From patchwork Tue Jun 9 08:53:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anton Mikanovich X-Patchwork-Id: 5120 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 09 Jun 2026 10:54:02 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ej1-f63.google.com (mail-ej1-f63.google.com [209.85.218.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 6598s1Bs003939 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 9 Jun 2026 10:54:02 +0200 Received: by mail-ej1-f63.google.com with SMTP id a640c23a62f3a-bf44ff0961dsf428994366b.2 for ; Tue, 09 Jun 2026 01:54:02 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1780995236; cv=pass; d=google.com; s=arc-20240605; b=fTxWD0Zwdhsg77wHym1bHtLvI5c1qmulDToO6zk5j37ni8UQEWrd2JU4W3wA+iZtHw o+7wPrJq0maL+6IexfbznNFB3jjrPkEFsme/I8nzw5krG8agIFjo1a8kaAe3IcxGcDHj gAq9hOYNXkMAyXRL07hCSguV1v8QMWcuEtIhBuv5XsOxM8x88KXOygWLDruP9lcoSL+n cBgtcl0Q+F2QKTFUcaIiM1QI9RuVZniehurjs8pdz+ptBfIPhBbcqOZHav0OAt0qQxTR 8MdKqiRrBKK86qzKdACoDtexd238H0G7aA5Aawr374Ms4Js5sDTY93vA7wMAuTqfA8RI LSSA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:mime-version:message-id:date :subject:cc:to:from:sender:dkim-signature; bh=hqA1xKzWdfafTkFdLM9QYeDYmDco2c0o6HiDAUNyOLg=; fh=M4NPCoO2joRo9WgB2S22gEyFYDo0xHzaRMJ4R7Hw2j4=; b=QLkZq84E/7aq8a4e7LpjORo6AL/28m68aTFrxIzZZUwuWnUZVUB+eABMx596c7hKwH JU+KGpKC6G/KQslzv5oP82XsdI2Y8RzBETEpGVBtIqUTH4NgBUD5YlTAy49X2WUJea01 uD514e/0voBPhYoDo8bk4mV834p3NNfcH5HK28XvIu2+qtXZRCf7BU+YSKzv3A9BFuAS VXj4x9V7Q+hjz3vHn9eVBc5NSnje7CD2zBnnoQWYPBh3Fzi0SBkr+XV5q8LA5WxuIxfD XivHsbTeZqE0yaWxVcjHmX7JCVB3fi+vi7a81StwkNsVnL0qrlbcPlklvgixL/TuoZcC wPWg==; darn=isar-build.org ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1780995236; x=1781600036; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:mime-version:message-id:date:subject:cc:to:from :sender:from:to:cc:subject:date:message-id:reply-to; bh=hqA1xKzWdfafTkFdLM9QYeDYmDco2c0o6HiDAUNyOLg=; b=cCyES2Dhv616ErCIJJvE0USFPekjtsOlLTqEI1yyY8OdQ773ThpovrhBXcoNBq+vdP n1WCzgn/keZGSwhGsDuS6vq+ViubK+T1+PzBiJ9oHjQMa2lqFrM/n+nU92vLVXfgDVod xNLASR2+9HVIgN9Du14l8Vwuotw7xOQcciUFUxIxG85wWIXb1x+Sw3V5dbVfpklE/N/Y iKBKNWsmlXVeXApLgIFAz5ntaW39kTkZ+LEPhpCodR7S/re6edRPtOWoxwJv8KGPVLvg fXZoo94duVt4wvlHd3V1wJeKh89SH5swf+qM+OiB+iuKGSdQcv7feaE2UiDi7XThjgux lYiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1780995236; x=1781600036; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:mime-version :message-id:date:subject:cc:to:from:x-beenthere:x-gm-message-state :sender:from:to:cc:subject:date:message-id:reply-to; bh=hqA1xKzWdfafTkFdLM9QYeDYmDco2c0o6HiDAUNyOLg=; b=S+HMLEr17MWHcKmXzRtpyzxvVnn+Is0/82rYGRSs8wvEjTsX1m3TKCda9UBm/m03VA f4sJAdz0JLIxYe56dGWiUDwC9hVsFnCo/BJUR4UIkQ6xLM8IziozneSfsttmxpTaQZid dkJaFxAQnO4bfLaBuWTkeWsFLBmx7u5a1da6o8b0oD8nuRoSU89n+T7Pid5nD0SSua6R xlsPUxtUfHw2W5Nhw9C4ZLurEqWakoFu0sOUXSM8xBACEmToPTxTQbZtrusyOIQPA/ij zREURZV3+gkhoMbEe+SWF3BuJ9m9NOTYonw/6ZszCPu38FJ9rm9Zpbr+Oov0uOL/KxrZ Vakw== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AFNElJ9ZOl9ayscqwY8VhNxBDM8zABs+WNjgUC2skS8LpdyVbicQyOP10CRH2Gz35ZzdGjPzbArHG34=@isar-build.org X-Gm-Message-State: AOJu0Yxilg1p1jNnaqgwnbQnM8pBQ5FqWKP14ktQVUJF6WglAADfL0Zk u1tODNdlkVxa20qYhbawJCbQlgxVT07cu0b2DwqwcJO4gd3jI6CYHWFE X-Received: by 2002:a05:6402:518c:b0:68c:627d:fc2b with SMTP id 4fb4d7f45d1cf-68fa5039e51mr8505204a12.16.1780995236479; Tue, 09 Jun 2026 01:53:56 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AX0PUUcZ2CFiZRnd5oh0pb3SOqA4VDPBpz+NvYlBrSRrsJmiqQ==" Received: by 2002:a05:6402:2310:b0:68d:e3a9:fde0 with SMTP id 4fb4d7f45d1cf-68f08d79ecels4926926a12.0.-pod-prod-04-eu; Tue, 09 Jun 2026 01:53:54 -0700 (PDT) X-Received: by 2002:a05:6402:4301:b0:691:5f30:37ec with SMTP id 4fb4d7f45d1cf-6915f303b38mr6214706a12.25.1780995234655; Tue, 09 Jun 2026 01:53:54 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1780995234; cv=none; d=google.com; s=arc-20240605; b=Jae7H0u/oaCt8rPb54vkrKOvnWke9p5Nik+K7gEZmG7lUAP2QbdiOov2et3qz4Fycv frOR8AJE2HRjy/LCwuJoNp+xn06WA7GY+eM2y2x74E4c3aPaGeE6E9sIHs7YtjjnD811 dRqYmbQlw4+n+/i1KOSLdTZg522vrzPS9p4DMj+2TROSG/J9mYyOs7LyBme74gBYgJQQ SZZM+VNXH9rIvd04yPMqJw0VV0ttnw00+VV2LwOmpsbn00gHaj63bqjeq/4WT4Yd98tj 3fF+GtVc9bFcKvtal0KRLBjW54wqb9goSpE3lpe1Teg3GKgU7UzOXD9NITBZ0KwD3Xgk uMPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from; bh=byGrwfk3nWQH2ujo+RXiRcdQCjPRbPa4CZBad83pfRc=; fh=/h9QQkzJ8EboVkWg45aWwpaUro6WMavIVd2OhN45RtE=; b=ANDE54eIVO/0QjA79l78E3Z7BE5au/R4sL8HUZiwKZM7TODb+VvS+UCWvUg+OVS+Oq rPe2tidpsOn/M3zz7m3xLtHxW5Kj2lV1oFPlZR5e7QcsXMXkpmcKATB6c8MLUOhlh1rU lm0b7IarTvFixEV2IL0Wrw8Bc5IhWvLP4xwHoKhsJ7YhuilaAoML51FBeFuSzdn9PmTM JhV7jUiawD7tBhoYjzC5qTrK9L1hSkuS3obDVd9PdtsPVAoL3AG9Ba2BJ4QOWOT9g3er ei4Tg6Mol1sGbOAq/el9pn6BJGOHB3T+UHBEy6BuzHwdRiDM/W3bW1E74Vp+u2sqrtv1 FGAg==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id 4fb4d7f45d1cf-68e64e2456asi452850a12.2.2026.06.09.01.53.54 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Tue, 09 Jun 2026 01:53:54 -0700 (PDT) Received-SPF: pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from user-B660.promwad.corp ([159.148.83.123]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 6598rrgB003923 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 9 Jun 2026 10:53:54 +0200 From: Anton Mikanovich To: isar-users@googlegroups.com Cc: Anton Mikanovich Subject: [PATCH] kas: Support kas build system selection Date: Tue, 9 Jun 2026 11:53:46 +0300 Message-Id: <20260609085346.3949936-1-amikan@ilbers.de> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: amikan@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= This adds yaml Kconfig options that allow to choose kas build system from the following list: --isar-rootless --isar-privileged After moving to rootless kas container previously used "--isar" option turns deprecated and should be replaced by "--isar-privileged". Signed-off-by: Anton Mikanovich --- Kconfig | 3 ++- kas/opt/Kconfig | 20 ++++++++++++++++++++ 2 files changed, 22 insertions(+), 1 deletion(-) diff --git a/Kconfig b/Kconfig index 66dd4112..cfea1902 100644 --- a/Kconfig +++ b/Kconfig @@ -1,5 +1,5 @@ # This software is a part of Isar. -# Copyright (C) 2023 ilbers GmbH +# Copyright (C) 2023-2026 ilbers GmbH # # SPDX-License-Identifier: MIT # @@ -14,6 +14,7 @@ config KAS_INCLUDE_MAIN config KAS_BUILD_SYSTEM string + default "isar-privileged" if KAS_BUILD_SYSTEM_ISAR_PRIVILEGED default "isar-rootless" source "kas/machine/Kconfig" diff --git a/kas/opt/Kconfig b/kas/opt/Kconfig index ac9b2f55..1bea49b8 100644 --- a/kas/opt/Kconfig +++ b/kas/opt/Kconfig @@ -115,6 +115,26 @@ config KAS_INCLUDE_USER_ISAR endmenu + +menu "Kas build system" + +choice + prompt "Kas build system" + default KAS_BUILD_SYSTEM_ISAR_ROOTLESS + help + Rootless build mode is using unshare syscall to avoid security issues. + Otherwize privileged mode with sudo permissions still can be used. + +config KAS_BUILD_SYSTEM_ISAR_ROOTLESS + bool "Rootless (--isar-rootless)" + +config KAS_BUILD_SYSTEM_ISAR_PRIVILEGED + bool "Privileged (--isar-privileged)" + +endchoice + +endmenu + config KAS_IMAGE_FSTYPES string "Additional image fstypes" default ""