From patchwork Wed Sep 23 14:33:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "MOESSBAUER, Felix" X-Patchwork-Id: 5482 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 23 Sep 2026 16:34:18 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f57.google.com (mail-oo1-f57.google.com [209.85.161.57]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68NEYHAV013810 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 23 Sep 2026 16:34:17 +0200 Received: by mail-oo1-f57.google.com with SMTP id 006d021491bc7-6c2474b64bbsf878514eaf.1 for ; Wed, 23 Sep 2026 07:34:17 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1790174051; cv=pass; d=google.com; s=arc-20260327; b=ae13ev9eHwAZyEHGDpPb78dFSsjtyI+Ydy1jWl6zRVIs/q71fs1iaqADAdYa1gbRtQ H76Q+TUU3mcEcy7qLo1SESkEdsA7Im/DlvrxJ/4L915Ks/OMHBL9H+ab4FAVqjWss0ZQ EaP2K1s4axYuSICGFLgszDddOTvjo0qf4ngUMxNPNKbkzA27o8jmu05OaorA2dblM4SF ZNAkWNR6cBVq8DWIaXakx0TBgzTeJ3YjQJLvPL4vrdGnKRoSD3qvtkQSysXWLVd0ux9G ddVLqqHFGuE8627s5hNVNOnYDMAjZNGl8p36ljIagm2dCi2sWwlarMK2lhFlNxjzjxP/ GalA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=GwRF/OEDw/W05bi15hkgtOs55cYhCo6pKrR1wEA2s6Y=; fh=08uhVR4n8wJAZzq5nbRKngRlZ+YtDeYeXzGpVQzHxbc=; b=FUaSwekjtaekkQaKaRvU9+4Gyggtoqv7Ufb8N2GxVd925M8DH8RIRalEP7vCmGZ3z/ 5HjY1iF/MZxC2ctf1qCU6iNUH4LajUGRt7uT9+ldevRKY7Kyi2EKymSwn5iPD3zO+75u M2UHzBsUzwU8eNV1nKHPzTsIlndySjxJfV8D7tFAS1KQ57mfF5rET0AaTd7dgVKhEHtX xG/P0MeonzgBvNyhM/bD9TWUivGzvvHXNV2sHnyajsht/yKrtpsOz1zdAHgDvyS+KltI X+gbrtGKE5BNUvAcKu5O1n3vhPDDZQ5gZST1f8BqYJU8kcIe9j0SAdFTI49SGpG+BLWk r5zQ==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=yyUJp2qG; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1790174051; x=1790778851; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=GwRF/OEDw/W05bi15hkgtOs55cYhCo6pKrR1wEA2s6Y=; b=p1kxvHMzx6pzQ/tRVa6D3LUthJ3P6dUP/r4KF5EXYItGoIL+/ukXiz/UX0vE9aYA2s i6FODmC5aUdb7ItEofJ59buqVHRutNGtNUbdjRtZfG0+++saHo489M+sYu511ghM5UAN AYgLcK5eejHO4wUxx7BNJWaav+KSrdwA6tkFlbxP4JAdcIIHz3e6zZI2txB1vcmnhSsI MMP31yATyue29V5H5IY4mRVCHgKzLNY67fSwm/t5tpixarZtkqWNna5fYwiFdH5ip5u7 JBlmqGUKKgTP3980rfCrGXAOB2PmATL7ZehMVV7FN3C3bU/8U/qYqk0WJz+X0u5p4Nfz qGTQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790174051; x=1790778851; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=GwRF/OEDw/W05bi15hkgtOs55cYhCo6pKrR1wEA2s6Y=; b=iJ8AbxDUzrzKuDl5ZpPdYlEXjzyTUody/VlHMeCRxQzi1aM/ZjFX9B6cYJ80UCkCyJ TpNqH8ZaRdfbLJu/2tI0If4/qFGFg1bUHs5c2c4sjTqdAsSrkKy9sKY/jG3OISnG3vI9 cZctkqz/iCFgYF5T4HZJUjb4U7pz/bHGGIj7CKhDL27DZx2u36oOFnTcGSg/FU3DNeAz 8euQEnn/yn/+UonsW19uImWWjSpCf/SAuy1FFt4KCclT2jIpAknTHGlt0kaPjJ3Y3KNO phxnrYHr40ekc895Apv9kDPV4YCX+sRW0ih/sBBMjwVVtNR0Qzl5G+ZC8fwaUrNkJc5i V1JQ== X-Forwarded-Encrypted: i=3; AKwUvBxCBr58Z7OluRTcd8WFmva7RSyCNS8heeWqyvfiMdpL5LnWQMYmrOZEuKPpLWMfXFbMo5bX6/s=@isar-build.org X-Gm-Message-State: AFuF++ltAVldisTIguc/QjnlspXbceeozNx5rdfjJj0j72gQjcnwZXXX +Ov/szIKStTD4UndHoyI5C/+AiT2TzChEB0Y0Di5tKRyxgO3L5AYzsAY X-Received: by 2002:a05:6820:1518:b0:6cd:3fbd:1d66 with SMTP id 006d021491bc7-6d2d301a57amr2462127eaf.80.1790174051285; Wed, 23 Sep 2026 07:34:11 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLddsqSJyNsPdAdMlhMM0rLNtIXli05qWsYBbSQMQrucmKQ==" Received: by 2002:a05:6820:8584:20b0:6bd:51fd:ba1c with SMTP id 006d021491bc7-6c8f600884cls3054942eaf.1.-pod-prod-07-us; Wed, 23 Sep 2026 07:34:10 -0700 (PDT) X-Received: by 2002:a05:6808:f11:b0:4cc:3535:1998 with SMTP id 5614622812f47-4d5b70ecd0fmr2627709b6e.10.1790174050186; Wed, 23 Sep 2026 07:34:10 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1790174050; cv=pass; d=google.com; s=arc-20260327; b=ktLB4dqcUwIMSSMofuhjo0dhMYn73yjpx9kniiFT6ruLqhrggzOSlA/1P4be6a1DlV gABtmgjZEX3bFw9ufl2rhJKqVD6fjhpu/7cGa3qjrVQj4es/15FUoyxZ3hcnfRcXN/s6 CX7imxUJBatqK+aiAqofEhEKpJQxii9nfOei0eukQfRv2OavJHebN2qArLifDJhg0BRF Usf70Glde7I5/qivU263BkUEqWKvU03EcTQKkxwnV3YVcnZ8FFJBoMZ+kRMhqEBP/sAM RSucnG6jV0q/yrOf2eEmppU2FyjvJiavaADfMU7VtCQkg3OImgUUq9Z+hbo+BgTA+OWu p6TA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=PboBcNwhelkC4Gv9Km2ieYGAABTNhGzVJJBKVQfKcIY=; fh=Vj1sNh60hnRHpy194yDIonw6Kjs5uuSYEnLay6mJl6c=; b=KEvVR2k4Ys7DK1wQ793MK2M7Pl1ezcv2DzxREWv6MJLaN1WXQHuK+bdM7MdYGJKKxj XXdZWRClL7AkMYNobFqKCKmBVgV9zaFYQyeMphcktchkz7H+Ff9hkNyM8jV1OdhKd/Il 6R/67G/8qtoDU5ycNp8gB46vcnEfOZUeHSs886Ior8VzTfnmYL+QvKj9TrwtlOHoz/eb d708c1C3IDfUUf50tcLhNRZaCQBVOpymfN2LHPyPhOD0R95zXQXAR1cDDDqGmo0Gz0a5 B/Zs/HXk0lBsiL3mBcrg5UELtW1AjanKAX3a76MZBESWMtap16SOWgEzwCVIkopl6jaF Dy9A==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=yyUJp2qG; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AS8PR04CU009.outbound.protection.outlook.com (mail-westeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c201::3]) by gmr-mx.google.com with ESMTPS id 46e09a7af769-816018d525fsi80119a34.2.2026.09.23.07.34.09 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 23 Sep 2026 07:34:10 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) client-ip=2a01:111:f403:c201::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=m3DgDdRzTAJNu+AzkadA16zwFwyMz5UxuVjbDoRyC6R/JtaDSVQ2oI0DS3bukpLnd36e993j6nzb25Rg4Td8KXZXDexa/Vd2czSgJGYQqTaguU46tEYfjJjQAd9jt9ZwpCG81MJ4x+b9/Tj2CLAnZ6ze6avTgHHqDc6Pp/0pJbUAmbrWdGi1cHxjTxMJCabPRr3VKB5JOhQoFjQRvPa7hYrp0YdMw8U40lu5b8DG0FPFQCL13Nb3wjOuWUqzGEfUTxMJXqE0BuXr8yPqwCJqtD/DRi6M3wx+kzxE70WIgT1xufOfWXK4/l04TIAry43LxT3IRTD4orLEiuF9AJNS/Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=PboBcNwhelkC4Gv9Km2ieYGAABTNhGzVJJBKVQfKcIY=; b=jpVcsjsOZ8AZYEY8q9TMWVLUOZTyC8XjkxIkunjKI+WFL9VjjHB98JXdeTwC7uzW0osGCpsi3t63ZK3UDYYN2HYuXAGR5LGxEwanVGjFQIvJbX3EkgHM+DvnkTFsBef4ujnnMNlOjEO5w0mtvWhsgdbJrAbOTkBtDkRN3IX6Ej77d71WCTFNTiqK2NwDE9ckiOaGeAEtvk/y0sSPhDmtdiC/C8E5d99WqQ0qxcTl+UddG4W23uWZ9uY77Bup2MEVXgyTpARh5IhBETM0nkfD4VVE5bgdYXeQsAJNnEll0YIIYkbTqN32wfz2jmoeaVKxmi0gJg2Um7QJxauAkSmK4A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by FRWPR10MB9292.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:d10:17d::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.14; Wed, 23 Sep 2026 14:34:07 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%3]) with mapi id 15.21.0451.014; Wed, 23 Sep 2026 14:34:07 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: "MOESSBAUER, Felix" To: isar-users@googlegroups.com Cc: Felix Moessbauer , Jan Kiszka Subject: [PATCH 1/1] isar-mounts: mount /run as tmpfs for systemd execution in chroot Date: Wed, 23 Sep 2026 16:33:50 +0200 Message-ID: <20260923143350.2086040-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 X-ClientProxiedBy: DX0P273CA0105.AREP273.PROD.OUTLOOK.COM (2603:1086:300:5c::16) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|FRWPR10MB9292:EE_ X-MS-Office365-Filtering-Correlation-Id: 361a07aa-c44d-43f2-41fe-08df197fb933 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|366016|1800799024|376014|10067099003|56012099006|11063799006|6133799003|18002099003|55112099003; X-Microsoft-Antispam-Message-Info: oCO2r0ccPeKRxcQpOgkpCj9gcpcMWNDuTaIKk20qi0NnKU1WsP9NszBEN36UEavDggkfu6nVFBg63DMvgk4Wjk9asPCco0RgqLUpFFoCw/ap1BAANQ6psmX7FozCoIVH6nl/dOmRIb6EvUGIfOzWh9K2ffm59HQxzoujTk/yBjejBwmiRA50crThOvOlD1gyRDhYJwqkkKZvWCNTikckcwXCK2Ce2CO4IxJD25pBcFOUmEQUhEpYyVPsF5KgEEaot83Ft9wAEjwb4PRrdp3ggAhXH0oijljpM56egdsqZa+/CYH8CE/W++zcpbcqQcYSfScLWDNo6fOxMfouOQaSNJyxvIhTzKf/zsgOm8i2Chr76UynKyw9rYsdE7ImSWbKD9z/bsF/k0zys3bfI1bC5HB0xemB11cC1ukr8EeX3yctRKeiqNVjKCQSuDI8dLPyUa8CqD2FcwnjcsQaZlTYTGRTRlfVEFkhHKYARdWeDX2q4wQAsqlq7+5lG7L1CByZ7PDhYZJJmGo3RgTzUoYlbtnFoGg8vthxzjscHEfWjK3Pc/xmTu3Xx1d0jaD+UpWnZwy+toF/jekyv3Fi3sMQq40bYBVypJImwVfNt+o97iEoaqw5PIGo3ClulWO6yZp/oWvUEQRI0+YHoEgK3o5Aq3vSgCv8Xi3ZzBSi3MRTf88= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(366016)(1800799024)(376014)(10067099003)(56012099006)(11063799006)(6133799003)(18002099003)(55112099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 361a07aa-c44d-43f2-41fe-08df197fb933 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Sep 2026 14:34:07.0645 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: +izeNYtUBmivb0g+a68coP8kFcTsV+JlpnAcAXFAMGjGu2sJv5Aif6I5//P/vKDjST6pgX3kqqkh4HtAJmg9mW/oASIR43fkqF9+M6o2z+c= X-MS-Exchange-Transport-CrossTenantHeadersStamped: FRWPR10MB9292 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=yyUJp2qG; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= When running systemd inside the chroot, it might access /run and place files there. These can have ownerships (like 0000) which require DAC capabilities for traversing and removing. As this is tricky to achieve across all cleanup code, we stick to the systemd file system hierarchy and mount /run as a tmpfs. By that, all files below it will automatically be dropped when leaving the namespace. This solves cleanup issues on rootless like: find: '<...>/rootfs/run/systemd/dissect-root': Permission denied As we anyways cleanup the /run in do_rootfs_finalize (image only), this does not change the content of the image. However, it improves the reproduciblity of our internal rootfs' which can improve caching. Reported-by: Jan Kiszka Signed-off-by: Felix Moessbauer --- meta/classes-global/base.bbclass | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/classes-global/base.bbclass b/meta/classes-global/base.bbclass index 8f81ab70..3d5d1c12 100644 --- a/meta/classes-global/base.bbclass +++ b/meta/classes-global/base.bbclass @@ -399,6 +399,10 @@ def insert_isar_mounts(d, rootfs, mounts): lines.append('mount -t devpts -o noexec,nosuid,uid=5,mode=620,ptmxmode=666 none {}/dev/pts'.format(rootfs)) lines.append('( cd {}/dev; ln -sf pts/ptmx . )'.format(rootfs)) lines.append('mount -t tmpfs none {}/dev/shm'.format(rootfs)) + # required by systemd file-system hierarchy + lines.append('mount -t tmpfs -o mode=0755 tmpfs {}/run'.format(rootfs)) + # required by Debian policy 9.1.4 + lines.append('mkdir {}/run/lock'.format(rootfs)) lines.append('mount -o bind /dev/random {}/dev/random'.format(rootfs)) lines.append('mount -o bind /dev/urandom {}/dev/urandom'.format(rootfs)) lines.append('mount -t proc none {}/proc'.format(rootfs))