From patchwork Fri Aug 21 12:58:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5405 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 21 Aug 2026 14:58:28 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ot1-f55.google.com (mail-ot1-f55.google.com [209.85.210.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 67LCwQs4020380 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 21 Aug 2026 14:58:27 +0200 Received: by mail-ot1-f55.google.com with SMTP id 46e09a7af769-7f3cc4f6604sf1583537a34.0 for ; Fri, 21 Aug 2026 05:58:27 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1787317101; cv=pass; d=google.com; s=arc-20260327; b=ajyhLK9cgZMrF1CxowqdWfkjbzXAn1A641k/4wtVLYSUmyZwmpo21ZPkBTVXTNt2Xz Q2wLf881tgliYf+NE3KH5ZjR5zJQ4HF74zldwoyJpaImoKf7pHzUqFX1wMAOD11TRgPK FgORafcL219G2IkidEDrw6JlvT6pqsqxRdMxmVmqCvFfzY14klRpdMAvp0SXV8CayAuD 3YTxJ3bNf/l2fcaAYq93S+kblqR6Iqhbi05M3nW1QjctkHIi5nPnFBhZVyP/l4ECfDuS ueXuFVZ7sJrMMNPeoM5pELTS4MW4Fo03n2SJ440ruEuD7A/HG3EOI3zNOikdKv9ewpHN kcsQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=FK+wJKH2gyY57UDmWGLE69DeSxIe43JeBjeFT0zPCds=; fh=SYUvJhA44T4P1ZOwuArYBG0EfOKIdBeskfWsjq95QHM=; b=IGDvI/+zDphhjrf9rRZBhWfGEYDq7ebZP/794Ti1Xa+nM2dr9TyMSZTGkMsNN1kEj+ wFeec5cwvR3dayI3u2m5mkjxp+M5ukJ9rEkyyIaTrRw1dLkuAwsFBwGVY3g802KV59um TnRVGFzIKFs5bkH0JE9022DrtI2HVRbqmOtSk40dkDr2qjBg7/b3FSiAG5AhwfpMoyV6 Ckda36fbg6rluoF22LjM7u+EotX/YiQ2A6XB8e7HWMrUWlBM4IKdCXqWBCZ4kb2g/jAn 8aT4ikKzodi/Xu35HoZHZ5O96dwjpSRFTL8cUHlFHZqX7AgfDQGF+JHeXm+5WS7HL6I3 WCbg==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=YhO1auFt; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1787317101; x=1787921901; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=FK+wJKH2gyY57UDmWGLE69DeSxIe43JeBjeFT0zPCds=; b=nBvxZHX6gaAdf6oaqHYB3+IGInK5Yo9BG+TUOZSkSQyy2/+JYFpcWUlol4wDIXWUT5 xo7J3hZ0nCHcG3BMTFzkAdaPXHnsjFTpvbbwiEzJFBiORjCRXwUNTjdFRyGx7NKg/XjT qDT8RySZG6A0xv0BGJdr8Ok0Gfdr12xDLP4C9Y7jEKruSy6SQodMWq4cKLBPQebDgNqO z0oCkMGGxUlM4UJX6a7N4R1RgtgRJ3f6YoDtT03Mg+cniq8abIBLy5P/HvOo1HA4cfXM ZN8MRdxoENrt84xM38FI3FlIaa2D1TxLwTZpWXwFd+0kE3j+vEsB2goQHt+5m00EFSzb vBFQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787317101; x=1787921901; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=FK+wJKH2gyY57UDmWGLE69DeSxIe43JeBjeFT0zPCds=; b=VVghOer3LexvESM/w1kjxqBx2tqfoPuK37jIeVenKIRJAH4O6znu0wrs03Vn6w6vVd YOh0+K42a3sMJhCSGsXcZG6c6DTRyJ5ijSh2sGVfzibiKj9Cos/a/7UHKKDRiIG3lElL +ucCFNsxVvbjpU9/a3/JHJDfq3UMvx/XKrqHEuDQ62NUnDVU7XpB61rurGTi/r/jVmTq QZxz/PC9jHcuiUvudeIcH572kFiDYQOkoZjiRkYdIC33SCRIVoXoukOMI8b29IMmQ1wl XfrH47ASHew2V4lcrH67w6cOsQLSz8DWI3p5Ak67Zhm5G1OnRi0CokIlFsVIIUBYiPvh 7LCg== X-Forwarded-Encrypted: i=3; AHgh+RqciATzYldcmA1y9bAe6fW6pPZbSDREI39Pfx8iEQtCMjuTQ605oQFXa6UiLqQyW6uADMHLwM0=@isar-build.org X-Gm-Message-State: AOJu0YwgZqubtEZUABcBrN1ZResAcBN7lWvzcf6rFQFuAvizoYedXq2F d6VuYrINgR8G9JnglkbFviLVgstAbehIKvreMgp0Z4VeEMmaJZ4ANJAl X-Received: by 2002:a05:6820:200a:b0:6ab:13:b207 with SMTP id 006d021491bc7-6b1593ee12cmr6607409eaf.27.1787317100958; Fri, 21 Aug 2026 05:58:20 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcEpNnWvSZscK8BmC4oVOAqSts1ICX2UZ6ua7X4WYGkdw==" Received: by 2002:a4a:d670:0:b0:6ae:98bc:10e0 with SMTP id 006d021491bc7-6b1486b4603ls2638781eaf.2.-pod-prod-05-us; Fri, 21 Aug 2026 05:58:20 -0700 (PDT) X-Received: by 2002:a05:6820:5714:20b0:6b1:535a:eb8 with SMTP id 006d021491bc7-6b1591d56f7mr4719017eaf.2.1787317099865; Fri, 21 Aug 2026 05:58:19 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1787317099; cv=pass; d=google.com; s=arc-20260327; b=qWgMubT+qOX+517I3me20Ab/sBNZnYqsvQzfJpDYfFAemwito270TKjZlbOe2YPmlW eaqGpO7hWOmcyhTgXh9SXRmYRAaKh1y+SYPnWXHNu9kLqeObQQCGqAG/18qjAby0PyHX xwzlGlJtj+AcRuT9buzjRFqJhZO2U5jb8+E72N2K+Xhqf6QoXEkfRGuYSG7dY4vDgMm2 1HjiDfoe8eMHN7RobZ3NGcgAAOsheYL+PR9m959Evo31Efw1xwYa4qntJ5yiFQSBS8nY uewvblZf1UGxhwRWE8abGi3qepbW2RvuHdRSwxMWpIwYhV5uCVJ+wbbiGAXWXTQdhqTq 6sCw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=3CTCpqx6H5Rr91ntHPEvAQuH+mVY8Afd5kOBnXOVhlw=; fh=FXvauwBldM+Ixx8E08RRuBbXz3swagS87n3MQ8TSE5w=; b=OTba2W/Kl1zFpPlCKWtbcu7QYvKFBrfVnp3l+0EonPKhMJKbAQC6CTYHDHGLP9XYwq JKKN0j/VhgInSwKgYYEeDxjCm4RqLrEKurupbx7OGc/AfPacL76sWCoCDOBsR5LjhuLp utAIfWZvezJW7UhUf4kMS4z4FgBfwE4ZumDTjXam/Ij5CI8cj0xQcKR1ugYBcwzxR0kW lQgtGm9H+4/EcOoL9crriIOKZYRLtlL94WF97kjmZgCxZTmlVKMCH66c9WGtz5GW+cwD DjrwX5MtyUt5F64I8LQMGdvdDwcdzH57PdFNzsR2NbzUsu0vVxnfDTGgJoQC7f1It4qz nzbQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=YhO1auFt; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 586e51a60fabf-4632ab859f6si133905fac.8.2026.08.21.05.58.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Aug 2026 05:58:19 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=dT5F9JbAMLnq5WbaMcHEPEsW+jn+8/S3P9tXvEU/HV/G3aNbE+sWf7wo0vm8glyiNVu7fhWwAnxhx4nLFrYozjCkY7l55N8EJyux/CkMuSZNp7EDOmtPECB1w4PxIvX37wpO6FNGtU6wM21tH7RfTZXdkBgxo1Puo1K4kmrv5SbwL5Crs2Njh9xgnnHNjNgXhr+EtXNtIXd6pWmamB6VchoEWiWbgw+Ts0HZnRE8thXLmZqcERRFLqa7b9KP6T0usMBqlLJNH6L/06ZxOjeZLZU1QgOZlg6YqqF9bObwKmctGMkeZxrFnUmzrs8M/Ni+ubjG9RcNP2nRRuDf7Cgudw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=3CTCpqx6H5Rr91ntHPEvAQuH+mVY8Afd5kOBnXOVhlw=; b=ihTTI3IHAkGt3aRPeOTTdqxrqEoZjx4p9SsmMnNqIFORO5j/GbrRup7gmSodRG/Bcp/QL7EdpXqK/1CTaziUDxxQcjIcDDiIZcOpxYbuER+Tqxl5jtrknUaZd+cBal/GWz8edZ6FRxIrpPtXs4Ij8nR/ic8NGhBph8um6sx9nwFU1fuTSy1AMBJ2W2OvUns6Pq3kh95Hlf2zZZgaTwFgE7Cer1xI3cPSEKvnruQypnsiLhDvOq2rIvc8xfnoU4Fy11ICoZobY8eZJUcV8E1md7qc1c7mBRDThRzMK5A+UnTMx9MsNcKfTfmsyXunafDjzACZnDkYXgIJdCAwzxZwaw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by AS8PR10MB7428.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5ac::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.10; Fri, 21 Aug 2026 12:58:16 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0339.008; Fri, 21 Aug 2026 12:58:16 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: michael.adler@siemens.com, jan.kiszka@siemens.com, Felix Moessbauer Subject: [PATCH 1/2] add script to check if the current environment supports rootless builds Date: Fri, 21 Aug 2026 14:58:04 +0200 Message-ID: <20260821125806.2161496-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 X-ClientProxiedBy: FR2P281CA0166.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:99::13) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|AS8PR10MB7428:EE_ X-MS-Office365-Filtering-Correlation-Id: 493f64f5-ad38-44f3-99d5-08deff83ddd6 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|366016|1800799024|376014|10067099003|56012099006|6133799003|18002099003|55112099003|11063799006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(366016)(1800799024)(376014)(10067099003)(56012099006)(6133799003)(18002099003)(55112099003)(11063799006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: rW4eQ764fax6HeAgVwrCadgh5XKtn4SzAodItH4B0PM0QuruaftQmQbTjffMAmAXFcZJAkwGbFtICMonE5J0ZVFZ9dgpcOEdatQiUQ4Wf5EYFK8Ehp9xgelVN3zBAQAU+6b5OW1/ljJpm/rOLxsdcbhUbfsNefAhCTPWny5vTKV3XNFVraYw7y5hAxlFKhgnxT+pVNL6QWd96GptMnEgH7u+pJIW/9L9Qnvpf2SKPyqXkmwLFP2OOiNO8YaETaxRqH7jRbJcuA2zHr+BsEMhcFSDTyexlU22xcxN7orELIAp+I2TlCPtg74xrR9etWLF+AuZHHyPuyT1tmUfL8j8neRH4CWd72CIdYJQtpHC635cjNQaGk7dBZgNsaAo7CZ2Snitc7xXvhUWcc7swEm77CPIred+VquyNkXhmL0gc1OJTvZX8ZxaymYi2bAezsGIdVEE4IMz9h3Vj6ESxUvL5K6vZ/ki+I4/kkKCtQOBxJ1oUlSnqArZ8LXc5D2KT//DfVSoF8eWfu0FfvBpo7rNe4J3hVXy7TIm7KnKEdJZ68pJI1r4VjI1HrFIlOc1qUg9WA+zMbcGmMAnu8IzFBCIe9+EAXLzmVXZ4qxVksLQRHLo9ZEWFb7Ek8wuHFc1WOc0jyKa4xD/RHJzXdAaCRMLVZn/n3gjKE7hnX0URq5cgCC5gwgty6QilLSSH+9pPw2NTiF++olyK6XKP31S7sscwi3vR3Fekjz68OOmNLgDImxicMgGzKvSKulLxjN3W9quxU+w8UealuiNP0LTpyQ/8OZp//9g7N8HmMmIg1Y+A4eBoUeROPTQbE6qutQm3KraYIuKQkLhjDG0i0CRYYJVHqNX61uIRpKMZyUYMxmdAxvgXKsTpaTeUmGKsMI54f8yn/oFDd6FTiFUBMv2nJc5d2moX2EEh65AOBV1Wu5OYTDnxFsEs+SKIx5h3jiPqOUnsZxtG3NDidl2IbQTdYhzSQkCdzS7vabJ9Cmy+E5Iv+ri1KVDglrksVIOZxZc82RQ7RCPiEx8ylEfZPHUu1iPHZnY0UHxsqwD+a+WIZhuHDZ81UCEhjGFdrmiupGY3juBQop94hS7AxqAMKLj8qcgoTHr2+qFDYgGoXbKVD3TbmTgf08xv5yhOsFVYTvqcmdYi5Hj1WUJ9T53qksssFvrc9cuzLX+Z90UKtZ5rVv9gnHILY2RpyohzSCd0n0/5x3QRl3ThRGd7dHVQtdvgqfbbkug958e5SS6JFGf4NTk6DlcO3seHHUUHn2HTdz3N3mBv4FYTRrJk+9hJDWq2d2CDsw8aXhlAiNZSqUtMB1a34eia3NirVQOBDO+ab21C30oDc6hsbWIeS1d8Jf2EItaPAXH6kpe292Tk55zE6l/VwiEUHDBcXWmcwL8GaochnHLjKjgGiW+s7Po2HJtwQc8JeFGhy+PjZKfLhANbLso7BtGLDrlQSYN3dw4qDtQ3fgwJvTeFiJ/6B2/QxxCWnQ3B1d2dsV4NoqovKrHKAEnUpgO5wpUpkZPrNU9/zBoGra/eDi3OhI5rx0FQ/m7FIph2qVuzKVTN9B9gYct1REn61qTGGuuR8jHim3z1FY4ImspORG3wWj5zyrl6lPGG4FF+ju4jJZVZs8pYnYVPHTIwSQKqtyioq6XgeBugsPZpUBRgh18F4ATKDvXTIc5T3TMiNls3I98fnoyMskQ70fjxK0D9avSFHvK0BC3f3At6ELvrHVuPU2DRyFGCjbpa+8cBm2u2XVap3NzUmZpqG4wS3cZnLvtVnArx2toAv5JcBCyLF8dzS58 X-MS-Exchange-AntiSpam-MessageData-1: v2ZmIIP8BisrqVAzZrwvF/ferkXjhLERvkU= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 493f64f5-ad38-44f3-99d5-08deff83ddd6 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Aug 2026 12:58:16.2270 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: w1zfIDFbr+mZQO10EygKUn/Ol15ht+C/38hXhuoC4wlv/IVn/S/tuN6dyG5QR5qkdmmWrk5nhnK/vzgcF/DRxejAMXOaEmaIFaWlKXFbk9A= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR10MB7428 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=YhO1auFt; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Running builds in rootless mode has a lot of non obvious pre conditions. To help the user check if his system is configured correctly, we provide a script that checks the needed features. If a feature is missing, it issues an error regarding what likely is the root cause. Signed-off-by: Felix Moessbauer --- scripts/isar-check-rootless | 46 +++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100755 scripts/isar-check-rootless diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless new file mode 100755 index 00000000..61a2a2e3 --- /dev/null +++ b/scripts/isar-check-rootless @@ -0,0 +1,46 @@ +#!/bin/sh +# Copyright (C) 2026 Siemens AG +# SPDX-License-Identifier: MIT +# +# Helper script to check if the current environment supports unprivileged +# rootless builds with unshare. +# Returns 0 if supported, otherwise returns 1 and prints an error message to stderr. + +if ! run_privileged_cmd=$(bitbake-getvar -q --value RUN_PRIVILEGED_CMD); then + echo "error: cannot determine RUN_PRIVILEGED_CMD from BitBake" >&2 + exit 1 +fi + +if ! ${run_privileged_cmd} /bin/sh <<'EOF' + failed=0 + + fail() { + echo "error: $1" >&2 + echo " likely cause: $2" >&2 + failed=1 + } + + mountpoint=$(mktemp -d) + if [ -n "$mountpoint" ]; then + if ! mount -t proc proc "$mountpoint"; then + fail "cannot mount procfs in the user namespace" \ + "procfs is over-mounted by the container runtime, or the host security policy blocks procfs mounts" + else + umount "$mountpoint" + fi + rmdir "$mountpoint" + fi + + if ! setpriv --reuid=nobody --regid=nogroup --clear-groups /usr/bin/true; then + fail "cannot execute as nobody:nogroup in the user namespace" \ + "the subuid / subgid ID range is too small or incomplete" + fi + + exit "$failed" +EOF +then + echo "error: unprivileged rootless builds are not supported; see the checks above" >&2 + exit 1 +fi + +echo "unprivileged rootless builds are supported" From patchwork Fri Aug 21 12:58:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5406 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 21 Aug 2026 14:58:32 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-qv1-f55.google.com (mail-qv1-f55.google.com [209.85.219.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 67LCwUvf020381 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 21 Aug 2026 14:58:31 +0200 Received: by mail-qv1-f55.google.com with SMTP id 6a1803df08f44-8eeba1d9e47sf5777306d6.2 for ; Fri, 21 Aug 2026 05:58:31 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1787317105; cv=pass; d=google.com; s=arc-20260327; b=AsIODvs1CE7yY+C9qXRyn74B7sONIvPhIwxpyuK+nfXnKp69Dux99yHbjxwyOleKEy gwtunkTBeaQH56BoPb88c8ofDRuhXuID1VJ8b3U2ZtP4+NauR1sSM9tiB0z0sBLrCjOr f9R6CmpdInJHBKKA+zGbtHY4VQiYtv9VMQSOOgDCGvXSmptZXu0XF89hVSGZymLvOCZk kURrXNtJ7f+HgWI9lrFtAyeefP1um4SVZUzbJbeJ9wMoa0eClEU1VS6WrW41ab0YGFMr +U8aKQkO/FwdjzK0g9jRl9MCtlyVQdkOfA9SEVkhUlZmgd3rhUN3yGUwkpN7f6HytvvA UrqQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=zXaYhI507D6GUNPucKYISS3COX/8v1BSSHwzftDoU90=; fh=QOFVm0/9pP0Vmu5c5EMvtr2XFdlNsoUDsEeNlfO253o=; b=fnJv7IHTWw0E37OI6zsINZUPKS1GULexqGA1moSRoavBtNb5zv9h1b9R57tU41qxAo DkcDC4XEcWHWt3wH4cUjBVzDLyUfFKsL76JsHCISI0z+jHNnMQCoJF2fyAoGK7bkTTDG ZGIsqZsAZJ1z2c1aX8SbkPh4h2kiEqzUrh0+QMZBXTppipNSUtDRYICwob6KcbYuR48+ wi0t80WkC6z5Svx0Fq9h9cHQ8+U5Z9p21NP20PGBrgYM7mHtUr75zHngR94LySC1xadu 7jI9nqMvDexkgNI+9fMK1hbQGom8ywUKW4/Oiip+XzwUbGFBb2Djc4fEriqYrO9ACdAm qTFA==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GyL8Yyhf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1787317105; x=1787921905; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=zXaYhI507D6GUNPucKYISS3COX/8v1BSSHwzftDoU90=; b=SzxZP71lifusjRfVUPVkcKARbwweBpUQ/0pZVyb37V12/yfYcp+bUpw3VH8thb77qf 7nTc91yiB+TaUiC+c6hbQecGx+zWexxzgwjMbDSsAhqZw26yN1pvnm0hqtZByRYEezgz 9FrzpVGaGLyURcZyLGr4iI2DmeCiuVTdVDfpEmEq+AZ64B/yBcp1xiZq8LmZ9Im1OHOy T1s7YV0GkARYYE6MJRmIGJKgQebSUYltyWsgUYg23c03kPp5gS5sNk761LgTuERA+Tq3 TJuWHl5lr93/gRsdkB4KULvyP47Dr3MvrZPBDc+zmplNSmYHMsrtJlyKNdQSkDJVuQCB IRKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787317105; x=1787921905; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=zXaYhI507D6GUNPucKYISS3COX/8v1BSSHwzftDoU90=; b=ASAu2m0xX73oNpk1tOn0YHyG4IwBQCUDXraS2zA/Hoekh2Ngcs+/oXx60J/mIYNwoO P4DAb68Nl10l/D/zquDzpc+XO8fkO9BDmWLIiDvcIu8BM1qxCX+4AKQF3dglhIj3CIWa OW8vFQV7FUrfQs9I2bSBWxMOWhtBf3/g9YgJTPteOgu3r6qwGrd6yFUV6bisnHK4taLe ZG7wRCDeTx4iS+rLmJ88wXZHbGDj7FcrAjX+uszo6EXkxsHRHpsnSoMWAdD6JC0jKvay n6bDpTHC1Hp9CINIAUVIrQZJTEs7DBNHO3jyudoUWOd0oh6Vsfv2nR5U5MrmTFFa5xBg eeWw== X-Forwarded-Encrypted: i=3; AHgh+Ro6QtJ1XclHqApK+ti0UR21Y6EbDQSd507wI+OWScU8vFuz++BUXwrt/a0c/4CHmVd//dJZWEg=@isar-build.org X-Gm-Message-State: AOJu0Yw8HVyFiud/OOJf+jxAhqgde6MxohcMQkrHg9z9xAzpb0cZHs8T 5xYuB5z0YWtcvEqpFvKp34QMmKJGOPpE0fSxUSr7Oxex6UW8dcNyjZrs X-Received: by 2002:a05:6214:3a03:b0:90c:5947:7e64 with SMTP id 6a1803df08f44-90c80942f3cmr62879146d6.3.1787317104957; Fri, 21 Aug 2026 05:58:24 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLde0nA1AsxTcLV98XL1plHL/XM2ru+iF//WN7MeRZY8Tlg==" Received: by 2002:ad4:4252:0:b0:90c:4d67:c8d3 with SMTP id 6a1803df08f44-90c6ab5dadcls34051766d6.0.-pod-prod-02-us; Fri, 21 Aug 2026 05:58:23 -0700 (PDT) X-Received: by 2002:a05:6214:2d44:b0:8be:1620:a95a with SMTP id 6a1803df08f44-90c80e02f45mr58012626d6.27.1787317103639; Fri, 21 Aug 2026 05:58:23 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1787317103; cv=pass; d=google.com; s=arc-20260327; b=PebKdYCw/1siS+wjeZBMMD5v2/H8ZK6yRVQRi8tH3lilT4xRgxpemorbbh2e9pOjdu kbT0ArRgPa2jGAQ9MCDFKNnq7e4JFcwLjmDLi/rPXUZjDhlakE8paaca9bD41Yq/SJDc bbtNLJsMXhwjEuSYKKQJQIj41PoUukkFZFZuOIKKmtZWe3hgrEhrDxP/j5Kjr54lB64j DE7B9ubQib21XY3wfis9pH9DlnYspvCUnzLdted0YmF+j0MdvqsU7vMyJU0uNEnXLsHy 76297tLmd6FikJd5mzXLfZuRagiMQ1XbanhxRP9MLzJstzh19BLLv5ULQbno/BnSyphc Fejw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=q7MUGRwBwzAsRqf/eZQfb7T1Jdmk5e/sd8knaNSLjF4=; fh=FXvauwBldM+Ixx8E08RRuBbXz3swagS87n3MQ8TSE5w=; b=R704sVYljmFbZa5UTUsjmshtprD4rb8OOiLJ6MkbORIE9nk6oaDkWOE90ZdTWojv/Q rGY65i7ce7gmeZenRQU/V1hfLEWjZckLaWN0CWnF8T2ZaLtxvtB0w0hOQUXTwUfqC+uv up1oICDmAyN22waR+qG7yEle7XB0hW3FKkAzS7fgg06Tf8K9H4YWrCkVUzZjp2QdmGvC PiiByt6fQ2r/YcWtkLkA2VZYTuinz+T8orJtx93rOTSY8eiedqFzhLPIR+zDrt52ZWwW v+r4lVGxUbBX0QDLpK+EdvFTEyjS0OKi4W/f9Wb4W0eYnPiGBJeqGlTa/BLMTpVnWAv0 ElVQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GyL8Yyhf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from OSPPR02CU001.outbound.protection.outlook.com (mail-norwayeastazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c20f::7]) by gmr-mx.google.com with ESMTPS id 6a1803df08f44-90c5f1372a0si2349666d6.4.2026.08.21.05.58.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Aug 2026 05:58:23 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) client-ip=2a01:111:f403:c20f::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=lHmtJtUdca5C1wyS+9OdfdOrYQOpIQIsSh4RJBXrhNS3suv/eZnrCqEdseHA7t/03iItEztPNWoOO6nEoiB0GnqwRVfop07NZPHdbt/KbZBd5H+QUy/DummGE1xJ7IrwHNYXjztvnXx1UnZs3QxorZhERRT0ls/KkoIHOCnfOiDk9e8OHV6tGTJQJtEpf0+Y+YggxrDiO4jSnkgTn2mMzpHOhQ5KE+sab3gsGeD4ZODUnfn/pdF24pCZxYjVcO1sFeDkx72ROeUIqkHPSVA8F4o9TtxB/qxxG966MnV/pcjh80dWeYBeSzNilicAhY2I1/1lcoWH5byMH3UyC/D7lw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=q7MUGRwBwzAsRqf/eZQfb7T1Jdmk5e/sd8knaNSLjF4=; b=GGR17f1LviudQsWMCvxF8xzBqENzRwPwSwnWVRNT4ewJWsr8+CAqLyoZ/IPekCXbWGVui2v+ufRArgeu/FBJspsjgAffSA9SZ8Qt34PG1s16MF5ZlKIYX1+eJ3Jz41+vvNMD2dXPsNRGREQj1+25LFTHpqtAFOBksP3Pmoi01FBCZyYaCdBCnxAHYu7uMWKWQ6OYKM6IaHft0RV2H5ZJBSoWASgxEeIThX9f+h7wbepMoOuyM3eaiTYBwMaA+hAIev+KbLgMgHuMBdDZ0E7I56ptESSwwNdjcFCHlTyNBCy2Ot0HfyIDBndQc0nHaIt1cJKl/BYMhmqu3YL2rzh09g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by AS8PR10MB7428.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5ac::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.10; Fri, 21 Aug 2026 12:58:20 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0339.008; Fri, 21 Aug 2026 12:58:20 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: michael.adler@siemens.com, jan.kiszka@siemens.com, Felix Moessbauer Subject: [PATCH 2/2] user_manual: document rootless build mode Date: Fri, 21 Aug 2026 14:58:05 +0200 Message-ID: <20260821125806.2161496-2-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260821125806.2161496-1-felix.moessbauer@siemens.com> References: <20260821125806.2161496-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR2P281CA0166.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:99::13) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|AS8PR10MB7428:EE_ X-MS-Office365-Filtering-Correlation-Id: 3e4d275e-4693-4f9c-b14c-08deff83e086 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|366016|1800799024|376014|10067099003|56012099006|3023799007|18002099003|55112099003|22082099003|20052099010|11063799006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(366016)(1800799024)(376014)(10067099003)(56012099006)(3023799007)(18002099003)(55112099003)(22082099003)(20052099010)(11063799006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: WEETmrxdP/QUDOTwYCRy9A0I7YtXAyz+ILQ= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3e4d275e-4693-4f9c-b14c-08deff83e086 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Aug 2026 12:58:20.6810 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: m1kQ/HOOLpFfcBjkZmdGR/wjOmksnAsegx+9eEE9qiHXcY4CpL+OK3SCuLWztCK79JmVCvWbzMtneHr0JbsCDQDGY77GZUSPQcFmyyx5HfE= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR10MB7428 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GyL8Yyhf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Currently only the requirements for privileged execution are documented. As we now support rootless execution as well, document this - along with the requirements check script. Signed-off-by: Felix Moessbauer --- doc/user_manual.md | 31 +++++++++++++++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/doc/user_manual.md b/doc/user_manual.md index cb47c157..8d12a992 100644 --- a/doc/user_manual.md +++ b/doc/user_manual.md @@ -140,9 +140,15 @@ To run images built for QEMU, you also need to install the related package: apt install qemu ``` -### Setup Sudo +Isar has two execution modes: privileged (default), and rootless. The mode +only determines how Isar obtains the privileges needed during a build; it does +not affect the generated artifacts. The following sections describe their +respective host requirements and setup. -Isar requires `sudo` rights without password to work with `chroot`. To add them, use the following steps: +### Privileged Builds + +Privileged execution requires `sudo` rights without password to work with `chroot`. +To add them, use the following steps: ``` # visudo ``` @@ -154,6 +160,27 @@ In the editor, allow the current user to run sudo without a password, e.g.: Replace `` with your username. Use the tab character between the username and parameters. The second line will make sure your proxy settings will not get lost when using `sudo`. Include it if you are in the unfortunate position to having to deal with that. +### Rootless Builds + +As an alternative to the privileged `schroot` backend, Isar can build using unprivileged user namespaces. +To verify that the current host and user support rootless builds, run the +following command after [initializing the build directory](#initialize-the-build-directory): + +``` +$ scripts/isar-check-rootless +``` + +Enable rootless builds in `conf/local.conf`: + +``` +ISAR_ROOTLESS = "1" +``` + +Files produced inside a rootless namespace can have ownership that the calling +user cannot remove directly. Use `scripts/isar-clean-builddir --rootless ` +to clean a build directory with mixed ownership. When using a container, run +the cleanup script from the same container environment that created the files. + ### Check out Isar Clone the Isar repository: