From patchwork Wed Sep 17 07:33:46 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Christoph Steiger X-Patchwork-Id: 4358 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 17 Sep 2025 09:34:09 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-lf1-f63.google.com (mail-lf1-f63.google.com [209.85.167.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 58H7Y90r023334 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 17 Sep 2025 09:34:09 +0200 Received: by mail-lf1-f63.google.com with SMTP id 2adb3069b0e04-577c6827ebasf134014e87.1 for ; Wed, 17 Sep 2025 00:34:09 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1758094443; cv=pass; d=google.com; s=arc-20240605; b=fQdOzC06ZgW8cp7zrR3gPLBu7g6/AN/x+6JeAcVT83vMk7VstymfEV2gMTH4GAJ2dT ENgaiNxlRWr9pO6ahXbLCubUxLvLyGu2BFsQqrOOm23JgHntX4KL9GF1LJ5PtJwd/Qbp ci954SyAbDokc0CCsmUGRFK74LG6EJ4P1Vsbdi6skHsIGnRK//wbvIZM95HIe6d+FN9Z 1LpSUazEDWFmzqv5lZ49AkJogyNSMIbbOE88oqwFTMr8/W/kSB+cruVCTwLX6gXrsg+Q nv6/d+HlXOeELnaq+rrylephc2c4fDHgAiCorDMbjKsOkFYpdJyAiGwUkK0/M3K/Wgba +KYg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=6b7nw/udTAsuJr6bsWmcAO9tra8fozTzrVoYbt42924=; fh=xCIcT+CQxjj58h0S5Jqm8uFOkn/EqcWuB1Xy8haNZUM=; b=ElCGUbGz/SwF0FRnN6Va6n0Alj+ffUG1tn7yA/BIcB+TFN51axrtvVvzNN8IrW0Bfv 77Ai915z6qJHX8n5eyAnxh3b1ISjIRbRKnb2mq3BNNKIaehU6cYW7L0/pJdO85KyRCdO ivPlwA4W6RFjV+moPKhCmtzQkzE/2HyoNRN4cc8z7qho4F6olWYZPn/BEqw6d1Qe8pS5 sEmN6DM7PBiElYVxYptQJKENJoPaoRVXNtH3T30+hEpx0Zt8vgxd4AiMszsKcky44zwU zz7A5IXRsTxkOHQ98zwhRq/exQIfPHzJXxbGqymEjkNSIi3A8HJfmQVaejYNBz8Xx4L1 cYvg==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=i3VSSUde; spf=pass (google.com: domain of fm-1328957-20250917073359cb93360ee7000207da-3f0tqp@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) smtp.mailfrom=fm-1328957-20250917073359cb93360ee7000207da-3F0Tqp@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1758094443; x=1758699243; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=6b7nw/udTAsuJr6bsWmcAO9tra8fozTzrVoYbt42924=; b=Ke8NOG+DXXlHDmqG1gf1fCNto+Bd1mgGviXpw1Js/yf3Bc08eF9TNfATikJMr1d7iu L3V7bmNYgY+MnPUUGVnKOQHnLxc7HQt2EpZSTXnDjiqliw62BxqDO/kLsvGIQz0bqEpK ZPwuu1kQ1jacWLlIUM6R/sgOIjZwU7aFOv1Ja+U6sr9sKkbX11XHZ4GRfwUJXhUoOYC4 8nTm0E1xDP/8wYGvaIRv48czaiC5KnRQ3ydwXS1tXHaS97Ovii+SuDAJhU9gc/iQW/Ug Fyp4FfQLryR/5O1iCfeu3anDr/RpdhGHwc8ddqxPWXZM1k7Qe070ERCjmIfqb/kaVM+H kgww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758094443; x=1758699243; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=6b7nw/udTAsuJr6bsWmcAO9tra8fozTzrVoYbt42924=; b=M+m8LV6jbmZcFUHi1sDOMHjgl7EQurmq03B6AftEX/qmrj8aDWeHd1ZXMv/A6Z9i2V 4MoHwgFCPs6PAPt7YIOVhZMTkxdaP34XlA9cuoLtNd5Noi8uyITkztSHwwUdHB7lqqp+ 7QVk2BaJWKzd69kPhPIeodYkdC+Vy7gpRfSHveFznXF9xbyfjAyKZyRYxUVKJ9Mt5tMs zarB3+mAPMVrGssiBbqijACIfY6fMlhPGsbJ/f9TuOg6+WHufA55Zr9tHiF3NLAY/L8a lNutR01gL6y6MygUTNdPZH81boTGKvHzpBnwTRHCLevQJHvUgxTE079zs3gUlifH/wCX BowQ== X-Forwarded-Encrypted: i=2; AJvYcCVsH48TFWYTYVhBfLnF5wZwUXTQzwwcw7oSA3da/yANb70edTy2w80yu2Gynqa5voLBi0MUpe4=@isar-build.org X-Gm-Message-State: AOJu0YzPpdYoNnRYiTYqWQU3ddzl7iQo0ggT1Ykq+6/mAGHw+124dZYf u3Z4H/B+ZnsngaXjx/6Rq9dACEWniO7X7j4lsdMHlhtSIWlZ4hZMp/Q5 X-Google-Smtp-Source: AGHT+IHjunHMaRo314wl9alMz8W2XoZ6rEwcX0E+iiifMTLMdfOYxnYpjQOop1KjDa8q/zLpwOKvlQ== X-Received: by 2002:a05:6512:6509:b0:567:68ad:427a with SMTP id 2adb3069b0e04-57795413eb8mr266693e87.0.1758094443293; Wed, 17 Sep 2025 00:34:03 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=ARHlJd5YDuTzSkiAbx/MGI4hQldIMtAEiQt5Q+faE80A26KGCA== Received: by 2002:a05:6512:3ba4:b0:578:1251:3525 with SMTP id 2adb3069b0e04-578125135aals22650e87.0.-pod-prod-06-eu; Wed, 17 Sep 2025 00:34:00 -0700 (PDT) X-Received: by 2002:a05:6512:3f17:b0:55f:67d3:bfdc with SMTP id 2adb3069b0e04-5779c38aedfmr318500e87.51.1758094440581; Wed, 17 Sep 2025 00:34:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1758094440; cv=none; d=google.com; s=arc-20240605; b=OLDnJ1Mul9Vxa0iHiX/s7Zbf+Ha0cakcIR8HUoLXdh44yxR0XLAQe3qwM6mt9DUyKl 4+rE/Ub//ZALZYWWG63N6B93gNC9fzSNB77xHwYFCv4W+6KYzDWoidyRdRL3bTyO3+34 hGjrwmgsk0IvmSZCbMs2R5ll9GwMjQJy4L5/8XYr+4umjAO8udNTKBo5HvgoV72VsTkT Zml3insonkNg6TpIKsVpodKJA6fyij8UVkCMaBY8rZ6K3G9OuN87bvJYRBWGeMv3YfKx qHocD6Kb676Dv/w8LZHBUuUkaXNanLp40YvQd4w8U+oHmcM3wm+comJx9wBBlfaKqr5N zZCQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=ZuqgGjw3Fd8m2NIM1imAooKSAx+LVwZeQAND6V1s0RM=; fh=eiYcjuc0Ff+maEd84O/+qg+73FB83bid0hUx0HldS7s=; b=PY+os4b+nm+748gKQ9Xu57AOU8wPhyTTdolC1tZQ1f/+/V3r65EelPxYHFXod1KOj+ WYONE0I5vJtVUtGJ9ns78MRbC4sr4t95z6UEWPihQPaurZ3Ay3nPHAAp1w0CZPZnBgMN uCu25Uvw7C+nCxt7gLG5gIGgwwEQLWRfHYvfwgpR0qpmcmdcbd7YUnjrGpyrAe3EfBFe dmwbWnzLmbv1K8So5PxxfoebXVMnIRPVTtN1xQWHI+JeDbw2aRcHOVLLGcDLOk57WzYM /Ge0VbVetrEZ+S+foMx37MQ5PrF3ixs5udjlOIOtRdsRvEyC9dh1tSGBgbQJKOR1i5HA aheA==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=i3VSSUde; spf=pass (google.com: domain of fm-1328957-20250917073359cb93360ee7000207da-3f0tqp@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) smtp.mailfrom=fm-1328957-20250917073359cb93360ee7000207da-3F0Tqp@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net. [185.136.64.226]) by gmr-mx.google.com with ESMTPS id 2adb3069b0e04-5707a652824si267313e87.4.2025.09.17.00.34.00 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 17 Sep 2025 00:34:00 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-1328957-20250917073359cb93360ee7000207da-3f0tqp@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) client-ip=185.136.64.226; Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 20250917073359cb93360ee7000207da for ; Wed, 17 Sep 2025 09:34:00 +0200 X-Patchwork-Original-From: "'Christoph Steiger' via isar-users" From: Christoph Steiger To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, felix.moessbauer@siemens.com, gernot.hillier@siemens.com, cedric.hombourger@siemens.com, Christoph Steiger Subject: [PATCH v2 2/4] meta: package python3-debsbom Date: Wed, 17 Sep 2025 09:33:46 +0200 Message-Id: <20250917073346.58002-1-christoph.steiger@siemens.com> In-Reply-To: <20250917063314.44769-1-christoph.steiger@siemens.com> References: <20250917063314.44769-1-christoph.steiger@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1328957:519-21489:flowmailer X-Original-Sender: christoph.steiger@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=i3VSSUde; spf=pass (google.com: domain of fm-1328957-20250917073359cb93360ee7000207da-3f0tqp@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) smtp.mailfrom=fm-1328957-20250917073359cb93360ee7000207da-3F0Tqp@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Christoph Steiger Reply-To: Christoph Steiger Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Package the python tool debsbom for SBOM generation for Debian based distributions. Signed-off-by: Christoph Steiger --- ...icense-description-in-pyproject.toml.patch | 28 ++++++++++++ .../python3-debsbom/files/rules | 8 ++++ .../python3-debsbom/python3-debsbom_0.0.1.bb | 44 +++++++++++++++++++ 3 files changed, 80 insertions(+) create mode 100644 meta/recipes-support/python3-debsbom/files/0001-Use-old-license-description-in-pyproject.toml.patch create mode 100644 meta/recipes-support/python3-debsbom/files/rules create mode 100644 meta/recipes-support/python3-debsbom/python3-debsbom_0.0.1.bb diff --git a/meta/recipes-support/python3-debsbom/files/0001-Use-old-license-description-in-pyproject.toml.patch b/meta/recipes-support/python3-debsbom/files/0001-Use-old-license-description-in-pyproject.toml.patch new file mode 100644 index 00000000..c9137e25 --- /dev/null +++ b/meta/recipes-support/python3-debsbom/files/0001-Use-old-license-description-in-pyproject.toml.patch @@ -0,0 +1,28 @@ +From 8f926ab0ed1585656ba7de80a82cc802c3ccbdbf Mon Sep 17 00:00:00 2001 +From: Christoph Steiger +Date: Mon, 8 Sep 2025 17:17:49 +0200 +Subject: [PATCH 1/1] Use old license description in pyproject.toml + +Older setuptools versions may require a different license field. + +Signed-off-by: Christoph Steiger +--- + pyproject.toml | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/pyproject.toml b/pyproject.toml +index cc34bdb..701da4a 100644 +--- a/pyproject.toml ++++ b/pyproject.toml +@@ -22,7 +22,7 @@ maintainers = [ + ] + description = "Generate SBOMs for Debian-based distributions." + readme = "README.md" +-license = "MIT" ++license = {text = "MIT"} + classifiers = [ + "Intended Audience :: Developers", + "Operating System :: POSIX :: Linux", +-- +2.39.5 + diff --git a/meta/recipes-support/python3-debsbom/files/rules b/meta/recipes-support/python3-debsbom/files/rules new file mode 100644 index 00000000..a414114d --- /dev/null +++ b/meta/recipes-support/python3-debsbom/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = debsbom +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-debsbom/python3-debsbom_0.0.1.bb b/meta/recipes-support/python3-debsbom/python3-debsbom_0.0.1.bb new file mode 100644 index 00000000..6f88c185 --- /dev/null +++ b/meta/recipes-support/python3-debsbom/python3-debsbom_0.0.1.bb @@ -0,0 +1,44 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/git" + +DEPENDS = "python3-spdx-tools" +DEPENDS:append:bookworm = " python3-packageurl python3-cyclonedx-lib" +DEPENDS:append:noble = " python3-packageurl python3-cyclonedx-lib" + +S = "${WORKDIR}/git" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "dh-python, \ + python3-all, \ + python3-setuptools, \ + pybuild-plugin-pyproject, \ + python3-packageurl, \ + python3-cyclonedx-lib, \ + python3-spdx-tools, \ + python3-debian, \ + python3-requests, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "debsbom generates SBOMs for Debian based distributions." + +SRC_URI = "git://github.com/siemens/debsbom.git;protocol=https;branch=main; \ + file://rules \ + file://0001-Use-old-license-description-in-pyproject.toml.patch \ + " +SRCREV = "c9f0a028fec9c11ab6978ad27d5bed8c12bb8e53" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +}