From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 19 May 2025 13:58:23 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ed1-f63.google.com (mail-ed1-f63.google.com [209.85.208.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 54JBwMAq018137 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 19 May 2025 13:58:23 +0200 Received: by mail-ed1-f63.google.com with SMTP id 4fb4d7f45d1cf-601a3e44997sf1392517a12.0 for ; Mon, 19 May 2025 04:58:23 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1747655897; cv=pass; d=google.com; s=arc-20240605; b=UZu3Zy6ljNzTcWVHa+RDPd9s4mh4uJHpIgMkgc3rvEiO441/kV2y5yRczycDc0dNwy 4eZU42TFEdj7WMtNh7KJn2PD9g1c/YOOn44L6tsMa6EuWZ7HTbQbn6OEs4Eh+QZyR/cs adYQu+l05WytTcpML2G9sNIVNtOuPr0Os3oudgZufp7FtNV6IMEDQHC2jjAyoxO/9rAI ckAN9+dEjguiZ5VAToGHn+Kb0VtU+aBl7bstx6NbLQTbof0wGRzFxPOd+RFpsqbJDR0H usn/jro7Tlicd41zKYPBM8i+6WyG18dErTxKO6t8a6tQIHkmHS4w54j/5J6jl2nYnIG/ H94g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=Dx1IYPlGlntNqwzcuD5IXgyzeMzn2T5cqaT2aglsxwI=; fh=1sfKz49OVOJ7k6nfNwr7Mf/brtTv3egFFH7pMVduSis=; b=ba/91lRvmoK1PNBqEoN5J2f2PtkYB/lZXQQPh/HQ3Qov0v9hplEsGIBCApdUJ+pHkO /1iZ/dTADTIDbkHH20+oOE4yin7qX4dLbjJCGUO/9Z5W0oGLBGs75lkI0e5TBeHGUOfg 7OmLFXQX1H7KY0wi4UOv5Dlr81oMGSRkxuAbxUpB0wsYGtat/Cj246waaQ8ejHLZUBE7 4fk5qqcFulVMn8SeQhM2IHPrk1eZqkZ6GN0NUscRNXW68Mg8h4wtduEzd99lN833UVC1 McBypRDjhQLF9lqk9zIyNGd2LXzV48XlktT+TATkq3n9ICAjny+laFB+bNUayya9NIY6 Iq9w==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=OU0a52eV; spf=pass (google.com: domain of fm-1212295-20250519115813da8254e404c985846e-9mq_f6@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-1212295-20250519115813da8254e404c985846e-9mq_F6@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1747655897; x=1748260697; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=Dx1IYPlGlntNqwzcuD5IXgyzeMzn2T5cqaT2aglsxwI=; b=h4Sx+ZUIr4hnCUl4Uh/H+ypxG1UhI6tNM85pz0UyAYQJCmX7eHxweBafN7p9sJbLuw oG+2qaIfonzfX3KO4BkjzR8rcBPFSCOqU34XJlV3sVYqW54G7GpXFvzADsi11+WJIPVn zJMIHSeoo8U1s5iSnMYTCXn5Bzu2+W2gAOVJ7oU0Mx7Ym1xA4+6PCm5K4DJTz8b2pcOB 8/RbS90UF5NJBbYHybbiYXIPBW+SHkNcLeExTyxVSboo1nBAY3qVCy0a9YUluTh8G1kV env0wMGkverdt8ljIuw+s7hHAQ5/myRaskDS4SEPKh+aq8dfVKI2E1EHJOBCQSnkT9DY +69g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1747655897; x=1748260697; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:references:in-reply-to:message-id:date:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Dx1IYPlGlntNqwzcuD5IXgyzeMzn2T5cqaT2aglsxwI=; b=h51sBzRcTCucRwGRGvyOQQGtuA+xtXDPde10P+V7L9zbFaF45xhTTMbRJOX9r1cTUD p7lIPDL352HyTO9kr67KegpvUpsibtY3NccvLcwBF6UsVOYBq/Q3rax8mgj3xRMBNerE d1TIaw+8AkCCXkQ4o93i12s7Io0ndwHjpNS3+WYUtBRZVUOkY2IP7sEAw6rA+4p8msfK BEjv7IkPjCGkUqY0DTLEthKRdmvq4tRvvECoUbACuDonQFlKoL528jbbML1rnjBZ61KI mwvhIzUaeP3LJdKw9+QAoTPZiDvuy00te3q9oUJCMJ72Vt1Nc+dU85HBJhPcTK8Ylhdb vWcg== X-Forwarded-Encrypted: i=2; AJvYcCXSUik5JD8pzWOH19EtaMtAFqwxMdbWorGGx9IMtIn22usgL2Y0FhEjWZQKMZ2RQUVuklGn@ilbers.de X-Gm-Message-State: AOJu0YwnktKL6cwGAGwq57Ge6S4oGQ3mnKotIJvgLUJK3r5nrl4DTgeT yQDpmDsU0L6iqUPreQLCfYx6bRfwzbzR1qHJG/0z14rKDLJLjszSYRoX X-Google-Smtp-Source: AGHT+IFkWZO0Opovgo0ZixYKwswInUxsrNygwMpieba+FsC8V9G6KPnSBCd5Ab1e1LWRoLBFWq5DGA== X-Received: by 2002:a05:6402:280c:b0:5fb:f31a:df83 with SMTP id 4fb4d7f45d1cf-6008a390f27mr12304852a12.3.1747655897097; Mon, 19 May 2025 04:58:17 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AVT/gBFvrue+tEzsJi6qY0uPACu7yXZLDviTXFPeWJBA1cTFpQ== Received: by 2002:a05:6402:2711:b0:601:d62c:75ed with SMTP id 4fb4d7f45d1cf-601d62c7dcfls178329a12.1.-pod-prod-02-eu; Mon, 19 May 2025 04:58:14 -0700 (PDT) X-Received: by 2002:a50:d00a:0:b0:601:7a58:4b0f with SMTP id 4fb4d7f45d1cf-6017a584ef5mr7106166a12.18.1747655894123; Mon, 19 May 2025 04:58:14 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1747655894; cv=none; d=google.com; s=arc-20240605; b=Z0wExT3E8y4WphroBw0HQrQHiGuhfBbjD0O+qfKyT2kQ39o1XztjFw2rDDTM15+wF/ jZd+kUHOas/3ZO8E6Cs/EW5QQgYStbJE7oaQxs8MBlVZkU7WSoa6b1l4ldhA4BIjyAFj kSFb/t5iJiRl0NhfNsEk8Wn4z4YcDcZ3dzEIk6WF4xwI66NusKQFmXlS1dok8Yu9n2+6 IEuhe8O745Jl2bFaEe2Wkf7uBS3VBsxcfYDVMrvg5SIyttF6GI9/985mP4+ICqjvyutg 4syTadNktRQf0tFgX3sA8Xkv3DnQS2QwQWLJackbntpcE8xvxfHSZ+R2FhUYsxEJU0fq 8POg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=5ULMTYVbE+Xra+K0HkNhQD6j1nI6olSSQT1xS6q30T4=; fh=D/q4xMKxZDyLo2GtmwQ/2prSr9aCFD3HVqTCj43epLY=; b=bjR+2FKwkVbiVgMJdU0BeOZ8H1JRibs+y7QlDHlCtFwu7Z61CCN7qrSMbJECqLfAk2 F83JjGdd0e5L8lhFdv3eJx/l1YD9Zeu3edLocZnoM3zYiPzrBx1DJaHXjUJD6jpjNkM1 et7pRDxBBcfPAHkxQ4FszHDGolDLQWg/gBc36XjHOML3DMUAyQ2xUGB8QrwEUr0bXykH MZjIPS63QpEbt9rPfbtPurX41nnHCLcurLEAZrJUJ2q0BQMQaAjInaoxYURvYvWR2VNM HJOx3nV07u36RekaIHyEPIOCFAZ8jh3OpAblkMnYJxrZbWmQ6wRuE3S/pWxZeyNreFXi aQzw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=OU0a52eV; spf=pass (google.com: domain of fm-1212295-20250519115813da8254e404c985846e-9mq_f6@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-1212295-20250519115813da8254e404c985846e-9mq_F6@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net. [185.136.64.228]) by gmr-mx.google.com with ESMTPS id 4fb4d7f45d1cf-6005ae4a03esi108842a12.3.2025.05.19.04.58.14 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 19 May 2025 04:58:14 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-1212295-20250519115813da8254e404c985846e-9mq_f6@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) client-ip=185.136.64.228; Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 20250519115813da8254e404c985846e for ; Mon, 19 May 2025 13:58:13 +0200 From: "'Cedric Hombourger' via isar-users" To: isar-users@googlegroups.com Cc: felix.moessbauer@siemens.com, Cedric Hombourger Subject: [PATCH 0/4] non-privileged commands in chroot Date: Mon, 19 May 2025 13:57:46 +0200 Message-Id: <20250519115750.3195300-1-cedric.hombourger@siemens.com> In-Reply-To: <20250515150727.1764989-2-cedric.hombourger@siemens.com> References: <20250515150727.1764989-2-cedric.hombourger@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1212295:519-21489:flowmailer X-Original-Sender: cedric.hombourger@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=OU0a52eV; spf=pass (google.com: domain of fm-1212295-20250519115813da8254e404c985846e-9mq_f6@rts-flowmailer.siemens.com designates 185.136.64.228 as permitted sender) smtp.mailfrom=fm-1212295-20250519115813da8254e404c985846e-9mq_F6@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Cedric Hombourger Reply-To: Cedric Hombourger Content-Type: text/plain; charset="UTF-8" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: 2tsjhfMWD6zu When building root file-systems for a foreign architecture and needing to cache source packages, apt will be called from within the rootfs and consequently be executed under QEMU: this is terribly slow especially considering that source packages are downloaded one by one. This patch series introduces a wrapper function to run native commands against a rootfs with our special mounts such as /isar-apt. Some basic tests were performed to smoke test this approach and evaluate its performance. It should be noted that the changes introduce a new host tool dependency: bubblewrap. Alignment with projects such as kas would be required (had a positive discussion with Felix but no actions will be taken prior to receiving some form of agreement for this patch series). Changes since RFC patch: - Let caller decide where to bind-mount the rootfs to - Make the rootfs argument optional - Support 32-bit rootfs (no lib64 there) Validated with "citest.py -t dev" (in a kas-container): (1/6) citest.py:DevTest.test_dev: STARTED (1/6) citest.py:DevTest.test_dev: PASS (752.07 s) (2/6) citest.py:DevTest.test_dev_apps: STARTED (2/6) citest.py:DevTest.test_dev_apps: PASS (770.95 s) (3/6) citest.py:DevTest.test_dev_rebuild: STARTED (3/6) citest.py:DevTest.test_dev_rebuild: PASS (275.02 s) (4/6) citest.py:DevTest.test_dev_run_amd64_bookworm: STARTED (4/6) citest.py:DevTest.test_dev_run_amd64_bookworm: PASS (47.87 s) (5/6) citest.py:DevTest.test_dev_run_arm64_bookworm: STARTED (5/6) citest.py:DevTest.test_dev_run_arm64_bookworm: PASS (31.20 s) (6/6) citest.py:DevTest.test_dev_run_arm_bookworm: STARTED (6/6) citest.py:DevTest.test_dev_run_arm_bookworm: PASS (32.34 s) Cedric Hombourger (4): rootfs: introduce wrapper to run commands against a rootfs deb-dl-dir: optimize caching of source packages using apt natively image-postproc-extension: refactor systemd version checks image-postproc-extension: extract systemd's version using rootfs_cmd RECIPE-API-CHANGELOG.md | 6 ++ doc/user_manual.md | 1 + meta/classes/deb-dl-dir.bbclass | 37 +++-------- meta/classes/image-postproc-extension.bbclass | 12 ++-- meta/classes/rootfs.bbclass | 66 +++++++++++++++++++ 5 files changed, 89 insertions(+), 33 deletions(-) -- 2.39.5 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20250519115750.3195300-1-cedric.hombourger%40siemens.com.