From patchwork Thu Aug 20 08:30:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5383 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 20 Aug 2026 10:30:39 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-qk1-f192.google.com (mail-qk1-f192.google.com [209.85.222.192]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 67K8UZDW011625 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 20 Aug 2026 10:30:36 +0200 Received: by mail-qk1-f192.google.com with SMTP id af79cd13be357-934956beec8sf347411685a.0 for ; Thu, 20 Aug 2026 01:30:35 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1787214629; cv=pass; d=google.com; s=arc-20260327; b=F2gX4PcCTHreq5YotsjGgHtAqDvqO8kstxgA/iCGTGw7rtv9P0KzDfRl3PGLZJe+3K e+K0rBhTc/12JnRHHO9L+KirkjNMn9Bdl92JcyJrrHQEHRqHNvOC6kPRbk9mg8CYZ/1K xaPrZMuzbJdKlU7GfsKN+d1DTyvx8Qv0tg98CQ4HA9VLigCMHV4CUs2qE0Ca3u+FtIFv R5EI2kb04QhWzOdfw4tOrhMd1/HVIN6H/4J1qcoc/nvCeDaYHQQGUmJclMiZDU1Nuhl4 SxfYB386RdXTzanhhd4bK0j4QvAJMahz1TbSuRvelTvVAV+MboVS1WBF2T5Fsuz2X4Mr oq5w== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=OUoYOl1xx/vcYusB9+1/MVSV31UchEfBnXHtqpJc4vE=; fh=PXbBche3aByZDRAK/Gs0PgZzBhuGr6uRMYPqHPaRF6Y=; b=EIoWyMIbmGJwVDzvIf8tb8Hrnt5PKNte0BmUF+yA4Z0ywggBb1QMCGSJ6Rce3Qn16e pUQPvJWDjiCQ97NcCUcRihyhDUGX1MjV1DwYpntbVKHSqT/2bx7yeGSKk6nefE0jS9zw NhcGj+Kfpw5hu7w1DSZWzcsZGydLneVBJ7e2vb2e1odGhG64oy2zNmgubzGVN+VbjDix 7SMMnc62uFJEoKgRgvqTKMTPcwtFlHsXxjG9sCrNZcoHMuKsyykSZHxUXOURvm/PqN7I W8UujoNDTuwH6JngjZwthP8df/bwX6fO0pHd/NK65S748/wGyChihU3AkAg0Geylej0C NY/Q==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=HU6HL9b5; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1787214629; x=1787819429; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=OUoYOl1xx/vcYusB9+1/MVSV31UchEfBnXHtqpJc4vE=; b=DUqOHxb/I+nVdOBlW8D97xDaTK9z7e/MXTwHmXTRgntoI/lhGpNQ+5yWXVtn0/IlC/ aS1ewGYNCQ0UCxusnPfPs25DYzfBt1SaRzZNKjJnXvOmGmlautCgiC8VuyTX+wEIB1wi hO4WpQ91S1EIT9xdVhVmqIlmK3FrgvZZ08RcP35AksvWQaUWwpsQqL8LjHFuVZ8o1kmE E7ZgXeBvM0OzQNJu5EYtZRB6NoOabM5vziZw+uJ83cMOwL6hS7qr+mWRqnUUAzxYQ8uu VmQO3WnpiU/WYlo39Yapk+YQQTDUjpqz75TeJpwOs5ip9n3j6jxEHtsdNqbNZlYb0yyV cJVw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787214629; x=1787819429; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=OUoYOl1xx/vcYusB9+1/MVSV31UchEfBnXHtqpJc4vE=; b=T/j50PSyYN+91obqG1T35XjpA1CiwRpGwTb+3uxU2hqgE+yYK+Ly4FBoCAJcYUMPik 3sav/Imc6Z+A2Nv2EY3VFv67cRGICOO8U1avTVpSKO1c0WCIOY6rDK/1tp8bMqnXW/pV 0oEQpCxhHs/wZyTcXfYdgwPL85JCntRvarbiiZM/Dh+YYcaiDYX0jfYWgWT7fvHsvwJd 8KP+FtuLlzP6zI1RNJEbHU5mHksfigUGVwgJx0b95IyE/KjuJRT8iJoNKD7mbNxdFaMj VPN+J6WlOkqh7PJcP/DFPaRIU1X1BP5k8sMgaKKBAxMtO3Q1sd/YH63S1JOdfQdMN81c eWmg== X-Forwarded-Encrypted: i=3; AHgh+RpJHoMkK5eVTlvBiR2mSXQM0zMBPlXkRn1JJDak6SbCvXtY41IV9VSmnKUqY65Y1utHSTLbCd8=@isar-build.org X-Gm-Message-State: AFuF++m/Rzhe3Xs075ZlTVAInTvdSLiBpf3Rd6LJTbr7LvAOF3DwwUQp 7SbsC+QlmE/qqNNHDBkBPSFUyyscaa2+6CVgL9MEHugHYcbJgOkHIsja X-Received: by 2002:a05:6214:4305:b0:8f0:a849:f392 with SMTP id 6a1803df08f44-90c5e98abdfmr119664636d6.14.1787214629532; Thu, 20 Aug 2026 01:30:29 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcRlQxW6ksHoR1biyRYx8Z8OWJmkGVuTrJ2Rbr9cFnH7A==" Received: by 2002:ad4:434e:0:b0:8ce:aa22:9c19 with SMTP id 6a1803df08f44-90c6ad32aa4ls14639576d6.2.-pod-prod-09-us; Thu, 20 Aug 2026 01:30:28 -0700 (PDT) X-Received: by 2002:a05:6122:21a2:b0:5bd:fb77:842a with SMTP id 71dfb90a1353d-5c5e3e11621mr4546886e0c.7.1787214628489; Thu, 20 Aug 2026 01:30:28 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1787214628; cv=pass; d=google.com; s=arc-20260327; b=M32S1r51BsoCV/pMPTEpN4PJDTDAayV2f4DFe6xPnbt+ue3K/qgFS2I+49dfuDlJ0j ySSII4ftuc+c4kPbe9bOqtQ+M+ppQicuRIcN2+yCABj8oxhqlcbR47O1Wnt7GqPFh+1n mmCNf0FQaJNWfoCwyxYnvtLzEFISZOgb/APO+/JxqalGbWcvPjscxmBs26as6ESOplMJ Ungql/2ioF+LVj5ruyKZ9ynUMaZtR/qMTc+hMbesujWXwHKBw0+rVJ2N/R/jLVIFrixV vCfJq3ylSGYUjiZaoSDt+sNB7P6ubFOH7YRE281SCpA2h6x5swKYHLWcRzNwNfYJofDN BfVQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=5hkavjD/W9LrCaQDS7VGxbuh4KpWWpKT9zdG8Cl6Nsk=; fh=dWFKumMb31C26+PJa6vcB2ftw6NwdNo52k0UEVGombI=; b=bzSahXqjXLU+/u7IgcDG/RzbKS1HR7/ckAztjWAmTQTmggPVg8997EQrOfsGls0j0R 2H0p+kZhV/HmSOnYs4P1GSxZboZ6pQdCMH48IgZYIx4KbVrkxRx+QsS6kldio2iD7XmF irGcm5d7t5lM31PhJMIyWfQ3uOhkbjOfYwN8hM0t/I7sRMOHVZ2Alr4ETkGqWW2nvlCj Nxau+/KCfs/kO4ehM8SHZXB1mKSyHPnoEsLIUOrcbSSiC1xV51BI4+KEXgjtnd/4/MZ9 mtH+CiKlk3Y/Ikg+TXpD7JteDJX/i9pmPCqBWI7RFLWNv8hVcTtw5f5GhGYHD+kU3y6O emKg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=HU6HL9b5; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com. [2a01:111:f403:c200::1]) by gmr-mx.google.com with ESMTPS id 71dfb90a1353d-5c5e274d628si141661e0c.4.2026.08.20.01.30.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 20 Aug 2026 01:30:28 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) client-ip=2a01:111:f403:c200::1; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=bqWb9BkK5RvspA3TOzL29a3nNtWzGVbHF+WWfhpvzmbhEL6LOkGO156Hk5ZxVIZsU016OVjfmlZwVZGKOUc0kBZK45AqeWte2FDVII4R6tthR3b5y5rgy/TkoebtP6Zg2tNmw13QWhVKrjZNtW+Mzg92EDRLAGqR7l/dlNK4nHM8FVCodMXEdYMuflxh8mRgluWpMfxNhENTYySIARwt/q9Yvub9lGq6vjBqvW1pQqM3pFgO8BM1gHLj67txCJGOul3wfzwv1Vw1pUfnnh4764lFBd6XCTxfx6AqpJcVT6lsK6Vh+UY2rsBpnck9JIQqQj5GK6RqNZjWu4KjZvfyDQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5hkavjD/W9LrCaQDS7VGxbuh4KpWWpKT9zdG8Cl6Nsk=; b=a9p9eAykMWMFP1kqA7YTHW6xTHK4vFPNriVRsOPsV6oC4WyrGseHCZjDEojoUgwFiNz1fc6t7JRolJAUFqIgJsJOzJOjbtRYGLQNC316Rl0ZjARnyX6dMaJwyP/b+dZhzPyb8VKe7PwZbAaHg4kx5Y6AORUXAOZsquwOcwANnVNd3/RO8TMh3t6CUpAcHuBelhvZOvlIIlYaMqAJ5KrZzcCKJUFS1vSVKoX0+I98r6SBuM8BvfIIJvuIaHq6KedzJB47YTZsUe6wd3A/Q6kk4tIKzKtyuUB7b88TgdHHaObC89Zs8BWIXWD2jcgFepB2N3QEsnrsUVO/X51/w0VSZA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from VE1PR10MB3967.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:14a::21) by AS4PR10MB5647.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:4f2::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Thu, 20 Aug 2026 08:30:25 +0000 Received: from VE1PR10MB3967.EURPRD10.PROD.OUTLOOK.COM ([fe80::4985:cc3c:fb41:6886]) by VE1PR10MB3967.EURPRD10.PROD.OUTLOOK.COM ([fe80::4985:cc3c:fb41:6886%5]) with mapi id 15.21.0339.007; Thu, 20 Aug 2026 08:30:25 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: quirin.gylstorff@siemens.com, Felix Moessbauer Subject: [PATCH 7/8] make our internal chroots bit-by-bit reproducible Date: Thu, 20 Aug 2026 10:30:13 +0200 Message-ID: <20260820083014.3377283-8-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260820083014.3377283-1-felix.moessbauer@siemens.com> References: <20260820083014.3377283-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR3P281CA0199.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:a5::16) To VE1PR10MB3967.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:14a::21) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: VE1PR10MB3967:EE_|AS4PR10MB5647:EE_ X-MS-Office365-Filtering-Correlation-Id: 54b8fc49-5b20-4d1c-86a7-08defe95482b X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|10070799003|23010399003|1800799024|366016|6133799003|56012099006|10067099003|11063799006|55112099003|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:VE1PR10MB3967.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(10070799003)(23010399003)(1800799024)(366016)(6133799003)(56012099006)(10067099003)(11063799006)(55112099003)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: EoKZww7kXd3gXnS2VFzGBVM+D4Xl4641GP0= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 54b8fc49-5b20-4d1c-86a7-08defe95482b X-MS-Exchange-CrossTenant-AuthSource: VE1PR10MB3967.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Aug 2026 08:30:24.9099 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: s5yewEzGyHjAOIgM64gy3ns5wWO8l0AcKHRNiLTgvlKuQfRdjDpxINLWiRnBWBYzrEuDODndzqMy0pj+Lzvwnca7OFm01U6e3DxfKU6TOnM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS4PR10MB5647 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=HU6HL9b5; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= By that, the generated sstate artifacts are also bit identical which reduces the cache size. It further makes it possible to re-use the artifacts with the hashequiv logic of bitbake. For that, we auto-select all rootfs features needed for reproducible contents. Signed-off-by: Felix Moessbauer --- meta-test/recipes-core/images/isar-rootfs-ci.bb | 2 +- meta/classes-recipe/image.bbclass | 4 ---- meta/classes-recipe/initramfs.bbclass | 3 +-- meta/classes-recipe/rootfs.bbclass | 9 +++++++++ meta/classes-recipe/sdk.bbclass | 2 +- 5 files changed, 12 insertions(+), 8 deletions(-) diff --git a/meta-test/recipes-core/images/isar-rootfs-ci.bb b/meta-test/recipes-core/images/isar-rootfs-ci.bb index 5ac33665..4aeed71f 100644 --- a/meta-test/recipes-core/images/isar-rootfs-ci.bb +++ b/meta-test/recipes-core/images/isar-rootfs-ci.bb @@ -7,7 +7,7 @@ ROOTFS_MANIFEST_DEPLOY_DIR = "${DEPLOY_DIR_IMAGE}" ROOTFSDIR = "${WORKDIR}/rootfs" -ROOTFS_FEATURES = "generate-sbom" +ROOTFS_FEATURES += "generate-sbom" inherit multiarch inherit rootfs diff --git a/meta/classes-recipe/image.bbclass b/meta/classes-recipe/image.bbclass index 7abda3de..a609cde5 100644 --- a/meta/classes-recipe/image.bbclass +++ b/meta/classes-recipe/image.bbclass @@ -94,13 +94,9 @@ inherit essential ROOTFSDIR = "${IMAGE_ROOTFS}" ROOTFS_FEATURES += "\ - clean-package-cache \ clean-apt-lists \ - clean-pycache \ generate-manifest \ export-dpkg-status \ - clean-log-files \ - clean-debconf-cache \ populate-systemd-preset \ generate-sbom \ clean-apt-credentials \ diff --git a/meta/classes-recipe/initramfs.bbclass b/meta/classes-recipe/initramfs.bbclass index a647b6ea..45626319 100644 --- a/meta/classes-recipe/initramfs.bbclass +++ b/meta/classes-recipe/initramfs.bbclass @@ -26,8 +26,7 @@ SBOM_DISTRO_NAME:append = "-Initramfs" DEPENDS += "${INITRAMFS_INSTALL}" ROOTFSDIR = "${INITRAMFS_ROOTFS}" -ROOTFS_FEATURES = "generate-manifest generate-sbom" -ROOTFS_FEATURES += "generate-initrd" +ROOTFS_FEATURES += "generate-manifest generate-sbom generate-initrd" ROOTFS_PACKAGES = "${INITRAMFS_GENERATOR_PKG} ${INITRAMFS_PREINSTALL} ${INITRAMFS_INSTALL}" # validate whether there are incompatible packages in the installation list diff --git a/meta/classes-recipe/rootfs.bbclass b/meta/classes-recipe/rootfs.bbclass index 9a08312e..e5d158ca 100644 --- a/meta/classes-recipe/rootfs.bbclass +++ b/meta/classes-recipe/rootfs.bbclass @@ -41,6 +41,15 @@ ROOTFS_BASE_DISTRO ?= "${BASE_DISTRO}" # 'populate-systemd-preset' - enable systemd units according to systemd presets # 'clean-apt-credentials' - remove apt auth credentials written by ISAR_APT_CREDS +# convenience variable to enable all features needed for a reproducible rootfs build +ROOTFS_FEATURES_REPRODUCIBLE = " \ + clean-package-cache \ + clean-log-files \ + clean-debconf-cache \ + clean-pycache \ +" +ROOTFS_FEATURES += "${ROOTFS_FEATURES_REPRODUCIBLE}" + # only supported from bookworm / jammy on ROOTFS_FEATURES:remove:buster = "generate-sbom" ROOTFS_FEATURES:remove:bullseye = "generate-sbom" diff --git a/meta/classes-recipe/sdk.bbclass b/meta/classes-recipe/sdk.bbclass index d79de2bf..ca38cfc3 100644 --- a/meta/classes-recipe/sdk.bbclass +++ b/meta/classes-recipe/sdk.bbclass @@ -49,7 +49,7 @@ ROOTFS_ARCH:class-sdk = "${HOST_ARCH}" ROOTFS_DISTRO:class-sdk = "${@get_rootfs_distro(d)}" ROOTFS_PACKAGES:class-sdk = "sdk-files ${SDK_TOOLCHAIN} ${SDK_PREINSTALL} ${@isar_multiarch_packages('SDK_INSTALL', d)}" ROOTFS_VARDEPS:class-sdk = "SDK_INSTALL SDK_INCLUDE_ISAR_APT" -ROOTFS_FEATURES:append:class-sdk = " clean-package-cache generate-manifest export-dpkg-status generate-sbom clean-apt-credentials" +ROOTFS_FEATURES:append:class-sdk = " clean-apt-lists clean-apt-credentials generate-manifest export-dpkg-status generate-sbom" ROOTFS_MANIFEST_DEPLOY_DIR:class-sdk = "${DEPLOY_DIR_SDKCHROOT}" ROOTFS_DPKGSTATUS_DEPLOY_DIR:class-sdk = "${DEPLOY_DIR_SDKCHROOT}"