From patchwork Fri Aug 21 13:12:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5407 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 21 Aug 2026 15:12:50 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-yw1-f183.google.com (mail-yw1-f183.google.com [209.85.128.183]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 67LDCmIq020588 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 21 Aug 2026 15:12:49 +0200 Received: by mail-yw1-f183.google.com with SMTP id 00721157ae682-81e71be771csf66611967b3.0 for ; Fri, 21 Aug 2026 06:12:49 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1787317963; cv=pass; d=google.com; s=arc-20260327; b=S08ocFAzgPTi836Kf4zuanTj00XD3pJhAl3fjiIa2EIxsOfL5CZFhQP6kBCM0+5oNF 0XJf221xil7DeKr046Q7ZX5WpXP14MP+XuBMvpYs5LicZwS8nN2G1pHJi7vEJh88ckYE BW5/vv23vP0hLphYXE3reQhvr51C0K5cxqGUKTkpoLHD/Gy35HFV0x+2ZQgvX7ZdESsI HaR3e6RfUWxMZBZh8Io2Pl2pYMvZ1bwUR0Ya/mHfJshiRBciKL8cYT11HHmD93OMgtmu Ep2kqnDskKPHFDDdCff5mRWAvnXdIr8N3f82Kmq7ipdEnjhWydkcn9bf4vnV5q8ewHPw 5PTg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=JWEYbWQR9B9dBhghEmCFxVFxbRiBRNH3Xr6cpf7TwPg=; fh=X5BaXUJIZp9BZHlK0+8gIoiffk5EKDfIr1O/qFddTiQ=; b=pRfYvOVj/rfLx+ElqUnVn+EVBuVdBjBOm8JJ3TeiY4MJsx5K9FnCprO+dbt3LEEg0n GheMO1EXZZqDqO8lZ6qAxekZLxoPRa3ghDsiFa4q6NUZleanlxnlae8+QgDPJir8EPsH RW/Q6d87ddRfQKE9mouy/jTVa8ku5UvfDEOo7ius2ko9Q5qklLahL2xWWl2NMTgkj6r/ LZRDhqZ0f6gGrEjY9OSEjE+U+mV+62UuUqFDdniKRp6m6emJZOvIIfOAT8dYNkUfV4DG H7rdqwKdDAdfHTGR40IM00VkU9ZjcHfT+k0A3cDgM4Lc5socphrKIcc49/lVsNfTdBcX gvxw==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GagY4XA2; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1787317963; x=1787922763; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=JWEYbWQR9B9dBhghEmCFxVFxbRiBRNH3Xr6cpf7TwPg=; b=OCH54Y3bftd+qsbZa7tA+37B+VES2HiqbRVN6WaxnrHorcpboK0fTAErY8oqo6keYV /CgE8sMeP42zDZYRAtYvZ1eGvdfZ2gO0+iB3AuNtnQhVVdbVIjDpofyUSwJ087knNr+i LyKDfAjTGr3KTd3k2mxxwVZNItiQk8tHEvy8FWR62UTpmrJS1rdlYVcZB+NoGlNYtYzO s0+NY3QvlqU7b5FKvzCDGWBxQ8vXQ+PBOsrXGP6C+9jlrRmOZZYAG8FKYV+joNgnhJUT v7kH8ernSS5r4IycxkDnnURMcjkyv7EgB0+5IvNGlNAUk5/8SaYAoSVbDHAtXeoEs8p0 /hpQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787317963; x=1787922763; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=JWEYbWQR9B9dBhghEmCFxVFxbRiBRNH3Xr6cpf7TwPg=; b=KV/bRK6HtaW/N6i0VxI8gnXHxFGlaH1yc3vq/qyYEizsmryHhgQ+sNSdG/XWviSAZX 8KRu222tqg7us49Aeo1e9haqEy5NoEX4J+VsJyOjxyxdjQKL5Irg4aFPOGUnVtun8NTI cWfAcjKuIa6o5gHMEsWyNVkz7Kg0AHU02FAYJ3V5MUbd9tvi117iA4m4mNrtUvzhILCM x4HILMsdLZV55OzBQgvE4Oh45FWzcpsX48uHZLKjNa5nrriy/0n5tMZ9O4TKi1VI7szN 9bhm2SJcHoWQw0XffnDAsCTKIoOoSUiZMW7Tx0LX6wUWVrok5jW5COxbeTcjoiSd3j9w jCZQ== X-Forwarded-Encrypted: i=3; AHgh+RoBN/CFsxtKJtqmZy8ScsZGQ1g86qGDTxPVqG46MGDz9NGU+ydTKJMG59+rX8I+uVbGgB0Uch8=@isar-build.org X-Gm-Message-State: AFuF++mGKH/hNzVUbcNM72xxvaH8P8sNYTg439MqIie21gFsF1GMfdAE 1jwGzYtTr2h/I0CgG/6KgEHAfwWYX/ZjB2vQ/WEJPFaRM6v1n5ENs1jW X-Received: by 2002:a53:d510:0:b0:66c:e21d:9ada with SMTP id 956f58d0204a3-66ce5a5b142mr1419836d50.10.1787317962772; Fri, 21 Aug 2026 06:12:42 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdejNSoic1gNshKErJkhUMwPzyNlgbLTKII4xS9Uy2cEBw==" Received: by 2002:a53:c046:0:20b0:668:1a79:2a8f with SMTP id 956f58d0204a3-66cc94f6c88ls2330100d50.1.-pod-prod-00-us-canary; Fri, 21 Aug 2026 06:12:41 -0700 (PDT) X-Received: by 2002:a05:690c:a1c1:b0:820:daf:9205 with SMTP id 00721157ae682-84a1ac41e8cmr17539367b3.14.1787317961601; Fri, 21 Aug 2026 06:12:41 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1787317961; cv=pass; d=google.com; s=arc-20260327; b=qSV2S4Mrx0Uby2AOkNFV0aRoZAZVzlam/h3ApM3CNccgVfNwPSGq3JBkClwFgxn9yj vLyF1JyKPfyt+rMhb0DD6xgvdXzhiCikGi4M9rcFrfEA4gprzy1WZhja/Ah+2YnFqz41 q5/7IQjnKidfpciApOYDSYcVB80ciA99yRlV/00zSeMpSGJxPhVHd4ZsiSVgm50cNCUN ia3jPMKRPjhWQSb+aPlA8Ui075lGQ0Lc+So3KEDggmQO/y2OtlhWeALXcho575XfRpbr qkLSMggTLkpuRdwo9kfes5e2QyXZVbJO7dhKYNDAM4cplijDicP504p/ooHGt5uiAoL1 9qgQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=CRthQIbAupH8TGYQYqeQBS3ZyHVRyHiOjU9ehj+u0cQ=; fh=FXvauwBldM+Ixx8E08RRuBbXz3swagS87n3MQ8TSE5w=; b=aWoG+QLgROGeyaXRA915yNvDgZzNJF9YjEAB+QoAfaSSyMF/vgXgEZgF6AbGgJSROK 5XZDJY2vyau3ygSiv4Yvk1TBy+YWmdAH21oyPcj6VvQdmgq+gsjtTIWdxDKte7lsfNNA VEI3b8w4zd0NY+xnEoFjD5CLXGqYEHihaQ2qzLzQ/RzIfwFCPOEQlB1LEuj2hRBsHYeM pdicYOaDQXMz5jOoy6nVIRDNBZ6FwulNQ8EMhMtA+FTv/zITjaD76vDQkwiVoiYeHauk xlmL1FvW/gr4rq5Ue3Uj2FPiFNE584jAJRNgwEU64wOUoe+RGmMYrmWxu974RUQ/DDJ+ oyMw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GagY4XA2; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 00721157ae682-84516885ed1si2540117b3.4.2026.08.21.06.12.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Aug 2026 06:12:41 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NNIOQIvbesQDPi0MHE4IX4+dozxQgiSlgS3R4y0fQwELrDCNjZ3N1iKLT2aJGd0I1edLtcZ1QlRn1aWzO89OtL+xbOw4rRX6+VhCHHAohpbpubKR9WnG9Q/zvb3nt+4mFE4eLjRSnJAqWRQzlRjkXupMfTlFw68lY7OqrPQBnisJsZY++wFwc2FHEJ8TGLka2bC+49o5ylHCksiyHaHHp5uF2SAwyI9eSZ4N6C0qc1+3i3604pR/gAtTVxZYQO0xlOQbgKvPIsGjDRJrdrSDjEEGXgaNLxIqfd9E5mKiH7Ss/OiCduA3tCWEhMWbkJ2kOTIpHjNDpWzXKHQ0NXTebQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CRthQIbAupH8TGYQYqeQBS3ZyHVRyHiOjU9ehj+u0cQ=; b=UWGrjEHhxdUCfgD01+WAoyyK2n8z6nKRSwOtis2XszdSs+4AYlm4cgmLaahGtCMJMEViz0in0A7k895ced1j8MQBRRszmPujNPMn4oXtNNYttX95cuh8IOoLPCteo8SNJMhf42EHvugvkmeEhfTbjxdIXyCRb2KUlEWANqi36hCSV1WDXHFRMx8EUWlU8obdIrrs2BMV5XYIL/FweguReRjrm61aD8wRaVIyfACRTsqaQOWI6R9I1SUxokF4yclgJzRSRFPbHYTQWP5XfqJ6KAm+E04bBMTSYjjemsYnZO3568wVnet8o01l/FiFjMGtot7CCYePwWSKyfgFd/DV5g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DU2PR10MB7744.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:491::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.10; Fri, 21 Aug 2026 13:12:36 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0339.008; Fri, 21 Aug 2026 13:12:36 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: michael.adler@siemens.com, jan.kiszka@siemens.com, Felix Moessbauer Subject: [PATCH v2 1/2] add script to check if the current environment supports rootless builds Date: Fri, 21 Aug 2026 15:12:27 +0200 Message-ID: <20260821131229.2235147-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 X-ClientProxiedBy: FR0P281CA0065.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:49::18) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DU2PR10MB7744:EE_ X-MS-Office365-Filtering-Correlation-Id: e6866da9-a9ef-4c99-2e8f-08deff85dece X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|366016|376014|1800799024|56012099006|11063799006|6133799003|55112099003|18002099003|10067099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(366016)(376014)(1800799024)(56012099006)(11063799006)(6133799003)(55112099003)(18002099003)(10067099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: k8PvyRTtMfNrpeBAwBp+6fX/XdSNYR26SG0= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: e6866da9-a9ef-4c99-2e8f-08deff85dece X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Aug 2026 13:12:36.7908 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: rEpyGtbOxnLmRajcfkQh14WCRQ4YW3o9WFLMsCeEDHlB6+6FfoHOXyTiHxBLHl9BftXxQh2w9QpfZWXZ7GHr0cQ7S9HJv4lN45R5subrX/Q= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR10MB7744 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=GagY4XA2; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Running builds in rootless mode has a lot of non obvious pre conditions. To help the user check if his system is configured correctly, we provide a script that checks the needed features. If a feature is missing, it issues an error regarding what likely is the root cause. Signed-off-by: Felix Moessbauer --- Changes since v1: - ensure rootless is enabled before calling bitbake-getvar - add -v option to print the RUN_PRIVILEGED_CMD variable scripts/isar-check-rootless | 55 +++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) create mode 100755 scripts/isar-check-rootless diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless new file mode 100755 index 00000000..b5197111 --- /dev/null +++ b/scripts/isar-check-rootless @@ -0,0 +1,55 @@ +#!/bin/sh +# Copyright (C) 2026 Siemens AG +# SPDX-License-Identifier: MIT +# +# Helper script to check if the current environment supports unprivileged +# rootless builds with unshare. +# Returns 0 if supported, otherwise returns 1 and prints an error message to stderr. + +verbose=0 +if [ "$1" = "-v" ]; then + verbose=1 +fi + +if ! run_privileged_cmd=$( \ + BB_ENV_PASSTHROUGH_ADDITIONS="${BB_ENV_PASSTHROUGH_ADDITIONS} ISAR_ROOTLESS" \ + ISAR_ROOTLESS=1 bitbake-getvar -q --value RUN_PRIVILEGED_CMD); then + echo "error: cannot determine RUN_PRIVILEGED_CMD from BitBake" >&2 + exit 1 +fi + +[ "$verbose" = 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" >&2 + +if ! ${run_privileged_cmd} /bin/sh <<'EOF' + failed=0 + + fail() { + echo "error: $1" >&2 + echo " likely cause: $2" >&2 + failed=1 + } + + mountpoint=$(mktemp -d) + if [ -n "$mountpoint" ]; then + if ! mount -t proc proc "$mountpoint"; then + fail "cannot mount procfs in the user namespace" \ + "procfs is over-mounted by the container runtime, or the host security policy blocks procfs mounts" + else + umount "$mountpoint" + fi + rmdir "$mountpoint" + fi + + if ! setpriv --reuid=nobody --regid=nogroup --clear-groups /usr/bin/true; then + fail "cannot execute as nobody:nogroup in the user namespace" \ + "the subuid / subgid ID range is too small or incomplete" + fi + + exit "$failed" +EOF +then + echo "error: unprivileged rootless builds are not supported; see the checks above" >&2 + exit 1 +fi + +echo "unprivileged rootless builds are supported" From patchwork Fri Aug 21 13:12:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5408 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 21 Aug 2026 15:12:51 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-yx1-f56.google.com (mail-yx1-f56.google.com [74.125.224.56]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 67LDCnRL020595 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 21 Aug 2026 15:12:50 +0200 Received: by mail-yx1-f56.google.com with SMTP id 956f58d0204a3-66c73057f18sf2504904d50.3 for ; Fri, 21 Aug 2026 06:12:50 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1787317963; cv=pass; d=google.com; s=arc-20260327; b=C75WvcgeZ78jhbLLX1ZfUTcfIprm9cQ35s5JwDcHz6uYpN/1VSY+sZzNmZKn533/dI TTvn9aVxbYRQsXTctU+gqRwvFNmZSMBMcp7gTdXyGD28Mp0ShwkmgYiSDgYw40Gw8NG/ Y9jFmsNjUbMvGQolbT/kF0LyL+qIWCN5WrxNzRRkVXC4BTm3qg7+O5EFwBCZ9NC7Nckt xpvFHsQKHo84D0+ej/04btiA+ij9uDp9z2crqNfl3xlSQSwB3qZHa2JkcA6O50IF0414 Ym0JWRmLUnpyUnB81uVJeVhu503t9myQ/hevtURAH4YVAQPCN1WH26k8upLQiZRxAQWe Calw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=VeIEIwTvq+bOJL1hDLchcGG0dgA8oRpA/oAJlQJMU+c=; fh=R9WeRX/L+yMaqK6EQNZxfve5ll+QpCWoBXK0FUxeaGk=; b=qs02Qeb4l8xry24BJ1M8bTorW6NEiU4WHpprij89XaNC9K9tTTUItrc0aQ4A7hXe8p CnJSsmhlzeDWrOWpyHoFUriVThM4SyjCqC9eloySc4yQbCIM27/jrDMEuQYAi7I49C4d MniMUQjW7jshhVOnrBu2HhTD5IUp55GElahzsIcBx4SRhP3yVH250pYQJcucAOxwyiN3 DJ2E3MWxFKl0p43j9TAiptJZeuex+W4vvbeNSJGQA35Ku0MR3kercLYrYDw6CYHlSwZ/ FCcVPqFJA07uIhMb/c40ENTSE1IWAnXqgjCyaYoqjQVO2IQ949NNSdymweKE+AOVHFmh pDHQ==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=anhGk7HC; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1787317963; x=1787922763; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=VeIEIwTvq+bOJL1hDLchcGG0dgA8oRpA/oAJlQJMU+c=; b=m4vkZfTctByWole11ZAg/qYPLfH2VltrOj7Xdgu0rpvt/ixneayqr4puPCQ+hXh/11 ILws5TdvSeYBW2C03lzTS+O9hEsVVkrBHKZeEVTJ/FMZZ1T57u7v4ip9D7H77W/fdOKa CMM1RpqwHoVV3DMvAQVvo9HVwAdiSufohFUGQQ8SdJaArY1JUWx/JCmTc5ofi+aMpiv7 fnUZ4Z0pxrLZUHfV4KGZBKxGFGpx/gA6W3HSWE16X4uKYffg3m3MvqASm+YJt0k3iwIL QG+WJc8io9AfDSZW9jPY5oUzEerERACK49miXG7PmjDzyHqYVcFqeyWrMXCd9f5y0976 FmbQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787317963; x=1787922763; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=VeIEIwTvq+bOJL1hDLchcGG0dgA8oRpA/oAJlQJMU+c=; b=N/BVm1BlHb9Blt0RHZuKRd/G9aBzO53XstYpr/gdD85KK3BunJEhTKownH6KbDlY11 N1UgOk+SQtsBf6w1+2a9Usiszp1uOseg6e7iyc7FPS/NfFREI47XNRdldm7wdrM25bw5 zYQ33UtKsOSC9qQZ7R8IHGJMT7EQy+4gkM8VEcsiHF/7g6pKTrJmRYCoMw7hvh42BjeG UdAGgabPjQgA3wJ44/joYiCA/zMnOVn455/Cl/pO08iyyv4Gs3hYuDn511RTBKnkzHvl EBrAaJP3P8WIWbHmGTJS0iSNNGtjcB/wrh5qUNcLk8BUET3+BvXILtqlsRh/dMXpcNUO Lm8w== X-Forwarded-Encrypted: i=3; AHgh+Rq/AgleULDSgEEci05dUErAD7rYPUy/WDNNj0Icg9ZpSfEP3si4LeE8A4+hsZYw2Wvpc+Kj9jU=@isar-build.org X-Gm-Message-State: AFuF++l14pt0JZeGY4agShoOmuN5buaGrCffsU6YPGUYnESdLTSEkMrb Ul2wsVwWTUqcHKmK3Mpj0oxHJ0cKMXznIbrF4BF5nl0a7cydCgoRJHYL X-Received: by 2002:a05:690e:40a:b0:66c:55cc:5fde with SMTP id 956f58d0204a3-66ce4a9e3ebmr2007956d50.25.1787317963149; Fri, 21 Aug 2026 06:12:43 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdfK0ElfhZJn7bqlrHMSQI29yhJNPOLgJJYoPhETLGTv4A==" Received: by 2002:a53:ec41:0:b0:669:9222:c083 with SMTP id 956f58d0204a3-66cd5a8aa2als3167164d50.0.-pod-prod-05-us; Fri, 21 Aug 2026 06:12:42 -0700 (PDT) X-Received: by 2002:a05:690c:60c4:b0:81f:3969:4abb with SMTP id 00721157ae682-849f6c90ea2mr28141967b3.29.1787317962089; Fri, 21 Aug 2026 06:12:42 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1787317962; cv=pass; d=google.com; s=arc-20260327; b=p6vpCmtIDjzeiQ1cU/23BcxOUF8IJR4x0X4A/Rla9YhpQVXzgq4MM60Ej+lhZKpeeI dV8RVX0bcPKou1b7zdaPhvbeIFIv7AqhYkWCMt2C4jYCT5NQKAIKC7gORmtv1nDpl8op De497wesPlora33jI827wOJ2nO/CiB9diM3sWivNi36B8N6LXs5+lbzIUs5e6s0S/EGu pvDeM/fnVyD6lqUq0qL4TxNXr35Qi5YDRr6syu4nY9tvd5wr6uFd1Q9CLzmc+TGqv+cU rER+fyQ1p7lUmHMcK03+McRuWMxBM3xsn8ceA+Cfqhvqy5Y6xNQrUKqR8d8cq0rtl+Dx g1lg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=K94VKHD21/qH+e7XGHkDOBClURi9oISqQbiXbRiROz4=; fh=FXvauwBldM+Ixx8E08RRuBbXz3swagS87n3MQ8TSE5w=; b=jkJB0uUGpUnFKYjCHHcs3g3kgiOojih1t+775ACLet8Kx0jpzySBZTRe9V7Ivz9LM3 0UMrZp74ND+arWsEGTzmGpTdU7gvC5LuCW+XuqJK62sQObWnpqUPx8AKy7VS1+0ABQzj WLdavHTNuILsoxDmD9386cjr2KGp/c2Aw7JtQEdWcLpTq+84S539N7bQ4lILS5agfMFq i4sE8DIcPAfcaZdcqJJQUEDtEmyPDiJHOjDt+dM+NQRgHGr19hiwbl/N5e/uJIkGX5Hz 1KlFCBzBnpdQN7zA3mcpYjPgkQBABfknV3ar7tCd7/rGcK9pTWu6QGnSTuJkQNsGcPDg Y2Jw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=anhGk7HC; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 00721157ae682-84516885ed1si2540117b3.4.2026.08.21.06.12.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Aug 2026 06:12:42 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=iAY80ZX53QQ0HVCsgZyXe+ZUGOJLnJnSVIy+yZyN5terHs1HQUEWhxWcO1TMYcwuXof5FLb70+p/jCBTE2LOzhrjY0in717PQpH/mDzU+pMgvilZ/rTfYcDaFDgryvD5BeH/lup1uJ8DmtbcGayUnrwwHS7r9KjuXZcFGjjBMXpPHG08gmMmhR9w9J07XfzeoqsipEBYnh/ZOk1skALAJz9cPQ/0MfuvrbJd6NH5QG5hByo00P+hzJB+3rF0bb0+u8E7USQ8HBB/FLObw/xp/1z65+Ux5i68yYlAwMgO2RzA05QbS/1kNdlLlnjKzsvrEHzgh+DGPpJL+XgTuAS+CA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=K94VKHD21/qH+e7XGHkDOBClURi9oISqQbiXbRiROz4=; b=F/3Jec7PF0145gLNmkO5y9a8Pdbf/M6AD1X79fJM6wG2bmZToePKqgfUg0gfK+tFjNbiGjHTKLbrQeKg2cuRvB7ZRK2dGVqWe99u25ipuGJojvPFO/oJzz3YpyFcjbKMD4Oo9nBD9J+YspkjI3nhwOcgxFW1RrNBgud8t5uSh5rO+OHoe+A7u/yYS6q6Q3lhxjSIyk2EdCv8W3exQ2Zd6ioIHX+EERlZ1hIFvS+ZJg8IGFhTCPUW/bdWwushVG41mj0Z3viIf5jldpr5nX9iIrwr+YfLS3NiBw7SIFPpq0c+zXQy2wlHi3LnjoyN0DCPRC73BFnDOIJM89jA62wdrQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DU2PR10MB7744.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:491::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.10; Fri, 21 Aug 2026 13:12:38 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0339.008; Fri, 21 Aug 2026 13:12:38 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: michael.adler@siemens.com, jan.kiszka@siemens.com, Felix Moessbauer Subject: [PATCH v2 2/2] user_manual: document rootless build mode Date: Fri, 21 Aug 2026 15:12:28 +0200 Message-ID: <20260821131229.2235147-2-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260821131229.2235147-1-felix.moessbauer@siemens.com> References: <20260821131229.2235147-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR0P281CA0065.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:49::18) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DU2PR10MB7744:EE_ X-MS-Office365-Filtering-Correlation-Id: b8fe05ac-dde8-462d-762b-08deff85df0e X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|10070799003|366016|376014|1800799024|3023799007|56012099006|11063799006|20052099010|55112099003|22082099003|18002099003|10067099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(366016)(376014)(1800799024)(3023799007)(56012099006)(11063799006)(20052099010)(55112099003)(22082099003)(18002099003)(10067099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: SbPYXlT0hcr7qlTjGOe/XW36NuuFfVR8OtM= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: b8fe05ac-dde8-462d-762b-08deff85df0e X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Aug 2026 13:12:37.2087 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: cpxfbfYhFNDlQ0PNGJa0N7Qn1eNcoHWGrTywYHTU1XhLS2AO9BqwMVk3inR02PFy66+LldtznReO/MvSWePzC5aEMNet/LJvgwBa4Zsjg0Q= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR10MB7744 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=anhGk7HC; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Currently only the requirements for privileged execution are documented. As we now support rootless execution as well, document this - along with the requirements check script. Signed-off-by: Felix Moessbauer --- doc/user_manual.md | 31 +++++++++++++++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/doc/user_manual.md b/doc/user_manual.md index dcc3f560..6c6814dd 100644 --- a/doc/user_manual.md +++ b/doc/user_manual.md @@ -140,9 +140,15 @@ To run images built for QEMU, you also need to install the related package: apt install qemu ``` -### Setup Sudo +Isar has two execution modes: privileged (default), and rootless. The mode +only determines how Isar obtains the privileges needed during a build; it does +not affect the generated artifacts. The following sections describe their +respective host requirements and setup. -Isar requires `sudo` rights without password to work with `chroot`. To add them, use the following steps: +### Privileged Builds + +Privileged execution requires `sudo` rights without password to work with `chroot`. +To add them, use the following steps: ``` # visudo ``` @@ -154,6 +160,27 @@ In the editor, allow the current user to run sudo without a password, e.g.: Replace `` with your username. Use the tab character between the username and parameters. The second line will make sure your proxy settings will not get lost when using `sudo`. Include it if you are in the unfortunate position to having to deal with that. +### Rootless Builds + +As an alternative to the privileged `schroot` backend, Isar can build using unprivileged user namespaces. +To verify that the current host and user support rootless builds, run the +following command after [initializing the build directory](#initialize-the-build-directory): + +``` +$ scripts/isar-check-rootless +``` + +Enable rootless builds in `conf/local.conf`: + +``` +ISAR_ROOTLESS = "1" +``` + +Files produced inside a rootless namespace can have ownership that the calling +user cannot remove directly. Use `scripts/isar-clean-builddir --rootless ` +to clean a build directory with mixed ownership. When using a container, run +the cleanup script from the same container environment that created the files. + ### Check out Isar Clone the Isar repository: