From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 09 Dec 2025 15:21:26 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-ed1-f60.google.com (mail-ed1-f60.google.com [209.85.208.60]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5B9ELPaU003435 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 9 Dec 2025 15:21:25 +0100 Received: by mail-ed1-f60.google.com with SMTP id 4fb4d7f45d1cf-6495ccea1b2sf1154129a12.0 for ; Tue, 09 Dec 2025 06:21:25 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1765290080; cv=pass; d=google.com; s=arc-20240605; b=Za+psn1+/CgyJT15Sh+WLgPJOhiyAmI9czBwHaUd/3Ak7N0M5XkkXv+DF9dhisSrt9 dPwNYxiQoEGidScl39T9Z2H1Bq0yCKs+WQayswI0o36SQSeCCi6wQmmjrLS3AOXPCDh3 55BJrG52xGIRNEnSDIUAO34vSwRkykiJ8yYo9kViPSaTBbVf4XW82PMMddeBFA+sNjgV +/gA1XmnMRunZylCWLdQg9cBRInoyE9huGVpuUT3/temBI3X/RuNyTGSxbdashWFg9wV qdWpwPT6tRcsMmgnWIMQ+oSNf5TJ5Sdp7u+zmsgH/IJpAiblhy3P31IRmV4u/+gatf1N ua+A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:content-transfer-encoding :in-reply-to:from:content-language:references:cc:to:subject :user-agent:mime-version:date:message-id:sender:dkim-signature; bh=Dgz8Gc1xWMHOK6rcSZ88PjMXuxr/wRP3fufZh5KMNqk=; fh=yezEfbzIGFmqcj3HctEyjDjOEDAL9I5PEKLApnpQCmw=; b=CSd02V9VZYoRjp+bgHIAMAQ79RQHhxbF8OCxmli71ZxvTnh3bWoflUV5sQnMR34o1f 7Ugnq355iIkii/5b2MsmTqZHvBynWv6QVzYa5DskNT9Z2EWbxRypA2ZKDX/6pGfu0IEf nXMebbTE1cAGF7W1WirOvQ4PlWVxizMQwOt3N09XQrV3SVrGQXpPIz83b3jqwa8Ar+bX PcOuoHrOrEC/+LHwNlPd7IQ0EMLkJvZvWPzYRgVkA771C//YfccExPI9//qtV9TGGX7Y 9GtbMVXAHLUQeM/BIa81RRB7rwKYxiWl2pXlIpH1egSlVfSGUk0fHNL/83UymQsMTH21 TYqg==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1765290080; x=1765894880; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-transfer-encoding:in-reply-to:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:sender:from:to:cc:subject:date:message-id:reply-to; bh=Dgz8Gc1xWMHOK6rcSZ88PjMXuxr/wRP3fufZh5KMNqk=; b=U7jaKDsypSVX4LjfT4nUDoirzQQCGbm7ULi133Z1FxBJS2Ak3l4/8yOGTIxtgt1+0y DiUhnEm61PP0WsQCtcEzEz1G9D0bIp/gTbY6fwMZ4swhxrGXKow0l1nh2KvmnT/1JYUm iLyAX6V/x+/t/QCvo5AArAnDAqWDP44DVNl3+hMzszwzhMgJegD5k+rjtui+tiOEzlTF CeNLCIPWdEUVJTXcX66mKE9f9xmfA8UeP0pdlud9RjMX4gQUpPnjl6mk3MIh+0tJLgbR 6mh+bZVFEdxBBc9zpaw8LEEX3TIXIYOoFz94IAgGyGzBQmRgpS1aQTewroTwzsFGpI+i wKRQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1765290080; x=1765894880; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender :content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :x-beenthere:x-gm-message-state:sender:from:to:cc:subject:date :message-id:reply-to; bh=Dgz8Gc1xWMHOK6rcSZ88PjMXuxr/wRP3fufZh5KMNqk=; b=e/qijhMZ1XDFvkkx+kHxKIYzQGvyUxluzfWiAoWKygQGTZUfg9+ko09rwqt03MI9Pb UFCCGs1FnZPSb5ifyH8rBGdGYxOInHMjTRfR+Z9BMKPIv7fwiClNFTT4PoTO2kJzspIp CnpQzMXVbUZL1n//gI8WDKEK3crOQ7gqX1o0O7cfngz0xfskGylt/uwLxOn3Ybw0Kubw DxxqnPmqdAvbyr1j7+WY/LwQH+NnUndgl7yI+awh/cZ8aIM6QnvWlY0iJWc5OYH+hmuq xDx/jClLaE7a0dLo9tJSN6IG2xbwA65fN7vPoqbeqw6xwKNevd6sjkhRiB8/F6mcSEXP 5ecg== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCWi/3VYfd+qFJi+2EVRVXfJ0mFX7GE/PIrIGWVqGIxJKu6an1AgFtyxM8udhdAVmPV34SXr@ilbers.de X-Gm-Message-State: AOJu0Yx7bLRLC2tnTsIa3YwrAtvPrW7+SEo/9VM+DieNLTAEKX1eREad JaTgA32TQLO9/687kN6+UH2tVzgIExG9xIzep0yHaXEahhigkXwup8Wv X-Google-Smtp-Source: AGHT+IFR1JpV91gt0AZpICDFQWFdfLeeZmLDuq73q4IDxHuz3rzDtnSVHT5FkH9+jIKUuIE6edApTw== X-Received: by 2002:a05:6402:524b:b0:647:99fb:1e18 with SMTP id 4fb4d7f45d1cf-64919c1e989mr8869317a12.8.1765290079256; Tue, 09 Dec 2025 06:21:19 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AWVwgWbAhDGLWQVHN3uE6apDWWIhvJZQAjuHAMVdFth3uH6c1g==" Received: by 2002:aa7:c691:0:b0:641:2745:845e with SMTP id 4fb4d7f45d1cf-647ad2ccc1els5559350a12.0.-pod-prod-03-eu; Tue, 09 Dec 2025 06:21:16 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCW0WGMikv732i1oU7RAOCqGCvVrBCY8R9Y78ri1pLYh1e1AUBCVw0CTg/InzpLSkVwmDlu2vIAE4Jhp@googlegroups.com X-Received: by 2002:a05:6402:13c4:b0:640:cdad:d2c0 with SMTP id 4fb4d7f45d1cf-6491a81a334mr9433241a12.25.1765290076574; Tue, 09 Dec 2025 06:21:16 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1765290076; cv=none; d=google.com; s=arc-20240605; b=YJWO9jJzprC+C4JkqC5UMzV9Yosb9ooo4af4gpxYiOvnMKtH9P4wn9PtL1VfPPgSLT AaKzGAL9TN51LZ0AiSMDSwMxdPLj3QfVJODPaIeVdRH/3FwIAYTlCKYK/RE20eRINJeu E8X6nfslOPUQyiqytlDI6wz48DwcG3ziuI/3drQ8nFSYXdAX6QFSYYlCSOjxq/6l7A4j GTpmnul8R4a+gkargc8/7mnO3Htf2GYcUocC0F4x63nJRVSG1oYhddZi/1R/TNWtTs/F kidC2VJPeIj5mcRFX/FuDsJr6oXTLQjDwysSBszJ6P3Kan6IUtULa8E/Kj6RohkMMbH6 IcqA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id; bh=8YA7Cf/6lwHvBAdZA4uLCXOaE7w+T/FFbcEGFw+Vtmg=; fh=KxuzQJaKET/BytpkIhEFTopEdBRTvhBw7JSrBnisyuE=; b=aRSFjnA4X/x5Yl3haCmZdVAVjH3btyuCZgZlWvZ/RtUXBOqqzWHy97NE4z85A41NOX elIOxkgR0UMLpXnxptG7v58p1WXBhvsFrdIaBCRX/4AYlNEJgsRe+CHUvvYWcVuJlpQ1 sXEDofGB34ueWIAGbUX9ObF1jdR/OGfFjyvFtN5MgaNXMB4gUvN0dM1qvN3arj9IzBXo nMS6SZVv77Jt0mRlNU7ss8yne5dgncGQulPIyEwwZqEK30bLsP+ivSbjYkhghrBjL47a jvhXiZ44XVYj3FOBq8HOULqUL6nlj+CwyOCydz7R8FtBZKY7MBuFtzcIVp25MnAJ7UFB sXXw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id 4fb4d7f45d1cf-647b2ec0ce5si230290a12.1.2025.12.09.06.21.16 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Tue, 09 Dec 2025 06:21:16 -0800 (PST) Received-SPF: pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [192.168.178.117] ([88.130.203.42]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 5B9EL9I5003422 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 9 Dec 2025 15:21:10 +0100 Message-ID: <1d82fbfe-f625-45f6-bd6d-a0ad90845bab@ilbers.de> Date: Tue, 9 Dec 2025 15:21:09 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v6 00/10] Add SBOM generation with debsbom To: Felix Moessbauer , isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com, jan.kiszka@siemens.com, quirin.gylstorff@siemens.com References: <20251201085813.1616095-1-felix.moessbauer@siemens.com> Content-Language: en-US From: Zhihang Wei In-Reply-To: <20251201085813.1616095-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: wzh@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: LVwoRnlKLwTW Hi, There are mulltiple test cases failed on CI. On fast CI: Failed test case: citest.py:DevTest.test_dev ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_5b_fast/4/build/tmp/work/debian-bookworm-amd64/isar-i= mage-ci-qemuamd64/1.0-r0/temp/log.do_image_wic.3897481 dpkg-query: no packages found matching systemd-boot-efi:amd64 Failed test case: citest.py:DevTest.test_dev_apps ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_5b_fast/4/build/tmp/work/debian-bookworm-amd64/isar-i= mage-ci-qemuamd64/1.0-r0/temp/log.do_image_wic.18529 dpkg-query: no packages found matching systemd-boot-efi:amd64 Failed test case: citest.py:DevTest.test_dev_rebuild ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_5b_fast/4/build/tmp/work/debian-bookworm-amd64/isar-i= mage-ci-qemuamd64/1.0-r0/temp/log.do_image_wic.262594 dpkg-query: no packages found matching systemd-boot-efi:amd64 Failed test case: citest.py:CrossTest.test_cross_debsrc ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_5b_fast/4/build/tmp/work/debian-bookworm-arm64/isar-i= mage-ci-qemuarm64/1.0-r0/temp/log.do_image_wic.3057235 dpkg-query: no packages found matching systemd-boot-efi:arm64 Failed test case: citest.py:CrossTest.test_cross_dependencies ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_5b_fast/4/build/tmp/work/debian-bookworm-arm64/isar-i= mage-ci-qemuarm64/1.0-r0/temp/log.do_image_wic.772494 dpkg-query: no packages found matching systemd-boot-efi:arm64 On full CI: Failed test case: citest.py:ReproTest.test_repro_unsigned: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-amd64/isar-image= -base-qemuamd64/1.0-r0/temp/log.do_image_wic.862703 bwrap: Can't mkdir /mnt/rootfs: Permission denied I assume this is related with CI environment. This error is also there=20 for v5. Failed test case: citest.py:InstallerTest.test_installer_build: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-amd64/isar-image= -ci-qemuamd64/1.0-r0/temp/log.do_image_wic.1240668 dpkg-query: no packages found matching systemd-boot-efi:amd64 Failed test case: citest.py:KernelTests.test_per_kernel: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-arm64/isar-image= -ci-qemuarm64/1.0-r0/temp/log.do_image_wic.1626092 dpkg-query: no packages found matching systemd-boot-efi:arm64 Failed test case: citest.py:InitRdTest.test_dracut_in_image: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-amd64/isar-image= -ci-qemuamd64/1.0-r0/temp/log.do_image_wic.1723289 dpkg-query: no packages found matching systemd-boot-efi:amd64 Failed test case: citest.py:InitRdCrossTests.test_dracut_in_image: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-amd64/isar-image= -ci-qemuamd64/1.0-r0/temp/log.do_image_wic.2466233 dpkg-query: no packages found matching systemd-boot-efi:amd64 Failed test case: citest.py:WicTest.test_wic_nodeploy_partitions: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-arm64/isar-image= -ci-qemuarm64/1.0-r0/temp/log.do_image_wic.2823952 dpkg-query: no packages found matching systemd-boot-efi:arm64 Failed test case: citest.py:WicTest.test_wic_deploy_partitions: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-arm64/isar-image= -ci-qemuarm64/1.0-r0/temp/log.do_image_wic.2892279 dpkg-query: no packages found matching systemd-boot-efi:arm64 07:06:42=20 18-/build/isar_wzh_devel_7b/28/testsuite/citest.py:NoCrossTest.test_nocross= : ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build/tmp/work/debian-bookworm-amd64/isar-image= -ci-qemuamd64-iso/1.0-r0/temp/log.do_image_squashfs.1864458 dpkg-query: no packages found matching systemd-boot-efi:amd64 Failed test case: citest.py:SstateTest.test_sstate_populate: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build-sstate/tmp/work/debian-bullseye-amd64/isa= r-image-base-qemuamd64/1.0-r0/temp/log.do_image_wic.1858017 bwrap: Can't find source path=20 /build/isar_wzh_devel_7b/28/build-sstate/tmp/deploy/sbom/sbom-chroot: No=20 such file or directory Failed test case: citest.py:SstateTest.test_sstate: ERROR: Logfile of failure stored in:=20 /build/isar_wzh_devel_7b/28/build-sstate/tmp/work/debian-bullseye-amd64/isa= r-image-base-qemuamd64/1.0-r0/temp/log.do_image_wic.1943793 [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=20 Traceback (most recent call last): [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "/build/isar_wzh_devel_7b/28/scripts/wic", line 547, in [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0 =C2=A0sys.exit(main(sys.argv[1:])) [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "/build/isar_wzh_devel_7b/28/scripts/wic", line 542, in main [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0 =C2=A0return hlp.invoke_subcommand(args, parser, hlp.wic_help_usage= ,=20 subcommands) [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "/build/isar_wzh_devel_7b/28/scripts/lib/wic/help.py", line 83,= =20 in invoke_subcommand [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0 =C2=A0subcmd[0](args, usage) [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "/build/isar_wzh_devel_7b/28/scripts/wic", line 222, in=20 wic_create_subcommand [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0 =C2=A0engine.wic_create(wks_file, rootfs_dir, bootimg_dir, kernel_d= ir, [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "/build/isar_wzh_devel_7b/28/scripts/lib/wic/engine.py", line= =20 183, in wic_create [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0 =C2=A0plugin_class =3D PluginMgr.get_plugins('imager').get(pname) [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "/build/isar_wzh_devel_7b/28/scripts/lib/wic/pluginbase.py", li= ne=20 61, in get_plugins [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0 =C2=A0spec.loader.exec_module(module) [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "", line 790, in exec_mod= ule [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File "", line 228, in=20 _call_with_frames_removed [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0File=20 "/build/isar_wzh_devel_7b/28/scripts/lib/wic/plugins/imager/direct.py",=20 line 22, in [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=C2= =A0=20 =C2=A0 =C2=A0from oe.path import copyhardlinktree [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO | |=20 ModuleNotFoundError: No module named 'oe' [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO |=20 NOTE: recipe isar-image-base-1.0-r0: task do_image_wic: Failed [stdlog] 2025-12-05 05:40:29,889 avocado.test cibuilder L0321 INFO |=20 NOTE: Tasks Summary: Attempted 170 tasks of which 138 didn't need to be=20 rerun and 1 failed. Zhihang On 12/1/25 09:58, 'Felix Moessbauer' via isar-users wrote: > This patchset adds proper SBOM generation in the two standard formats > SPDX and CycloneDX during the rootfs generation process. > > The generation is itself is handled by a SBOM generator `debsbom` [1] > which is developed as an open source project at Siemens. It is still > early in development, but it has enough features for what we require > in isar. The required dependencies which are not yet available as > Debian packages were minimally packaged directly in isar too. > > This is a followup of the previous RFC [2]. Since then the series has > changed a lot. The SBOM generation was moved from a simple OE lib to > `debsbom`. This also meant the introduction of a separate chroot was > necessary. The SBOM generation process was also moved from the image > step to the rootfs step, along with a lot of minor changes and > improvements. > > [1] https://github.com/siemens/debsbom > [2] https://groups.google.com/g/isar-users/c/8L-CF4BJY0I/m/p0N3o_zfAAAJ > > Changes since v5: > > - fix isar-image-ci on qemuamd64-bullseye (set IMAGER_BOM according to > machine changes made in image file) > - rebased onto next > > Changes since v4: > > - rebased onto next > - fix race condition on creation of ${DEPLOY_DIR_SBOM} (aka ${DEPLOY_DIR_= IMAGE}) > > Changes since v3: > > - fix issue on external bullseye initramfs (we now disable sbom generatio= n > on all unsupported distros rootfs instances) > - update debsbom to v0.4.0 > - rebased onto next > > Changes since v2: > > - fix issues when HOST_ARCH !=3D DISTRO_ARCH on derived distributions > - update debsbom to v0.3.0, which fixes the Origin: bug reported in v2 > - generate SBOM for imager as well and create merged sbom of .wic image > - resend imager manifest + wic manifest patches to reduce conflicts > > Note, that the patches p1-p5 are most important as they add basic SBOM > support. The remaining patches address the imager + .wic bom part, > which also can be merged later on. > > Changes since v1: > > - remove tarball > - refactor packaging (auto-derive python dependencies) > - only build missing packages (varies on bookworm, trixie, noble) > - add ubuntu support > - only generate sboms for supported distributions (bookworm/jammy and > onwards) > - update debsbom (includes bug fixes and more information for source > packages) > > > Christoph Steiger (3): > meta: package python libraries for SBOM generation > meta: package python3-debsbom > meta: add SBOM generation with debsbom > > Felix Moessbauer (7): > refactor: move get_rootfs_distro from sdk into rootfs > override distro vendor in SBOM on Ubuntu > add support to add imager dependencies to BOM > wic: create uniform manifest describing all image components > qemuamd64: add IMAGER_BOM entries > imager: create SBOM of IMAGER_BOM packages > wic: create uniform SBOM describing all image components > > doc/user_manual.md | 1 + > meta-isar/conf/distro/ubuntu-common.inc | 2 + > meta-isar/conf/machine/qemuamd64.conf | 1 + > .../recipes-core/images/isar-image-ci.bb | 1 + > meta/classes/image-tools-extension.bbclass | 29 +++++++++ > meta/classes/image.bbclass | 7 ++ > meta/classes/imagetypes_wic.bbclass | 30 +++++++++ > meta/classes/initramfs.bbclass | 3 +- > meta/classes/rootfs.bbclass | 23 ++++++- > meta/classes/sbom.bbclass | 65 +++++++++++++++++++ > meta/classes/sdk.bbclass | 10 +-- > .../sbom-chroot/sbom-chroot.bb | 30 +++++++++ > .../python3-beartype/files/rules | 8 +++ > .../python3-beartype_0.19.0.bb | 29 +++++++++ > .../files/pybuild.testfiles | 1 + > .../python3-cyclonedx-lib/files/rules | 8 +++ > .../python3-cyclonedx-lib_9.1.0.bb | 48 ++++++++++++++ > ...icense-description-in-pyproject.toml.patch | 28 ++++++++ > .../python3-debsbom/files/rules | 8 +++ > .../python3-debsbom/python3-debsbom_0.4.0.bb | 45 +++++++++++++ > .../python3-packageurl/files/rules | 8 +++ > .../python3-packageurl_0.16.0.bb | 33 ++++++++++ > .../python3-py-serializable/files/rules | 8 +++ > .../python3-py-serializable_2.0.0.bb | 38 +++++++++++ > .../python3-spdx-tools/files/rules | 25 +++++++ > .../python3-spdx-tools_0.8.3.bb | 46 +++++++++++++ > 26 files changed, 524 insertions(+), 11 deletions(-) > create mode 100644 meta/classes/sbom.bbclass > create mode 100644 meta/recipes-devtools/sbom-chroot/sbom-chroot.bb > create mode 100644 meta/recipes-support/python3-beartype/files/rules > create mode 100644 meta/recipes-support/python3-beartype/python3-bearty= pe_0.19.0.bb > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/pyb= uild.testfiles > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/rul= es > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/python3-c= yclonedx-lib_9.1.0.bb > create mode 100644 meta/recipes-support/python3-debsbom/files/0001-Use-= old-license-description-in-pyproject.toml.patch > create mode 100644 meta/recipes-support/python3-debsbom/files/rules > create mode 100644 meta/recipes-support/python3-debsbom/python3-debsbom= _0.4.0.bb > create mode 100644 meta/recipes-support/python3-packageurl/files/rules > create mode 100644 meta/recipes-support/python3-packageurl/python3-pack= ageurl_0.16.0.bb > create mode 100644 meta/recipes-support/python3-py-serializable/files/r= ules > create mode 100644 meta/recipes-support/python3-py-serializable/python3= -py-serializable_2.0.0.bb > create mode 100644 meta/recipes-support/python3-spdx-tools/files/rules > create mode 100644 meta/recipes-support/python3-spdx-tools/python3-spdx= -tools_0.8.3.bb > --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 1d82fbfe-f625-45f6-bd6d-a0ad90845bab%40ilbers.de.