From patchwork Mon Jul 20 08:13:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 391 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 20 Jul 2026 10:14:10 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f57.google.com (mail-oo1-f57.google.com [209.85.161.57]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 66K8E7PQ019588 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 20 Jul 2026 10:14:08 +0200 Received: by mail-oo1-f57.google.com with SMTP id 006d021491bc7-6a37fb394d5sf13454932eaf.0 for ; Mon, 20 Jul 2026 01:14:08 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1784535242; cv=pass; d=google.com; s=arc-20260327; b=o+gqg0+PUr4lyA5MQpGpHDvh2pDL64Dxh+amvo0TpyR13TW3fjGFEuunrL/82R9ocQ TldQTD7CArJG0AosWQoaaGfNOEUzrDsocoH/32bk37UlKW6wkT4pWgnY3yxLaEeZItVb qvGmmOCF2Eb1FzccvbhgHrBPlZVQtavcz9i+0GqgcAa0Y5hFyddL/ohRAGV3cVhXfKpo EZA1qhj27dyuOcNWuWiZW/rwStpIOV/doKh6EQsh9wcUKlIMdUvC1ZkcxB+6nmrZOp4q msfcpxFnI2IEEg81k3/+uy4BMCddb1QYIp0NLxhxD1TMda9L63fHLhEUORLPmpVq7H6Z YSUg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=QvGLKKprL2Q/NkoFmq5O/sJNlQ08NCKlXuLCkXR9QuM=; fh=ZDqrEaYRqu0QB+IpzX9rlGBLBuCGFZ/Blei2z2ql5zM=; b=Hy3caEYZzxdbjv6hUBFn29c1NgFhUUS+TQl5aNAptg9k+mohwGFEMkhE+xxNlGlgK0 TOTFKoWBvCAp53usDVU0MK+xAtpjKi46tGsJmEkHuAdV/dgd6om/u+plF1y5+XMGPmrB LBNBzVn36IaouqfDKx4bbPF+FOL3W5kKEEhYQQQL1NTwRAhnIoNQxlAL+R6+T7/feJvi VA/Xg//pzv/MHuRNMWWs+WVB/0XL5udL/tQWcq7QPYDtjnCvzUFvUK1D83mP57nGsJ/X 9m6l8v/BcDjJqL2n8D2NO0uQf8wPfc/s6vVs8y5DyRu/6Ecwk03ImhtEGuJWWCv0xp9A VjUQ==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="znDy4z9/"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1784535242; x=1785140042; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=QvGLKKprL2Q/NkoFmq5O/sJNlQ08NCKlXuLCkXR9QuM=; b=B0pNmawGbPIt65dHj4UZpz9+oZH1H7IL7JDhRaSYrRYy9w+6afreZKBZgfy+4bxeCo q5xbtIlfC+KmEFJ7OsfuGds0v6mrVRbRPfhs8JsQKqJLwbAugOM9Fy8Szg5QPmJxQeDk v8WF01XDLyHaG5wNRFPQkwqi1ccaOV42XZi68IJ1BA3ClZ9Ff8ravMmoi2J2bCDLQvLw q2nAW+ycm9oLZbW6cx3eRDUPlzUOM5VmW1togJnqOwFke1xqxhrDlHXRG6ZuPlAyxdlC QwWSxvdiMjnS/3Daf1NI6m4ChZExUiKIM4Q138eIsHR1aM7aULcIg3E9azb8Hh7bmOx0 WIyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784535242; x=1785140042; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=QvGLKKprL2Q/NkoFmq5O/sJNlQ08NCKlXuLCkXR9QuM=; b=LtxJY6nEZrMgu2gEzsXzRUMPYq02swmV6Cd9IjBJomY7rRpzPFzk+iDbtSLgwPr2zj fQzMEQ3esfoD+qkac9HlJyoRlo3vikNpxojBGZENTJmgK5GtaWp7lzckVN9nKawJoTU6 7lrIx7GNGREJPHCYCW3eOpE8gydRUE7e/4ioFQbUe9bfLPemgMrOKetz8q1z7YjUxweB DF1Hk1KB7x3Z8TtklwlD9EeX6Kf8CQrVMdUU/ELZWZ5jfqid1eOh2zQHTNtQrozcZd6D pt0XnMXbi4Z6u34bA0VZ1snY7RoRQ7ALjt2fzHv7H16ZWi0msePfCoBZRpGOWAeWqPck Eb+Q== X-Forwarded-Encrypted: i=3; AHgh+RovXVTNwU37ZkubcuE/htB2IEjt0O2cu38H1SgKh0kyl6adZZZKt6lKEbUDtfWmfTVe93IV1/E=@isar-build.org X-Gm-Message-State: AOJu0YyhN2/fHehY9F6qhzQ3qMKId10Xu2IqkdUG7tcC5f0VMa6SmHzH ogDbdDXvPx5ok4Fmy+R972+DiGC00VAFFQ+nE8VGFwaIX+xOLBTqZf8g X-Received: by 2002:a05:6820:1350:b0:6a3:7a0c:77e2 with SMTP id 006d021491bc7-6a536a860aemr6711058eaf.65.1784535241898; Mon, 20 Jul 2026 01:14:01 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="Aa7YSPTG75RKlk0LFKsCIgG8Yw/HgCDo4wCT4m+ieS1lAhxqRg==" Received: by 2002:a05:6820:983:b0:6a1:33c1:af1a with SMTP id 006d021491bc7-6a3eec31609ls2263637eaf.0.-pod-prod-03-us; Mon, 20 Jul 2026 01:14:00 -0700 (PDT) X-Received: by 2002:a05:6820:4de7:b0:6a1:4592:eded with SMTP id 006d021491bc7-6a535b029c1mr7192416eaf.0.1784535240747; Mon, 20 Jul 2026 01:14:00 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1784535240; cv=pass; d=google.com; s=arc-20260327; b=DEwFFf+eIhXUOTl7Y5Z5YJlsgWkMZ9ub+WRpDeqa8ofaxtqKaj3E2ETNTFDxSGEltt BSHnLZmg7H0SjTP8/NtzvKY2M6UJl9cuuu7VZD2oHeBQ5TjOCYpCTJBoaDp43Ud0lftJ +QSYghDkflFIVDByko/TKqZUnwGNhlMEdtosLEn0W23D+yY3lAhYYC3RRYqvRHS33gyY clPR+jDoouFSCQfJBldAvoh3DeYcBC+uhlWkHxCf9tFFXHZnzzpPJQR7w/g0xAykfSs+ BfpX1bhJOQZdzms56VsG7SN32bwQrKbDWni3ARUK6l9Zs1mM5Qvh+Z8ZlqPFaIBMv7TZ DnzA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=tflVdRQJv3++tsqPgUgmjrfjIXFzTOOwCvxA0zG4po4=; fh=MAR4IrvAhd3sEKpd2rMZmD1A3RZ1HgCziLJco30Znng=; b=GrBoJwmt7Ua3tyTpoiCeDwSODyZ06abNJQb8tONaoQ2aosFqifYc+ti9/LbnGwy0Fa FxOvme4iSqkte/9Prq60s98F3lxMflXmEpZBbLsuscMLaBCd7EMt2SOtxlEBpJJp88qv hoAHeM8scMdwEpPSdCfhP4ToLqEEodHCe7zflqCdXDgzlP+MAAoNt+klGLyKwOIoTNoV MqIqqUi90P/cAPmoN62IPN5NFW+i3GfI1aISux26g5i03hmi68CqSLpkyotwugFcjGOr 9eGNpKpZqViG9Us2U8wEI/xfgi2SKcUtlz7qPhSd9TlOheCylcPq2ycpK0uhOBzFnIsz FzZQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="znDy4z9/"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from GVXPR05CU001.outbound.protection.outlook.com (mail-swedencentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c202::7]) by gmr-mx.google.com with ESMTPS id 006d021491bc7-6a51a2215f4si335063eaf.2.2026.07.20.01.14.00 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 20 Jul 2026 01:14:00 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) client-ip=2a01:111:f403:c202::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=RA1IYhP6lFj64X9xrcOOZ8YlZCHkcyqzwO2WXQiNPXRCGdLD9ZhoU9UJtmyHNosLOSlJoBmZvswIamDr0PF+A+O5tXZdxLyLCoLQGwIz2i/OObMAOJijJRFiyehbqJvWm4vxFlWG+ue9v6pmuXXrYVvQWH28uHH+IomNZPlddyNCcJnOKIQf80YmFnwUadbAgMKuKhWNUN2TDpj1UXtRcvULSwHrvEp8n4EXa5q4Qut2z+Cr7yUvISBbgI8SkPlxi2RhD/dzmYUEoshgDDwWn2GbpBCMHp+c7RysiFu0EaHcD9xa8etAc+4uY68Xb0dYd9h+L1PTrXxVdrZtZ8Aq8Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tflVdRQJv3++tsqPgUgmjrfjIXFzTOOwCvxA0zG4po4=; b=fK584i9Hf72zFqD7B8OP6fs+O6yA/VCtuupDEi/5YkVDjs38UQfYzn8DE1Qrpet7kxWgGKg+thYwYTs4PopxYIBLIxOV0UAzUKEzyWwq+4vp7u6pdI6kdHtY9k6bFGnS3e92Sg+DqTobBX6i7mTsRu0v7MS9I6h9/QR+bxNi3yQsqLSuiw9M+pbKMSEzZW6vyq//a6A2fwaNqwbv7wN6YUSzCoI9JzaGEGHGcHxlNDcmNpNVJRLVLCOENnHvWM4jl3tBrLHoGRDQYXsKDj2CstocgpJPrsDPFtIFrVr3e8S5E/hmvxQQKBSJB0JiLvgXFs5VK6pxY84YO7T4zDTldg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DU4PR10MB9144.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:55c::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.15; Mon, 20 Jul 2026 08:13:56 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0202.018; Mon, 20 Jul 2026 08:13:56 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, Felix Moessbauer Subject: [PATCH 0/6] Rework SBOM generation Date: Mon, 20 Jul 2026 10:13:41 +0200 Message-ID: <20260720081347.3835974-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.53.0 X-ClientProxiedBy: FR4P281CA0342.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:ea::20) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DU4PR10MB9144:EE_ X-MS-Office365-Filtering-Correlation-Id: bf145d3f-93f7-49b9-d078-08dee636d83f X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|376014|366016|1800799024|56012099006|10067099003|11063799006|18002099003|55112099003; X-Microsoft-Antispam-Message-Info: gdUbUGrLREwCiwhhaSPPjIDgi2+3Z2wn3t5I1YTCSu1QllPgXEnBb+jtakpKyMcPNGp+8GI9K439MNew/fAJ0HOxT+BWTStgv/UDjtnYfA4TU0Wv47Tlg+5DsHmemza4V2b9esP0aJKmY8iZxND/wQ+XMOpngQLSBuqV86VFAg9GkVHzOxB9poUKGi0enHHwgdOfQdFnF4e2XfvbzTR8UfjsP8S6+aV3/qHqSYKuQEo1w437OrQ5fkSZbJLT8cX2r80mhtYpe0i2yTTzPhsxohZUdzL53SBmltP69Udh8q6ZB67UVnYNMi7N9HSvynhBefXhgaoDnt3Looa1DSi5ZTRf76WW8MvbIkJ56Q+j18FtMg6TQ9Y5fY4F0dBa1ihBqv9dzvhQFAr7wA+7h6gcpd1VfgbABmnKYfcuUxsHE5SsgsH3JRj9QbyA7eeQEI1d1x/lAN/+/C0nlv6vP/JKc+5SMCwuFqF1HlLSNZ8wn36SYrAcN61rdsztcGPxNTYPMl4rDa8Nlt34FM++qkz2YPY6oYUDOUPOTES+9OD6n7ulnVO673ZOyJiY/81ZALsChsEXGx917CB9rgDPKgm0RDQASgeoe0YmPWUH3j7ATzsK+LpR+wW8jwyCh5he4LdIUKlw+5QlNrd8AYTA+7sClx1LxkDRmqf0jB4DrRlgK90= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(376014)(366016)(1800799024)(56012099006)(10067099003)(11063799006)(18002099003)(55112099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: bf145d3f-93f7-49b9-d078-08dee636d83f X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Jul 2026 08:13:56.6010 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: LqOjbcPuhbWws8E8VBJ7RquYxLKq9dYIKAyC1KQfzXzhQ8ufYteIspP2CWBdBG2QJvKNxFOvE+2SHow9jl89ZdIDLkH7CwvUcxb39Y5OdeM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU4PR10MB9144 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="znDy4z9/"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= The SBOM generation currently fails to capture the package checksums in case of partial rebuilds. This is because the apt-state is not captured before the rootfs cleanup. We fix this by capturing the apt-state (and copyright data) while it still is available. Then, we run the SBOM generator against that data in a dedicated task. By that, the SBOM generation also can be cached, if the rootfs does not change - speeding up the build on repeated runs. We further fix a SBOM chroot deploy race on multi-config builds. Best regards, Felix Moessbauer Felix Moessbauer (6): rootfs: capture apt-state before rootfs cleanup sbom: run generator as task with apt-cache as input wic: make dependency to sbom chroot explicit sbom: deploy sbom chroot to distro specific file sbom: align deploy dir names sbom: cache artifact in sstate cache meta/classes-recipe/imagetypes_wic.bbclass | 1 + meta/classes-recipe/rootfs.bbclass | 27 +++++++++++++--- meta/classes/sbom.bbclass | 37 ++++++++++++++++------ 3 files changed, 51 insertions(+), 14 deletions(-)