From patchwork Mon Sep 7 12:37:26 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5437 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 07 Sep 2026 14:37:48 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ot1-f62.google.com (mail-ot1-f62.google.com [209.85.210.62]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 687Cbk4J022111 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 7 Sep 2026 14:37:47 +0200 Received: by mail-ot1-f62.google.com with SMTP id 46e09a7af769-7e9e0e71e05sf6307837a34.2 for ; Mon, 07 Sep 2026 05:37:47 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1788784660; cv=pass; d=google.com; s=arc-20260327; b=lC37wW446rmmzt7hXLqxtnQeGohBk/DrMVi9e2nK6W9WScaH1IvUCXLc8q31DNe+0X O+ugl2ZCXNbx7IKIkZ2qYSW+rglOq/HFSRSAW6LOAw+J1BngTfZqbenNHDjC/dvx1huL s6xCwUi6J6nYYktmE0nA9l4mir6jP5HDopwwM5yOQHfvxNfp3qX+Vo9RXuvzdQSMKL8k rEVhcnZjceihiQj+DUkDRRG9UwoOmvBGO1IOf4xFbCYBwfbbvixxF5FuiEloQS0TMrez 1yPKXFHbkg9fDeUZmBcm2xe3Fexra+Vg3IccfqwijfmfUT9DGRd9j4/v8zLhoLxEtDVq LZtg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=e16aVd2W9ZYAnKu91TdePP3zygn2M4BpY3Nxvo9JJwE=; fh=R5MY8VHJ3P2utllQA6NpggJr0ipi9oOyAjesSjxE4eQ=; b=iCU4Rubi9eEiS3mnLdjfx9HE3Erk/fveNF8pL9t9ZsdbGuQwtBJwknFDOPP5/L24Hv IEAnBPfaA1+Wlhfji/8uxeWpwiXQR184HEfOnv+BLmOw6vHZkaRRjR0W8IpJC1yNCKrF UQyxWoJQn7xiA3rJqww4PBTZrA1mHz6XWSlkgLKc4FWwqZ5Z9MHzB4GxrtuQyfVPofAj McgOXShDimxt8DYydvtlW24PVYRdASV05sT8yM/rpeynPWjybSQ0IUrgDgQGxtXHktDA dgwxSlPwFuS+RNK4bo7lIqjHdcgL83rCH9c+KFRrOTKwxwPPdyxET8H7I9q6JmBHC2mQ xNog==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=Bi3HZZsX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1788784660; x=1789389460; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=e16aVd2W9ZYAnKu91TdePP3zygn2M4BpY3Nxvo9JJwE=; b=o9U49pG0me4+e7KuZhK1VfmFo/PQ6Abmj3ylJEn0h/xlxc7nEaeTqnqg2B2IqgqddY EPATWZ4Si/46vFJCtSG4sEmamtPpeH+Bbo2Ez9RY1sLyN+DcZufvK80ozfQ6pWNtwYrv taDxm2M4qiFAOkVZYPEDedNHxjFQcCOekFfxdyE9z5Ac/kV+EUeAoGa2wc9TDTpt7JLH yrlcrvbeHqbYhQ9dPNeS1Q7DrwSbd9ExhtWUjHDk+J0hipAJH+twP9L5kzyezmDU7MQg D5ioY0V63WZRWGvFmAq5jVwH0xXtxmiz5PxRnLwH+oMQYcKFDMlkfRDh/VMxRqxJzSHm Uvmw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788784660; x=1789389460; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=e16aVd2W9ZYAnKu91TdePP3zygn2M4BpY3Nxvo9JJwE=; b=rN6ELu6U5mRxjHW/AQptD/GdsBYC8Pfc8OnDCnd3iXdcFM1mCfrBGMktBOuD9hTX8J jLleIII4cLj2ojbak37AurWQ9OqrkQUnkrII410hS00m7uzjYBJJ7DHHQ/Vs7OVzHYvI B0mOabyB34t25Epro20I4Z7dntMg+nzZE4zX2xgdAsd6Td7fTsF+x16XnhHRXVOYNi6x CteOEMxYkSWW+61DDaFJoqQX/h+aTpnIW4HSXmMppWRO8hzwC9DLWZ7yj97g0BUDN+V+ 2dHwokrL0iNKxvca4iOeX+o2ilwo+oWoa73d4ozBy35q0mZkEh/kLJsBoR4ybQ1Zi1wc 0LoA== X-Forwarded-Encrypted: i=3; AKwUvBwPZNFO/kwzzLXTFuFN2q3OayEfIut62yvw7PTdpAwji0YWO2CR2s5RdPDxb7a2Q5JuN9Tspts=@isar-build.org X-Gm-Message-State: AFuF++mRUtABL+o3fXk2rEmnKv3hY/QmgDOoaNl2kWxzlaCJVzk4K4HO Ktmv4ag2qZDor82+sTQbMM58Kcu2Dsx9hpA47ZDC84LO2xPIiBtphW3X X-Received: by 2002:a05:6820:624:b0:6b8:ef7d:e181 with SMTP id 006d021491bc7-6b8ef7de33cmr7225849eaf.54.1788784660357; Mon, 07 Sep 2026 05:37:40 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdfd6tRdqpyc/uVKttZd/7pL5ULbE+kw4Kcfj+1yHWV0yQ==" Received: by 2002:a4a:d124:0:b0:6b1:aaef:74cf with SMTP id 006d021491bc7-6b70d964521ls3971187eaf.2.-pod-prod-08-us; Mon, 07 Sep 2026 05:37:39 -0700 (PDT) X-Received: by 2002:a4a:e904:0:b0:6b7:83c5:fdf0 with SMTP id 006d021491bc7-6b783c603b3mr12172918eaf.49.1788784659538; Mon, 07 Sep 2026 05:37:39 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1788784659; cv=pass; d=google.com; s=arc-20260327; b=HTFIK9shTdFAbDllzzsgHqaG6bkWfI/WYU/lLVqcnC3g470e5lpvsgnHaJxm+DAMn1 Hz0OYk3EdOOHi81nf7mRt6MHgikrk5HXeW4Sb3Z4AkT1ARoofTQBCyeEAv/VgmsZcIF9 GXM5iTQSyJXv0pL913djifAXwkexr5Bs0FD/jzjzP2rgSSUAGSjAKWrIHXl2PPLUaCoI 9FDSwun/serh385dV88hUnyJ94Cg07KKMkLvuLbtqL/bihCQ2HOgk3IIKKFVQYko+5t6 rx1H4vEoz6+7kLDgQQ6sikQzklwjaoJX9CD3cdHsTvILl5VgK8VQ0oISpdSVVdTzDmZt tPAw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=4Lvvy+31T8jDHe8dY6wHRG/60++6tRZz9iCCtWiHX9M=; fh=MAR4IrvAhd3sEKpd2rMZmD1A3RZ1HgCziLJco30Znng=; b=cjxLSpoMYiOn5YX6xDaptE3bsXYHfyRkcqOcA7qf8t1P4vysdJnL5kxISkEaP0maYN DP8uQjxzg/WADUEjZo/hvXuRUff1Q9UQaGbwITOqw8KdMY2pqoavyul7yY9PuwuxOxI/ iUeOD4g1lK6HuhXB6tSJPwTKciuKq4KU1ZCJC2wTZBhX1K0MaGTNWN8a8RXpaARmbGAv ZCH7Gw4kBltXAqTBQoeWb45VI+jrZloxVEBMCR5NZSTXpoKiLXU28yQzBGMUwX8GrhUb 3FtaxeNA/+tKamElTksYPhiPL8TE9laQFmL0dFI2QW2QylMdmKSEKnWpeRHwvK2YaVa7 ZOGQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=Bi3HZZsX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com. [2a01:111:f403:c201::6]) by gmr-mx.google.com with ESMTPS id 586e51a60fabf-4755419aeabsi312913fac.3.2026.09.07.05.37.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 07 Sep 2026 05:37:39 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) client-ip=2a01:111:f403:c201::6; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=IA92HtjthD0hj5vKJTLbgEMDEROlonmpSnvya1DV+UVlxgpt2uM7mW6AuzGCiLtVxYm3Hp0vxGyUFjscEsJaI57dFGwvg7IeKiQonS5nU9l9WEUXQyZR0MxHZsvkOAP/RRr7q2R3q56fMK37NuqXXA2RqLbWKxA81DtnvB3va42FiVsK5LJQx72wTEKNsrQRIuRm1CTfuwvbEApI031UXm4fC+/CMu4yc55W3EuhcoqPVKTw5/Xh7vvF0/W+cP6RnJVUo9IiWtQUIJo7lphBlERA86ky/dB1bgFAxJXhnYXy+0ziFuq4TW7ac8QXaAc2IDdbuy7trP+U25UYdJ2AQQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=4Lvvy+31T8jDHe8dY6wHRG/60++6tRZz9iCCtWiHX9M=; b=SKsleB9kvww9QpqaXZrYc5iqrsbkuVI38OC7WOT5XmiC21D/ec6DkX94nlKYiHnE8jDGdS155WMrPuICc7V/NPY7EhDnnYNd/mYnRuhHLjxJs+98bXj/4T4T/fmgKPUrVA1lSMLDcKoyX7yXCt+8e9RyZzXOBUpvaGPe9SymNJXPkvsQP+kDPg+iOrfUSyRW/cyuc/o2OL5fsZo5K+IBLXeLFMJzXeRaCTTVpKZjTdEVnNoSvlq0/YiGtc8PocmTyITdWsrwTL90tVE+6xMEzv6mfIDgod5OcrjkapdG/i7JeoFdTvnz26XaqVmi5cp4jWiKElJEq7wOeAAkR6Za0Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DB5PR10MB7701.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:4a8::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Mon, 7 Sep 2026 12:37:36 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0382.007; Mon, 7 Sep 2026 12:37:36 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, Felix Moessbauer Subject: [PATCH v2 1/3] imager sbom: simplify invocation of debsbom tool Date: Mon, 7 Sep 2026 14:37:26 +0200 Message-ID: <20260907123728.335093-2-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260907123728.335093-1-felix.moessbauer@siemens.com> References: <20260907123728.335093-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: LO4P123CA0633.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:294::20) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DB5PR10MB7701:EE_ X-MS-Office365-Filtering-Correlation-Id: db0ae77e-2f75-46f6-76fe-08df0cdccbc7 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|1800799024|23010399003|366016|6133799003|3023799007|10067099003|11063799006|56012099006|18002099003|22082099003|55112099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(23010399003)(366016)(6133799003)(3023799007)(10067099003)(11063799006)(56012099006)(18002099003)(22082099003)(55112099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: db0ae77e-2f75-46f6-76fe-08df0cdccbc7 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Sep 2026 12:37:36.3927 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: atIZmr03HVGPn21uelRGNMK+pm6i5EW9sOGcbpxjblV5bv+FQKf3J7WYbZOWTULLRP1dOM7wJ+jz0HKY3Uo1An+Z7TBEuN5cw5xMGRIYfJI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR10MB7701 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=Bi3HZZsX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= We don't need to create the output directory upfront, as bwrap internally does this on bind-mounting. Further, we avoid being extra verbose to align the debsbom CLI with the other invocations. Signed-off-by: Felix Moessbauer --- meta/classes-recipe/image-tools-extension.bbclass | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/meta/classes-recipe/image-tools-extension.bbclass b/meta/classes-recipe/image-tools-extension.bbclass index 8f666444..754db7a6 100644 --- a/meta/classes-recipe/image-tools-extension.bbclass +++ b/meta/classes-recipe/image-tools-extension.bbclass @@ -102,10 +102,6 @@ EOAPT } generate_imager_sbom_in_chroot() { - run_privileged mkdir -p \ - ${SBOM_CHROOT_LOCAL}/mnt/rootfs \ - ${SBOM_CHROOT_LOCAL}/mnt/deploy-dir - TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) sbom_document_uuid="${@d.getVar('SBOM_DOCUMENT_UUID') or generate_document_uuid(d, False)}" bwrap \ @@ -114,7 +110,7 @@ generate_imager_sbom_in_chroot() { --bind ${SBOM_CHROOT_LOCAL} / \ --bind $1 /mnt/rootfs \ --bind ${WORKDIR} /mnt/deploy-dir \ - -- debsbom -vv generate ${SBOM_DEBSBOM_TYPE_ARGS} \ + -- debsbom -v generate ${SBOM_DEBSBOM_TYPE_ARGS} \ --from-pkglist -r /mnt/rootfs -o /mnt/deploy-dir/imager \ --distro-name '${SBOM_DISTRO_NAME}-Imager' --distro-supplier '${SBOM_DISTRO_SUPPLIER}' \ --distro-version '${SBOM_DISTRO_VERSION}' --distro-arch '${DISTRO_ARCH}' \ From patchwork Mon Sep 7 12:37:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5439 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 07 Sep 2026 14:37:49 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oi1-f183.google.com (mail-oi1-f183.google.com [209.85.167.183]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 687CblxS022132 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 7 Sep 2026 14:37:48 +0200 Received: by mail-oi1-f183.google.com with SMTP id 5614622812f47-4b28deb7ee3sf4319189b6e.0 for ; Mon, 07 Sep 2026 05:37:48 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1788784661; cv=pass; d=google.com; s=arc-20260327; b=mjAaHhfoQDDgiVRfJxOQbNtpXgJKMuZJ/uoVWGwkj6YSaEOwY/Pz1oMzjrPhJIkstS WLuGlACpT3kCJVoELBvgEqqomRDi944DctTJUFd5NXh4g9p4F7aa+6SbLVSpbZNc2bl7 N2b10Lj+7oJY9FG+ScbaXMGw4nlHJ4ZBz6dWBlkDbEYzFmgAl/o/g6gItIUe//dUqDHD ZXDF5ADs2DTpNM4CmprdPltC9WDsoucDVAtg4Nj2JuGo9MTRgJEoPzoypZR4vu/r/pp9 G9bf2knteWAYcCIlUqkqWz+Y1+Qyt2Np8ib4S3uWz6KVsMF+vFukJq/kdZDXfdOLezHm CvAg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=Bw16czMF5lqT7Xc6j8HhGjxFEHm1txN6Zrhaot1oCPc=; fh=kbgEObgdawYCmIIkhDtwF6DjtEHXEit6HsiF/PrOnnA=; b=ZgajRM4dP/uaC6xTFtdYrC35TeTCW6C9ZvA7/hsyYgIbe1kz7DaNmZIMXS7m6OjQNg 2ROgkkMK7ww8FNiI3V5EVPVKy6m0CqFeOHtWeLg8NIiCSkcCerhja3xz8F9CTLNcuOUR puPrfV8mqDtCGuWymWYMhMDiDiOm1mjS2tgosNUI8kc+Cn/IQ9mEvolSEgoqHCMRtgFk IJ6dabFF77ouPuqVtb64U3bKQPwRFrmDRWuc2/uu4PN9kw0lK7LngEdOoD2ppVOMlkCd qgoygTHrrN66EUFq5GNSQEKMYeWTr9j+p0rm8qklSm1fQlB9aptEeMhUmqzo/qNwsqKL tYzw==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=uhjfPdQB; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1788784661; x=1789389461; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=Bw16czMF5lqT7Xc6j8HhGjxFEHm1txN6Zrhaot1oCPc=; b=ozCQ5ldVaZJfE2xPJIKIJ0QibtUzq94VmFPzxFXsw9xpxBN+nQQC5E0HnbefS/sPxF mwBFT43l7cPX3nap6MtSuvqfB0YykRb1/QNet4aZn5ul9lm51YbsRX/9+hE+AtIXRjei KlDUYDe/XLX+0eBA9jIpcCnWnNukqKr8wXHmckvYQXvQumlWQDlfffnYZWXYdux4dsmX +RIPyau3b2fv1Ru2yN/RL1iVlUwtuWT3rw6hmFoKNetGNjInxsgz199BK17SUhCDzsB3 iKTBMCXhP2XmtcNIAx7qwfGw1CEj7UIKuUjKiu0OZOBBCshUNUGaV+0TY0MKNiv2HK9G PgGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788784661; x=1789389461; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Bw16czMF5lqT7Xc6j8HhGjxFEHm1txN6Zrhaot1oCPc=; b=DEYiSy8TNbZi3Z4KzVWF5iXKfnHhSqM8xwhQlZ1rUk4GCVYmXrUmCQMBghTJ33Pu6k fGqdsFSF9E/TSZzKy5vM0h1JAMHKhUQ5P+n0Jm2cjLDHjQjzmNc+entP+kX23Reom6U0 LkzmltLMP3na1i/OmQajbRs4XFWTcqN+E0dAGT8sHb20/OFA6Sgnw4ZQfvmblGBTeSyJ k/ia+aWLbl/DGAal/JVbC3RAaewSUuW/u+HJs7KGIKuMBTHUREfpMgHsMrF9+oELBpMk KOykjke54vNjcf3I0hRISpAcUu10ylTTeDOfT3W6zbSbGKKaypFXgyjqPAwsx2HGRBMz MF2g== X-Forwarded-Encrypted: i=3; AKwUvBxvO66uOz5MFdbsDMNo4hbhZmYgIDtv7ru8cc3vcJlwwt/IyvXeTJG3LEOOrsp8KqOCQzQi3+Y=@isar-build.org X-Gm-Message-State: AFuF++k9GY1zDyCjH9cZ//rsR5v1x6twTDpLAygVb5wrtQYlkttJAVff F3VWq6tC+GuMRQ3TtzCgAiITsjmzFx0WgjZkCvUH1XbOXnxWPYBRD26Z X-Received: by 2002:a05:6808:1824:b0:497:8f1:df07 with SMTP id 5614622812f47-4b95fe63290mr13618620b6e.7.1788784661121; Mon, 07 Sep 2026 05:37:41 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLddcQ33ZYYJ4Fb+BfJ5nr72RtFwWiikrgPy4jnVlyF1xXQ==" Received: by 2002:a05:6871:3863:b0:46a:f618:d023 with SMTP id 586e51a60fabf-475355198f1ls4482096fac.0.-pod-prod-03-us; Mon, 07 Sep 2026 05:37:40 -0700 (PDT) X-Received: by 2002:a05:6870:d624:b0:475:a153:2dcf with SMTP id 586e51a60fabf-475a1537ddfmr13653764fac.37.1788784660070; Mon, 07 Sep 2026 05:37:40 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1788784660; cv=pass; d=google.com; s=arc-20260327; b=hMK22sG8CJn/3IlxhtECuY+dNPjLYcx1SSzak6gdYjLIukyxebMJYRV2s/zsfuOVoo Z9Cu8L3OLmsF0cYsOVfRVl3k/iBl4AtzYGNvVvXG4R0fC2LTIyqerLfuXRQa1Eg5FhvH 1qZKM7KwDUf3f3RazRmXQRB5K5RNnBTVpAnH4JhVMYsElj7bkkJcB18RptCze4UiLnvs zF26fP5CPxomMrVhs5lh6sBqftBpKKi4lnACMjpUn7IU6yYcOnWHHQQAK5z51pN+1h81 9KaL24+waMCTdcBgr2HtT0UJ7xcQwAVvT3e30B6J/9RcFgpNdLbW5ZeULaySVfUSdLq2 e8wA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=iaGwIkHQt24x+AqPC0xztrBKHTxtWm+OwRmwu9RQoEA=; fh=MAR4IrvAhd3sEKpd2rMZmD1A3RZ1HgCziLJco30Znng=; b=BhixnNnc90uXuQ1DQmz7qf+xpu+lOFc0uMzJia92pN9I1KMUyKePLpgQvs9uwgSKI5 YrBEAII5Fp5gC/6ZITXPU9YejezNgijcOj9uvXgma4LieqJ+6/zAFFQerWqo9o1XfF2O SfQeuHHd+yi5EImGVUR6aaWcMiHLeiWz+cLfCv6bMnjbmK/5i3nq+RgAbFXDcmkKi5B7 +CHfm10iYJVJ74T0HOTrWXuz3vs87XsaBfRV8oOn8cHmgKjW0J54qz65Q5ZEtylRlokm KcaP99jsUROArFvZxUHRNCwfVSVcqlVx2TLFDBvEEyb+5buWqBsyzZHACAZmpnWahJZz BfSA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=uhjfPdQB; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com. [2a01:111:f403:c201::6]) by gmr-mx.google.com with ESMTPS id 586e51a60fabf-4755419aeabsi312913fac.3.2026.09.07.05.37.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 07 Sep 2026 05:37:40 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) client-ip=2a01:111:f403:c201::6; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=yuEZT/KNvGBUV4CPtqLEXscgNLdLrXfWa1PaGy0uzRGXLDejopETonhsu2B3qoH4Uq2p/NEgYTImJEO6U/VwAHPknkNAD3OTvP7B04/LxdV/gxSZQafaskKuPylYlvbbXi1I7MRQ/mYncGx66X5lZT9s4PBSNpxMUHRvvCLmcz2chs1HGzxCMSuLaePR8KGXXo2If+FTG1dxoP/WYCKGI/qtjOzx7Uwb2VxkyHJ4i1n2pBgmDIYljB5zp/DhcL0ewgFWINn+TefZWcyvnt1K1Q64IlxtrrVbQsnHsPEx8BAk/XCU5v/trs7UaViCJZ7vRtBfGM3DWnbCWq+yvdpouQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=iaGwIkHQt24x+AqPC0xztrBKHTxtWm+OwRmwu9RQoEA=; b=RPbqUAEq6QQFr+SZoxxyMQ8AYtN6SGgGEnpp6RfrvpdpVoCU/hQVO6TSMeNLZ8RQ2fWuaXCkXECiPLNfKzo/1+FJF3x7u3iEKqAD2a002rNYLkFCae1q8XthrbpGPadZHSwOJJzpwqB+29yG8DRb2PW6/MtPWh2jvuXfpTmIy5tY843l4bd+e0YcG7jabH9K6+CCoEXQFXd0r6JWN8+m+V0qJ6Pr3EHJ2siWWqs07aczRO+6r/T4Oa7eGUZuMEVxyWVTl7h8o/U9OFeeNXXotWoCGpzeOcZh6N4LtgTKy2knQNxYjQHvwuJefARVmfpjJ/Npyi54A3Rcl62aJSKvYg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DB5PR10MB7701.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:4a8::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Mon, 7 Sep 2026 12:37:36 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0382.007; Mon, 7 Sep 2026 12:37:36 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, Felix Moessbauer Subject: [PATCH v2 2/3] debsbom: update to v0.10.2 Date: Mon, 7 Sep 2026 14:37:27 +0200 Message-ID: <20260907123728.335093-3-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260907123728.335093-1-felix.moessbauer@siemens.com> References: <20260907123728.335093-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: LO4P123CA0633.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:294::20) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DB5PR10MB7701:EE_ X-MS-Office365-Filtering-Correlation-Id: 76cf1cf1-94e4-4a1a-be57-08df0cdccc2b X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|1800799024|23010399003|366016|6133799003|3023799007|10067099003|11063799006|56012099006|18002099003|22082099003|55112099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(23010399003)(366016)(6133799003)(3023799007)(10067099003)(11063799006)(56012099006)(18002099003)(22082099003)(55112099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 76cf1cf1-94e4-4a1a-be57-08df0cdccc2b X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Sep 2026 12:37:36.8865 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: rIewcbWqgCg+yYAwVWAPViyE1q63nd03nvII42/W+f5erO00Uxj2haiJ+cBsSrk+RnI/UfImtJaFJKdW2yE7uR1+d4l0OEfFUGnUdB18kDg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR10MB7701 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=uhjfPdQB; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= This brings a couple of bugfixes, as well as support to read the package data from a tar file. Signed-off-by: Felix Moessbauer --- ...bom_0.8.1.bb => python3-debsbom_0.10.1.bb} | 2 +- .../python3-debsbom/python3-debsbom_0.10.2.bb | 43 +++++++++++++++++++ 2 files changed, 44 insertions(+), 1 deletion(-) rename meta/recipes-support/python3-debsbom/{python3-debsbom_0.8.1.bb => python3-debsbom_0.10.1.bb} (95%) create mode 100644 meta/recipes-support/python3-debsbom/python3-debsbom_0.10.2.bb diff --git a/meta/recipes-support/python3-debsbom/python3-debsbom_0.8.1.bb b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.1.bb similarity index 95% rename from meta/recipes-support/python3-debsbom/python3-debsbom_0.8.1.bb rename to meta/recipes-support/python3-debsbom/python3-debsbom_0.10.1.bb index 7fc9a8eb..fa0b9b38 100644 --- a/meta/recipes-support/python3-debsbom/python3-debsbom_0.8.1.bb +++ b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.1.bb @@ -35,7 +35,7 @@ SRC_URI = "git://github.com/siemens/debsbom.git;protocol=https;branch=main; \ file://rules \ file://0001-Use-old-license-description-in-pyproject.toml.patch \ " -SRCREV = "a76d4e784f84e73b98d2bbeadd28c602a8c13708" +SRCREV = "00c7cc8b8984251e17a716b14602d20397724b59" do_prepare_build[cleandirs] += "${S}/debian" do_prepare_build() { diff --git a/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.2.bb b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.2.bb new file mode 100644 index 00000000..1aec1369 --- /dev/null +++ b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.2.bb @@ -0,0 +1,43 @@ +# This software is a part of Isar. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/git" + +DEPENDS:append:bookworm = " python3-packageurl" +DEPENDS:append:noble = " python3-packageurl" + +S = "${WORKDIR}/git" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "dh-python, \ + python3-all, \ + python3-setuptools, \ + pybuild-plugin-pyproject, \ + python3-packageurl, \ + python3-debian, \ + python3-requests, \ + python3-zstandard, \ + python3-license-expression, \ + " + +DEBIAN_DEPENDS = "python3-apt, \${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "debsbom generates SBOMs for Debian based distributions." + +SRC_URI = "git://github.com/siemens/debsbom.git;protocol=https;branch=main; \ + file://rules \ + file://0001-Use-old-license-description-in-pyproject.toml.patch \ + " +SRCREV = "9b5a5d6be05f1207356223f88b3080bd72722b9f" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} From patchwork Mon Sep 7 12:37:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 5438 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 07 Sep 2026 14:37:49 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oa1-f61.google.com (mail-oa1-f61.google.com [209.85.160.61]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 687CblWj022126 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 7 Sep 2026 14:37:47 +0200 Received: by mail-oa1-f61.google.com with SMTP id 586e51a60fabf-458326d2d9asf5567338fac.2 for ; Mon, 07 Sep 2026 05:37:47 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1788784661; cv=pass; d=google.com; s=arc-20260327; b=cPPg50K3fwleOmq9C2XmVz9Gu1iPbF0cVOrIFsE7KA0pbfoyNFGaR1T3r6J9GRzFAu 0h2ojmVyGCdKUHJcQHSqla9lOAeTlnixslUEbMLWcmcmmM5Kop8VmRT/Uoo0Gy/upwBz oQ+BKhoUXODPKO6p0IQzNkNL3sqZ376jv7rdGvz+JywYZg/M6DpLAfsznOWVSkTt05ty 3ZozOyBwDhjsWP0QZI32N+qLTZAEzlYoZQ27AMopzb4rOXxvKm0GDRFjVZsOg+Q2h3ao nwAMcZAPhYlwGMxnX2bRfXQHbhDSK392kMLmK69QWYWiUfjmjBp6CfUXXoarUkmRqXJO LRxw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=im91wdp9YiitUnFYJnLrBWAHVGr5RBNCR2FBwh5vZDc=; fh=35bRJ+tjO1p2hF82alZi+KBig2Wa5SZpUVpvs9r4tGk=; b=TFOERc07t95O1j2nk6lsjiOUTTDoXg9X8lY+9KrRIudISUYNiuOhg2KIqRgBfxt+8/ ChP+AW3K4i+lKL5GoXNJb7uxmrJhM3hQ0Jnav7lucOutErzjb8GLaU7Dl8v15FZM9HJ0 xMEF/ISXfidoDJjBV08loXa3gwHDx5VA7wVsXyvKZojS0wnQQVnrvEvCROj9dKRFSzX8 x/Ehyduo+BQoIMdG/rTto+T/4B74nN0qyJRA7pbjgirxabRJAwCQCGTYMJEvDqBKpr77 TpaB4UtfNY6pw1ZGaCYZTwOPJUfZtcEDZI+TAq/rnsYSOaTXhjsIilX8Zl+EIpdIdy9d QCDA==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=jrPL4HOA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1788784661; x=1789389461; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=im91wdp9YiitUnFYJnLrBWAHVGr5RBNCR2FBwh5vZDc=; b=ni8YvhgKd9Orx3/IPimkSUU/piw1Wk2b69JGSsSrSKED4dPSQds6xVtBu0LeV4FiKT R46jvKqzyY9zGB8jb8QNnio5ljJPHymleQi1yPjQ1RfH5HhfveUjc38t7CuexgzrWEE4 4Ga3AtneEJqplzfogBuzwP7f6UGyEYwIAZvxGvreW1nYbPNQZPblfcEYOSAq33cX5oDr qZXAW3eVCGAYtDsogakpX81moDB69CymSiZOYx1Ev8bqHRhWqeffX4Tz04dL1LZ3vZsH ymC7NL2PX32FCQxvZqHmk/ESdHEWIIGuliwtdoXrANf5fPFWQlDLyp9B95EKdMWVKXxS E77Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788784661; x=1789389461; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=im91wdp9YiitUnFYJnLrBWAHVGr5RBNCR2FBwh5vZDc=; b=Cmf6uQjE2ZAITPFY6Nue+0psuLDOxBKKV2Qweg5wLyDwLy4LxFtMtrZq2b18vLiwd8 a/S7qUW6D5PYFCwWUtsQbJOhTLIqdEO4ciyjKWdMKKW2yTPef5PREc7WP+b50c5NX8xM KxVLqdOiMpYEXFt3R6eCe2ko1g9s8T+YIvzFH3B+yiama3+APxePthwrA4TINI8y58qj o4o7fnIDc38QkKembcjOZL2nEXZhNMRCioeq9J49hpQbAo/+b/UPQti7HQ9r1lKPGkK7 aWRmVTsGaDPn2pprRpAGP+39/qzgWe+ObAkJIiBHGeXps07PoF6lZTuuTztUs3cHZuRr NSOg== X-Forwarded-Encrypted: i=3; AKwUvByMgk/D7nrq1Y1KHPONnE4V7YavrqiiqypNuPYtsNzsDdQoJfy2Z9MVGN6j/3/oTA7jJ8H9S5M=@isar-build.org X-Gm-Message-State: AFuF++lHj3b442rnW/YDV4erhKwQySeDOX+een8DtAB9AT88xfSnFYmg or3Cuvs14ixtXNk//ymomuvXN6BAYTsJJYASqBRxsdR0U8+ZkAaA7P1+ X-Received: by 2002:a05:6870:174f:b0:475:e2e9:4f58 with SMTP id 586e51a60fabf-475e2e9581fmr11878709fac.38.1788784661618; Mon, 07 Sep 2026 05:37:41 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdeqSUJ0hEFDBdDD+CLGus5gSyzS4pB8bScpA7+P8xNEWQ==" Received: by 2002:a05:6870:8c09:b0:479:d6f0:bd8a with SMTP id 586e51a60fabf-479d6f0dcc2ls111374fac.0.-pod-prod-07-us; Mon, 07 Sep 2026 05:37:40 -0700 (PDT) X-Received: by 2002:a05:6808:13d4:b0:4b9:e6ab:d07a with SMTP id 5614622812f47-4b9e6abd5c7mr11619461b6e.26.1788784660617; Mon, 07 Sep 2026 05:37:40 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1788784660; cv=pass; d=google.com; s=arc-20260327; b=eFUgP0UymqbMtpVM3lMSFQXnxICbW8fKw9rwmwT+ujmnklSIeLEyjp+GWj26g/46U1 pojH+k7fz1xdFBa+Ec02XQ3ZqzmTHrtaEB2RTi0Ue87VdQ5YxQ9oNnpwnQoOXJhpXP23 nvIEiCFkMnNVQ2tmmHb1IC6zBuAsv7t/9npglNIYavMBz4Jh5VZJ19mrZtCeMxpe4i53 Rdg+vrfsiivQhS5Oy7nC5Sjbp01TW6XiQBN6NJY+MpVSsU4n/O2DjAqT89uZ3n7WVyAt 3nnTc1bZI1xrbF7SDAiz39bhJiGH3WQ13w/2LWNsN9yeSTaShcB0YBtWRolGegVMF0mg nqgQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=niECfVzBoCLlYzHfc5k50NyKMs3lSZrQIdh3LtdUI/s=; fh=MAR4IrvAhd3sEKpd2rMZmD1A3RZ1HgCziLJco30Znng=; b=j3Gat5Mi9k11JtHjPVW9xWFkCKoTc6p0qkljEwZIhr6tVVl8GtDgiU93RpkFIcIgTF qG2JSNjiFuBeyPUk9gMg0OGs5y2bQL3Svv+rYmDkZnDbaxwo2rcSDcEh0nSL9qFIKUPn QWzQ70ykd2GyqhGm4kWQ7hJCcx+g1Dy2J5cXokiO85X5mDW7wnhrl+9Kwl5PHbqnJG6g JEn4Xv+ZHYDwEY6X73SH64h4p+UQlZ6hXWcEhS5tblINt3pd7Plq1M8AP3MnfO0uYQWX 2JaDDd6lhi6I0/Jc7Up89bZeIt+dD/v2xnPyShhOsj4yX14i7uo/PGOUIK7Hg0zaNLmV slHw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=jrPL4HOA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com. [2a01:111:f403:c201::6]) by gmr-mx.google.com with ESMTPS id 586e51a60fabf-4755419aeabsi312913fac.3.2026.09.07.05.37.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 07 Sep 2026 05:37:40 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) client-ip=2a01:111:f403:c201::6; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=soqWFpVCZsZ4UuBFHQ+ZP0xsuXBsTB4U3kchpWRzrYETVTQosPdIe06Sh26kNP8ckwvpt+AovKB/OlxvfKC2rfszs92jQ10a2CbC6cttitdbzv8B3Qg75re11cY2NZkWlma+sJjE8gXsrSeL/BNi8+xSGUCT7DTm3bJx01ix9SA5fJjqKWfHjjAsj7m9nM1WJg0jOL1Znj1WRin4v17rErSHr64vTIP16MCGAWDnAMZD93pCjbxDQHC/NeYxa/w+ezwc5v1+c6fH4qf0mr7IAmlIq+/uToSq0KVZqamv0ZJUGbmLC2gidpmoUX9EPdlt3/nvRSPhg+CllsSke05pgA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=niECfVzBoCLlYzHfc5k50NyKMs3lSZrQIdh3LtdUI/s=; b=d8eLFZNobeuCkV+9/o0xcZSAHHeRK4g3PVRy0vm6PYHWZRDKvCQNrT9kDKsk0P9qup81Nt1CcsxcweZn6aLeHhkWrurmCWrqPoiBx0mKJ0rxiU3Pw7usXcOraN4bRNH/fkgNtAQswtjK78vWEgzPGz70NDDkdfciXMBMB8PnsGuf7Zdjrq66NetJFzQlUlWT0jIC18clq64mh+j149c4x3w/Ey3JPVR/44mVdrxOoJuel5kgws9rjvfLCJzITjj83h1ITfX1zeazgjCvpoBz0Tf4+0Ea3CycO31aFR7NHydlOFEOH6sM8iHPvc4CgzE5H1E8FqvjXdiDM51hzR10dQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DB5PR10MB7701.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:4a8::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Mon, 7 Sep 2026 12:37:37 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0382.007; Mon, 7 Sep 2026 12:37:37 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, Felix Moessbauer Subject: [PATCH v2 3/3] rootfs sbom: directly use captured apt state without extraction Date: Mon, 7 Sep 2026 14:37:28 +0200 Message-ID: <20260907123728.335093-4-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260907123728.335093-1-felix.moessbauer@siemens.com> References: <20260907123728.335093-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: LO4P123CA0633.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:294::20) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DB5PR10MB7701:EE_ X-MS-Office365-Filtering-Correlation-Id: bbd20147-86fa-494f-f825-08df0cdccc79 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|1800799024|23010399003|366016|10067099003|11063799006|56012099006|5023799004|18002099003|22082099003|55112099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(23010399003)(366016)(10067099003)(11063799006)(56012099006)(5023799004)(18002099003)(22082099003)(55112099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: bbd20147-86fa-494f-f825-08df0cdccc79 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Sep 2026 12:37:37.5189 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: f88fqyimkDpLP1t2d9f7wx0Lxbo+aa7HQwrtBnsIWpVt/jQU9u6RJPkvVdgdUfN0SaISdprQg2ErZn7H9I7J8I1tKDRahZ1fqIgCX1by+1o= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR10MB7701 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=jrPL4HOA; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= Since version 0.10 debsbom is capable of reading the apt state from a tarball instead of an extracted rootfs. By that, we can remove the manual extraction of the apt state and instead directly pass the tarball to debsbom. Signed-off-by: Felix Moessbauer --- meta/classes/sbom.bbclass | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/meta/classes/sbom.bbclass b/meta/classes/sbom.bbclass index b2e8aff6..43b8a71e 100644 --- a/meta/classes/sbom.bbclass +++ b/meta/classes/sbom.bbclass @@ -51,20 +51,14 @@ EOF } generate_sbom() { - run_privileged_heredoc <<'EOF' - mkdir -p ${SBOM_CHROOT_LOCAL}/mnt/rootfs \ - ${SBOM_CHROOT_LOCAL}/mnt/deploy-dir - tar -xf ${WORKDIR}/${ROOTFS_APT_STATE} --zstd \ - -C ${SBOM_CHROOT_LOCAL}/mnt/rootfs -EOF - TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) + unzstd < ${WORKDIR}/${ROOTFS_APT_STATE} | \ bwrap \ --unshare-user \ --unshare-pid \ --bind ${SBOM_CHROOT_LOCAL} / \ --bind ${SBOM_LOCAL_DEPLOYDIR} /mnt/deploy-dir \ - -- debsbom -v generate ${SBOM_DEBSBOM_TYPE_ARGS} -r /mnt/rootfs -o /mnt/deploy-dir/'${ROOTFS_PACKAGE_SUFFIX}' \ + -- debsbom -v generate ${SBOM_DEBSBOM_TYPE_ARGS} -r - -o /mnt/deploy-dir/'${ROOTFS_PACKAGE_SUFFIX}' \ --distro-name '${SBOM_DISTRO_NAME}' --distro-supplier '${SBOM_DISTRO_SUPPLIER}' \ --distro-version '${SBOM_DISTRO_VERSION}' --distro-arch '${DISTRO_ARCH}' \ --base-distro-vendor '${SBOM_BASE_DISTRO_VENDOR}' \