From patchwork Fri Dec 19 13:19:21 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 4768 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 19 Dec 2025 14:21:06 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-qk1-f187.google.com (mail-qk1-f187.google.com [209.85.222.187]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5BJDL5Ib020169 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 19 Dec 2025 14:21:05 +0100 Received: by mail-qk1-f187.google.com with SMTP id af79cd13be357-8b17194d321sf216180385a.0 for ; Fri, 19 Dec 2025 05:21:05 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1766150459; cv=pass; d=google.com; s=arc-20240605; b=iswZ1yCdG4B/lm0+pY/Pp/jbaAq95cbXMHgu+67HcJGubEJ2KKzw0vTFaMCmDuvixL EVUrpby7FpC5sfM8XHQusjpGAEoB3TFNsOYxefR3X1DQwomQswWrCmbxjyldhNiuGt4J Axq1RXD4+ZmMU+QwEE+78EwXjl4yhppcD5x3MedHZ85FEU6T8iGLh6y+ctezXDc8eyFc lpFiuxo3mbRsCrUlwgEif68zWl1XGXC/Ne7mUk3w8K16VyjVMLj5sbzuge3RGogDLANG kq6Ge927bRG+OcQR77yZoHXrfXG4PlJcu6ALoUvqCY0l9eh2+dbrBjZmtdeJ7mUQUHyv HWvA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=wn5j7POklPzU0bXeGfjjeeDKdXj07FhJ08MSz3Rw/1Y=; fh=uvo3k9VT9VJgWmF6jToTPHD6UBK3/czOq5CH8kpbZnY=; b=CspGKlXuKTvKWl+/CmI9LcEe7kOEXLtstQ1JiB5Ph58p10QZJfx76yIeR4uE1th6q8 vMWMrzHIfI9PLwEcX+phlBfNrOzBCvztib6a9TwWQJvMnmhJpiPR9m2dAi7XphAq2tBD Aa0c4ugJwD36Esofi3/VQTaPQdti/K6Wrt6LhzYlK5f6ROczlx3RNbYB2pmFYkaweCJ6 2W/yXCLXRTNOzlHXgoR7Sq3wV/ZROD0Mephd10sP9L0NDE05C7g0u+bQSLc+hf/29g57 FnLeaHZmZrkq96Pd5d9Niy4PoZoHwW0gb6UCXNOS749B0nx2+XKzvoFyGRwlnskBlBmJ uLkg==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=fT1RNX4r; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1766150459; x=1766755259; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=wn5j7POklPzU0bXeGfjjeeDKdXj07FhJ08MSz3Rw/1Y=; b=qCY7uyqFghrc98Yua77k1bs8zt7jfnHlC72aGeYwFcpxAWnmcXSAPZKiUV4KSvCnw+ JmKQ5ssWemYDNKJxyzTzTaRQ5RhJdv6odk3dyt4ogCdQJQzCeoP9BRmQXY1iZTmd9grd kgl8N5dJu++ZRAg8OGxhYTr5fH6v6dLhPPfOFof2NMjQ5z59kvFYDdgzU5obpTRwBzAh BYWOEs87ZkyuHNb1SFYKHictGU5bjKs/RI/yJ5/uK5saxr4SgUDHIs3TAMXBBcBTistK uNGf+fqsqaUcvosu1w5/cVnOWxtNGEXMSwRxpfpx/Dv5C6g4+B32VtQyEh61FT1vpQg8 OHjg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1766150459; x=1766755259; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=wn5j7POklPzU0bXeGfjjeeDKdXj07FhJ08MSz3Rw/1Y=; b=u5NtOY1TNL8c2QHupan5/7kG5BTAC8Ulf84FQ8AiLIcJE2VFHA7hnlcD0Ss25lIi2p BZcH/8dLZMnseeHba65AwuAgBx39wPxzEyhvNSOQIYvfFncGpdDNEMTeVMYdD0O/N9rN gRAwG9DPGvDGpG5+9YHmKwxuWiXq627o8JL2FFRo0R3yO/NixJBrbB/+8l+Yv/tQGUsO xkx6FjOJy+f4tsmcmFano5P0KI9SpwAOATeLGcpMwsb123Ya3Ay4W0uq81ft/dGiPVd0 tCUfVVbiuwdF9NCQcOdBzgRTaXYoMyeu7IZGt7q+xd98BfRj2QUqw09DeKA08WAVj7lw V4CQ== X-Forwarded-Encrypted: i=3; AJvYcCUH5FEcsT0Xs9Qzj8T+nPli0JjX0vVBvuOP77pqhOzpjgqkl8Kg56QzanZCzqEusCxOsZt6doI=@isar-build.org X-Gm-Message-State: AOJu0YyOXd18YOuXV3cKf8LypoBcblJAcy/DSUrcNSV0xe0l613lVJSV y69Ehm5m/sa7gAa5NlMcgn1mXu5SXE93hA9FsMdrP+fhsccqdldutrRQ X-Google-Smtp-Source: AGHT+IEQHMXlDpO1zzS+siJE2w3Od75HaMN8QxEOm7AW2m+vs5bWvwgp6PfIvwAKvoPCMVwOiwYebQ== X-Received: by 2002:a05:620a:1a0d:b0:8bb:a675:aa61 with SMTP id af79cd13be357-8c09002798dmr438929785a.79.1766150459133; Fri, 19 Dec 2025 05:20:59 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AWVwgWZQdEdAohmPM/EKiuQdPnW+bKE0W32vX+NwEb0zVnthow==" Received: by 2002:a05:6214:4007:b0:882:4be6:9ace with SMTP id 6a1803df08f44-8887cd3a225ls125825986d6.1.-pod-prod-08-us; Fri, 19 Dec 2025 05:20:58 -0800 (PST) X-Received: by 2002:a05:6102:6a8b:b0:5df:3b19:4125 with SMTP id ada2fe7eead31-5eb1a7c1184mr685234137.26.1766150458124; Fri, 19 Dec 2025 05:20:58 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1766150458; cv=pass; d=google.com; s=arc-20240605; b=U7svP9ABXENL4RDTOPEx9a8wGQr+0Z0BTQFh8/S22bVjabPBZLThOftveeoYyOhZBK oabeB/zte6El6RthrzmK+Y1B27zkplUrimmPimKP8s2PYAk7/9dmG0ND544GWp64Qr/T Z1ueeBkTN2QC+uVCYdV2cROnoyvq4Fvgw3u4XV+nUNt2l79faeN1f1A9Dc0hMvlDPUK0 lBXoJRm4OhIiYvYIEyz2IruGVFmvxdup1EziiT8DZjyLeaPjpmWBliRlDDPY/LtqXmsQ 2NWX1y/p00y6ptnDNbqHhlrhSglX7EJGPgac0FbokHC2K8uY/lE2LADSSSX+XbJe7rja 6voQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=byq/lYwoW0gv9iqJSAFLgMC2Dj69GHskW1WgkuXyzSE=; fh=pz2B0UkGs/hnSrN/waE3y1PHEuQis8JPLVQmTv7t9fM=; b=QRtk+k42HPJsEN1M9mtsWWw7q9z0zuNAMJAXz7xcapvMMlwjhlt8oY9GNzjSZ1emGA RRYaO/A4b8nOd0M7fJo1vnHhFE3CthhLzJMZhnhaDKQJjwDAu5WI7bYHyY/BAizECy2a K90wfp+spBKfM2F5aTTxAtWmFWMG80YmJ2yJHhr6BYPOGncCoeYGP2R6TP9ibGmpbJKN OmoWL6K0Q5orcyo6XKbhO2OYpzBZtSfG40iy3VdKIU2oxrWvzJKw+IyYur/+Novq3VUs vUJ9b1vHJNEpnITMkH0KRTBBlTR9CRsaiGEfNa5qQj/tkidVAzNwhr1mufzr9fNkunpR sIig==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=fT1RNX4r; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c200::3]) by gmr-mx.google.com with ESMTPS id a1e0cc1a2514c-94341706345si76190241.2.2025.12.19.05.20.57 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 19 Dec 2025 05:20:57 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) client-ip=2a01:111:f403:c200::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ssp+NeK06EgEO/5A1CBKz8Pb07PG3ZiKE35h7MS1Q9mx38TcE/S8hyAxpXZem2auOj6QaItrECdti9+KQi8RfinMq7qz6SOCanNqoJWRj3JMZRa5eInB4yQ9diJPOE2NFKrDQVeYN1jeBLo/hisBSIxU0a9Pl27GogQ1pjEOGql7gj6Dtf9/gHN8H9qYY4/bLSiV1Rb00VIKzsfQGDmSVpVNYjyW7mwGaQJuOY5yxMFNhpd4B1C7K8Au1nHFBR+zTNzxMnTCzXHy/+5WlIw76FZR5U4CCd77sZywJyKeWAN56F0StqCTtExUg1wFMgnR1ucxQpzjyk/aium6qMq+ug== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=byq/lYwoW0gv9iqJSAFLgMC2Dj69GHskW1WgkuXyzSE=; b=JU5ZCI7+Jop+PplZAgoVkf/ZTqiBJyLvV7Li+dbH7AswJqhqf1wQOcT/MMeDMfCNTto/zIfKrLbUShLIuPd/g3C9j0s28vj0xq+oacmOZu4DaqKhOz9A4esrUsEQUyHETULY3ClCVDV43lw26eElHOtMHkpT18g3ccLSqecat4gja1Pg1O2cPZeNjZKX5OR+msAIS7fZDCr+YMW6HknXKRR6QP1tjAqjF+Ql7ex+65r6tTl34NbNjeG9GpExOBto81QmM98C267uGbQOIwQ9G8755kw8tBGINsHzr9IGrQk2xFiMs06wzMxqDX5z6GVf13E1GY24WPZjo48M6vEt/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by PA1PR10MB8644.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:453::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9434.6; Fri, 19 Dec 2025 13:20:54 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab%4]) with mapi id 15.20.9434.009; Fri, 19 Dec 2025 13:20:53 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: cedric.hombourger@siemens.com, Felix Moessbauer Subject: [PATCH v2 15/17] testsuite: refactor sbom tests to avoid overhead Date: Fri, 19 Dec 2025 14:19:21 +0100 Message-ID: <20251219131923.1504046-16-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20251219131923.1504046-1-felix.moessbauer@siemens.com> References: <20251219131923.1504046-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR2P281CA0083.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:9b::7) To DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU0PR10MB6828:EE_|PA1PR10MB8644:EE_ X-MS-Office365-Filtering-Correlation-Id: edd0d8bc-11dc-476a-d5b6-08de3f016fd5 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|366016|10070799003|1800799024; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(10070799003)(1800799024);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: edd0d8bc-11dc-476a-d5b6-08de3f016fd5 X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Dec 2025 13:20:53.8183 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: BEiBwc0jglu3uy387QklfsZ+OK3/31o/VFPeX79dtXAA9fp3ZnXiGIxTur9J3WYnRKCHIl/P9L26KOnwl5aS/GVPR4Bw5hjhbEAwZ+ixP6w= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA1PR10MB8644 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=fT1RNX4r; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= We currently test the SBOM infrastructure in all image builds, which adds a significant overhead. We now change this to not generate SBOMs in general (and by that avoid building the dependencies). To not have a testing gap, we add a dedicated SBOM test that checks the SBOM creation for various targets. In addition, we now also check the content of the SBOM for plausibility. In the future, the SBOM test can be extended without slowing down the overall test execution. Signed-off-by: Felix Moessbauer --- testsuite/cibase.py | 26 ++++++++++++++++++++++++++ testsuite/cibuilder.py | 4 ++++ testsuite/citest.py | 33 +++++++++++++++++++++++++++++++++ 3 files changed, 63 insertions(+) diff --git a/testsuite/cibase.py b/testsuite/cibase.py index 5ef1a5b5..fd6a3df9 100755 --- a/testsuite/cibase.py +++ b/testsuite/cibase.py @@ -140,6 +140,32 @@ class CIBaseTest(CIBuilder): self.delete_from_build_dir('ccache') self.unconfigure() + def perform_sbom_test(self, targets, **kwargs): + """ + Build a rootfs containing a needle package and check if that package + is added to the sbom. + """ + import json + + needle_pkg = 'cowsay' + self.perform_build_test( + targets, image_install=needle_pkg, + generate_sbom=True + ) + + for t in targets: + ds, pn, distro, machine = \ + CIUtils.getVars('DEPLOY_DIR_SBOM', 'PN', 'DISTRO', 'MACHINE', + target=t) + for t in ["cdx", "spdx"]: + sbom_path = os.path.join(ds, f'{pn}-{distro}-{machine}.{t}.json') + self.log.info(f"Check {t} SBOM in {sbom_path}") + with open(sbom_path) as f: + sbom = json.load(f) + pkg_key = 'components' if t == 'cdx' else 'packages' + if not any(c for c in sbom[pkg_key] if c['name'] == needle_pkg): + self.fail(f'{needle_pkg} package not found in SBOM {sbom_path}') + def perform_sstate_populate(self, image_target, **kwargs): # Use a different isar root for populating sstate cache isar_sstate = f"{isar_root}/isar-sstate" diff --git a/testsuite/cibuilder.py b/testsuite/cibuilder.py index 310a3836..614a3397 100755 --- a/testsuite/cibuilder.py +++ b/testsuite/cibuilder.py @@ -126,6 +126,7 @@ class CIBuilder(Test): installer_distro=None, installer_device=None, customizations=None, + generate_sbom=False, lines=None, **kwargs, ): @@ -176,6 +177,7 @@ class CIBuilder(Test): f" image_install = {image_install}\n" f" installer_image = {installer_image}\n" f" customizations = {customizations}\n" + f" generate_sbom = {generate_sbom}\n" f" lines = {strlines}\n" f"===================================================" ) @@ -275,6 +277,8 @@ class CIBuilder(Test): 'CUSTOMIZATION_FOR_IMAGES:append = " isar-image-ci"\n' 'HOSTNAME:isar-image-ci = "isar-ci"\n' ) + if generate_sbom is False: + f.write('ROOTFS_FEATURES:remove = "generate-sbom"\n') if lines is not None: f.writelines((line + '\n' if not line.endswith('\n') else line) for line in lines) diff --git a/testsuite/citest.py b/testsuite/citest.py index eaa4c440..d908f9bc 100755 --- a/testsuite/citest.py +++ b/testsuite/citest.py @@ -694,6 +694,39 @@ class CustomizationsTest(CIBaseTest): ) +class SbomTest(CIBaseTest): + """ + Test to check if sbom is generated and contains expected packages. + Most tests are rootfs tests to avoid costly initrd build and imaging. + + :avocado: tags=sbom,fast + """ + + def test_sbom_rootfs_generate(self): + targets = [ + 'mc:qemuamd64-bookworm:isar-rootfs-ci', + 'mc:qemuarm64-bookworm:isar-rootfs-ci', + 'mc:qemuamd64-trixie:isar-rootfs-ci', + 'mc:qemuarm64-trixie:isar-rootfs-ci', + 'mc:qemuamd64-noble:isar-rootfs-ci', + ] + + self.init() + self.perform_sbom_test(targets) + + def test_sbom_unsupported(self): + targets = [ + 'mc:qemuamd64-bullseye:isar-rootfs-ci', + 'mc:qemuamd64-focal:isar-rootfs-ci', + ] + + self.init() + self.perform_build_test( + targets, bitbake_cmd='do_rootfs', image_install='cowsay', + generate_sbom=True + ) + + class SignatureTest(CIBaseTest): """