From patchwork Fri Sep 19 06:17:20 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Badrikesh Prusty X-Patchwork-Id: 4367 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 19 Sep 2025 08:17:57 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-lj1-f189.google.com (mail-lj1-f189.google.com [209.85.208.189]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 58J6HtsL002450 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 19 Sep 2025 08:17:56 +0200 Received: by mail-lj1-f189.google.com with SMTP id 38308e7fff4ca-363ed2cd4c0sf3478901fa.1 for ; Thu, 18 Sep 2025 23:17:56 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1758262670; cv=pass; d=google.com; s=arc-20240605; b=Yf0q19qJ0cWVCCvzl0VftOz8Tf+tuF19carhhMhuP3hJxddPeG8VdJ1r/Uu6Caks9b /VdmsdDIDphLogjIri+BR8mOnzOzewaw6o8o6vDCYMNY3vkcbP4hoYv/yPr2/n7Hj0j5 ftWEh6B1XYcCaAd15zU5WlaIjEACvEcg0CQt1GSecsYTTugeRs78VNzykBb9GOJvWG/n iEGpR4NccN6VSkTCNOXQfLF5J+06aFoZDnnhSYxzfMmU6XJeIRUyAED8YEg4H3n1hUqW j0zNHPbZyrt/c/ujK08GfhdacooKMfvjwmLDODt/YpNh7nOWwRp2bYvQ8LHwyVVP3VEW UrUQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=XLJR46j1Ki4Ob596Uyejn9U/7ub5kxuL7IThfvD0MTo=; fh=k+ytKSHZLrmzew6gpJU0kVwvZ8vGo2Z+d0l0cdTt7uY=; b=UN10fx7GC0W3mFPBg8nCkyYeukcH0ciAqccldGobiRcKi+YcDl2XqGKOpchyboW69z spNtEfBi6nvtTL+D4Mqpj53joxew1pOW0PAO2ONC8z80FHfgPH03nGMHtoGCtmR/VMo4 2DQ8+oHIRxNiJBckdn0d0XE+acTPWRQFae70UiWsFgTfXbylqti6FUf3gqBdIggv27W9 Ejqz0HPZRXgLvwC0P9R0FRR8kCYcejds7KodtadPy1hwJ8M7VCOS9erDS1k7d1MU4tus TviX+P7Ng6eGp+mrsYluAICT7TGkhamnoTAse7iMG84pTaieGY9tax/k/gGxVD6k7c3C sSUA==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=FNPpgbpx; spf=pass (google.com: domain of fm-1328765-20250919061744b35c2dd8a9000207d3-xrnq8e@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-1328765-20250919061744b35c2dd8a9000207d3-xrnQ8E@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1758262670; x=1758867470; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=XLJR46j1Ki4Ob596Uyejn9U/7ub5kxuL7IThfvD0MTo=; b=C8Gn5zJQQAf6kbf/pNyVgMKrRNMLl0tmrWb0KXjuQgRF5SLFpw+yTWro39jxq7AB4q 45lVnFh5CMpO1BZPYlYLqiNUMxH1l5zxuFhCe1H6EyQDp5Fseot7Ig9EvNyIUFV26tE8 y9aJuHqHtjqTexnK+x1kf74trQkIgn/h78e67dN8B012vEvQbpk9oZEWm79CDfWHVZZ5 Q3hEJURMYkMmSoRVQMZ4qY/fkZbgSkzRtcadW/NHnopGFv9A7om9XoiCQdy/IPL4AaKM nG8bx5WWp9TiZNS00SJTMEa6zPJCGOxqD696nvalOX6dZYWsWVjhPa8VewDaOyp2wqKX ugZA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758262670; x=1758867470; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=XLJR46j1Ki4Ob596Uyejn9U/7ub5kxuL7IThfvD0MTo=; b=hIdAwuh3c8jU/3YJjXscY7o8j773TJsk5gZYU/JkZ7F7dXQCWuGk6aAT+N2GYQuX0p tmMTebRsMd2qrOa+NgGpybiudn2UhdYwKL6F6lNYMAF8fUyBNctoqGamIySPf79MkBB4 bM6UlJWkf+wPWisYzfUR5COAFkyRYCxjNSKeROFji3g4i//BQxk3kqHmkGcRn1MoPjkb VfS2kCtzumBSb9N2anKBsRXz15kfIN94gR6YqVOMXrX8JtgVYu2Rz+G+UJq3wRJS8vPE /nBqBe8+p1kxAuXImoroOZsVT1maVIbskze3spCZO1cSvCLu1uNDY8ghsFimDlWiLXRK besg== X-Forwarded-Encrypted: i=2; AJvYcCVZPhYOMACH8j7LXbibSY1sf2/KA5JZ95SKDL/zNrTR/oJf92va7nYpVW3NKpBucyTVKJc2ZxM=@isar-build.org X-Gm-Message-State: AOJu0YxjCITaJAzo6wahHQgbJDMIVqKSh6cI0h+dgU2gImlyQepzugOS pmyhIIgd/w66uvqlgwtLe6veSfNymwfYjIEpU73ZGdtTLAyhe09lfCMg X-Google-Smtp-Source: AGHT+IFlEl1kIycEqTP80CAh/uZ0zwsPCErd8iu0D1JFxyaNGQuGh0kbcxAXQWjY1ddUctP1eVBGmQ== X-Received: by 2002:a05:651c:4413:20b0:336:7a9a:1b16 with SMTP id 38308e7fff4ca-3641709c411mr4258251fa.14.1758262669806; Thu, 18 Sep 2025 23:17:49 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=ARHlJd7P353aEjrC60FIOQdPDbML5jXtxxplmmPuBMI5GnEUTQ== Received: by 2002:a05:651c:b06:b0:332:2df3:1cb6 with SMTP id 38308e7fff4ca-361c8bdaa11ls4115741fa.2.-pod-prod-02-eu; Thu, 18 Sep 2025 23:17:45 -0700 (PDT) X-Received: by 2002:a2e:a58b:0:b0:336:de52:5c33 with SMTP id 38308e7fff4ca-364177563fbmr5885181fa.16.1758262665526; Thu, 18 Sep 2025 23:17:45 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1758262665; cv=none; d=google.com; s=arc-20240605; b=YTJmnCgfXUnjrRbz9KXpL/FiTlyI0lvpNYRAuCAeYme75iFwIJ6TEjuyzGf67YDcn6 znIAjhBvH4JR5oPGLC2Y2TIeXdBo6+feibpcnxBRiUAqhydw4xmWHCgC4vBVk8cjHUXe 2CEvjTtOybbXQLLnlR0KaRa8jokcRidrz3/A3x2ArmAJc2K7DW65ukKVSKz6C2EGCBkr QIqHCOzMguYm80EmQliKC068yyYai0rAA73Nos9ouEdlxklOTVQXGL48psJL3eAiwgCE qt9xPAoHhFeHvuq8CWim9C4j9cXeuBt0UUeDqyyGbU+aQPN/d90qy0AL3TZyCdgUB3PA JxAQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=7W+X6jCyGzCVFcfL8NBMvPI8S/cFQSx/WHW8uLWlUmg=; fh=IVe7tedBjrVO7NMfxxhSNfR9HdaoPf8yp1e13zSf5B8=; b=VxeqGVmA7Nr84lNjEf4Hyy09QINc4lpp8VzgrtxKG6wrx69WLBTq1jDTYYdOucxzVR hOqoa0gDmMmOvPIevSfMIBuaqiuEvU+4fpmTUwP/iMG+cvZBzfbWRe9eieMZljKQP9JR kE/d03Kzb6b6h8X702RpyannXNyBTt0+HiNuuxLt1Y08mLng1ljSKcl7kSCIqqnEpLfG y4IZUXbdLPKialnWQ2+hLYA54IzMQqXLyWeW39cURgjp4Y4m2uDfcqSAyoO0wq6h0oEY 6unxfFG8ciAG0QTX2M/GaqC9oecp2CZoX1vpb6R7AKmxZPPBsC5yZU8dmOmGRDVspTXt m9Kg==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=FNPpgbpx; spf=pass (google.com: domain of fm-1328765-20250919061744b35c2dd8a9000207d3-xrnq8e@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-1328765-20250919061744b35c2dd8a9000207d3-xrnQ8E@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net. [185.136.64.228]) by gmr-mx.google.com with ESMTPS id 38308e7fff4ca-361a62c8fe9si714871fa.4.2025.09.18.23.17.45 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 18 Sep 2025 23:17:45 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-1328765-20250919061744b35c2dd8a9000207d3-xrnq8e@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) client-ip=185.136.64.228; Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 20250919061744b35c2dd8a9000207d3 for ; Fri, 19 Sep 2025 08:17:44 +0200 X-Patchwork-Original-From: "'Badrikesh Prusty' via isar-users" From: Badrikesh Prusty To: isar-users@googlegroups.com Cc: badrikesh prusty Subject: [PATCH v2] meta: add "Rules-Requires-Root: no" to various recipes Date: Fri, 19 Sep 2025 02:17:20 -0400 Message-ID: <20250919061720.1510008-1-badrikesh.prusty@siemens.com> In-Reply-To: References: MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1328765:519-21489:flowmailer X-Original-Sender: badrikesh.prusty@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=FNPpgbpx; spf=pass (google.com: domain of fm-1328765-20250919061744b35c2dd8a9000207d3-xrnq8e@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-1328765-20250919061744b35c2dd8a9000207d3-xrnQ8E@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Badrikesh Prusty Reply-To: Badrikesh Prusty Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= From: badrikesh prusty Setting "Rules-Requires-Root: no" in the debian/control file avoids unnecessarily calling fakeroot in the build environment. Debian recommends not using fakeroot to build a package if it is not required i.e., if a package's build doesn't require any privileged operations such as changing ownership to root, installing/modifying files as root. This also fixes hangs observed during fakeroot calls in dpkg-buildpackage. References: https://github.com/ilbers/isar/issues/113 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1114644 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072521 Signed-off-by: Badrikesh Prusty --- RECIPE-API-CHANGELOG.md | 7 +++++++ .../recipes-bsp/optee-examples/files/debian/control.tmpl | 1 + meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl | 1 + meta/recipes-bsp/optee-os/files/debian/control.tmpl | 1 + .../trusted-firmware-a/files/debian/control.tmpl | 1 + meta/recipes-bsp/u-boot/files/debian/control.tmpl | 1 + meta/recipes-kernel/linux-module/files/debian/control.tmpl | 1 + meta/recipes-kernel/linux/files/debian/control.tmpl | 1 + 8 files changed, 14 insertions(+) diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md index 92e7811c..07e17aff 100644 --- a/RECIPE-API-CHANGELOG.md +++ b/RECIPE-API-CHANGELOG.md @@ -741,3 +741,10 @@ By setting `MS_TPM_20_REF_DIR` in an optee-ftpm recipe, it is now possible to use the new optee_ftpm code base from the OP-TEE project. That variable has to point to a subdir in `WORKDIR` which contains the unpacked ms-tpm-20-ref source code. + +### Avoid unnecessary use of fakeroot + +Set `Rules-Requires-Root: no` in `debian/control` files to prevent unnecessary +invocation of fakeroot during package builds. This follows Debian guidelines +recommending not to use fakeroot when no privileged operations (e.g., `chown`, +root file modifications) are required. diff --git a/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl index 85c9735f..9b930157 100644 --- a/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl +++ b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl @@ -4,6 +4,7 @@ Priority: optional Standards-Version: 3.9.6 Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS} Maintainer: ISAR project +Rules-Requires-Root: no Package: ${PN}-acipher-ta Architecture: ${DISTRO_ARCH} diff --git a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl b/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl index e6af7554..3e8e6920 100644 --- a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl +++ b/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl @@ -4,6 +4,7 @@ Priority: optional Standards-Version: 3.9.6 Maintainer: Unknown maintainer Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS} +Rules-Requires-Root: no Package: ${PN} Architecture: any diff --git a/meta/recipes-bsp/optee-os/files/debian/control.tmpl b/meta/recipes-bsp/optee-os/files/debian/control.tmpl index 7bcd6edb..2a3076d3 100644 --- a/meta/recipes-bsp/optee-os/files/debian/control.tmpl +++ b/meta/recipes-bsp/optee-os/files/debian/control.tmpl @@ -4,6 +4,7 @@ Priority: optional Standards-Version: 3.9.6 Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS} Maintainer: ISAR project +Rules-Requires-Root: no Package: ${DEBIAN_PACKAGE_NAME} Architecture: ${DISTRO_ARCH} diff --git a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl index cf4607e3..5de639d9 100644 --- a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl +++ b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl @@ -4,6 +4,7 @@ Priority: optional Standards-Version: 3.9.6 Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS} Maintainer: ISAR project +Rules-Requires-Root: no Package: trusted-firmware-a-${TF_A_NAME} Architecture: ${DISTRO_ARCH} diff --git a/meta/recipes-bsp/u-boot/files/debian/control.tmpl b/meta/recipes-bsp/u-boot/files/debian/control.tmpl index 006982c2..58f59ce6 100644 --- a/meta/recipes-bsp/u-boot/files/debian/control.tmpl +++ b/meta/recipes-bsp/u-boot/files/debian/control.tmpl @@ -4,6 +4,7 @@ Priority: optional Standards-Version: 3.9.6 Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS} Maintainer: ISAR project +Rules-Requires-Root: no Package: u-boot-${MACHINE} Architecture: ${DISTRO_ARCH} diff --git a/meta/recipes-kernel/linux-module/files/debian/control.tmpl b/meta/recipes-kernel/linux-module/files/debian/control.tmpl index 45fcbc0e..95e6e84a 100644 --- a/meta/recipes-kernel/linux-module/files/debian/control.tmpl +++ b/meta/recipes-kernel/linux-module/files/debian/control.tmpl @@ -4,6 +4,7 @@ Priority: optional Standards-Version: 3.9.6 Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), ${DEBIAN_BUILD_DEPENDS} Maintainer: ${MAINTAINER} +Rules-Requires-Root: no Package: ${PN} Architecture: any diff --git a/meta/recipes-kernel/linux/files/debian/control.tmpl b/meta/recipes-kernel/linux/files/debian/control.tmpl index a79b86c4..2097a56d 100644 --- a/meta/recipes-kernel/linux/files/debian/control.tmpl +++ b/meta/recipes-kernel/linux/files/debian/control.tmpl @@ -4,6 +4,7 @@ Priority: optional Maintainer: ${MAINTAINER} Build-Depends: debhelper-compat (= ${DEBIAN_COMPAT}), bc, kmod, cpio, ${KBUILD_DEPENDS} Homepage: http://www.kernel.org/ +Rules-Requires-Root: no Package: linux-image-${KERNEL_NAME_PROVIDED} Build-Profiles: