From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 27 Jun 2025 08:53:57 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-qt1-f184.google.com (mail-qt1-f184.google.com [209.85.160.184]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 55R6rrRf015201 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 27 Jun 2025 08:53:53 +0200 Received: by mail-qt1-f184.google.com with SMTP id d75a77b69052e-4a6f6d07bb0sf38562131cf.1 for ; Thu, 26 Jun 2025 23:53:53 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1751007227; cv=pass; d=google.com; s=arc-20240605; b=DSp1nXW0RWmTxsoOzs5OErAwuJnjagDUE5B19qZenaAwIGOxeJgLM4ZfaQAUUqieIF NYpOJslt2jYOYzzPB4AvmyyrASfZ3/7whlthSkRV29aopps2tDtT2uk+Y/seedo2R+Rf Re6+w5uwJS4wQJni3uT+qbo5PoceABBOe2nXIIBGMZnb3KXM8dul/cGqtmsoRNcoIlbK Khr5CKXWi6ZeqU+rEr0GCoDjMKBZx5Hycy8cM/NuHshgFcfOaWbZOZ8FLcPM3il9hPPj aD5zbiX2T9hal+gKklxTiuhErquFGkrdyn4Qz9IKvvvq42Utkh8MOUxuvKHb4oYDG+ev hyxw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=Mo/P3Lz8TbySBi73VkhTZHXpppyDETcxHbHGuoibtYs=; fh=BiJhWXnWJy2ybKUwI5DsoTdtiqSenAXo1iZ9Q06DvQc=; b=UH2qaDc/irFf890PaThBJ0B7MG9KmqJBLVNWxxvsF5uzYPh4jJ5c4rCJ1cOuRav8F6 5nOHsYXWXWFybNSTBnTkSD9Uw6MjP/AUZY089VGbD8zKXUhd2ilZK7EAuPgg9W9dx0xK 7a+lbmI2pP+deSFCQZ8btYQuaxeMDvkeU78k7nmyWZ183QGvd7AbZP0LdaxBYCNfkbB8 EUeugLd+QoRVeVygo8gPmv5hwsNSwnfn0cw9s7nSDQjxKAwv7MfNNT/6s6+MZRJmrR8x FSkQ30COI4DSsbG9VWyXcJcmRwD/s7SSWIsepLksuyoPdg640vsswWgqn7CyTqQNOiJ5 JWkQ==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=kFsPWEL0; spf=pass (google.com: domain of fm-1047747-20250627065343abf53b45a5ff475d7f-p9aze4@rts-flowmailer.siemens.com designates 185.136.65.227 as permitted sender) smtp.mailfrom=fm-1047747-20250627065343abf53b45a5ff475d7f-P9AZE4@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1751007227; x=1751612027; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to; bh=Mo/P3Lz8TbySBi73VkhTZHXpppyDETcxHbHGuoibtYs=; b=D3fY5xsv1187RtWAeIJMFO3KDvfGZ014yQmLPt6d9XqFyVMqX0Xfk5+IT9t9qiMSrp v2bcvWhvZxdTFLWS7nqegdar/5xqfsOYM+On5jWyaQtErWydBOWXOoQit0ur/eJkUoJw 9zVypsbdatAtydKlh5r2OJoLaDhAui63HbGicMBKeYtJ/G+pfMfq6wHGrQ7XLReBk9q4 6d6IUqALwZbICfVExqUP8kcp5nHRGvoh1Nw7SsC845MoZ1UtdnpryqFRfYpedTU8G1Ky kPzQ/6rm6L6sZqmHa1pNv5jmQjcQhCWptJBmHRB4dS3NilEdxon2NQjA+b2VtOUWewt1 Gw/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1751007227; x=1751612027; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Mo/P3Lz8TbySBi73VkhTZHXpppyDETcxHbHGuoibtYs=; b=bzb8o39wGYDuwfi1HXxCG1Zdx75oV/8afumRWYPqXDceAeobtAdpy0rRfKQKN2+RS1 xngWdunSpo99v2HoN6ZFgQt31FhtUU0doyHMuC3Vh+CgaajWs9t0JbFoxFqJ5ci6OGjp eQK7zLMXkYQhiFAenR7ZRPDjvT5WowZXzWkB/CdClCtDs5MnCgtB2YrTVqenC++Ummi7 1Z07d7pOb6SdtnmR1CQWtV7YjYcUydjMeF2IDcShDyx0EOJ0H2VHCf9HXsHb/4zKE2iz 1CpI3go9tUyitkC86GaPasiJ2MpiDAMEXciMuXDgsIfLBJuzFPBlxpZLQl7dnDJzoaWs yscw== X-Forwarded-Encrypted: i=2; AJvYcCV8vXEDXsGp78uL7y3IFgRyXjBJz6MOme8ZYQUuhfSPR456QY0mHMkgEbEmKMLCxB7wW2jy@ilbers.de X-Gm-Message-State: AOJu0YwDEbqpnnG8scPrbWCUsdVfAsZSRCT9PdrbCfFnkifwQbZat/uo FYJEZxrFoC2YoLrn7LlKLhR30jK/61xcvuW327IEXZgM1b20BYn+5u4G X-Google-Smtp-Source: AGHT+IG07Oh2dfdW/nBI3pA65JZe5ppJ0brV8s3j2OVFM0nwdQGYgdqDZwHRJ/z3BxnovTGiCDUwfQ== X-Received: by 2002:a05:622a:4009:b0:4a7:2f49:7627 with SMTP id d75a77b69052e-4a7fc9d7db0mr42037151cf.11.1751007227354; Thu, 26 Jun 2025 23:53:47 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZdLph4c5hMO39xZ8M6a+Dfy6u1I5e41o+QOcal9MiKADw== Received: by 2002:a05:622a:45:b0:4a6:f7c2:f438 with SMTP id d75a77b69052e-4a7f30fd1b1ls28049451cf.0.-pod-prod-09-us; Thu, 26 Jun 2025 23:53:46 -0700 (PDT) X-Received: by 2002:a05:622a:5888:b0:4a4:31e2:2e77 with SMTP id d75a77b69052e-4a7fcb2ea8bmr43959781cf.50.1751007226352; Thu, 26 Jun 2025 23:53:46 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1751007226; cv=none; d=google.com; s=arc-20240605; b=TRMk7yIXfnhUX1gNsuDqV5o2rf7si/Sc+Q4zf02P3uOynZwMKZGwrKBoUBsdxqSisC ZVTkoPQIncaWGxbSQkbv6HtZrnFVHMDKl2MZn/n0LUgPdSqZbj6NGITxY6vgGz0wGhU3 4/v5USat6WQCIJ/zt+2zp17kRtTxZP4gjYFY5NHgvANv0YLQiEG4Az2PWbv/DgRLi5Q5 IEC6jIgtWrr6p22lKPCqJkMi/krPgMiESa9518ssToJ3Y/7FRoXQKJTcraf8Gn8qnm/Y N+aOQCA+bisLSwKpOgEXWkQHbzQfj1fTnZ+g/PqI5Kx4MY5PmaTofJQ2zFwX1EjEooVV Y1xQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:message-id:date :subject:cc:to:from:dkim-signature; bh=LPiaAsdfwc/yS3WySQiu4Wv1tgMzaM3cvVTHiIdvtAA=; fh=nuVAnAKFXZ/c71OwrdWzSuwNyXL8JbkZbL1MQ1Fe+gs=; b=k3pMrmDYFak/0nmjRObJQjPK1S4UQhkgePqAIAfzgCJfExyM7QUWo1391w7IqDH7RM Sp+pEKFpiy70LWax9Ekp5TrSGn5kWu+ilf/c2dKbkXTpFq6ka3IT/uVIk1BS0HT33sr9 fCPmVfUbAf7s3QXH2hqMKhoSVUWbvKLG1paGPA1Pte7TAYJwR146yvda2V2W0mC7/cv8 CP0A0u/Ottz0CTLvFvEfuBvNfQ5KjcRs6MUWXoEhK8leY+hb2zUzIm7EVxelxy97SG7V D5AUAWxz5iLLTLFIex0OD1NnXAGcI/cYxe4lJHhVID7P+E7fNCHE2k1gNQroh7egG/61 fF7g==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=kFsPWEL0; spf=pass (google.com: domain of fm-1047747-20250627065343abf53b45a5ff475d7f-p9aze4@rts-flowmailer.siemens.com designates 185.136.65.227 as permitted sender) smtp.mailfrom=fm-1047747-20250627065343abf53b45a5ff475d7f-P9AZE4@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net. [185.136.65.227]) by gmr-mx.google.com with ESMTPS id d75a77b69052e-4a7fbfeb75bsi741271cf.0.2025.06.26.23.53.45 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Jun 2025 23:53:46 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-1047747-20250627065343abf53b45a5ff475d7f-p9aze4@rts-flowmailer.siemens.com designates 185.136.65.227 as permitted sender) client-ip=185.136.65.227; Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20250627065343abf53b45a5ff475d7f for ; Fri, 27 Jun 2025 08:53:43 +0200 From: "'Clara Kowalsky' via isar-users" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, Clara Kowalsky Subject: [PATCH v3 1/2] container_fetcher: Fix missing checksum warning Date: Fri, 27 Jun 2025 08:53:35 +0200 Message-ID: <20250627065336.2910069-1-clara.kowalsky@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1047747:519-21489:flowmailer X-Original-Sender: clara.kowalsky@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=kFsPWEL0; spf=pass (google.com: domain of fm-1047747-20250627065343abf53b45a5ff475d7f-p9aze4@rts-flowmailer.siemens.com designates 185.136.65.227 as permitted sender) smtp.mailfrom=fm-1047747-20250627065343abf53b45a5ff475d7f-P9AZE4@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Clara Kowalsky Reply-To: Clara Kowalsky Content-Type: text/plain; charset="UTF-8" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL, RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: aSk6s/Du4dek In case only a tag is specified for a container image in the SRC_URI and no digest, a warning should be issued with the recommendation to add the digest of the container image. So far, we were presenting in the warning the digest of the architecture-specific image that happened to be fetched first. However, we actually want to show the multi-arch manifest digest rather than the architecture-specific one. In addition, reading the manifest.json does not work at this point anyway, as skopeo has already packed it into a Docker archive. Signed-off-by: Clara Kowalsky Reviewed-by: Jan Kiszka --- meta/lib/container_fetcher.py | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/meta/lib/container_fetcher.py b/meta/lib/container_fetcher.py index 0d659154..16467abb 100644 --- a/meta/lib/container_fetcher.py +++ b/meta/lib/container_fetcher.py @@ -6,6 +6,7 @@ import oe.path import os import tempfile +import json from bb.fetch2 import FetchMethod from bb.fetch2 import logger from bb.fetch2 import MissingChecksumEvent @@ -60,16 +61,17 @@ class Container(FetchMethod): if ud.digest: return - checksum = bb.utils.sha256_file(ud.localpath + "/manifest.json") - checksum_line = f"SRC_URI = \"{ud.url};digest=sha256:{checksum}\"" + inspect_output = runfetchcmd(f"skopeo inspect docker://{ud.container_name}:{ud.tag}", d, True) + digest = json.loads(inspect_output)["Digest"] + checksum_line = f'SRC_URI = "{ud.url};digest={digest}"' strict = d.getVar("BB_STRICT_CHECKSUM") or "0" # If strict checking enabled and neither sum defined, raise error if strict == "1": raise NoChecksumError(checksum_line) - checksum_event = {"sha256sum": checksum} + checksum_event = {"sha256sum": digest} bb.event.fire(MissingChecksumEvent(ud.url, **checksum_event), d) if strict == "ignore": @@ -77,7 +79,7 @@ class Container(FetchMethod): # Log missing digest so user can more easily add it logger.warning( - f"Missing checksum for '{ud.localpath}', consider using this " \ + f"Missing checksum for '{ud.url}', consider using this " \ f"SRC_URI in the recipe:\n{checksum_line}") def unpack(self, ud, rootdir, d): -- 2.49.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20250627065336.2910069-1-clara.kowalsky%40siemens.com.