5PuN0C4yy W3FN+75Jkj5pGrqttixpXKNfZERTQXtCTU0Mr+YM7N09nUZshXGJn5JjN/5m0TbQDfLN QReg==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=IGUi5un5; spf=pass (google.com: domain of fm-51332-20251202122352e4bd351c94000207ac-egmtgw@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-51332-20251202122352e4bd351c94000207ac-EgMtGw@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1764678237; x=1765283037; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:to:from:from:to:cc:subject :date:message-id:reply-to; bh=kA9/bUlxGZ4KcNyQOb9JENHUl2s3jDbmQKL6l9dt1zc=; b=aRfkJfjgu0MnEwvyJVlyQmirogic23uVPOppdN3iE+lRwLX2zM0FeRSvPjteHgSRLF GHeRmbJ3oWYgfp+rlnexc7V6N63dogCK6mTHtDt8fkkE2gEll6dkDGxKQxD8ryPKSuVi e5CcZtTU8NTrQqnDi8/A3Zwa9NnC1anQrnVxLOXDpcl4aZn27GsKK69qm7gE7gSlNQey u4nNVypwqGfM1UEcQPivL0fP7LWxt/KtoYe9XGsXakIWRc6RPlWSXiKKVUcsEgVg6Ss/ ZRhYH+xCYB1qWmWu60lnv1O8edJa0+vgORFjTj5Wn/Vnb5CpnPQBsDARIapVzgsba0rj qIgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764678237; x=1765283037; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=kA9/bUlxGZ4KcNyQOb9JENHUl2s3jDbmQKL6l9dt1zc=; b=WWRSqoc+StfgoNBWDEp05dGPfsFnPsianR8XJTOR9SX2BjKUcONBSbHDejb7Y82lvE l6A8b0ku7xD12Qnyx9acMyxqCS1Pa28HoZS+IBi1WPHK6WxXNzcGBdE6MbY/1xs7QFHU UQIIx6QwzaKcQ5eRzQp4FNQNs7q0qYyJ4mFfaui2zzfkqGbRM7D0OP9j9gxoZGmo3cs0 8QW2NYg9AOdJfL6eiKlE+XCWzdTkrNFwi67ci5KjksvWdVZeEtXEMYp7yjvFJcnQFcdb brUINPpIhbeoxbiBEB0ggRLI3/O1baLHYpwRZsVDENpOj3lOBYKthO2XLhnU3mY39J6F k9ZQ== X-Forwarded-Encrypted: i=2; AJvYcCVCOOJFTMLU2RpuI4r8ZjfsekzXEbRQisb3asiU4ArF+1RdpDaNhJGQsAnSAdrrSGyBSTOwMr0=@isar-build.org X-Gm-Message-State: AOJu0Yx56EIYPwvqzjdl2LioTKZISlHGpGqUiWP6IpE44X+VFeVMP9zV NOygc+XYz2ygE9t9IqP/OJzG2nYRej+zC7nd9CPgwaGnywCQaWXz0elW X-Google-Smtp-Source: AGHT+IE0HCBRS77XZKbJf3HO9zE9xnmbeA6gxnbxcCrDpxYHL/kWJuuD5Yzms5CtN7Rjq6ei6/8RMg== X-Received: by 2002:a17:907:d649:b0:b72:671:b2a5 with SMTP id a640c23a62f3a-b79c21c52f0mr281343466b.3.1764678236823; Tue, 02 Dec 2025 04:23:56 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+abn5x9NImvL/YxUKZLHFGH9mxpeLzSUxcMf/rs+XCGzw==" Received: by 2002:a05:6402:d6f:b0:641:7726:ea9f with SMTP id 4fb4d7f45d1cf-647419db67dls3835909a12.1.-pod-prod-00-eu; Tue, 02 Dec 2025 04:23:54 -0800 (PST) X-Received: by 2002:a05:6402:5112:b0:643:bef:8b7e with SMTP id 4fb4d7f45d1cf-647894b4c40mr2264970a12.12.1764678233842; Tue, 02 Dec 2025 04:23:53 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1764678233; cv=none; d=google.com; s=arc-20240605; b=LpATUAQwNQH6lZPiwtVrL01NQvjmdGGIYEx0QAs5DJ7f/HuvmWrkXgDWcu2pgzRWbp OFJdX8AOgwoze9NpZopvDL1d33/D4uPeYtP0r0E2TlTPRdbMTcuoN/gO+Ned1TsFe8ho A2aV2fgp8Gi0+hX3l52zEtwHZWxmkcRkjyG/COJBRaNZr0qhvCwEwpWv26w9biBPHd7I cbp7P5TN/V/lNWzq9pJf+rrB0nPXN9VzAY9TN0VcIn+lOZ66K0wA2LDitw4jvEtoM086 5F4aje/I8i9YmMs9VDnlsjT/xvmZBSAC9d2+fSMX+r3jlaKDVmBYazwuinEy6QEm6Luo bfRQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:message-id:date :subject:to:from:dkim-signature; bh=fheJZPW5cTxUnImoJEkDcfH4lmBXsHMfT1fX+wiGD9M=; fh=7tclEdh7YbwSQowgJ6LNq720O7H5HTEaqj22NJWRE2E=; b=iAkMGuQpkMtLt03RpVwFEdw1vC2oraxT9iD3YYPoVJcZtcKrKDVGurE7IFds2zyqVq O6A/HoeywlHBjsypjiUCV1NVdDOmaiBtxhCuISgvWzVKnqPwL1/BAtXOUikFDJ0gSvzZ epzMeTOU+O56bEB/3rD6Auslr4yS+1zjQkXwfCgk4UntDuUhyVBVNiT5fO3vfEEItqhO L6toFw8lW7k4+Jg7GbwVyT3LPm5r1/JwaLZFe/EbTSzF4OgChHaOVX7gaDJiknBBQaSq +p6GFRfwxfOs00JnRt+mYvWYN8rmEzg9nVPVyHjgCWwTGNQv3hFS57/UfbptJ2GUH8ui Nzlw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=IGUi5un5; spf=pass (google.com: domain of fm-51332-20251202122352e4bd351c94000207ac-egmtgw@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-51332-20251202122352e4bd351c94000207ac-EgMtGw@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net. [185.136.64.227]) by gmr-mx.google.com with ESMTPS id 4fb4d7f45d1cf-6475103ad91si394693a12.8.2025.12.02.04.23.53 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 02 Dec 2025 04:23:53 -0800 (PST) Received-SPF: pass (google.com: domain of fm-51332-20251202122352e4bd351c94000207ac-egmtgw@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) client-ip=185.136.64.227; Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 20251202122352e4bd351c94000207ac for ; Tue, 02 Dec 2025 13:23:52 +0100 X-Patchwork-Original-From: "'Quirin Gylstorff' via isar-users" From: Quirin Gylstorff To: isar-users@googlegroups.com Subject: [PATCH v2 0/3] Add support of Discoverable Disk Image Date: Tue, 2 Dec 2025 13:23:37 +0100 Message-ID: <20251202122352.57016-1-Quirin.Gylstorff@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-51332:519-21489:flowmailer X-Original-Sender: quirin.gylstorff@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=IGUi5un5; spf=pass (google.com: domain of fm-51332-20251202122352e4bd351c94000207ac-egmtgw@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-51332-20251202122352e4bd351c94000207ac-EgMtGw@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Quirin Gylstorff Reply-To: Quirin Gylstorff Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= From: Quirin Gylstorff This patchset allows to build Discoverable Disk Image(DDI)s, like systemd-sysext systemd-portable systemd-confext Sysext and confext can be used together with dracut to allow modifications of a unified kernel image or a read only root file system for example to debug an production image by adding ssh and gdb. systemd-repart can also be used as alternative to wic. In the current implementation the images are not stripped so especially sysext contain a full copy of /usr and /opt. This patchset uses systemd-repart instead of wic as it is easier to describe interdepended partiton layout as required by DDIs. Quirin Gylstorff (3): Add Discoverable Disk Image definitions to ISAR Add imagetype Discoverable Disk Image(DDI) classes/image: Add DDI imagetype meta/classes-recipe/imagetypes_ddi.bbclass | 48 +++++++++++++++++++ meta/classes/image.bbclass | 3 +- .../definitions/confext.repart.d/10-root.conf | 16 +++++++ .../confext.repart.d/20-root-verity.conf | 14 ++++++ .../confext.repart.d/30-root-verity-sig.conf | 13 +++++ .../portable.repart.d/10-root.conf | 16 +++++++ .../portable.repart.d/20-root-verity.conf | 14 ++++++ .../portable.repart.d/30-root-verity-sig.conf | 13 +++++ .../definitions/sysext.repart.d/10-root.conf | 17 +++++++ .../sysext.repart.d/20-root-verity.conf | 14 ++++++ .../sysext.repart.d/30-root-verity-sig.conf | 13 +++++ .../isar-ddi-definitions_0.1.bb | 18 +++++++ 12 files changed, 198 insertions(+), 1 deletion(-) create mode 100644 meta/classes-recipe/imagetypes_ddi.bbclass create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/confext.repart.d/10-root.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/confext.repart.d/20-root-verity.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/confext.repart.d/30-root-verity-sig.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/portable.repart.d/10-root.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/portable.repart.d/20-root-verity.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/portable.repart.d/30-root-verity-sig.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/sysext.repart.d/10-root.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/sysext.repart.d/20-root-verity.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/files/definitions/sysext.repart.d/30-root-verity-sig.conf create mode 100644 meta/recipes-support/isar-ddi-definitions/isar-ddi-definitions_0.1.bb