From patchwork Fri Aug 21 13:12:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5407 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 21 Aug 2026 15:12:50 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-yw1-f183.google.com (mail-yw1-f183.google.com [209.85.128.183]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 67LDCmIq020588 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 21 Aug 2026 15:12:49 +0200 Received: by mail-yw1-f183.google.com with SMTP id 00721157ae682-81e71be771csf66611967b3.0 for ; Fri, 21 Aug 2026 06:12:49 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1787317963; cv=pass; d=google.com; s=arc-20260327; b=S08ocFAzgPTi836Kf4zuanTj00XD3pJhAl3fjiIa2EIxsOfL5CZFhQP6kBCM0+5oNF 0XJf221xil7DeKr046Q7ZX5WpXP14MP+XuBMvpYs5LicZwS8nN2G1pHJi7vEJh88ckYE BW5/vv23vP0hLphYXE3reQhvr51C0K5cxqGUKTkpoLHD/Gy35HFV0x+2ZQgvX7ZdESsI HaR3e6RfUWxMZBZh8Io2Pl2pYMvZ1bwUR0Ya/mHfJshiRBciKL8cYT11HHmD93OMgtmu Ep2kqnDskKPHFDDdCff5mRWAvnXdIr8N3f82Kmq7ipdEnjhWydkcn9bf4vnV5q8ewHPw 5PTg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=JWEYbWQR9B9dBhghEmCFxVFxbRiBRNH3Xr6cpf7TwPg=; fh=X5BaXUJIZp9BZHlK0+8gIoiffk5EKDfIr1O/qFddTiQ=; b=pRfYvOVj/rfLx+ElqUnVn+EVBuVdBjBOm8JJ3TeiY4MJsx5K9FnCprO+dbt3LEEg0n GheMO1EXZZqDqO8lZ6qAxekZLxoPRa3ghDsiFa4q6NUZleanlxnlae8+QgDPJir8EPsH RW/Q6d87ddRfQKE9mouy/jTVa8ku5UvfDEOo7ius2ko9Q5qklLahL2xWWl2NMTgkj6r/ LZRDhqZ0f6gGrEjY9OSEjE+U+mV+62UuUqFDdniKRp6m6emJZOvIIfOAT8dYNkUfV4DG H7rdqwKdDAdfHTGR40IM00VkU9ZjcHfT+k0A3cDgM4Lc5socphrKIcc49/lVsNfTdBcX gvxw==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GagY4XA2; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1787317963; x=1787922763; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=JWEYbWQR9B9dBhghEmCFxVFxbRiBRNH3Xr6cpf7TwPg=; b=OCH54Y3bftd+qsbZa7tA+37B+VES2HiqbRVN6WaxnrHorcpboK0fTAErY8oqo6keYV /CgE8sMeP42zDZYRAtYvZ1eGvdfZ2gO0+iB3AuNtnQhVVdbVIjDpofyUSwJ087knNr+i LyKDfAjTGr3KTd3k2mxxwVZNItiQk8tHEvy8FWR62UTpmrJS1rdlYVcZB+NoGlNYtYzO s0+NY3QvlqU7b5FKvzCDGWBxQ8vXQ+PBOsrXGP6C+9jlrRmOZZYAG8FKYV+joNgnhJUT v7kH8ernSS5r4IycxkDnnURMcjkyv7EgB0+5IvNGlNAUk5/8SaYAoSVbDHAtXeoEs8p0 /hpQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787317963; x=1787922763; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=JWEYbWQR9B9dBhghEmCFxVFxbRiBRNH3Xr6cpf7TwPg=; b=KV/bRK6HtaW/N6i0VxI8gnXHxFGlaH1yc3vq/qyYEizsmryHhgQ+sNSdG/XWviSAZX 8KRu222tqg7us49Aeo1e9haqEy5NoEX4J+VsJyOjxyxdjQKL5Irg4aFPOGUnVtun8NTI cWfAcjKuIa6o5gHMEsWyNVkz7Kg0AHU02FAYJ3V5MUbd9tvi117iA4m4mNrtUvzhILCM x4HILMsdLZV55OzBQgvE4Oh45FWzcpsX48uHZLKjNa5nrriy/0n5tMZ9O4TKi1VI7szN 9bhm2SJcHoWQw0XffnDAsCTKIoOoSUiZMW7Tx0LX6wUWVrok5jW5COxbeTcjoiSd3j9w jCZQ== X-Forwarded-Encrypted: i=3; AHgh+RoBN/CFsxtKJtqmZy8ScsZGQ1g86qGDTxPVqG46MGDz9NGU+ydTKJMG59+rX8I+uVbGgB0Uch8=@isar-build.org X-Gm-Message-State: AFuF++mGKH/hNzVUbcNM72xxvaH8P8sNYTg439MqIie21gFsF1GMfdAE 1jwGzYtTr2h/I0CgG/6KgEHAfwWYX/ZjB2vQ/WEJPFaRM6v1n5ENs1jW X-Received: by 2002:a53:d510:0:b0:66c:e21d:9ada with SMTP id 956f58d0204a3-66ce5a5b142mr1419836d50.10.1787317962772; Fri, 21 Aug 2026 06:12:42 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdejNSoic1gNshKErJkhUMwPzyNlgbLTKII4xS9Uy2cEBw==" Received: by 2002:a53:c046:0:20b0:668:1a79:2a8f with SMTP id 956f58d0204a3-66cc94f6c88ls2330100d50.1.-pod-prod-00-us-canary; Fri, 21 Aug 2026 06:12:41 -0700 (PDT) X-Received: by 2002:a05:690c:a1c1:b0:820:daf:9205 with SMTP id 00721157ae682-84a1ac41e8cmr17539367b3.14.1787317961601; Fri, 21 Aug 2026 06:12:41 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1787317961; cv=pass; d=google.com; s=arc-20260327; b=qSV2S4Mrx0Uby2AOkNFV0aRoZAZVzlam/h3ApM3CNccgVfNwPSGq3JBkClwFgxn9yj vLyF1JyKPfyt+rMhb0DD6xgvdXzhiCikGi4M9rcFrfEA4gprzy1WZhja/Ah+2YnFqz41 q5/7IQjnKidfpciApOYDSYcVB80ciA99yRlV/00zSeMpSGJxPhVHd4ZsiSVgm50cNCUN ia3jPMKRPjhWQSb+aPlA8Ui075lGQ0Lc+So3KEDggmQO/y2OtlhWeALXcho575XfRpbr qkLSMggTLkpuRdwo9kfes5e2QyXZVbJO7dhKYNDAM4cplijDicP504p/ooHGt5uiAoL1 9qgQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=CRthQIbAupH8TGYQYqeQBS3ZyHVRyHiOjU9ehj+u0cQ=; fh=FXvauwBldM+Ixx8E08RRuBbXz3swagS87n3MQ8TSE5w=; b=aWoG+QLgROGeyaXRA915yNvDgZzNJF9YjEAB+QoAfaSSyMF/vgXgEZgF6AbGgJSROK 5XZDJY2vyau3ygSiv4Yvk1TBy+YWmdAH21oyPcj6VvQdmgq+gsjtTIWdxDKte7lsfNNA VEI3b8w4zd0NY+xnEoFjD5CLXGqYEHihaQ2qzLzQ/RzIfwFCPOEQlB1LEuj2hRBsHYeM pdicYOaDQXMz5jOoy6nVIRDNBZ6FwulNQ8EMhMtA+FTv/zITjaD76vDQkwiVoiYeHauk xlmL1FvW/gr4rq5Ue3Uj2FPiFNE584jAJRNgwEU64wOUoe+RGmMYrmWxu974RUQ/DDJ+ oyMw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GagY4XA2; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 00721157ae682-84516885ed1si2540117b3.4.2026.08.21.06.12.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Aug 2026 06:12:41 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NNIOQIvbesQDPi0MHE4IX4+dozxQgiSlgS3R4y0fQwELrDCNjZ3N1iKLT2aJGd0I1edLtcZ1QlRn1aWzO89OtL+xbOw4rRX6+VhCHHAohpbpubKR9WnG9Q/zvb3nt+4mFE4eLjRSnJAqWRQzlRjkXupMfTlFw68lY7OqrPQBnisJsZY++wFwc2FHEJ8TGLka2bC+49o5ylHCksiyHaHHp5uF2SAwyI9eSZ4N6C0qc1+3i3604pR/gAtTVxZYQO0xlOQbgKvPIsGjDRJrdrSDjEEGXgaNLxIqfd9E5mKiH7Ss/OiCduA3tCWEhMWbkJ2kOTIpHjNDpWzXKHQ0NXTebQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CRthQIbAupH8TGYQYqeQBS3ZyHVRyHiOjU9ehj+u0cQ=; b=UWGrjEHhxdUCfgD01+WAoyyK2n8z6nKRSwOtis2XszdSs+4AYlm4cgmLaahGtCMJMEViz0in0A7k895ced1j8MQBRRszmPujNPMn4oXtNNYttX95cuh8IOoLPCteo8SNJMhf42EHvugvkmeEhfTbjxdIXyCRb2KUlEWANqi36hCSV1WDXHFRMx8EUWlU8obdIrrs2BMV5XYIL/FweguReRjrm61aD8wRaVIyfACRTsqaQOWI6R9I1SUxokF4yclgJzRSRFPbHYTQWP5XfqJ6KAm+E04bBMTSYjjemsYnZO3568wVnet8o01l/FiFjMGtot7CCYePwWSKyfgFd/DV5g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DU2PR10MB7744.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:491::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.10; Fri, 21 Aug 2026 13:12:36 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0339.008; Fri, 21 Aug 2026 13:12:36 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: michael.adler@siemens.com, jan.kiszka@siemens.com, Felix Moessbauer Subject: [PATCH v2 1/2] add script to check if the current environment supports rootless builds Date: Fri, 21 Aug 2026 15:12:27 +0200 Message-ID: <20260821131229.2235147-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 X-ClientProxiedBy: FR0P281CA0065.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:49::18) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DU2PR10MB7744:EE_ X-MS-Office365-Filtering-Correlation-Id: e6866da9-a9ef-4c99-2e8f-08deff85dece X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|366016|376014|1800799024|56012099006|11063799006|6133799003|55112099003|18002099003|10067099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(366016)(376014)(1800799024)(56012099006)(11063799006)(6133799003)(55112099003)(18002099003)(10067099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: k8PvyRTtMfNrpeBAwBp+6fX/XdSNYR26SG0= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: e6866da9-a9ef-4c99-2e8f-08deff85dece X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Aug 2026 13:12:36.7908 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: rEpyGtbOxnLmRajcfkQh14WCRQ4YW3o9WFLMsCeEDHlB6+6FfoHOXyTiHxBLHl9BftXxQh2w9QpfZWXZ7GHr0cQ7S9HJv4lN45R5subrX/Q= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR10MB7744 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GagY4XA2; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Running builds in rootless mode has a lot of non obvious pre conditions. To help the user check if his system is configured correctly, we provide a script that checks the needed features. If a feature is missing, it issues an error regarding what likely is the root cause. Signed-off-by: Felix Moessbauer --- Changes since v1: - ensure rootless is enabled before calling bitbake-getvar - add -v option to print the RUN_PRIVILEGED_CMD variable scripts/isar-check-rootless | 55 +++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) create mode 100755 scripts/isar-check-rootless diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless new file mode 100755 index 00000000..b5197111 --- /dev/null +++ b/scripts/isar-check-rootless @@ -0,0 +1,55 @@ +#!/bin/sh +# Copyright (C) 2026 Siemens AG +# SPDX-License-Identifier: MIT +# +# Helper script to check if the current environment supports unprivileged +# rootless builds with unshare. +# Returns 0 if supported, otherwise returns 1 and prints an error message to stderr. + +verbose=0 +if [ "$1" = "-v" ]; then + verbose=1 +fi + +if ! run_privileged_cmd=$( \ + BB_ENV_PASSTHROUGH_ADDITIONS="${BB_ENV_PASSTHROUGH_ADDITIONS} ISAR_ROOTLESS" \ + ISAR_ROOTLESS=1 bitbake-getvar -q --value RUN_PRIVILEGED_CMD); then + echo "error: cannot determine RUN_PRIVILEGED_CMD from BitBake" >&2 + exit 1 +fi + +[ "$verbose" = 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" >&2 + +if ! ${run_privileged_cmd} /bin/sh <<'EOF' + failed=0 + + fail() { + echo "error: $1" >&2 + echo " likely cause: $2" >&2 + failed=1 + } + + mountpoint=$(mktemp -d) + if [ -n "$mountpoint" ]; then + if ! mount -t proc proc "$mountpoint"; then + fail "cannot mount procfs in the user namespace" \ + "procfs is over-mounted by the container runtime, or the host security policy blocks procfs mounts" + else + umount "$mountpoint" + fi + rmdir "$mountpoint" + fi + + if ! setpriv --reuid=nobody --regid=nogroup --clear-groups /usr/bin/true; then + fail "cannot execute as nobody:nogroup in the user namespace" \ + "the subuid / subgid ID range is too small or incomplete" + fi + + exit "$failed" +EOF +then + echo "error: unprivileged rootless builds are not supported; see the checks above" >&2 + exit 1 +fi + +echo "unprivileged rootless builds are supported"