From patchwork Thu Jun 5 14:58:37 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "MOESSBAUER, Felix" X-Patchwork-Id: 4221 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 05 Jun 2025 16:59:08 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-lj1-f183.google.com (mail-lj1-f183.google.com [209.85.208.183]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 555Ex7jl002940 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 5 Jun 2025 16:59:07 +0200 Received: by mail-lj1-f183.google.com with SMTP id 38308e7fff4ca-32add2506absf1241781fa.0 for ; Thu, 05 Jun 2025 07:59:07 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1749135542; cv=pass; d=google.com; s=arc-20240605; b=P+Tf4/E7wDXOjLMmjKlcn7OqrNSKri4uJ5tmOIF4yCZBnJwvm0Ye07Q7G1PnJ1pTuB PXXQXQFd510YXZTfghCpTgQbSJNNDDngTgZBWUdM7Al8orWPJnc0wJbk7dkOyZCJqUj1 MUuWuGLT4Lj6xdAQS9lAulLkrQfmUduqOpoGOmxozxuIAE/5T/Sbr4rpRb4dybj/GNe9 iRj5kEKsOi7dVSiuG68zVxjyWf//CpDhRFEbXzoWbAH31csZBdF+dMHqzEpQw0goGLkR a8vIT9/W+BOOvig0b6Oq3EemdO70MzqPQz4f2tscf5z2I/6bxHFXJP5jgIHt8u/YoBAf 0I1A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=x7m71rsloycl5EUNxYAyFT/PSaEJjc5twvIL2CJFWHQ=; fh=F2E+5ljCOlFgUf4FXdg6HaI+7s/u6ddkPjFM+zXurgQ=; b=F4/9GoBhhKaBY2qbbJJW3f+mh8vMCDHejVignRb1lEWRnmcPq6kgX4SkmKi3vsKsLa 6VhLI/eA9bAo1b6DgCfb7LAtNcTDkQK++RKOL2BYQ8OZR9Tz1eFy99yRATMhvM/IPulc qIp2ZuqNnxZ9/mOhf52vvpv6o1cfnX5cCX8LnPGH0zn+YZKTZB/aMkLUGLAkjRHKHrma V+olHqr8777Yhgc3rel6zDGMGeHAPRVT2t/8tffUgZ67WM8qsl9oA/p3xJg7meGezQ3w qHBgcxhy5k/qfUsefCY+ERK/33vI37dBWAcZKZIfibnSIR73Msy2LoXhvO4OcPfFbG3Q z8fA==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=eWJAdDCp; spf=pass (google.com: domain of fm-1321639-202506051458564319a83c8e8978c3da-hd7drh@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) smtp.mailfrom=fm-1321639-202506051458564319a83c8e8978c3da-hD7DRh@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1749135542; x=1749740342; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to; bh=x7m71rsloycl5EUNxYAyFT/PSaEJjc5twvIL2CJFWHQ=; b=ePYd7/Y8YIb6C4hS9lQvxE2qNmCXgxZVxhgQYMzBpLB59o9a1b6kEHo23Lw/86+doA nKF4YrSd/nXyGAiarW0393mD9kkDFUjCwB8FN+oI8M1VJU33lriQH2lbrMli8/zeJadJ rzKr+r1MwCcvNjYKGjH2Xgt3WvNzKpMRkKfCdlk1wDHhbMK3J+Mto3f6beL2dFjJwBwi 0f5wGBYcfv7mIUe5nFvGL8xQWGUuolGY/JkREuFlMqGaCwJg2uG1ao/0EyyI/v8Z7YRI cmfwUG9920e7T98gwotcyMj4GqHBRzLMOgY/l8b2lWYblAMBTBBIBuPU3EG6/wsnKsGX lTmA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1749135542; x=1749740342; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=x7m71rsloycl5EUNxYAyFT/PSaEJjc5twvIL2CJFWHQ=; b=miPq9vRae/ZaQ2JeSsowDRkMEcs1nZ96IfiFrats10GjOHRikAxGyL2fKdEgj7BDtt 8um7XKXFc0SYltlaDPMbP7mRgxJl5Aok+aB53dbGn+fo7fx8auE1Y8TrsWZuPHs7zYQS ZmvvT8eiSbeCwblL5bP2y+tno/Qcoj03tCKISHFm93+Mzfy+fKyK4hh6fGVnLGOV4NLm HveuUUiq1GxBQQccfqAj4+UPcocOEH8fxifeaULIdF/dB4g55+rxlmSyT/NcFtaNIGOz FZVh5YAKfHpp//8yIvneTAWZ1HUAGFIzSqFnCAAUtnKa1At7RZ7BZ5VJ6PIDJ3w0UlqY R8yQ== X-Forwarded-Encrypted: i=2; AJvYcCWM21TvRzaAT6ok7EFlYxGss13VFJSXhynqTYwYaHXtyBtuEnUSD/aJlSffCdI4jIQKBO5B3LQ=@isar-build.org X-Gm-Message-State: AOJu0YyVGuWtqGVPF7IxypnOBSvH9+DK2AVpU/md24fT30k52ODxjPuZ VDOv6KkaEMiSEcZj85l1lTiyRWp42GiLPaPD2rz8y1ER5smyWqoMKiPD X-Google-Smtp-Source: AGHT+IHORpGVBz3Qad9o4x1Z23sqkBMNcBJzM1UQAv+lCZFKNer7SycJZEdpKO5TFvtPbEAlM5AmJQ== X-Received: by 2002:a05:6512:3d15:b0:553:2e7b:f2d6 with SMTP id 2adb3069b0e04-55356c02c45mr2109937e87.29.1749135541116; Thu, 05 Jun 2025 07:59:01 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZd3Sdqi43BPgblmyrvONs1b26QQ4gTUie+XDdsmdpJFUg== Received: by 2002:a2e:b8d1:0:b0:32a:6378:9bc2 with SMTP id 38308e7fff4ca-32ad1ae9dcels3311311fa.1.-pod-prod-06-eu; Thu, 05 Jun 2025 07:58:57 -0700 (PDT) X-Received: by 2002:a2e:a99e:0:b0:32a:7386:ca13 with SMTP id 38308e7fff4ca-32ac71d132fmr21242191fa.22.1749135537309; Thu, 05 Jun 2025 07:58:57 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1749135537; cv=none; d=google.com; s=arc-20240605; b=EwBNrPhvZFaaIfL0wfvXiQGTt5nL1PC1Oznm5obj7w9BivS03bE+aphOVe4BPOUdOH 0ccsKHmziQtz2ldzuMhWb9JGOFcBRR4EvSTL0+5h5z1BZXBMeznco4sE43y9m9l2hLnN GVNkmyRkiCOjvLHimlxZgj9weCzs5LsPXUwmuRIfmxvfEHLNL/g4RDQ3WnafWc6LBZgQ U9VgsIGE0i96AxM17vIT4ayk4rb6hEpM8meqD0MCRDhr4+WQwlsCrp08etwgfoKGgR1A enZGo1MGEcGMqJsl6jqSlIQyioAP8TS7rOQy0a4kW+vagptx66NeEBUYFdZ8Cgu1efoT dO+Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:message-id:date :subject:cc:to:from:dkim-signature; bh=Ums+JVHS7QbdS4i/9X5lCbPvUQGVPEWMVhgdHYLTf2o=; fh=2vPEtVRFZgJExMSCfX53nKBFsjiPYp/60rbGy5S5Mwo=; b=iJHctvNFeN+2pMSvm42OJAbxB4nqoDNN9YXW+EjQvCg/vM4wZWZZnFruRJT2NA3lkX Hx18RLTUmktFZDTdtA7Tg1HackMPKRVdkQG7eU8k/eaTSkDy2rT2BeoFIE75y8BGN0La rq4LOka2g9zO4kjjXWjGjOVTuBsxWxxLN73zLbGfVXuw9L/aFF7qq2HoNhWlMI6CrjFN +XYJxnSAve7uJZFty6XI0oo7yXgZ/+KKdcbMVqejJzaA5/T8Y+UeeLXSDidgwfeeKQVo 3b24xAgCcYAVEAos3LbxVOKd/fgka318oGntQRJtnQdawNldoQ1ODLmtCgKuMclWoUex 9ALA==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=eWJAdDCp; spf=pass (google.com: domain of fm-1321639-202506051458564319a83c8e8978c3da-hd7drh@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) smtp.mailfrom=fm-1321639-202506051458564319a83c8e8978c3da-hD7DRh@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net. [185.136.64.225]) by gmr-mx.google.com with ESMTPS id 38308e7fff4ca-32addca4d33si97261fa.3.2025.06.05.07.58.57 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 05 Jun 2025 07:58:57 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-1321639-202506051458564319a83c8e8978c3da-hd7drh@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) client-ip=185.136.64.225; Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 202506051458564319a83c8e8978c3da for ; Thu, 05 Jun 2025 16:58:56 +0200 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: "MOESSBAUER, Felix" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, Felix Moessbauer Subject: [PATCH 1/1] wic: disable generation of python bytecode cache Date: Thu, 5 Jun 2025 16:58:37 +0200 Message-ID: <20250605145837.1384007-1-felix.moessbauer@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1321639:519-21489:flowmailer X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=eWJAdDCp; spf=pass (google.com: domain of fm-1321639-202506051458564319a83c8e8978c3da-hd7drh@rts-flowmailer.siemens.com designates 185.136.64.225 as permitted sender) smtp.mailfrom=fm-1321639-202506051458564319a83c8e8978c3da-hD7DRh@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Wic is executed as root, so the python bytecode cache is also created as root. This is problematic as the cache is created inside the source tree in a folder__pycache__ next to the python script itself. By that, we end up with files belonging to root inside the repo source tree, which makes it impossible to delete the source tree as a regular user. This problem became visible with the kas purge plugin that removes the fetched layers as a regular user (these layers are fetched and managed by kas). Also the read-only mounting of repos in kas does not help here, as the fetched repos are not mounted ro for obvious reasons. Anyways, we should not create files inside the source tree that do not belong to the calling user. To fix this, we just disable the python cache for the wic task. This is the only task that executes a python script from the source tree as root. Signed-off-by: Felix Moessbauer --- meta/classes/imagetypes_wic.bbclass | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/classes/imagetypes_wic.bbclass b/meta/classes/imagetypes_wic.bbclass index 7a050e73..fb0b81a9 100644 --- a/meta/classes/imagetypes_wic.bbclass +++ b/meta/classes/imagetypes_wic.bbclass @@ -157,6 +157,7 @@ generate_wic_image() { export FAKEROOTCMD=${FAKEROOTCMD} export BUILDDIR=${TOPDIR} export MTOOLS_SKIP_CHECK=1 + export PYTHONDONTWRITEBYTECODE=1 mkdir -p ${IMAGE_ROOTFS}/../pseudo touch ${IMAGE_ROOTFS}/../pseudo/files.db