From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 26 Oct 2026 12:44:51 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-pj1-f63.google.com (mail-pj1-f63.google.com [209.85.216.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 69QBin6p010402 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 26 Oct 2026 12:44:50 +0100 Received: by mail-pj1-f63.google.com with SMTP id 98e67ed59e1d1-3ad3fc547bfsf2760497a91.2 for ; Mon, 26 Oct 2026 04:44:50 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1793015083; cv=pass; d=google.com; s=arc-20260327; b=H+0E6JNhTR/nEixsBPWEN6pmKxEwsLzZ+XpH929OSFVvv1sCweH+mEa508EuBlqV+7 iDgHjTTDdPeklYciY16bPWaHW43vOuyayiXZv7Z/QteLI9Eqd7MJlBx/yATTZGpsQV0J 30jhy8kmunQQQShYmRRKnhAO0SOzC30boVMsGBMtroBEKObyht5LCzmQ1Lrnm8y6Xo4A D6hZfFikMJ17rSJdTDQxpJ30PRTsA/ozuRI8Al5Mjq9493UuJIN6+ZSOKBLGtpR1EgkM Pjt2X75kr5VVyLiC90rrhUU/wvVWDAOr/BdtdYIk9O+N8U4iU+jbCd93qL5AkPSESwvP i9UQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :from:content-language:references:to:subject:user-agent:date :message-id:dkim-signature; bh=FW9FMU2ZrmN8gh5d1qDlFSbYqQ7ntv6BplwP3QAUhwk=; fh=23bx8fheMjvJd5AxTXbNjUtGTFbV8gyBpR9bKBufFZ8=; b=dKRosoF3P1Iloa538CAPm78oU6xotbcE9ar5Uo09/kvKYDF0/bCdpfnHVUySKyxoMw hFbYx3vH1fuLmY6ttoluLXfQQGQH1XmyQ+I/Zetds7nHb5M5xBwDwOt1pstfTTB6dNbm Rm1L8FhuTCH31xK41V6JPGanesOp+KYIa7oh17KjBdp3CtKOWJRV2nBqYGgVnWIrXFbJ 7ZN3SLPwUVFReWPdR6LosGYRp8S3pBqtK8OHqOEd9th0TSf1ZK2S6CXnL9qsb6mCHXoq qK8Lj/NOUW7ULV/F36x+SrnvlWn8dBiFL7YEaYhjLpnv3tm69stS2CAkNlipIpJUdRM8 UeDA==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=LqWWqmh1; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1793015083; x=1793619883; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:in-reply-to:from:content-language:references:to :subject:user-agent:date:message-id:from:to:cc:subject:date :message-id:reply-to:content-type; bh=FW9FMU2ZrmN8gh5d1qDlFSbYqQ7ntv6BplwP3QAUhwk=; b=WqMl7qqZ2moRkQtmGZYmhpRmNJ2oYDcDOEW9ftuWOyEcNGxjjXabU4IRl4hEqWKMAs mnh3V6J0QNLltYnkxzQC0m3LPnGuYW9zx9jZSVIn53WSdVMgE67xGgMMz+IVA1ukrJaP BxH/0FU8nB+9Zka0LBPpLU4j3tc6M1VCs/wQkquu7f8dTPdivPs0FlJEVczCsWbLksAz zSx/lWkT6IibcbFAqGJ5Xzl5wqC5UVNKKtM2NTYTu1tDq0YFKMiO7LsmQ4Ez8cfFYyR8 1WKj4u/P66fiviSIvdMP+ndTenqhHtbk8Zx1l1ASBYWhZm32l4hj7ywDKF1/ud4GBVZ1 OTmg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793015083; x=1793619883; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:in-reply-to:from:content-language:references:to :subject:user-agent:date:message-id:x-beenthere:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to:content-type; bh=FW9FMU2ZrmN8gh5d1qDlFSbYqQ7ntv6BplwP3QAUhwk=; b=Zo1DhbTh9gqCBLFCE8beu6rABGqavrLhR9+x8IlF5+QxuV3fnBZtIkfhbZZXBhi6k5 UloOLxp1EtUxRdeibgFjq5snc8ekAMWPOLyX3jQe7OzGEawHyjNJICfn5efKGknuE4+H 456fmsmTPcbR7IkK0N35/37VaM73FHlThjw5olLKPUr3Mb1sIgugAzZ2TagoUCkfTqVR oEgSVobjSzXoLqe9RzD6774RAsr/LhJwTFWl7n2jBI/qBg32O0eIYaEmzqys7A0J26Q4 bYxmOTZaT/gqX7HryybE9sIO2o++nislzgngX+zm68KkonaG3RpAMIXKKjR9l8AD0w6J fmSg== X-Forwarded-Encrypted: i=3; AKwUvBy85pHLpavCJEheJFu1QDzyiL8hRlTN3FYKhBllYT+om4ZOo03ZiSCPF4+eUluznqGo11u6@ilbers.de X-Gm-Message-State: AFq9FYJgqHMmMBMBNK7+WwfRKVU0OToN6ZJe7/jbTyAYlmkSuYdaryfz 1wXvcJMwwdkb8qldo2vwCjl+b1G10q8I+Qk7kVbqu1E+YFi0jmCWY1pT X-Received: by 2002:a17:90b:48cb:b0:3ab:1b19:78ed with SMTP id 98e67ed59e1d1-3adea9dca32mr5479395a91.21.1793015083587; Mon, 26 Oct 2026 04:44:43 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdegZub4atzvRSDfKUVakNPwNJXHiixB5a90bAVhkIO46g==" Received: by 2002:a17:90b:4f8b:b0:39e:5338:8a96 with SMTP id 98e67ed59e1d1-3adc992e43cls3223296a91.0.-pod-prod-05-us; Mon, 26 Oct 2026 04:44:42 -0700 (PDT) X-Forwarded-Encrypted: i=3; AKwUvBxoJZ+FPDhtdYebcDRaukNNjtUYAg7KgBZgkBRu+EGH9cw2mnD2WYdJRoVFtdTADrOi79tOGVCradin@googlegroups.com X-Received: by 2002:a17:90b:3852:b0:3ac:452b:4a63 with SMTP id 98e67ed59e1d1-3adeaface72mr6211973a91.55.1793015082532; Mon, 26 Oct 2026 04:44:42 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1793015082; cv=pass; d=google.com; s=arc-20260327; b=H6Tyenrvpg0vT9ZaSnLR8PKTn5604WwXNAykGZXrdCsAcQ1X+yKQmfM9TwJpqLvqpe jmv7LtERjs1s7xXJBwZJaPL4u6hoAu8PF8oX+EoDAPNopBByF/0OTA3HyfurVcBSF9b0 5zRz6wQHWlVZyblnejdHRADxw4+lWQ0p8xjh9WtRddV3ARP4GYKCWY6pbFVdwB0bIBHv 72H4woc7JNRPONzwRMTUb2jdEibJg9oKtnboHf986zNFjz1LvptkooYRo2AdB6nDInF9 WUTWxe8AsEYWXdYrnXl2ofQIV6Olp4coZEJ+5+KMU59HFHge9g2EQ1HtMCAjPcW8duyK pnCQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:in-reply-to:from :content-language:references:to:subject:user-agent:date:message-id :dkim-signature; bh=VbyHwLsqXyLlsiOoRxd8+WwKOpMmBbGktyy5rqtWa/4=; fh=ez+yYIN2+t1/A1KtVD1essDQ6+anTTnZTbSXjuK9WaU=; b=GOVhTaqvWBAGKaaQ64uDlRnFEbSx5Son6TbMiy1H3kMRy9KCELXtVwbwTg1lAUydIN Lw16IeKGk1iBBUxrolQ7WB0PYIuiWLb4x79hPVmlE62sRH5JcGMP6iQu+XhTQQw6n4TU dPxT+670Aai7ky64KQErV6AidrvuWHAS2CeqAl7zK4UblmDXMqWW5umhEXo5789X1Eup kmjOfTgkPeKNFyYGPoAh7ffG1pff4K9cGUJ1CBflvi+G6HvDrq/6+FaW0REXhU4MFw0k X3q0dUtnGOD9+KHIpTyRsxK3gD1Rwc1YD0hhnhh+9XzDEvdJ41sn54JRAqCVSAqRWKGX WQLQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=LqWWqmh1; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from OSPPR02CU001.outbound.protection.outlook.com (mail-norwayeastazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c20f::7]) by gmr-mx.google.com with ESMTPS id 98e67ed59e1d1-3adeba37ef8si54074a91.1.2026.10.26.04.44.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 04:44:42 -0700 (PDT) Received-SPF: pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) client-ip=2a01:111:f403:c20f::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=brK8EOZJqXQN5w/EXi5FS2TUoIgK+otQqPanyDrGc2IG9i4WLWbnjvw+V/GtrOBG7g5joothKQdoxZtxUJgTY6T9hDbWNKpSUmFUQ7NWkCGiGJdLtkk1qCMdnAlqvBDT2MtkVW+bZVUbMzQvz+uELs/btLFncfQKqrXC//PNBX1GugwloNozABtQYJWqPGdj0946mk0GwNxfcLDONAnm/gk6YPqvSybQPzamgNOUAEcqFxg9cyGI+YfqizkSO3T9ACCspx71lCB+qZco0F27MqH4dG7sRv8hPLWmSUJ3jQuJjpxkbnQ3o3F8c4TRURm+k5a+mGNG1qxMaxyFpaz4kg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=VbyHwLsqXyLlsiOoRxd8+WwKOpMmBbGktyy5rqtWa/4=; b=K0WN3dKlcT9uFTzpRiXeUYDhwDxdcLIJbZBbowxQksN+kmrcLVnMGmOARUL17hOkiFNCYOsDeFC/1YmHeFJmSCu99aB3D1rntJ6c2O7Ox515FfhNCoQKEyBOmFhpcfcfqjPXvZ7ghMi7kjjI6UAT4Wx8rgL1ELdXGF5xUHZpJW3gQILd4OyE/6ayZV0zkpb+V6soL4V9WnHVVShwQN/yPUFyjbn26+SJ1KgXZLcqnnjjgI1MGiZiMrASqRvfiJrtDsXNXNX4NKHdx7tL3IvAxiFUJLoVSVQcaOzUJlUM6J5c/g1kbwUBTTAWyqPCVgMne6ENCPh+ltWx3yQWZelY7w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:740::12) by AM9PR10MB4104.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:1f2::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.7; Mon, 26 Oct 2026 11:44:37 +0000 Received: from AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM ([fe80::527e:14a7:bd3e:86be]) by AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM ([fe80::527e:14a7:bd3e:86be%6]) with mapi id 15.21.0569.006; Mon, 26 Oct 2026 11:44:37 +0000 Message-ID: <01c69bbe-065b-4ab1-b822-8de485330e4e@siemens.com> Date: Mon, 26 Oct 2026 12:44:35 +0100 User-Agent: Mozilla Thunderbird Subject: Re: [RFC 1/1] test-container: block sudo usage on rootless To: Felix Moessbauer , isar-users@googlegroups.com References: <20261021134540.331832-1-felix.moessbauer@siemens.com> Content-Language: en-US From: "'Clara Kowalsky' via isar-users" In-Reply-To: <20261021134540.331832-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed X-ClientProxiedBy: FR4P281CA0355.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:f4::8) To AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:740::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM0PR10MB9645:EE_|AM9PR10MB4104:EE_ X-MS-Office365-Filtering-Correlation-Id: 9a1339e8-dfda-4c2b-3c3a-08df3356838d X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|23010399003|366016|1800799024|11063799006|56012099006|261021123027099003|261021121427099003|261022105027099003|261009223027099003|10067099003|55112099003|18002099003|22082099003|6133799003; X-Microsoft-Antispam-Message-Info: Osx4XrMY5LWaC00vBBTXoVgMh22zvXpkDYGlkD14k4AlH4bbQSl4A7DlolEhoi033UYIuy01UZwnpysx2P7lHkqs/ZomKcKd7Tup9eiQXCJrh+NzTZ4smEDSmHB12v7+KwNhcXWNW33RuF9QqmrV928Cu3ckmZ/VrQv9k6uKBZPu8bEsDp71SnL0wATbn6sJAreICawQzRQvQWWcsM5/0nw6XLfeY2RwTd6OV8aFDHNR+vjn9N3/NB9sHiMRYuc6VcY8E2R5DuvWMvg0iKgXCOiX1hVrLo1Hh622i/DLcEzbfyY+p+TpGPUiGKxkl5le874bvj7xP103L4QNkqDUPHl2eTaQTux0/5mZpHsqNgTFbR/Yi8fUWeBR2FNtAwk2Dii1Ss91ErprSVEpz5sgjVtOdwoc3YPxhrwadnyPGdnTA8hbeWOXaqAEaJyk3Knhi2lMmAOWzpep9HOtX23h14l/1dvyAa1pE1c4G0z4qLLSEYRpy78L3S+XhEQrYVfSjXrVEuoD9ijYlr+zC1Rxja6wU4Q3bBPsq/4hKY5Wbflnzl2lBNQnlcEabBblc+5anU+eN4Uez5G3bvaIAaufuYGQI0vb2Ge32c0oFjGwZZLogOFitwMxNNnTwtz8Jzp6aTD3B5jVOWjVhBJCExfDloVa+fw+yBBY/F2mt+3TVng= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(23010399003)(366016)(1800799024)(11063799006)(56012099006)(261021123027099003)(261021121427099003)(261022105027099003)(261009223027099003)(10067099003)(55112099003)(18002099003)(22082099003)(6133799003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?WXdoMzRQQVBCT1RIU1JOc2ZtOTZDVzg4VkFuay9UWk1maHl5TU5lQkJTUHZj?= =?utf-8?B?cjV3YkhWME9UZXlNcjFGaEh6MU9xOVdwU1Zhdk9BNEJKQkk1Sll3SHhNSytO?= =?utf-8?B?dWNBUlE2ZmNqWVFMa2xQYnU0dk5OMkJpWWRkaURuTXYyY2NtUFVTd0dJdllR?= =?utf-8?B?Ums1Zk1uUVF5d1h6aVpwMVpDWkJHRklxalEvNnlvOGcwZlRRQjA0cjljTWZZ?= =?utf-8?B?NmV5ek5BYjRoVFpUQ2JIeFJaZlNwSVNmTEsyMndBbTF0c3N6WWo2YnE1dTYx?= =?utf-8?B?bXVkUGk4M2tweXg0TmF5U29ZNEZZOTIzSEoxZVpOVTVSUGEwOXowc1VJYUdq?= =?utf-8?B?QjRoVmRxYzhhTHBQM2IxMllYNHR0T0hvNGdXdDdYaVRXYzQxTDdBSUhjNUk3?= =?utf-8?B?b2FPdkVuUFl2cDVsY0ZjYUJoTWNzTVhWZmxTeXdBVXJXbmMxVW5vUkN6TTFx?= =?utf-8?B?bnlpSndvRHNWMEFxZFlXQ24zaVpQUUFXSVU0bjVJcU4za0s5SUp0Qit3bnE0?= =?utf-8?B?ZlNYK2xJQklETERIZVd6Skhqb0N4ZkR1RUF3QlFQTVg3NmRmOWViMy9jYWpt?= =?utf-8?B?dGZYRTNxbmkrNWFrcGZnYW4zSVBVYkZFeDVpbEU4Q0JBTEJ4N3EvVXVyK21Y?= =?utf-8?B?Vzh0TVRBT3ZqUzBZNkFIeU03b1cza1VvVkJYVHI1SFlvSTZDOVQxcGkvVEFW?= =?utf-8?B?dDIrejE0SDRrL3pQSHB1TVRRZ3R1MGk2YUdKdzMzTldvMzF1ZDNqUk1DdHdG?= =?utf-8?B?ZVlibVc0NmhXc1FIMzRac050ZVhMTTFNMk1kT0MwRzlISnIrMXRFdEo3dXNp?= =?utf-8?B?SWM5US85bEJFTGlhbkc0WXdmM0FDWEVsa2g0YUxTNkJpcDREd1VJVnh5M0Rn?= =?utf-8?B?UUd2MW5yT01PY0hHNUhDSENUc0JWeDcvOHFDclh1akxsQ3ZYbjlScmJPdW9T?= =?utf-8?B?bzFHRGRmZWplNlh5bytKQTJGWGVuZXNlZGZ1SWJOSnR0cVlvUVY4RC9nMW5D?= =?utf-8?B?NEVGSlJTU1Q4SVNIZUN2TXErNWN1K0pTMzNudzd0THlDTVp6L0R4N1dteVdw?= =?utf-8?B?d0ZQenhsNkZHZ0N0M3lsTnV1SUdJdjRZRVVHeWtzNDBqYWJqUkJzaFJwVnhj?= =?utf-8?B?Nk02ZGRnYWJLUE1IdTJNWVdQaTc2Qy96UGVpdmJnOUZKS25xSjJFUmpTV3lD?= =?utf-8?B?MG1jNWYzNFVxQlI2QlVJQWJKZVpBWGZQaWpCcjhGOXBUWk5XckpNVFlDZmpu?= =?utf-8?B?NDdMOWxpMnlCbFVPNzgrN2NXelNaMjNESzhSMlgxSGRsSW5Zdlk3SFduNUs0?= =?utf-8?B?UXdLNWtxMWJmcGxVOTVNRWxHWjNTQytlaGZVeVZxcnVTOVlIZnM2WURLQU0w?= =?utf-8?B?bVBtZlhWcGIxbC9iMWpvT2gxRkVTRE4zQWdGdkdiUm9IS0xlMjArWjhMMlNu?= =?utf-8?B?Mlc5LzNWUk9VMGN1UVZER01nMzVuT3BWWTB6RjhkdTZ2WXl3b1VDUHgrV0dw?= =?utf-8?B?ek9lQlkybEc4NWQxOHFSWjM3dWRDNlVlQlJQQzM5N3ExNFBVQ0tOd2M1QTJn?= =?utf-8?B?QU5ISmN4TWFYRXJ5bXdDNnFYKzR2Q1M2d3VseWdPVHNJM0xIeTVrSTBNN3Fu?= =?utf-8?B?VitYZEF5bFhScWUwa3RHdk9EZEFuRml4ZHFnV1NmZS9ENGFwWnAxMGZKSXJL?= =?utf-8?B?ZVdSSFlwR2V6R0EwRnlNK0JLL3ZyTEZDNXRKRko3aDR0OFJTcEwrTmZGbUdK?= =?utf-8?B?cTRBeUkraWE3aUdzVGhyN2E0LzBnTmpJQUhzWWNJQkN2M0JpN2J0QTVvaEVJ?= =?utf-8?B?S1hRUTF3R1ZvQXJYL05pWFNVQ1c5RWN2ZXIwWG4xWVppS3A5S3c4Q3FwSHMw?= =?utf-8?B?dCt5WjkrT2lGVTFtNEVrb1ZzU1VvTEp5Q010REJ4S3BZMjhXUkJ5V1BvR3JM?= =?utf-8?B?ZlowcDhGY1YvdXdOR2Jjb1VpQzBBMnVvaG9NbHdJM2hCczhsQjNTSmd5Q3ZZ?= =?utf-8?B?dEdLNzdSVGxwSzF0QTVZamZldG9PM0taaFdaRzNwd0FCUHQybGJDSzlpMW9L?= =?utf-8?B?MVdraGhHQlRVemRrTzM2VHhXS2J3TVgweFlDS3JaeHB3YXBGcjVPV28vc2Jj?= =?utf-8?B?ZUV4SHM0dU1xV3Q0d0JUUHhSTVJQNmc3M29QQlo4TmFGR0dHZGlZS2VMOE9Y?= =?utf-8?B?OE94RVhTdlFSNmlUNk1zdFlPNmkwSTZObnF2UjFjeWRHMjlNNHAySHozNG9K?= =?utf-8?B?V0Y0dDFlMFNTbGY3ckVuVmgxa3Uxa1lsL2wwcndlZXVTR2ZmVkZIVHBDbnNI?= =?utf-8?B?R2VvaTlMZk5jOWhVNGFMSWJuQ3ZRY1NuaW1iTWpHS2tOU2ZhanlhMnRHcm54?= =?utf-8?Q?FpiWmCqT0P3J+Hb8=3D?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9a1339e8-dfda-4c2b-3c3a-08df3356838d X-MS-Exchange-CrossTenant-AuthSource: AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Oct 2026 11:44:37.8418 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 0L4dogzOf9vES14t++AuSBM2ZoeMTr9RFF9YP7BxcKYnBLcN6C1BzBhuJgN7LjNtKApHhA2MmtYlreBv4oHa3vvwD7A1Bb9DIIjhdZQJ4F4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR10MB4104 X-Original-Sender: clara.kowalsky@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=LqWWqmh1; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Clara Kowalsky Reply-To: Clara Kowalsky Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: Vr9xujeqYFEK On 10/21/26 15:45, Felix Moessbauer wrote: > In rootless mode, no sudo calls must be made. However, the kas-container > ships passwordless sudo which also works in the container. To catch the > cases where sudo is called in rootless mode, we replace it in the > container entrypoint of the test container with a stub that emits a > meaningfull error message along with a non zero exit code. > > Signed-off-by: Felix Moessbauer > --- > A similar approach could be implemented in the gitlab CI executor > as well. > > Felix > > testsuite/dockerdata/test-container-entrypoint | 17 ++++++++++++++++- > 1 file changed, 16 insertions(+), 1 deletion(-) > > diff --git a/testsuite/dockerdata/test-container-entrypoint b/testsuite/dockerdata/test-container-entrypoint > index d263760d..ba824760 100755 > --- a/testsuite/dockerdata/test-container-entrypoint > +++ b/testsuite/dockerdata/test-container-entrypoint > @@ -65,14 +65,16 @@ case "$args" in > ;; > esac > > +block_sudo=0 > case "$args" in > *"-p rootless=1"*) > + block_sudo=1 > ;; > *) > clean_rootless_files=0 > ;; > esac > -export clean_rootless_files > +export clean_rootless_files block_sudo > > mkdir /isar > > @@ -109,6 +111,19 @@ mkdir -p ${base_dir}/overlay/work > sudo mount -t overlay overlay -o lowerdir=/repo,upperdir=${base_dir}/overlay/upper,workdir=${base_dir}/overlay/work /isar > sudo mount -o bind ${base_dir} /isar/build > > +if [ "${block_sudo}" = 1 ]; then > + blocker=$(mktemp) > + cat < "${blocker}" > +#!/bin/sh > +echo "ERROR: sudo is blocked in rootless test runs: sudo \$*" >&2 > +exit 1 > +EOF > + sudo install -m 755 -o root -g root "${blocker}" /usr/bin/sudo.blocked > + rm -f "${blocker}" > + # rename, as the running sudo binary cannot be overwritten in place > + sudo mv -f /usr/bin/sudo.blocked /usr/bin/sudo > +fi > + > mkdir -p "${HOME}"/.config/avocado > cat < "${HOME}"/.config/avocado/avocado.conf > [datadir.paths] Tested with the InstallerTest and unpatched rootfs-add-files in rootless mode, it works. Tested-by: Clara Kowalsky BR, Clara -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/01c69bbe-065b-4ab1-b822-8de485330e4e%40siemens.com.