From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6517147827419742208 X-Received: by 10.28.93.145 with SMTP id r139mr3179922wmb.32.1517400169074; Wed, 31 Jan 2018 04:02:49 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 10.28.31.200 with SMTP id f191ls1070262wmf.5.canary-gmail; Wed, 31 Jan 2018 04:02:48 -0800 (PST) X-Google-Smtp-Source: AH8x225qBRZ4cKIGwArKP0RCblFnCzoa+7WOliURY4Jjn9/pVUKg3yLi45ir3iPKsALsS2hExp61 X-Received: by 10.223.152.204 with SMTP id w70mr3267746wrb.15.1517400168619; Wed, 31 Jan 2018 04:02:48 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1517400168; cv=none; d=google.com; s=arc-20160816; b=yW4h0eZSoIgYZ45jAaBtGxo7A2T4HDfHmfwitg/DeMX42AcR9ng/6I3M648Nv6Q2u+ wZcTOLR+Lgvdn9UzhGKqnUOKA+4xLNzCel0BYq6SY6s9MTfHKomQox+NNm9KDzfOzPOz Rb84j1uhUdlqaZJOS716HvxqcuhsuVaVGRMuOfkVIeNHRdrJnkE6JfXEyhgznoBf3R/e WiRxxgxFwdJoqtviQHnEgvPWURWN19ci3XQrSzqsiRDhk2j9B3oWDlaYCkc3KEBmeY6R r6++JyXZxC5g3ha40QU/rUMyXbbAwarKMgp/Wz7FD4b44VVYw7iJTjrz53lCIf2+7vkj dctg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=user-agent:in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:to:from:date :arc-authentication-results; bh=hbvv7i6/Xmzm24Vr97pbCoIjhYd0gB4dkRctANhYQy0=; b=gkbnCTSXJ/DQvVN/oAcPoiNE97BWfZBIvK5G9RCqtvBOYVb28cOlXdAZnnJ3Qoy8bF DDxLWzQXaMoJgzz4U5Y3N0guQx1qoNNceJ7pd7MQbcOF5gRB2R29ub34tyzFrlZdLLM9 DyMwb1EvqRWrmViPuyjOO3NdP/Ks23DpWlGcin4KEA9UeUofVqhXdQ6zqCuRoI2/gYgL ZPHZa3wdtBDSWnJw1hV+GUC8YE/bwrm0cP5Yz0GxR+xVftx5gKdp3hnKQOYC/Aj8K5cm 2INBeyqBs1ETNCaBG6dcN2dQ3qoDuDefmvsricwb41MIzFRay2d0TTJwShzHBeOdm3mE oQJw== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=neutral (google.com: 85.214.62.211 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Return-Path: Received: from aqmola.ilbers.de (aqmola.ilbers.de. [85.214.62.211]) by gmr-mx.google.com with ESMTPS id a12si562283wmg.4.2018.01.31.04.02.48 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 31 Jan 2018 04:02:48 -0800 (PST) Received-SPF: neutral (google.com: 85.214.62.211 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) client-ip=85.214.62.211; Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 85.214.62.211 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Received: from yssyq.radix50.net (p2E51B2CC.dip0.t-ipconnect.de [46.81.178.204]) (authenticated bits=0) by aqmola.ilbers.de (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id w0VC2kUB008159 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 31 Jan 2018 13:02:47 +0100 Received: from yssyq.radix50.net (localhost [127.0.0.1]) by yssyq.radix50.net (8.14.4/8.14.4/Debian-8) with ESMTP id w0VC2kvZ010219 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 31 Jan 2018 13:02:46 +0100 Received: (from ibr@localhost) by yssyq.radix50.net (8.14.4/8.14.4/Submit) id w0VC2kNe010218 for isar-users@googlegroups.com; Wed, 31 Jan 2018 13:02:46 +0100 Date: Wed, 31 Jan 2018 13:02:46 +0100 From: Baurzhan Ismagulov To: isar-users@googlegroups.com Subject: Re: [PATCH 0/9] first wic integration Message-ID: <20180131120245.GC6508@yssyq.radix50.net> Mail-Followup-To: isar-users@googlegroups.com References: <20180131111253.49011346@mmd1pvb1c.ad001.siemens.net> <20180131112421.GA6508@yssyq.radix50.net> <675eeef9-1e24-4784-b894-4ce665da26fb@siemens.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <675eeef9-1e24-4784-b894-4ce665da26fb@siemens.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-TUID: OBbfM9h2fcvi On Wed, Jan 31, 2018 at 12:47:08PM +0100, Jan Kiszka wrote: > >> If the manual non-root call did work before, i will look into that. > > > > Yes. Yes, please do. > > > > In Yocto, manual non-root call works. The same is our vision for Isar. For now, > > it has been workarounded with sudo. We have a working PoC based on PRoot in the > > pipeline. So I don't support the idea of changing the user experience because > > of this issue. > > While I agree we should try to get whole Isar unprivileged, let's not > invest too much into this when it's complex. We are currently far away > from that goal (as you know, proot has several open issues as well), and > this here solves the problem of having to run wic manually at all. No effort whatsoever. This is already workarounded in master in the following commit: bf873d3 wic: Use sudo instead of pseudo My suggestion is not to revert that. I agree with Henning that we should cover that in CI. I'll provide an initial testing framework, then we should sync who does what. The other mcopy and fsck issues are not covered, either. Regarding the PRoot PoC, I don't agree we are far away. Everything works except mounting. We've just postponed the work due to higher-prio issues. > > b1511ec wic: Work around mcopy error > > 17f9196 wic: Introduce the `WicExecError` exception class > > > > All of them are not related to the bitbake core and fix concrete issues with > > image generation that were not addressed in the baseline bitbake. Did you > > address those issues in your new changes? > > Good points, should be clarified. Maybe an update of the upstream wic > import is the answer if we are about to lose something. Better than > patching locally in Isar, as so far. Do you mean we should initiate upstreaming that to OE? If yes, I agree with you. The only question is point of time. My idea was to wait till Henning completes the lifecycle with his OE contribution and learn from his experience. If you think we should do that now, please let me know. With kind regards, Baurzhan.