From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6659376390151864320 X-Received: by 2002:a1c:9dc1:: with SMTP id g184mr1031568wme.20.1551093508931; Mon, 25 Feb 2019 03:18:28 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:b755:: with SMTP id h82ls249887wmf.9.canary-gmail; Mon, 25 Feb 2019 03:18:28 -0800 (PST) X-Google-Smtp-Source: AHgI3IZybAhETBxeH/6Ms8RyQqZLoWAn+j1VQvEjpRjWzmMfW/R3Z4QyhqrUTt6wJEZGGIVdXUzB X-Received: by 2002:a1c:4087:: with SMTP id n129mr1058871wma.13.1551093508426; Mon, 25 Feb 2019 03:18:28 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1551093508; cv=none; d=google.com; s=arc-20160816; b=sCPqCN84sX+m5nBVRmRg87ddH5f1GjnLI0xtj6PIo6uVgEyrHzNSihhd94ZhhnlXoL Jl0WN4B+M1xcerN+9uWBGNO8z+HZUSnJvwf9kJ3vpmENrHjNceZ5dpB36qJj1Hx+ywCR HVEeEltqHCHbSPx727HLQlxP3zcUZaCgk9A3kJFUQeUm1K0u4rOpieHmp6jO42IiWwcP WzKu3agq+qF6Llq/+5RSkhIn2fXi79xZfRMZTcAn+0XU6vNNJY8JEp3lgZRbT90dX2cY FQT5BfZ+akzk2wuOdLNsR112qY+XXdgYKoNa+bwdnIxYb+GEvIAc2eC6ZB76PNwHRo9s 25lg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=date:user-agent:message-id:from:to:subject:references:in-reply-to :content-disposition:mime-version; bh=luD+Hnf+RMOSWMmrJtbnTUQcMLPbELe2hCkFxL0Rx5M=; b=ZUL6GrnhNwptYds71OFusFjfHbU8q9yVAeVsyHcs9Eo0FXGVTBJUNeGVv9zO9Mi9/f hxZJgnmBb8AJkLPeT7Ult4ja2uu9h5vMldU4P6leaKWmo07y4BmetjCHJ7ATTxGcVHBA fm9G/pBXBg8IUMv2HxRTNQNLZVj5kJQhWLt26Z4a69Km3wSBCw8GkHJZH0cPWd8DBhlI GBg2t3c7leEiGlzKjQbZ9L4//zhhMJr1eIAYnste2eqH1l3r5thrNOmUFF5lWWBgzsW8 D5VllaCodVlRycZo8MO38KSoMfswOAYTW0SW9PL4bMUdakR+IABgSoRWBLMoGwMO4QFW EQdQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=neutral (google.com: 212.18.0.10 is neither permitted nor denied by best guess record for domain of ch@denx.de) smtp.mailfrom=ch@denx.de Return-Path: Received: from mail-out.m-online.net (mail-out.m-online.net. [212.18.0.10]) by gmr-mx.google.com with ESMTPS id b8si420618wru.1.2019.02.25.03.18.28 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 25 Feb 2019 03:18:28 -0800 (PST) Received-SPF: neutral (google.com: 212.18.0.10 is neither permitted nor denied by best guess record for domain of ch@denx.de) client-ip=212.18.0.10; Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 212.18.0.10 is neither permitted nor denied by best guess record for domain of ch@denx.de) smtp.mailfrom=ch@denx.de Received: from frontend01.mail.m-online.net (unknown [192.168.8.182]) by mail-out.m-online.net (Postfix) with ESMTP id 447KFJ1Ph0z1r417; Mon, 25 Feb 2019 12:18:28 +0100 (CET) Received: from localhost (dynscan1.mnet-online.de [192.168.6.70]) by mail.m-online.net (Postfix) with ESMTP id 447KFJ168zz1qr5Q; Mon, 25 Feb 2019 12:18:28 +0100 (CET) X-Virus-Scanned: amavisd-new at mnet-online.de Received: from mail.mnet-online.de ([192.168.8.182]) by localhost (dynscan1.mail.m-online.net [192.168.6.70]) (amavisd-new, port 10024) with ESMTP id 093wcRGo8QlW; Mon, 25 Feb 2019 12:18:27 +0100 (CET) X-Auth-Info: dzsYSnRuIaWTkwwYQMLsO5AdFuZ3oDFPDcGFc6b+Grk= Received: from localhost (p578adb1c.dip0.t-ipconnect.de [87.138.219.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.mnet-online.de (Postfix) with ESMTPSA; Mon, 25 Feb 2019 12:18:27 +0100 (CET) Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2563183536258420280==" MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <44468fac-f5b7-2178-9170-8eb382528c4a@siemens.com> References: <20190218162113.8538-1-claudius.heine.ext@siemens.com> <66062d8f-1a2f-55bb-80fb-3f14ce05eace@web.de> <683245f8-e5f0-38b8-0532-94170db742fe@siemens.com> <155108427994.4408.2228465568428075120@ardipi> <44468fac-f5b7-2178-9170-8eb382528c4a@siemens.com> Subject: Re: [PATCH] added 'isar-cfg-userpw' package To: "[ext] claudius.heine.ext@siemens.com" , Jan Kiszka , isar-users@googlegroups.com From: Claudius Heine Message-ID: <155109350522.4408.15820291736742705911@ardipi> User-Agent: alot/0.8 Date: Mon, 25 Feb 2019 12:18:25 +0100 X-TUID: Kif/AYdBuSY8 --===============2563183536258420280== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Quoting Jan Kiszka (2019-02-25 09:48:38) > On 25.02.19 09:44, Claudius Heine wrote: > > Quoting Jan Kiszka (2019-02-25 09:07:35) > >> On 23.02.19 11:42, Jan Kiszka wrote: [..] > >>> Missed this until I had to deal with it: This does not allow per-imag= e password > >>> configuration because there is only one, hard-coded isar-cfg-userpw p= ackage that > >>> all images pull. E.g., how to build a release (root account locked) a= nd a debug > >>> image (well-known insecure or empty password) at the same time now? > >>> > >>> We rather need to change the logic to pass the control variables from= the host > >>> down into the chroot during installation where the transient package = can then > >>> evaluate them. Or model this - as a special case - without a package. > >>> > >>> Before the release, we should at least prove if the current recipe in= terface can > >>> be maintained with the above requirement, so that we do not break it = again right > >>> after that. > >>> > >> > >> The same conceptual issue applies to isar-cfg-localepurge: LOCALE_GEN = and > >> LOCALE_DEFAULT should be configurable on a per-image basis, not a per-= build. > >=20 > > You are right! I haven't considered that. > >=20 > > Normally you would not have a 'debug' image and a 'release' image, but > > different multi/local configurations for that. Having debug images and > > release images is a anti-pattern for bb based projects IMO and should > > not be done in Isar. >=20 > This is not true. In the end, you will always have two images of that kin= d,=20 > often defined by different package sets, set in the respective image reci= pes. Then we have to think hard about where the configuration of root file systems should belong. Because that is what we have to solve generally and not for just this recipe. Because all of that could be different in a 'debug' image. We have sshd, ntpd, network, user, locale, ... and of course the configuration for every custom package to consider. If those should not be placed in one or more debian packages, and not be updatable over the repositories, then we need some good interface in the image class, that works well with the bitbake layering, execution order and task mechanic, to solve that. Currently I cannot think of a good way to solve that. >=20 > >=20 > > But of course if you now have a '*-debug' and '*-release' multiconfig, > > you cannot build that in parallel if one package is build with two > > different variables. > >=20 > > And that exactly hits the mark with the problem I have with the way Isar > > uses multiconfigs and tries to share packages from different > > multiconfigs. > >=20 > > IMO if you want to continue doing it that way, you would need to have a > > 'isar-cfg-localpurge-debug' and a 'isar-cfg-userpw-debug'. And do that > > for all possible other configurations you want to build in parallel... >=20 > Awkward. We need to stop this weird patterns which require too much boile= rplate=20 > recipes to achieve very simple things. Let's just make these variables pe= r-image. Yes, it is very awkward. But that is how we would need to do it to have multiple different configurations in one tmpdir with the current Isar design. regards, Claudius -- DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de PGP key: 6FF2 E59F 00C6 BC28 31D8 64C1 1173 CB19 9808 B153 Keyserver: hkp://pool.sks-keyservers.net --===============2563183536258420280== MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Description: signature Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEb/LlnwDGvCgx2GTBEXPLGZgIsVMFAlxzzvUACgkQEXPLGZgI sVM6DBAAgCIfrCBl2cdKzFJDuZsoBYYaoew5HbKRy6xOYTKKsCzDZy6vHnowyImy DKb9WSgrHDSXNUsM/JdFmYz3UaFbbSUD/9t2QUV3Z36Ma4H0uiyEPecC4W4gUKdJ GHNxSzSmX3qE534xghIZTNcaFIH+ykEUOPstZP+vLXa3spIedvHXGIj3UvNuWCcl GVT8KVcTU9xeyHM8ozuX+MzAXVSUGq072DGb0EpOrQFg5kRnuWslkga+pGDsB2h4 dyp4+BmHVgUJtrDoNV+A/g5rCsfP2N0YigTHwzj/cC45j0LnOojmg0ifb8Nh0f/N D2VVV83lG2I5R9UZ7QN0ozZFyjA28lWh6OKzmCCKpXCrVqzIYBPGrotKGpXidcq/ MI/7L7ta8o8nZ/3pM19EC16w0dpeK5kT3xwf1CRydskY0Jgyl9WRU+GK3Q8i2RKY 4aLPjcvmVMjlZ+2yQi1fxTBe5MxrmtHQvG+Kkzxm87kp5JMpUWZFWk75hnkbsCJd r8KgRVxlQ+Kla1hUs1jwdUAGq/M9BjUNC2C7KldcCemaaEIf/TgD/sd5794kwOq2 UnRka6QRFj4VYGjAM0jKdmBbFvQrIkXFNcVWVt970pj7/ClgsUy5HGXssD0sO7sg cGViaztQKVKUSTY36UKTigaOmFe5IdLZlpq4xNIcJEaPIgtgXRo= =KI4N -----END PGP SIGNATURE----- --===============2563183536258420280==--