From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6480563028650622976 X-Received: by 10.223.153.10 with SMTP id x10mr262663wrb.3.1508943510624; Wed, 25 Oct 2017 07:58:30 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 10.28.139.130 with SMTP id n124ls334427wmd.10.canary-gmail; Wed, 25 Oct 2017 07:58:30 -0700 (PDT) X-Google-Smtp-Source: ABhQp+S+gdYcR+VHcdE2Wy55QH7V+W/7OHBQmFEziFNob01wvNcHhKGLMaFzzaXmntq2EU401ImZ X-Received: by 10.28.191.6 with SMTP id p6mr229656wmf.25.1508943510382; Wed, 25 Oct 2017 07:58:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1508943510; cv=none; d=google.com; s=arc-20160816; b=vc2WC9AksSXU6UNRWOZpLy/vddiFySIBp8ivalVgXtBEcd034EgStkkkG/XxUyLR8/ i4yX1nqVRD/HqZ6KvlFrg3uDPsi55C5v3HbWEGKyMnnWF84ZVtVugHglPNyAfZBRiVlW T5j/lzv/o9zHMiWX3GOIvsv7sobJWMTbX5a1cFRsPUt51Lf3RcuWCZoxoUR6VHcdOTjK TjhX2ayg7EUjIvcRs9YM8ACgnp96iWIx0cYJul+/sDYUcUqGTicVGzlUZXUResqs6u/b 441E3lKx0vS0I2jOJ4N3tYUJbsKGUTKptyuMhFViqITL3/Mo9ch8126hDaKHtE+7wR5r orCA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-language:content-transfer-encoding:in-reply-to:mime-version :user-agent:date:message-id:from:references:to:subject :dkim-signature:arc-authentication-results; bh=BcAp0Em7219tWAqaIRSYm4546ixzsjWBNS/krdKl4E8=; b=YTg6fkmu7TTw4kfiyTirD0Jxijj8DPU6OebtZ5wBOC4IrILmGGFazb7qaIQdeSu+Lq +PF3oP0H4wYPxSjDBQkZxWo9I9RqZbT2j5MJMwv97OiR0dQyAzEJbNWogoDAX7RktCf4 3Eq6QUkt57CYp57HQgfmw1or7L5uQ1+qhlBm3sm5apTIoJNleSVr+kCxuL36/fQXc0e3 raLYO9VfnvsU9Rn5ywVabKSUjTHrq5crE5CvPeNi9HHexx5kIuojdyU7t9cGj2Mko1s3 2NJvVn7B/IDbCVkk0h2OFBvun4lgP2/CIZQO1XqfqlzjlJy55H+7M/aky+pFIwxyxTmb c9LA== ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@googlemail.com header.s=20161025 header.b=UbifU+i/; spf=pass (google.com: domain of benbrenson89@googlemail.com designates 2a00:1450:400c:c0c::22b as permitted sender) smtp.mailfrom=benbrenson89@googlemail.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com Return-Path: Received: from mail-wr0-x22b.google.com (mail-wr0-x22b.google.com. [2a00:1450:400c:c0c::22b]) by gmr-mx.google.com with ESMTPS id p8si136774wrf.3.2017.10.25.07.58.30 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 25 Oct 2017 07:58:30 -0700 (PDT) Received-SPF: pass (google.com: domain of benbrenson89@googlemail.com designates 2a00:1450:400c:c0c::22b as permitted sender) client-ip=2a00:1450:400c:c0c::22b; Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@googlemail.com header.s=20161025 header.b=UbifU+i/; spf=pass (google.com: domain of benbrenson89@googlemail.com designates 2a00:1450:400c:c0c::22b as permitted sender) smtp.mailfrom=benbrenson89@googlemail.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com Received: by mail-wr0-x22b.google.com with SMTP id r79so263205wrb.13 for ; Wed, 25 Oct 2017 07:58:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding:content-language; bh=BcAp0Em7219tWAqaIRSYm4546ixzsjWBNS/krdKl4E8=; b=UbifU+i/e8mYDMD62gPOOv6C0XFb2sI2Lc/BYQ+9s8vbJoQxlJ2x42Tq0qYXrR93WW /I8kAf6yJ3Vsw6yY2SbXnRirfqPIZsrK/2XWZeq5lBJ3YwQaWZcsip0hfaZyUD6aTV8S RVYbIHlliNLyrdHvhJlXmsQuMl2EnsxyPK/EldeXuH4nbdHUxUDx3Namrl0hRmlDU/yx t3XpjMx1+3SfJAnLHau5l+TbVKnrpsIHQksLG/JMrdtjksoKpOqf+x0acZT0mWQvR0Ey QQvxq0MXQyGho3YHbnIKYWFukQaJTLwKA5ZZzxC4MlWuACuQO9B305TNJ+NwLscLWfx5 xj7w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=BcAp0Em7219tWAqaIRSYm4546ixzsjWBNS/krdKl4E8=; b=jvKlrtvIzROJVDNYza1EOKs7mpTQMlxuxytIDvwm+JDMYjtZl12wl4L4QQEXxkBQTf iD8tNBmqVpgd75xeKsoRaACd3M98EmnfTWT2KQpAANmxnW/Voz1V7A2X+LTZKNBAP72y hd5ppGARTe/+tSEsOsoFEoSo4jGlzY9RBD+blk8PmBG7/f8jyLb9b6WPQcMbxFjKR7Tj 6GI9pdQ7I/7bzgUq8GTvIacAUy0PV5N8TnNNqB4XMqLKgJbjsr40S637HrGwT5nc7JRK L63P+8mM5IRIhgzVV8GAYaTmS69QMdkGb5OMvthR0QBE9VMh6uBUR/gF6WonlDmjqYKO 6U9A== X-Gm-Message-State: AMCzsaUU3fylfngPnAOyK2QCVTWJAptVBJyz6c280snncf2z5RinWrXl cNwaollm0HjmkwZ55eTO0T0cIubv X-Received: by 10.223.162.199 with SMTP id t7mr2445584wra.163.1508943509710; Wed, 25 Oct 2017 07:58:29 -0700 (PDT) Return-Path: Received: from [192.168.0.11] (ipb21b4179.dynamic.kabel-deutschland.de. [178.27.65.121]) by smtp.gmail.com with ESMTPSA id u68sm2392166wmu.47.2017.10.25.07.58.28 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 25 Oct 2017 07:58:28 -0700 (PDT) Subject: Re: PRoot: Drop sudo around buildchroot To: Alexander Smirnov , Jan Kiszka , isar-users References: <8e0fb678-085a-1403-3ee9-f3afef3c080a@ilbers.de> <00b0017a-62e0-1e1b-4d67-786af7702f8d@siemens.com> From: Benedikt Niedermayr Message-ID: <14315725-092a-8d1f-0c02-98efc30e7f2e@googlemail.com> Date: Wed, 25 Oct 2017 16:58:27 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-TUID: H0TriIun0ZUE Am 25.10.2017 um 11:48 schrieb Alexander Smirnov: > > > On 10/24/2017 11:22 PM, Jan Kiszka wrote: >> On 2017-10-24 21:34, Alexander Smirnov wrote: >>> Hello all, >>> >>> I've successfully dropped 'sudo' around buildchroot operations: >>> >>>   - Create buildchroot >>>   - Build dpkg-base package (hello) >>>   - Build dpkg-raw package (example-raw) >>> >>> The patch is quite small, proot works out-of-the box. I've tested the >>> following configurations: >>> >>>   - multiconfig:qemuarm-wheezy:isar-image-base >>>   - multiconfig:qemuarm-jessie:isar-image-base >>>   - multiconfig:qemuarm-stretch:isar-image-base >>>   - multiconfig:qemui386-jessie:isar-image-base >>>   - multiconfig:qemui386-stretch:isar-image-base >>>   - multiconfig:qemuamd64-jessie:isar-image-base >>>   - multiconfig:qemuamd64-stretch:isar-image-base >>> >>> So proot is really good tool :-) >>> >>> If you'd like to reproduce the test, please try my branch: >>> asmirnov/devel >>> >>> NOTE: do not forget to install proot: apt-get install proot >>> >>> Build command: >>> $ bitbake multiconfig:qemuarm-wheezy:isar-image-base >>> multiconfig:qemuarm-jessie:isar-image-base >>> multiconfig:qemuarm-stretch:isar-image-base >>> multiconfig:qemui386-jessie:isar-image-base >>> multiconfig:qemui386-stretch:isar-image-base >>> multiconfig:qemuamd64-jessie:isar-image-base >>> multiconfig:qemuamd64-stretch:isar-image-base >>> >> >> Great news! Hope this passes all tests and then makes it into master >> soon! >> > > I've tested QEMU machines for images listed above, no difference > observed in comparison with original 'sudo' approach. But anyway, it > would be nice if somebody else will test this, especially in customer > project environment. > May there be a problem when all files belonging to the build user and not to root? Regards, Benedikt