From patchwork Fri Feb 6 11:40:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 4846 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 06 Feb 2026 12:41:21 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f59.google.com (mail-oo1-f59.google.com [209.85.161.59]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 616BfJvX023808 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 6 Feb 2026 12:41:20 +0100 Received: by mail-oo1-f59.google.com with SMTP id 006d021491bc7-66317aad908sf4088343eaf.3 for ; Fri, 06 Feb 2026 03:41:20 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1770378074; cv=pass; d=google.com; s=arc-20240605; b=QDGGG8td+n9NW6chpF9g4euxXrtzzcbZpoOG2TncXl75K/diXfizgYdHoX+UYWslaG pmtUM5DPHIXRk4T6OApX4udsuRIveOmRptSKjsJgh2ThhOikzeDbBe60zuc/HqfnfdNw owEkAVRy1LSvKAeAIfhVYxV6QbT+gWujyGpGWwfFTKJfzMlZi0od5uT5EMIcexNOUfHy prrRr7ZeKyuq6VcyW4aKEBF8nNU0Oj2MywdygOe6Eze6Nj8A8o4AvrHlpy4yiZszx407 afTeH01uR8vhi5pGNpu6N4Hwx3VQl0kzFbJ4c2ADF/qvv1Nk13tY3IaU0A0HwF2CWXHT FMyw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=dRG9lvKJ4yyea5tIgm1mF04LnAcxnXepFEboZShm3KM=; fh=jWUGqp17MyG6/6Teebv7t/fWI1dtNj1vRqE+madAtc4=; b=cXvZC7Tte8AnfJ7Vclf2LBVSysiQ/uhdFnNGOdz98o5tes+HuGyy2azFkFACECMB9u y2oPED+WlZz6PjvcTehHcSa2vBVbC7IAfeveNnsxBHAS2qJW+vWryKRlTApx+mJAMHSg 0pdLMF3EmaSMlFQfR5nH1BxgdutNLnABKs6AcgkChorAeXd1WCjm4RAm7NoL7EuRk1zN 2jUlLTG8SPXPGgEHtxGMllknkFsKIemT3WqIx5Oy+aaI1n5+HS0TRO1py7fFKbPkAqdi /DDXtN0I45rJMunt3TGI4gcXOoDe7KMNf7O1K+puk34UXcWzBY2q8fBOqLMLc/dcU49D oPfg==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QyNG+X1I; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1770378074; x=1770982874; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=dRG9lvKJ4yyea5tIgm1mF04LnAcxnXepFEboZShm3KM=; b=SDa2JTw0UjkxVjj8I0P/zzct/Lz6lXFeAWZGPcFnPgFOw8N+SRjNLKwoZgT+AdtCwG o9aXODen3jXX2VTMnyrKMYh8tm4w0SnT4PvSTvEoXj1SlSzEtf6K3XOSayzI8Scrr92G McP48Y+k182+iEcqLAJT18yY+JoSl+voim2/Wv1hnArrVawN0HfwfiVHb3HwljX0AJx7 uYF8wbdjmAmVXnzuG0sWwWDFg56Xb315nOmacEXkHGMs2qmLhEBuDfB5eRyLPTSPPvOa xQTZqXmJsCM5FVJpPT/aPx3TrgXAZ9i0AXNUjO0bCxiDV0QH621ZMa1yVSAqTPL087DJ tIdQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1770378074; x=1770982874; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=dRG9lvKJ4yyea5tIgm1mF04LnAcxnXepFEboZShm3KM=; b=FyPpiYYMl9+CFlouaCyKndhOSXn4aif+rMj+lY6FghopIjz6n6TLCMHKPrHypT+XwM 3WTvOrPw/0h9lOB6PPcReA7WIgerelNkaiaWkHQhWiTfecyVfBFKo4zYSW6fdwqa8jHi Eg7Wg4Y/prgOAQYVmgGP4cCSfKGbZp9/qdXtwOB78HLl3dNVIa42mfPLuSVi70aLXrtT IyC8sEqN+Tc932OJo8tqdo/9keB1+MQtSSrIVkiuYRX0g+96BRQ6j5PN1wmJKfZzxmoa 1/wM6BiJBm4Yy9ipMYJuSJCWzEVhL48Sr1/nioiOgZQFc0DXy1058iqRy4mY8Pnl3b69 SlFw== X-Forwarded-Encrypted: i=3; AJvYcCXAVTFZhm7ZIi2UVcyvTzlYLfwfxstpkYhykz3P9I3BtRCt/a7HuiX+N6ww6vxiBaKAW8wN2gU=@isar-build.org X-Gm-Message-State: AOJu0YyEPo1pKaAGOYz2OzHclgRO1e3rzA99CXkrDs1gxsmXhHsbfAnc PdybjLo0+CZOZKeX2KC/SKR/SboVNnjfTVwSeD1w33UOqcbAB7kyrPqH X-Received: by 2002:a05:6820:4b15:b0:664:86ce:df44 with SMTP id 006d021491bc7-66d09ac0446mr1186332eaf.11.1770378073765; Fri, 06 Feb 2026 03:41:13 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+HmaQozlOJ7Ru5L1R4Z8/QoevepnIQ84QpUlh3f9HCChg==" Received: by 2002:a05:6820:3c8:b0:66a:18b5:e23f with SMTP id 006d021491bc7-66b9a54398als879137eaf.2.-pod-prod-02-us; Fri, 06 Feb 2026 03:41:12 -0800 (PST) X-Received: by 2002:a05:6820:f010:b0:663:3cb:3f0d with SMTP id 006d021491bc7-66d0c855984mr1006151eaf.66.1770378072689; Fri, 06 Feb 2026 03:41:12 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1770378072; cv=pass; d=google.com; s=arc-20240605; b=j3LI8DDbmHJ2nkay0UL3TTkYuwJ4mYc/fOrW6aEjO0HrwBSLkMgeBVsYzrDzL6M+5q zw+gnXPj5unrwDZfWJ1GHLlRQmSAg5WQvkCYdqQMl1w/SAgMaTHPFTFUKTx07UGHHMEP EI88WNX1MMmi+oIlQ8fzgB92jWgEhltzHJxrUz4Y3AThCpaBjMAVRDML0vGMzcrSJQKm 2QoDnlVJCy8G8ynYaGTSS/fRHTI+m2+5dugAko750a0kt0Tjl9v9JV6O3Ut1DBQ3Dvqv 6oJIcD6mhGrpyzxqOGhPsMQl38S+CdLts3fHtzQnCRnqHMWPh1m0LxkI7yYnoi4e62eW XoRw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=HnVVAtuE6nYSbHsa3xEkP6O/ywR6cPRsMekx2fzlqzY=; fh=3TZ2kfKzTV0uAG2uKD8NJHxpu4kGHzyonq8tLR1Voro=; b=WeZKX11tQWXxnkQDGELevNWTFoiRqIWv+Re1QF4gy36t3daMsqb7IspwKGDKN70KlN lU2mjrB64spQYCAqFKdcyTMCv5R9iD5S7vwoRwQbmElhtCuKXIyn1kK5W6PHsz0+DkY9 bd5c5kRbOGZeHTy+bryyNmSee+CFzNn/IK7KiJPV41dqzjwY/SvIpSOy0EZP+QF6Uohl g74ElcyTc2N4n3YriBNtSLZ0fh3ynDdIvkKskKwl9Pry+G0TZ0o4tgnryXBeVE4+ZMOZ eSUSvIOKKJMN7kDniN7R1tzbxqA94INSsrYn9n6dWVo4YcUwr534T5ILzkvi+wUMIbC1 fyuQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QyNG+X1I; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com. [2a01:111:f403:c200::5]) by gmr-mx.google.com with ESMTPS id 006d021491bc7-66d35f52c55si61432eaf.0.2026.02.06.03.41.12 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Feb 2026 03:41:12 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) client-ip=2a01:111:f403:c200::5; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=eZO0mHf1IBlXd98oc9DidtZldrLCWC0cYXWWLZWu95mdnSsv9/B9mTBcwPTknt4hPWgIRAHsOvWVqa05O7M45ENozYAQrk9rqnAxhq8Xj4toQDmE1m2OH9/MHRquufnkXhYKW3zaQJbL4O0CG5KmvTiLvM15QhS2WSl8efGEixD4uvdI+u4DnQNmZhNDZV19NMaDPKT9pO2s1Udc05NQvhFk2N2sGqLU2w2wyQumqScRtGUzJtrdOiFce1NTdHmtj8XNXymbluwfQCS406ButMZ775OXlyuRPd6bgyjUQUcqFBc4Go3KBYQTDVvdbjAzSmPUlPep9qBC5ufeWiWtKQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=HnVVAtuE6nYSbHsa3xEkP6O/ywR6cPRsMekx2fzlqzY=; b=lZOJvTbdRoqHMFB3/TTm6CL+Kb72tDoMDaPAgUONFCKPpJUbZ7Z8C/jPvLkYn01unD8y+WFzqJKO9MS3yqNPEjri+Pq2HQR32iVNaA9e6Po8UCC5XlMhmEpZKW4e0jCqHSs9jAA2aWHjI+nxCCGNoIM3y3jtEQLL1iuwzrxNRlffXsLAsPU+H2LLx20nqb0hElgHSx2laH37y7Pt1O7sxwBXCWKtw6NZojWzSijJwxMNS6mThl85KSS+JQBjDPHZvk/1qCU9f6v3h1kzhv5kcrQQHQoZUjwKjHhPQMzNZePbJqrb9KlQVs/Meay7KQdFm6Plw1dLqrfsQFAHcMgaJQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by DB4PR10MB7039.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:3f1::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.14; Fri, 6 Feb 2026 11:41:09 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab%3]) with mapi id 15.20.9587.010; Fri, 6 Feb 2026 11:41:09 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com, jan.kiszka@siemens.com, quirin.gylstorff@siemens.com, stefan-koch@siemens.com, Felix Moessbauer Subject: [PATCH v8 6/7] imager: create SBOM of IMAGER_BOM packages Date: Fri, 6 Feb 2026 12:40:53 +0100 Message-ID: <20260206114054.3010883-7-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20260206114054.3010883-1-felix.moessbauer@siemens.com> References: <20260206114054.3010883-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR0P281CA0252.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:af::14) To DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU0PR10MB6828:EE_|DB4PR10MB7039:EE_ X-MS-Office365-Filtering-Correlation-Id: 632cd9de-edad-471a-0561-08de65749f28 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|10070799003|376014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(10070799003)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: prdN+cCuixeNLEbz+QPuYF58OacyQyB7tFI= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 632cd9de-edad-471a-0561-08de65749f28 X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Feb 2026 11:41:09.6453 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: X7DyzIfxNpE6QCK2nXpR787BXQLdpr3mS4xYiBTID0Y2TQwwPqgmWU2/HQR50fj32xN5L+8WZ4ZYlK3s+S+nQq/9kZd060WzjMAj0M9TdLg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR10MB7039 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QyNG+X1I; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= This uses the same interface as the .manifest file, but adds the packagse to an SBOM. Signed-off-by: Felix Moessbauer --- .../image-tools-extension.bbclass | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/meta/classes-recipe/image-tools-extension.bbclass b/meta/classes-recipe/image-tools-extension.bbclass index 2027effb..b0f25a69 100644 --- a/meta/classes-recipe/image-tools-extension.bbclass +++ b/meta/classes-recipe/image-tools-extension.bbclass @@ -73,6 +73,8 @@ EOAPT schroot -r -c ${session_id} -d / -- \ dpkg-query -W -f='${source:Package}|${source:Version}|${Package}:${Architecture}|${Version}\n' ${local_bom} > \ ${WORKDIR}/imager.manifest + + ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom', '', d)} fi schroot -e -c ${session_id} @@ -80,3 +82,23 @@ EOAPT remove_mounts schroot_delete_configs } + +generate_imager_sbom() { + TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) + sbom_document_uuid="${@d.getVar('SBOM_DOCUMENT_UUID') or generate_document_uuid(d, False)}" + bwrap \ + --unshare-user \ + --unshare-pid \ + --bind ${SBOM_CHROOT} / \ + --bind $schroot_dir /mnt/rootfs \ + --bind ${WORKDIR} /mnt/deploy-dir \ + -- debsbom -vv generate ${SBOM_DEBSBOM_TYPE_ARGS} \ + --from-pkglist -r /mnt/rootfs -o /mnt/deploy-dir/imager \ + --distro-name '${SBOM_DISTRO_NAME}-Imager' --distro-supplier '${SBOM_DISTRO_SUPPLIER}' \ + --distro-version '${SBOM_DISTRO_VERSION}' --distro-arch '${DISTRO_ARCH}' \ + --base-distro-vendor '${SBOM_BASE_DISTRO_VENDOR}' \ + --cdx-serialnumber $sbom_document_uuid \ + --spdx-namespace '${SBOM_SPDX_NAMESPACE_PREFIX}'-$sbom_document_uuid \ + --timestamp $TIMESTAMP ${SBOM_DEBSBOM_EXTRA_ARGS} \ + < ${WORKDIR}/imager.manifest +}