From patchwork Wed Jul 15 11:05:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "MOESSBAUER, Felix" X-Patchwork-Id: 5239 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 15 Jul 2026 13:06:23 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f63.google.com (mail-oo1-f63.google.com [209.85.161.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 66FB6Jne022906 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 15 Jul 2026 13:06:20 +0200 Received: by mail-oo1-f63.google.com with SMTP id 006d021491bc7-6a196857c7asf2601868eaf.2 for ; Wed, 15 Jul 2026 04:06:20 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1784113574; cv=pass; d=google.com; s=arc-20260327; b=Xo8qydLQ0N8ceYrV/rbwkA5o/sU0toFJO7MTX50jlopaUFowKN2mu8rwjhsFLZd1ZE SiXreH63LZXFGnEomxKOLt+G9uqcROny+ZC2KH4yl/srBirDhtIFOywyaG/FMHvm8lEk OsSI3K44092cThrH3fiHOzK8Jna8hBI5bZMTTH5FlmMogTjppCyLgfsmNkycfRvbmoeB D9ArAteakNleCBGwX/saRtmjxGTm/fMimjkQuae6fCK9is+IUjc8TdGJqAGAHdmLjdER RENKP6lc56x8Cue7WWOG7FiWhc/Jdd8DAd9SfUbwobsBtcjwDgSDU1l7IBTO6iFWtr00 cDmQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=slRu4llIpBSWhgHIyrDM2kuxRrCbnO1fLCccQyFWCiY=; fh=CrFfjxEQpMEGed+nGT8Fv2l7OU39udHJgFDr1EC3Ft8=; b=THt9+TIqpfeElqOZtlL/Dg4c0jIMTX91GTteUUoVdXqEkGsXJ3Q1A/H8LZvN+kDcxO XELFPRWWqIflGHsfpq2WA2CAkfO5JLnCx66msMooGbbV2k2r3DhnlMvHVFqmCbQQD/T6 EediEKh4h7N0HpO8g5vD0fXRYkC7rnXEFiej3S4KKbk26lUFtujLjCjy1bqSYKFxg80E YKgeqwKEVPjx0qn9uUZI055awjXTvYnT3OxS5DGKt+pss19L8d/fntdixPJP0vsOIGY2 UuoW8bYv4vQlq0xlBWnxe8cQLrteu7ITikC1q698FQpcrBzwz5de4ntzZBaGkPgL9Fah +z6g==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=c9pIwojA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1784113574; x=1784718374; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=slRu4llIpBSWhgHIyrDM2kuxRrCbnO1fLCccQyFWCiY=; b=S3dM3smlmByZ70/E2/Ghw0EWQDtttfidwMrgmwECxJzQq1MzmVG6bxLJdFAQTrkleT J8pi4YlMUM1vI3NQnpUAKmZmj8KL3sdJINIed7svUFCCTltxIExZv4n3Hyk9eBmrYlrw CnF53RaLA+qG47qC2m6aKpRg81DhjUyOxwj1gZ19UHQOPQN5pQD6M6vP+PJwdyYm2s7c Z/xykyMIdXCa1HcDsvVK5FYRCvXxb40om8gGODRAWomDNBw5f3tdPzmbBmf1k2k++KMf 0TeSTlRa54GrHM+NFf36xacL3+iGCc8RQebZQhr46YIOL317mbCFcKNP6Z/XFb2aLPSa x6VA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784113574; x=1784718374; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=slRu4llIpBSWhgHIyrDM2kuxRrCbnO1fLCccQyFWCiY=; b=tFY2vOfoc6jdE5EGEXKTMCiUNuJE00NqHMsIrnY46sZNiOdHtr7URqpuXsIWMPbxHU AmpRgDj4fZJVjwSX/Hrd0oPTTzmRlC+jhlvxejEo5L4jCqjzgH7FpT08Y+jp3m6GVUwk zzLh2i4sxEjA3DDSJBuvocIrEysjmXHPn9Xg5h+bEnRJoEQF3S1utnq5gYHeO8MNtGn9 +UadctkoFBi1O2ussOROEyRSDF/wNcf96HlTLExePNI/N3STUXSSLEZcxpjyt9KyL3j1 AoTyEqpYvRcQHRQucBP0K30wBTQt7bfHgmjZgMfGcstU4ADbeXEUNpJlgI+NdbwD4C9m yCuw== X-Forwarded-Encrypted: i=3; AHgh+RoTPdCR5j13eyTI4kCUIHVSE+pe4R50tq7ofk7RktJXEe2tY8ohy2Ke5d+yWNL7vAXn+l/hrPE=@isar-build.org X-Gm-Message-State: AOJu0YwldtAK72e4RKO8zIXFnWM2CoARWWwwPiD1vqqGOdhKZSHfnX7t msHUuhS7JJfi3KKoJ0IE1maeEvdBWxPUjEzOzrBjqdBwSCE+d/v3RwRv X-Received: by 2002:a05:6820:210:b0:6a3:9945:8658 with SMTP id 006d021491bc7-6a39a8562camr10385024eaf.67.1784113574039; Wed, 15 Jul 2026 04:06:14 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="Aa7YSPSnTMXcJDmuK2CBduT1RPvXWqOwxN+W9Zel7y72GbJdww==" Received: by 2002:a05:6870:844f:b0:451:b6f0:d131 with SMTP id 586e51a60fabf-45628aa6f3cls458747fac.2.-pod-prod-07-us; Wed, 15 Jul 2026 04:06:13 -0700 (PDT) X-Received: by 2002:a05:6808:1b24:b0:4a0:cf55:3cf0 with SMTP id 5614622812f47-4a42ad05460mr11214347b6e.9.1784113573137; Wed, 15 Jul 2026 04:06:13 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1784113573; cv=pass; d=google.com; s=arc-20260327; b=QOmmvLAqFesBUQUBdLHlqmzBkBg+Zn0RyV0k+ZiXtFbYQa5w4BRsp3zTHrOcjQVPN8 OPaGIN/QGp6Gs10UkiVESuI8+XPZCDvqsO+AnacweQm+kZn8FQxOEef7v7WOMN1eV7Fa yn4j2DgTF68L7gBW7Yyg68IecOVYd9qU2zF6tigZov8h8p+95HgSi3ChNLacXfC20+lA /b4PWPfqk03s8DKm5RqkBMCZB9h/HzpX/KU2acOmXnhitdRNyEASr5G8rnkOhbTr5tny +3Ss3hpfljrxC8hejVz5D9jRsd2hCUgBmreEMcyi5XLoHbU2+mo2mUk9U6B0ugyHq0xw HwdQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=E9CIYWFCfY8Lg9dy+yvbArQsEe54g11ZfE/jmggJiLI=; fh=WkhL8kaJc+l2wQon1t06Ej3uvBGj9sVhNcE8PaS/XbI=; b=EEZ5mOLYAUxOg/hhzyoyjnZadYDCoMNBOSkmc5gUGbuGSLR8UX5LxWRXzBjjZtIqLD MweVyOJL9TD4/Zir4ip2zVenh0Q8JXeHV5PGqVufikCZOjHPfC7wfgGkAu0WbE/mNgCx WZgFnwIRQbArXCh5WnwyyXplCuDV+2DUWBppOo/2nmfuM5AVOIGTmi3vbgIDNlgAuRO3 yA4cQbzfKKtOtbeg+dEjTxYP24TGWGi+D8R4IOAZfLNxVBLuDLEUwqpBEVpgWk5rUhI0 toNBHDCQTc3SlUWCIjqB/l7qG7N5zXVOOfKf8VCepZfZb/yvzYTeJd75IvVgfMM0wPaD 056A==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=c9pIwojA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 5614622812f47-4a1acb73834si829433b6e.2.2026.07.15.04.06.12 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 15 Jul 2026 04:06:13 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=JtF+0MAtRSnB7ma2h7AwXF+sxUDugYkoFodO6gsqLkXn6jY+KNPwB9J2pKB+wRDGokAeKWZ1/YsdSuMFknOJQENczYGGQyyVeGAWrZNGB8fU6YO0c/G0CJQGw+/ImGtjlJTWhEqzNbQ7LPPZMZlGL/uOyRXL69cmvNLIIF6vzqT8LqQCOCffRitG6hoMGGmauI/zYAFKqQMtnmMRfnNdoPvXEg0IwhWd0rnFezI4K6z5sqJlee0ZP1z/lHuMtjBZfwij0exxOligIwYZkhQcQygitvoECA6zX8EmX/6lRScXwELUZ96BcLFGqDnyZCdJDzKMrlLbaurxoTV9L87k5A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=E9CIYWFCfY8Lg9dy+yvbArQsEe54g11ZfE/jmggJiLI=; b=ZrLE+H2fOXWwbJoTRH/QZbu1jfsWsbges3WJRY0POcLwzDq4MipnKLnfqMGmJUs6JFU1skEhAAwC7Hhugv1BAQsls9/LqDcatKSj0d6YHahc60ILOYrmLPgK9zr/vnpsMm4zgoXKxlWofQ8GRcyPVliMho4euzV1OGKkPTBe4svXt1JkTMS6fqz6jmsCET/T7ZRoLeiARXQ/uSQeOmDELqDV87egDJLLaV+VPpjOhu00CT7pVE5GK7ZdA/wpNyWQtutTmZ2Pla1FBjg67lvdZk8a6Iz0Z3U7hQycLKOi53f3jbTvA5F9jhtPV6hYWiS9jxNlGqSqdMidZSfSkvwYSA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by PAWPR10MB7915.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:366::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.11; Wed, 15 Jul 2026 11:06:09 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0202.018; Wed, 15 Jul 2026 11:06:09 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: "MOESSBAUER, Felix" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, quirin.gylstorff@siemens.com, Felix Moessbauer Subject: [PATCH v8 14/17] use copy of sbom-chroot for sbom creation Date: Wed, 15 Jul 2026 13:05:45 +0200 Message-ID: <20260715110548.3605767-15-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260715110548.3605767-1-felix.moessbauer@siemens.com> References: <20260715110548.3605767-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR2P281CA0166.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:99::13) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|PAWPR10MB7915:EE_ X-MS-Office365-Filtering-Correlation-Id: 557e028b-d1eb-44cf-b8f7-08dee261130b X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|23010399003|1800799024|10070799003|376014|6133799003|56012099006|11063799006|10067099003|22082099003|55112099003|18002099003; X-Microsoft-Antispam-Message-Info: jn18nQdcMYSfb723E7bU9qF4fi/k6/s87NNJRh/1QGIUne+/WHv8FKVYMfg13LecgRuJXpjJCY/UJyskhEEmONGjaSRABq8TFvjaaQY1d5sTaaHT5KxG0WciwvboggBcDgEbLLsMbHfSulr77E7I7uQSJ5rkJF+3VURAQu5tc37E6Gk5Fjs9AIWjVHVnOQYkQWIAXcogBmbbf0furhUPOpog/vKAT+8y9+IG0PiEYzBO74nCVK7gEsPAgpz9EIDz3DSY2QmJqOdXr2vLSsHUfpuODNZxDtuLlVHUXUEa41iARgg0EyECYqeTrljIFpM1tux0ZiIY7sx9M3UUa20eUHH8E3Own0fmbwxPeC1/qEI682he+Z5gsfGdic1pQlGWHDTI1rMG/3V6HPPG4yNDewy+QBAtp5509dkdXLFGrGPiq5jvCmU2ZoZJrX5kZWEJS2lTgcBO0XqEkL9n80aEgtngJcVpUtG53EDPgB0D9pHI7ffwDvHZi6M0OAVV/uhk/4E1lwGO4n831P+Mn8ruF8tmNYUVG29SZFrQxUg2zwKYwCuB8J1UGJlX+fe0G194jOBCzxhS9Hf4lI2fYAecoFsWe1qbdMXlHNeULwRb61s= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(23010399003)(1800799024)(10070799003)(376014)(6133799003)(56012099006)(11063799006)(10067099003)(22082099003)(55112099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: UdzBXV7IYPSiuVs2GMaUSz77ALhweNT3UUk= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 557e028b-d1eb-44cf-b8f7-08dee261130b X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jul 2026 11:06:09.3642 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: JWI/tLiZlSQMtclgCJbK411AFpYa9mynwYtO2WO8DyR3J4XklsJuUPOV0Zy+o0YGpFDRL5ZVlWBucIMHl0deQ7Lfygb2vzepXl4e4B8mhaM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR10MB7915 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=c9pIwojA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= We previously used the same sbom-chroot for generating the sbom of different root filesystems. This required to have a live copy of the sbom-chroot in the deploy dir, on which also was operated on. Further, this copy was left behind in the deploy dir. We improve this by just storing a minimized tarball of the sbom-chroot in the deploy dir and extract that into the workdir of the rootfs. With the new logic in place, we also enable the sbom generation in unshare mode again. Signed-off-by: Felix Moessbauer --- .../image-tools-extension.bbclass | 27 +++++++++++++++--- meta/classes-recipe/imagetypes_wic.bbclass | 4 ++- meta/classes/sbom.bbclass | 28 ++++++++++++++++--- .../sbom-chroot/sbom-chroot.bb | 11 +++++++- 4 files changed, 60 insertions(+), 10 deletions(-) diff --git a/meta/classes-recipe/image-tools-extension.bbclass b/meta/classes-recipe/image-tools-extension.bbclass index cc046fdb..c75025ca 100644 --- a/meta/classes-recipe/image-tools-extension.bbclass +++ b/meta/classes-recipe/image-tools-extension.bbclass @@ -82,7 +82,7 @@ EOAPT dpkg-query -W -f='${source:Package}|${source:Version}|${Package}:${Architecture}|${Version}\n' ${local_bom} > \ ${WORKDIR}/imager.manifest - ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom', '', d)} + ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom $schroot_dir', '', d)} fi schroot -e -c ${session_id} @@ -91,14 +91,18 @@ EOAPT schroot_delete_configs } -generate_imager_sbom() { +generate_imager_sbom_in_chroot() { + run_privileged mkdir -p \ + ${SBOM_CHROOT_LOCAL}/mnt/rootfs \ + ${SBOM_CHROOT_LOCAL}/mnt/deploy-dir + TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) sbom_document_uuid="${@d.getVar('SBOM_DOCUMENT_UUID') or generate_document_uuid(d, False)}" bwrap \ --unshare-user \ --unshare-pid \ - --bind ${SBOM_CHROOT} / \ - --bind $schroot_dir /mnt/rootfs \ + --bind ${SBOM_CHROOT_LOCAL} / \ + --bind $1 /mnt/rootfs \ --bind ${WORKDIR} /mnt/deploy-dir \ -- debsbom -vv generate ${SBOM_DEBSBOM_TYPE_ARGS} \ --from-pkglist -r /mnt/rootfs -o /mnt/deploy-dir/imager \ @@ -128,6 +132,7 @@ imager_run_unshare() { fi local_install="${@(d.getVar("INSTALL_%s" % d.getVar("BB_CURRENTTASK")) or '').strip()}" + local_bom="${@(d.getVar("BOM_%s" % d.getVar("BB_CURRENTTASK")) or '').strip()}" run_privileged_heredoc <<'EOF' set -e @@ -185,5 +190,19 @@ EOF chroot ${ROOTFS_IMAGETOOLS} "$@" <&3 EOF + if [ -n "${local_bom}" ]; then + run_in_chroot ${ROOTFS_IMAGETOOLS} \ + dpkg-query -W -f='${source:Package}|${source:Version}|${Package}:${Architecture}|${Version}\n' ${local_bom} > \ + ${WORKDIR}/imager.manifest + + ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom {}'.format(d.getVar('ROOTFS_IMAGETOOLS')), '', d)} + fi + run_privileged rm -rf ${ROOTFS_IMAGETOOLS} } + +generate_imager_sbom() { + prepare_sbom_chroot + trap 'cleanup_sbom_chroot' EXIT + generate_imager_sbom_in_chroot "$1" +} diff --git a/meta/classes-recipe/imagetypes_wic.bbclass b/meta/classes-recipe/imagetypes_wic.bbclass index 3e261622..3c65ed0d 100644 --- a/meta/classes-recipe/imagetypes_wic.bbclass +++ b/meta/classes-recipe/imagetypes_wic.bbclass @@ -205,9 +205,11 @@ EOIMAGER | sort | uniq > "${DEPLOY_DIR_IMAGE}/${IMAGE_FULLNAME}.wic.manifest" if ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'true', 'false', d)} ; then + prepare_sbom_chroot for bomtype in ${SBOM_TYPES}; do merge_wic_sbom $bomtype done + cleanup_sbom_chroot fi } @@ -227,7 +229,7 @@ merge_wic_sbom() { bwrap \ --unshare-user \ --unshare-pid \ - --bind ${SBOM_CHROOT} / \ + --bind ${SBOM_CHROOT_LOCAL} / \ -- debsbom -v merge -t $BOMTYPE \ --distro-name '${SBOM_DISTRO_NAME}-Image' --distro-supplier '${SBOM_DISTRO_SUPPLIER}' \ --distro-version '${SBOM_DISTRO_VERSION}' --base-distro-vendor '${SBOM_BASE_DISTRO_VENDOR}' \ diff --git a/meta/classes/sbom.bbclass b/meta/classes/sbom.bbclass index b4fcddaa..2e6d579f 100644 --- a/meta/classes/sbom.bbclass +++ b/meta/classes/sbom.bbclass @@ -23,7 +23,8 @@ SBOM_SPDX_NAMESPACE_PREFIX ?= "https://spdx.org/spdxdocs" DEPLOY_DIR_SBOM = "${DEPLOY_DIR_IMAGE}" SBOM_DIR = "${DEPLOY_DIR}/sbom" -SBOM_CHROOT = "${SBOM_DIR}/sbom-chroot" +SBOM_CHROOT = "${SBOM_DIR}/sbom-chroot.tar.zst" +SBOM_CHROOT_LOCAL = "${WORKDIR}/sbom-chroot" # adapted from the isar-cip-core image_uuid.bbclass def generate_document_uuid(d, warn_not_repr=True): @@ -40,14 +41,24 @@ def sbom_doc_uuid(d): if not d.getVar("SBOM_DOCUMENT_UUID"): d.setVar("SBOM_DOCUMENT_UUID", generate_document_uuid(d)) +prepare_sbom_chroot() { + run_privileged_heredoc <<'EOF' + set -e + mkdir -p ${SBOM_CHROOT_LOCAL} + tar -xf ${SBOM_CHROOT} -C ${SBOM_CHROOT_LOCAL} +EOF +} + generate_sbom() { - run_privileged mkdir -p ${SBOM_CHROOT}/mnt/rootfs ${SBOM_CHROOT}/mnt/deploy-dir + run_privileged mkdir -p \ + ${SBOM_CHROOT_LOCAL}/mnt/rootfs \ + ${SBOM_CHROOT_LOCAL}/mnt/deploy-dir TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) bwrap \ --unshare-user \ --unshare-pid \ - --bind ${SBOM_CHROOT} / \ + --bind ${SBOM_CHROOT_LOCAL} / \ --bind ${ROOTFSDIR} /mnt/rootfs \ --bind ${DEPLOY_DIR_SBOM} /mnt/deploy-dir \ -- debsbom -v generate ${SBOM_DEBSBOM_TYPE_ARGS} -r /mnt/rootfs -o /mnt/deploy-dir/'${ROOTFS_PACKAGE_SUFFIX}' \ @@ -59,8 +70,17 @@ generate_sbom() { --timestamp $TIMESTAMP ${SBOM_DEBSBOM_EXTRA_ARGS} } +cleanup_sbom_chroot() { + run_privileged rm -rf ${SBOM_CHROOT_LOCAL} +} + do_generate_sbom[dirs] += "${DEPLOY_DIR_SBOM}" +do_generate_sbom[network] = "${TASK_USE_SUDO}" python do_generate_sbom() { sbom_doc_uuid(d) - bb.build.exec_func("generate_sbom", d) + try: + bb.build.exec_func("prepare_sbom_chroot", d) + bb.build.exec_func("generate_sbom", d) + finally: + bb.build.exec_func("cleanup_sbom_chroot", d) } diff --git a/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb b/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb index 182432a0..f347327b 100644 --- a/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb +++ b/meta/recipes-devtools/sbom-chroot/sbom-chroot.bb @@ -27,7 +27,16 @@ ROOTFSDIR = "${WORKDIR}/rootfs" ROOTFS_PACKAGES = "${SBOM_IMAGE_INSTALL}" do_sbomchroot_deploy[dirs] = "${SBOM_DIR}" +do_sbomchroot_deploy[network] = "${TASK_USE_SUDO}" do_sbomchroot_deploy() { - ln -Tfsr "${ROOTFSDIR}" "${SBOM_CHROOT}" + # deploy with empty var to make it smaller + lopts="--one-file-system --exclude=var/*" + ZSTD="zstd -${SSTATE_ZSTD_CLEVEL} -T${ZSTD_THREADS}" + + run_privileged \ + tar -C ${ROOTFSDIR} -cpS $lopts ${ROOTFS_TAR_ATTR_FLAGS} . \ + | $ZSTD > ${SBOM_CHROOT} + # cleanup extracted rootfs + run_privileged rm -rf ${ROOTFSDIR} } addtask do_sbomchroot_deploy before do_build after do_rootfs