From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6721684426774806528 X-Received: by 2002:a1c:9813:: with SMTP id a19mr18618688wme.11.1565016208513; Mon, 05 Aug 2019 07:43:28 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:adf:a2cd:: with SMTP id t13ls24701789wra.8.gmail; Mon, 05 Aug 2019 07:43:28 -0700 (PDT) X-Google-Smtp-Source: APXvYqxQED1OK1QCWjXSWp72cmIcI0ZaNO8QTY/M+ypvCJvX/dZmAKfbAJkqO/7kzplB+PFfkgtM X-Received: by 2002:a5d:6284:: with SMTP id k4mr27587624wru.179.1565016208139; Mon, 05 Aug 2019 07:43:28 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1565016208; cv=none; d=google.com; s=arc-20160816; b=m2iwKWK63Zx41wYQxIqVe4bKTVvGqGMCfATYUoonVuFynPHvUkR8PhjFzZCCPLebeh dKgI12njlnSd7feMi3IcSrO5ZRA6pHuCl/eyG5wx5pogEd6iIEPtzURxn+9jGl0jf/Kt X3WOrgBlg5PPbnAcFoOWDi+TZTu6LBk5kmQKC41GfVL/7cAdScZ6tAlawAjXtoO5wJ99 BoDugNkCTx+LkJfZziQKFn7PWynwKaXZeUSdhzNeG8Be00P/da0gTG2hTTikPFuLFk7H uMnyDbxnnDfnJAmQ59NU58kpuh5gNZMtFjVY2pVleC78NNBYQ1AdHMaeJSbbM4oduAjZ WwWg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:subject:cc:to:from:date; bh=dpf0YEfVNih22fGshtrm/nYv7uFOHq89dL8XEj3M+QY=; b=N+5YfUZC6V0pCPbvSUQlYWCbZIljrSNlLK+GFHILl7FJ3zP2nOs/tM+o138tjZAdPQ Og+x8pihyCIGoGGaqgyKRa41NMgjvdK5XbWRY+BHVKMnzFipLAW9vwQ/hGx69pYS72o5 ucNJKxwjhlQf8ZrK9lSOWPncOk44CQBFT7J+etpeTvdGaE8smdVHt5XPmu93YCUuXFvY bshOsGtauXvS7r89C8+bKfkCPQW8oHELceCnWEiFmU3/l9ws3SY0WH9dnq9zFABlsG1+ MylLhKV6PV2WJr4qvc/ojzE1dblWfXEaq9f3loBlsAQpJ7xGNv5xM9XNeghZuulz8L9S FqCA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from gecko.sbs.de (gecko.sbs.de. [194.138.37.40]) by gmr-mx.google.com with ESMTPS id p2si448874wmg.4.2019.08.05.07.43.28 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 05 Aug 2019 07:43:28 -0700 (PDT) Received-SPF: pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.40 as permitted sender) client-ip=194.138.37.40; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by gecko.sbs.de (8.15.2/8.15.2) with ESMTPS id x75EhR1n008277 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Mon, 5 Aug 2019 16:43:27 +0200 Received: from md1za8fc.ad001.siemens.net ([139.25.69.135]) by mail1.sbs.de (8.15.2/8.15.2) with ESMTP id x75EhRM7021642; Mon, 5 Aug 2019 16:43:27 +0200 Date: Mon, 5 Aug 2019 16:43:27 +0200 From: Henning Schild To: "[ext] Q. Gylstorff" Cc: Subject: Re: [PATCH] meta/classes: generate bill of material from image Message-ID: <20190805164327.0f59d9a1@md1za8fc.ad001.siemens.net> In-Reply-To: <20190805140742.11479-1-Quirin.Gylstorff@siemens.com> References: <20190805140742.11479-1-Quirin.Gylstorff@siemens.com> X-Mailer: Claws Mail 3.17.3 (GTK+ 2.24.32; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-TUID: 2pIVRHX0vkII Hi Quirin, do you have a real use-case for that? In fact we do have similar things internally already but did not propose it yet. Reason is you still need to find all the magic switches to collect the source and binary package versions, and you most likely want a machine readable format. In fact we should just fix that broken offline cache thing and enable src-packages for it. That would generate a list that will hopefully be complete and in a well defined format. Without the real use-case and the post-processing this is just another obscure Isar feature and i am against merging it. Henning Am Mon, 5 Aug 2019 16:07:42 +0200 schrieb "[ext] Q. Gylstorff" : > From: Quirin Gylstorff > > To create products it is necessary to have a list > of used packages for clearance and to security monitoring. > To get a simple list of packages use dpkg-query and generate > a list with the following pattern: > > source name| source version | binary package name | binary version > > To use it add following line to the local.conf: > ISAR_DO_PACKAGE_LIST ?= "1" > > Signed-off-by: Quirin Gylstorff > --- > meta-isar/conf/local.conf.sample | 4 ++++ > .../classes/image-package-list-extension.bbclass | 16 > ++++++++++++++++ meta/classes/image.bbclass | > 1 + 3 files changed, 21 insertions(+) > create mode 100644 meta/classes/image-package-list-extension.bbclass > > diff --git a/meta-isar/conf/local.conf.sample > b/meta-isar/conf/local.conf.sample index 5b3a0a1..d188051 100644 > --- a/meta-isar/conf/local.conf.sample > +++ b/meta-isar/conf/local.conf.sample > @@ -170,6 +170,10 @@ IMAGE_INSTALL = "hello-isar example-raw > example-module-${KERNEL_NAME} enable-fsc # NOTE: this works on build > host >= stretch for armhf, arm64 and amd64 targets for now. > ISAR_CROSS_COMPILE ?= "0" > +# > +# Generate package list > +ISAR_DO_PACKAGE_LIST ?= "1" > + > # > # Uncomment this to enable use of cached base repository > #ISAR_USE_CACHED_BASE_REPO ?= "1" > diff --git a/meta/classes/image-package-list-extension.bbclass > b/meta/classes/image-package-list-extension.bbclass new file mode > 100644 index 0000000..558922e > --- /dev/null > +++ b/meta/classes/image-package-list-extension.bbclass > @@ -0,0 +1,16 @@ > +# This software is a part of ISAR. > +# Copyright (C) Siemens AG, 2019 > +# > +# SPDX-License-Identifier: MIT > + > +ISAR_DO_PACKAGE_LIST ??= "0" > +image_package_list[dirs] = "${DEPLOY_DIR_IMAGE}" > +image_package_list() { > + if > [ "${@repr(bb.utils.to_boolean(d.getVar('ISAR_DO_PACKAGE_LIST')))}" = > 'True' ]; then > + dpkg-query --admindir=${IMAGE_ROOTFS}/var/lib/dpkg/ \ > + -f > '${source:Package}|${source:Version}|${binary:Package}|${Version}\n' > -W > \ > + ${DEPLOY_DIR_IMAGE}/${IMAGE_FULLNAME}.packages.lst > + fi > +} > +ROOTFS_POSTPROCESS_COMMAND =+ "image_package_list" > + > diff --git a/meta/classes/image.bbclass b/meta/classes/image.bbclass > index ec6bd39..85bab64 100644 > --- a/meta/classes/image.bbclass > +++ b/meta/classes/image.bbclass > @@ -68,6 +68,7 @@ inherit image-tools-extension > inherit image-postproc-extension > inherit image-locales-extension > inherit image-account-extension > +inherit image-package-list-extension > > # Extra space for rootfs in MB > ROOTFS_EXTRA ?= "64"