From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7172560304523444224 X-Received: by 2002:a05:6512:3287:b0:4b5:65e6:7ba2 with SMTP id p7-20020a056512328700b004b565e67ba2mr11011451lfe.598.1671203095999; Fri, 16 Dec 2022 07:04:55 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:651c:1c4:b0:27a:3eb5:4759 with SMTP id d4-20020a05651c01c400b0027a3eb54759ls409763ljn.0.-pod-prod-gmail; Fri, 16 Dec 2022 07:04:54 -0800 (PST) X-Google-Smtp-Source: AA0mqf6xI9IzuZc7Aqj3wkZyYRqtQrrogztttuCdqGH5w/GfYGGor/FQcrxunLrZGET7t5k0n06w X-Received: by 2002:a2e:9b89:0:b0:279:fa66:a154 with SMTP id z9-20020a2e9b89000000b00279fa66a154mr8223598lji.34.1671203094758; Fri, 16 Dec 2022 07:04:54 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1671203094; cv=pass; d=google.com; s=arc-20160816; b=FplgKGlQ9v26t8fBZsjv+QdsNdxX4EQOQfKawVNhBkGHZKfyA1k5mCph5vMhs2//8P JkpdezHQBArYQafUF/AsPuWpLbGlRixC0QGiXOt8v4RtQk6iI+ct2LUVCrkb7yNh1WWB 7h4xN9wDkoK47yAUVmCDRLHEeuohlBaV4s0XFYN8wTjNuMTRe09ZvNf5MUQYJ92W8yo2 nFjEyZ+Zt0BmXfzS6xQFNdnd1uQqthUB9wS3HUpWspByyxclkY7OF1e3DIS/9a9eQ/HE j/YyMw/SFGOBTEZXT9/7pMw51ti+0cI+I7MBKDRd68rRwZTAYdK5gDgkGz7mxQ15/W/R r52w== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:subject:cc:to:from:date:dkim-signature; bh=eMumaGfqyU+QhOkXBoUAuiZZYUBnm8Cyu+eJZXNtG+8=; b=c36qyZBiB9hyKhKsHwrgiwaxBSiiuQ3RW9N8+9TBjaAX+yLoGIA78Gc7nL4gNhhIJd vCeZKs6Q7NZKfLkeaTnG+utfpJupIVQOLzDzO4jdmNgy3a113ORNfpt9TzyMhfHaHHew KgA2nKJBO2g7+kaQKLHjyOb/UVgC233elYhn6qw/neN4rfSDy0of2cGp9B7r1NMOLoXV sbf0xwMf/H5JlDjYp/0bJ8sDenJkFmKO4ufrGj/e6qsRKXqvoZLN5JtpjW1vCiv1I36s E9RyL5tCmDv0KTgHB+OSsn8TEdw6HCwDt3yHT4rBiLrPPsnxd+If8CPPASLtBPl5NkGz /Y6Q== ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ooSkwvmh; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of henning.schild@siemens.com designates 40.107.20.65 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2065.outbound.protection.outlook.com. [40.107.20.65]) by gmr-mx.google.com with ESMTPS id z10-20020a2eb52a000000b0027974eb1dc3si113826ljm.7.2022.12.16.07.04.54 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 16 Dec 2022 07:04:54 -0800 (PST) Received-SPF: pass (google.com: domain of henning.schild@siemens.com designates 40.107.20.65 as permitted sender) client-ip=40.107.20.65; Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ooSkwvmh; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of henning.schild@siemens.com designates 40.107.20.65 as permitted sender) smtp.mailfrom=henning.schild@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BcWx5e0wGCXpvuO9EzxsJ+VNZPRwMu97I2fCIdVcKCqCdGGIvEq2upklQjka1Me8/TCFwB45ZlsVFmermHoCWAaPUuSQyyRcbi8u1AcwRzLnYzkjleFAchVD4Awd1sXLSuhHDxugtvaVDThyij3gogyN3SU33buPoKBRdckodbdS5PS7COiOblTeatGm6vKdxVkho83JMIF7EnGmBlu2XmOpUcj0nieXtf0ThBbGYq+BUXV6Mxexhy9WLwwQK83r1Ihc7PlXfoPqqTF5dNktvGqugzyGZzxYW2UAkViLQcfvZNPCzwELW/o7ge1LZF4FkXwbgCiouJghUoKdZyANGA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=eMumaGfqyU+QhOkXBoUAuiZZYUBnm8Cyu+eJZXNtG+8=; b=nm+8cB1msLq9oo51VoOrJArfBUxfE/VKXfvVhIIuINpoZS+nqHRZrbvL0xAugscUA0meW0ue0qCG6LnX6IbIKyVlz38h3ndipia/MrCJgRog3C5lNZwm2sTLLMbsruwUa6gox7vLtUhqPM9syTBuPvGaWOiU7wyqK7gO2PXKj3dsXBB/5cfASLqdpItL3RxrsrR+z49wOD+ErNczpZA8Sv6rU0XyZ1QAG/4yVsWVJ0TBsCUk+mF3AyhQtHevZvQjCai7hfKh6sSoOy9qYf+135UVruUivR94bGmvLwHsma7f32nMfdIR9QIy07I++8UMd5GC0PMcSMrG+iV/oYIMqQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eMumaGfqyU+QhOkXBoUAuiZZYUBnm8Cyu+eJZXNtG+8=; b=ooSkwvmhVgSB0puU7tvlJF/RTvoYoEwiPeuzfUrd/2bAhYdEzwAIG3A7/0TD3sjogm5gQpCwYVYc01BMNrsKAiKm4n0qZTAMxv0risdPISAjmkmUJvSN7krdbnO0UvKiWoWhwrafiAE/L9A3ORtNTk9+p+8SPbAme9stT5nKSsAoqC5895z5EhDuRa5IRMyTYQ67J1s0J2UDFEdwjKMlegXh2T4B3ioiB8Be/KnuQ0rrfWZNNFy1wsQm5D/w9NYUIK+Z1ZFxyYYfHfziIGMzyXa+61ESsDfscgbn8GzUa7kN6nRczLLVimV60PA49eTSG7Nqv9OaWCY55zBcLHj8HQ== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=siemens.com; Received: from PA4PR10MB5780.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:269::8) by AS8PR10MB7562.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:564::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5924.11; Fri, 16 Dec 2022 15:04:53 +0000 Received: from PA4PR10MB5780.EURPRD10.PROD.OUTLOOK.COM ([fe80::bdf0:fdeb:f955:bc79]) by PA4PR10MB5780.EURPRD10.PROD.OUTLOOK.COM ([fe80::bdf0:fdeb:f955:bc79%3]) with mapi id 15.20.5924.012; Fri, 16 Dec 2022 15:04:53 +0000 Date: Fri, 16 Dec 2022 16:04:45 +0100 From: Henning Schild To: Anton Mikanovich Cc: isar-users@googlegroups.com Subject: Re: [PATCH v6 10/21] meta: mark network and sudo tasks Message-ID: <20221216160445.36cfc275@md1za8fc.ad001.siemens.net> In-Reply-To: <8cac9912-2ba4-b86b-1229-ba5d59412764@ilbers.de> References: <20221213125305.10984-1-amikan@ilbers.de> <20221213125305.10984-11-amikan@ilbers.de> <20221216154901.34c1c2bd@md1za8fc.ad001.siemens.net> <8cac9912-2ba4-b86b-1229-ba5d59412764@ilbers.de> X-Mailer: Claws Mail 4.1.0 (GTK 3.24.34; x86_64-pc-linux-gnu) Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-ClientProxiedBy: CH0PR03CA0226.namprd03.prod.outlook.com (2603:10b6:610:e7::21) To PA4PR10MB5780.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:269::8) Return-Path: henning.schild@siemens.com MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PA4PR10MB5780:EE_|AS8PR10MB7562:EE_ X-MS-Office365-Filtering-Correlation-Id: 598340b4-2e8e-4148-9da8-08dadf76e2de X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA4PR10MB5780.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230022)(4636009)(376002)(136003)(346002)(396003)(39860400002)(366004)(451199015)(6506007)(6512007)(9686003)(478600001)(186003)(2906002)(66899015)(6486002)(6666004)(316002)(6916009)(38100700002)(66476007)(8676002)(66556008)(66946007)(4326008)(8936002)(41300700001)(1076003)(5660300002)(83380400001)(44832011)(86362001)(82960400001);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?QM3sDLqw78eL4KyzUwsGcgF+GYhEf+2pO2z8RPluMCNVORzOBVhUqGjP+xkL?= =?us-ascii?Q?3OPrd36k1AdWVcVokGKmtqiTBB5yKu5QpjP+pmsncspNbHZ3UrVivL3vTt9U?= =?us-ascii?Q?uA2v/9GyN3tF1bjng9arDgEO3W6lFFQNhCu6WfwqtOaBDBWv+PQX/Sgu+n0i?= =?us-ascii?Q?jynwzzk5gntPo26ld8Gq/IlA7EZBNYRvdFrqvctqvl37KNWr9MnjvSxbPnU6?= =?us-ascii?Q?wwU7iEoSvjWm/s+NlOKLzBlzbp5G4SwXwAJMRfO5SZi1/3tYGse9GZ3fFwtq?= =?us-ascii?Q?77MFaHpkbnYuV1q3CnUJpgSljxs2kD42bNgC4D54mG7wZtt/hyOlfjnZ0i+/?= =?us-ascii?Q?cX/Klp2/pNcisStqKMDo7WiH8SHzLlvwgdx3pM/bhuIyUhlhF6PUsQPFhNau?= =?us-ascii?Q?NLt7Zz2m0Q2VhQNm+JrPWHZw4AHvg9Az2PfSa2r5aFNcaOyTma3sSFQCy4Zj?= =?us-ascii?Q?SoXtLF/cUIuHzSPuNyoGP+J8DKNMNiA7owKIKho9N2BkuSYT9lL37tZfVoud?= =?us-ascii?Q?gIZDf8Rk/VwJjpnESvnnavlP46qY5qLvC9cQGgAyEd7AVVyo0TgXvEVMr566?= =?us-ascii?Q?q+cVR7M4Ml0KJAUdAOIln7uICVDWYmKXdoP4v4HqZbQdaV9EFtTy8q2E89TD?= =?us-ascii?Q?AtM+dpJJvjREzMu6hhGQvGOGhxojNzOhjL/GXUEYE9RgWoyEh7Zepr37tO6X?= =?us-ascii?Q?/nNhT6Xs8AsqeXGtCuacra9u8Yv/6+HSGhoWkw2vL36A+2cH2JzOfIiNwiyh?= =?us-ascii?Q?TL0IgA/uE/fQn34H4+/zjbQPsyGzJBalsl2yW2xBfMmNroBMOAOxByOtTJq1?= =?us-ascii?Q?TPiG+naf0291K+FI/z6CFvf+dS07M9UtJdKcWWTs0CM4ZFTWHnfsaZ6rJcCF?= =?us-ascii?Q?BrhHUdcT89BYcTqZYz1P8aCFrukqlFyH3kpk2ZAiqqsiIbbmfAG9ZLd0snlt?= =?us-ascii?Q?M9oVT1AVK2/YDbTVjyLlNJ/JjjDSHi8FgftpI4Uuo3/Ijja6V3gRhfus2PI5?= =?us-ascii?Q?egxWf/AtGBEVAquIsy4S+dxWb4dts6wIYOtCuHCc/eNXmafyghdTZzA8Guyq?= =?us-ascii?Q?j3SdWc1R9RaOdL4HMXfFNrl8K3Z7kYMdPUFhuqMfomN0XSCrBG41LcGYVMWW?= =?us-ascii?Q?306ejZhk0UXLYieOXae9gPCE8Wo9DtZCF6cis4wiyl8uEpF68jVFvNXvI70d?= =?us-ascii?Q?niJEb3XzkbK/xmXx0YajMtZAA0Qf7J7NTLV7GLRIstQBETbbptRX6wd6oCF5?= =?us-ascii?Q?H/9tN3XKnUrzYLajBnbW0oxVIpecPO6yaOEQeFgM6ZkGd0xVhX8dzACSkjHT?= =?us-ascii?Q?rx3XiE7Zvyn3qdTSlYQPyITYUB93Aw7zrWpdhDpxe0eAT4CUi5JugwJmMwZP?= =?us-ascii?Q?ENaUpbX2iMBqM2EQ2bW0FLxKgCCgHwhcbky4UR45jfBBnVNaFGhT33KQ2Cod?= =?us-ascii?Q?cSmN/vheRT1Ix49ifcN5t20eqhDkNqEj8QYiuZXX37zfNRTevDRhtuAcKecA?= =?us-ascii?Q?PqfhFeVbuwF88zTmnRkApmPBJ3QvmTD/wq5OC9hvMqrWwLOd67QrOak2rNG4?= =?us-ascii?Q?JrVXwQQkk/NVaNQF+kZVHY/fWlkKQiBaLxPOU6GW6fNGveK8LjEOWhhKeeYQ?= =?us-ascii?Q?EiDvv3+0y/iXgAddl/ur4A7oWXce0qahTbsXqFyf4O/vEyKcJFgjcPV76Hvt?= =?us-ascii?Q?vgDnGg=3D=3D?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 598340b4-2e8e-4148-9da8-08dadf76e2de X-MS-Exchange-CrossTenant-AuthSource: PA4PR10MB5780.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Dec 2022 15:04:53.4221 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 6w66KwqyM5WT9y5+FeDCxd+zSlQMlZelhlGheOMqKLk1SqK7kEGYTSc3XsMpZpICy1Ak/715HMJgAnaP4ps3v96RE7/ak2CLsaMY8Uod1dQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR10MB7562 X-TUID: FkBv3bIJJihI Am Fri, 16 Dec 2022 17:52:22 +0300 schrieb Anton Mikanovich : > 16.12.2022 17:49, Henning Schild wrote: > > Am Tue, 13 Dec 2022 15:52:54 +0300 > > schrieb Anton Mikanovich : > > > >> Network access from tasks is now disabled by default. This means > >> that tasks accessing the network need to be marked as such with > >> the network flag. > > Will these tasks really somehow be blocked from the network? > > > > We do use BB_NO_NETWORK in several places. Especially in > > isar_export_proxies we use it to block network with a deadend_proxy. > > That might not be needed any longer. > > > > Any maybe we find a way to automatically call isar_export_proxies > > when we set [network] = 1 in any given task. Otherwise we kind of > > have two lines marking a task as network user, and it is easy to > > forget the proxies since not everyone has to deal with them. > > > > Henning > > Untagged tasks will not be blocked, but failed during the build > instead. So this will not cover BB_NO_NETWORK use case. Can you explain what you mean with "failed during the build". If it gets killed the moment it tries to network ... that is what i called "blocking". And for the proxy that this is kind of what we want with this deadend. Make sure a task does not access the network when we want to run the whole build offline. We make it fail ... we block it. Henning