From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 28 Jul 2026 12:29:03 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-pg1-f192.google.com (mail-pg1-f192.google.com [209.85.215.192]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 66SAT13L008786 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 28 Jul 2026 12:29:02 +0200 Received: by mail-pg1-f192.google.com with SMTP id 41be03b00d2f7-cb5cc1e139bsf2415495a12.3 for ; Tue, 28 Jul 2026 03:29:02 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1785234535; cv=pass; d=google.com; s=arc-20260327; b=GyeUW4CLO7/8P76DNbwUefetGuD2QA3ph4IJhDLvx4PxZN/mbkfTTMR2oLXj84UaI+ wlHAhHFEj4a1k9y6dxJXmLBU5D9r3LtKnqfUUGbPndpaVQOoqAd4IY7Q8FXwnmzXAD+q cmS7VbjVU3aJcARN+dpCdhsMKMR7OcASx4pyy1jkHJAJs2eb8IvJojYsUnAnv6Gtc62s hlb4GPNPhg0Zn/FWTEweX8M73WEr1LWTFiILdaJS7MBxWXKhMXBGr/SSOndDisbh3H4Y NeKXHwY09LbCK1gPOdV0QjujybMJzsHPMU5ncVGpvAFXdOmYS78H2bvgAb5ImOytMjgU 0yEQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:message-id:date:subject:cc:to:from :dkim-signature; bh=L+/3h/AmBkBqKn3QH75D38+8VCYmHiAfkdhGta5CZgI=; fh=RkTyyI3d6fxFFxXXICj0Cq3AS9KNA2ltRB+f3jTXczc=; b=aBqpesBGBWgX3/qjRzYru6k6GL6SIiLPOGCuW9qmDkrrt9bTrUyVOhvdFswvWoYBTz qKUQqfSnopZpGHU2Yc++/SIrtMOfwqRqJBUE7ZjUVBtvoLL4BrMcMGKlQy4eRxQBg76W bs3xvZBCnfhxX9Fe0bQrhbj3Tct7SxuCfpsD5HUb0IiQuJ1F/aeme/YBENrZ0FJD27oT 0y439Mb9oG4bZQHtbpjaFffKsMpSER7ShZxyyVwA9MO0em7S9WJKawfamOyu3Ef2FnsW vAg+MPlaooWgVALamhg6V5i21+IqXK99JcF65IX+0z9nvpT3E1xDgFg/uTSjgbcZ18V3 8nLw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZajZNZkX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1785234535; x=1785839335; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-type:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=L+/3h/AmBkBqKn3QH75D38+8VCYmHiAfkdhGta5CZgI=; b=JwOeDfo4Pni6nqFb2IXH7pKjVMjTJ+f/vohvEiSfZZyijHDL2EQP3p8JC+c6S4LhPg ORZdltrreJIHazkTgOrBfL+S5pUG55I08DBWIy87KjCMmLnmk/B5ASdoqaHunpddM+Ew 2xb9Az62XL/zWoeV29udC5FFrGX2KuG8Fx0+iPob0vR9p/xH5nkAQswS1XRPinRT7RlK cLpVAAMMA01T87pv//H7rx93yqMdNSMWUXHpXa2U3jMtPIjBWlcomSpO61PO3V5dwaNk Cbiw6wbBwtpScngBnMDb2SZwrs0umtjHH8tFzH2kzDGBm9BFwgIrvIQFcGGzIUbdOpkv GnGQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785234535; x=1785839335; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-type:message-id:date:subject:cc :to:from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=L+/3h/AmBkBqKn3QH75D38+8VCYmHiAfkdhGta5CZgI=; b=gRVGA3vhiuPxCb3/OLk9uWcBOGCJ25zLr7UG0DQpIkTsoYrO+YRnelFS1+uvR7wLlS EW80DFP2PWgnP3bsxW923n6NUGdOopXgLodaMLmRWat+4S0TZmmU6x8FRCeAerh29Cpz VbV4pStdWZCQKFYQR5wziFpJhtymHMIkPTkpN4Yd6bQTK4nutPyjYlXHStVIhtwsNAmf epbEndlhp3T84G0g0LmbQIQIKesMVJd7KbxHE5OoALEqbPS0ue+QxshEXEBB0TVqJKo+ kj//KCarIt4/5J91jSlzqWSf/mm8fUWfIBFPYNfMciZ8cZgEEkc72K41NMRxs0hUszaZ Oh7A== X-Forwarded-Encrypted: i=3; AHgh+Rr4gd81I5MOZfPStrah2W/i28BcEO3W7N7NytdI9Gr84C1Zel2rn/ya0alOL2Gb3J0dm08d@ilbers.de X-Gm-Message-State: AOJu0Yxxqvdjl1MqSPtCtNjwRAh15capQVZ5fx1tBAvlXp4WX5F1plmx TZEY1Fqv2UVDRiz3bR+6pQoDb6Wb/sA0ntbj6a99d63bs7/IAmQVBI3H X-Received: by 2002:a05:6a00:98c:b0:848:827b:70f8 with SMTP id d2e1a72fcca58-84e9338acc9mr1719410b3a.67.1785234535373; Tue, 28 Jul 2026 03:28:55 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="Aa7YSPT1+re1oNj0DgISIAu9E84YbH+76e8mwRg18C6pjec/7Q==" Received: by 2002:a05:6a00:6f5c:b0:847:8a64:2995 with SMTP id d2e1a72fcca58-84e2984d4f8ls6858016b3a.2.-pod-prod-04-us; Tue, 28 Jul 2026 03:28:53 -0700 (PDT) X-Received: by 2002:a05:6a00:1390:b0:848:82f0:679a with SMTP id d2e1a72fcca58-84e9335980emr1952320b3a.52.1785234533504; Tue, 28 Jul 2026 03:28:53 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1785234533; cv=pass; d=google.com; s=arc-20260327; b=LOQ4Hfwgecz4l2uLidC6Xy8z/TuR0Y+KmF6LjeQ3i/z8GY1rohLZiqFpcHJIiAy4aF vlGEYSXePF+5LqeClOI8yIwcuSzObU2N5ZzYV3KmeZabCInKyI6vU150p6ABdru0thh9 J2mnG/aThecS02uz/6ksU8pPQuxPyxo6PA61o4TZSd/ZI4vWAz0pMLRYGV7BARkRCxy5 sCJeh8FGUT8Qz7uHWJfKfklN9k1/mR3ubJBE23bsxyyBNinwdqopliOT4S/amIVK35aC w6D/k6U51SQR6YwJorttDG3PCSsPuHz6JJnb7Auqv9fzUoPePpVpotmOlLPT0SFVkpPr ipKA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=Dy/12t23uuv3oczZsEOtpLl7O8/GicRg7z4MQ67xfWw=; fh=akEDxqCx8SXNfng4/80otlrEVebDroEzjSeLu6ZY87w=; b=mxc8mUH4YmuN3rcXUA8geZoj2JqESGqaVdUQmogyYdKj+L0pnEPBc54vSXZucHENjd u3WuBq5MstdJYRgKqL33YaF/WMUc1oHovCXAO+hfBycMcHuDShDw1JC3z1PArOJqIAKA aoeR676O1D2bipdiUgrxTMKjwOXHO1L31Yo6OBh7PHM6s7aPAt2CUxVaHecLxZzdWjLK vpCN90Jzu2X1Umb9oPa8m0R3MYwwsWm3zNaVFjwUN2opVzesHSqPl0Oq6X+U+geGnZkS LUG2+P3H4DqpVnxc4bz4M4LlUvpAfZdhKdmzQv3LRIiRcovr8ycsrqVi3kkZ9X5XfyKq fPqA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZajZNZkX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from OSPPR02CU001.outbound.protection.outlook.com (mail-norwayeastazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c20f::7]) by gmr-mx.google.com with ESMTPS id d2e1a72fcca58-84e533ede29si337701b3a.5.2026.07.28.03.28.53 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 28 Jul 2026 03:28:53 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) client-ip=2a01:111:f403:c20f::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=HrRDAufwJgxDKJr97kjOaRw4yQiu2TTF+1iJI4zn+s1QhiwlnEbxH7Pm2pSAnkVa6Aa9iiGTz3vFQW9AX6+C3JNPxuTrvvBKbq2F/MOAcBRS0QjyitgNCqA5S5IrWGHtPKTGd12NpMMf/r6sqZUE5S5WGb2GK40dYpTGGsW18ZPZODpn077Fi6BgN2ahGZXeee3QlmJ9rsY7An8qCtDqacE8sISbshJn4y/wxJkpjQAindsnx34QLNHEuBdsXZCk1hvwumYYN+0e0qzE3wFgaOuuhGy7CifR82YOKBcUSPTTLPMgBCikJ6hFO8KCGPHXsQy4lfnL954gZXxPwTydlw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Dy/12t23uuv3oczZsEOtpLl7O8/GicRg7z4MQ67xfWw=; b=IT7zmvvw37IfRcoci2XES5nkiPSJo4cV8CBXgxTCxlTOJcD/8+HpDg4GGlDgZC5tHdPZ7Su8kMot5g8jInYbX+A3/1BvyKCk32c+PcLYRT8l3Vm2ofUzvQy/1eMjl6yQJnqMpLnUgBdPyChsPiXrwn9EA9a175eUTwJF11EXbVgrk959S1YzAcxcG4L8UIMS7fPmZk0G0v33B9iLlRHC2gDVhSenhkntA5hpz6H7nSGUZI+K4HL3/WzdgUd1fhEv+AXTFF3Ar7GBFS+SRcFTOo33HOqHONsjgFlnfdZ0W+o+CxpGUOBvAz5mOTzdO7aBUmCFZRUPSL6f7SaWP+Yqpw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DU0PR10MB6130.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:3e5::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.12; Tue, 28 Jul 2026 10:28:48 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0245.012; Tue, 28 Jul 2026 10:28:48 +0000 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, michael.adler@siemens.com, Felix Moessbauer Subject: [PATCH 1/1] sbuild: allow to override enforcement of no-network policy Date: Tue, 28 Jul 2026 12:28:38 +0200 Message-ID: <20260728102838.962383-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.53.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: BN0PR04CA0157.namprd04.prod.outlook.com (2603:10b6:408:eb::12) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DU0PR10MB6130:EE_ X-MS-Office365-Filtering-Correlation-Id: 8d8aad4e-a251-49f6-c8ab-08deec9302b2 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|23010399003|1800799024|376014|56012099006|11063799006|10067099003|3023799007|55112099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(23010399003)(1800799024)(376014)(56012099006)(11063799006)(10067099003)(3023799007)(55112099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?WlB3dXZjakltN1RxT2hKQ0RDSXA4TGI1VU1NM2ljYlppQ3hTWUdZeE05elUr?= =?utf-8?B?YkhEdUtTc29KVzZaM1FkOVpiSDljNTR5SDRieEx3N1BLaGlNT2d0M0JzNnQ2?= =?utf-8?B?WWZ2S0dzNk1DN1poRzBJUzB6UlJ4QWUxTVNKNTJJNHJTRlcyM25kaDR4ZVJN?= =?utf-8?B?QWtDVndFVUhQQnNTODQ3MUw3c2ZlY0NuOUJtdXBqMFpWRFd4QnR5ZDd6NTZF?= =?utf-8?B?KzdKMjdBUXEyQzd3Z093UXFISkdNci9JQWUrUHF1eFFkL2hYQVVBL3BmaC9O?= =?utf-8?B?bWpKNXgwcytYOGxEalVsV0pFcHVtQWcvVW9DR1owZnRiWVJuNVk0Rmh4cGdS?= =?utf-8?B?YU9JcklWOFllbnorbjcxOEFuWGVlWVcvTnF4aEF5bmh4c2VJOWtMQmlieDVw?= =?utf-8?B?ZG42N2dwRGFRKzk4L3F2UEd1QnpWQmdSNGRONGUrTHRNeUsrVVJkdm1vWVBI?= =?utf-8?B?MHRXdi9WRE0xL3hZS1JvbEtWb1VCRE9ncHpVNThqN0xINEg4em5EQ0RvUWZX?= =?utf-8?B?ZjZqMWRGRXZhek1yeXN6Uy9CUkkrUVFhV255QlZtd0tZZG41YzBNb1hKanFT?= =?utf-8?B?VU5QVDcxbEphWWtoMDdLeWtRR2hlUEphTm96UVJ4OVYxUGxMU1lXUmorQWlE?= =?utf-8?B?UURRdkZkS2liSGhRcGMxRk9iUkJ5WEhFWXdxNXBBMkNHSVF1QlZabTdiSnZF?= =?utf-8?B?c1Z6V3JVa0lDSDM2dUNaOW1ZcVVzQnl1VFNOQTlUQUxpRldxZEw0dUIxTGRM?= =?utf-8?B?NjJDZ3NDbDczQnNMRWdtNVFXcUxFWEd5U2xxZS9CODkwY1RxTFVRMXBJc1Aw?= =?utf-8?B?bHR3ZHB6UFUrT1BqTXJkU291cTJqVCt2d1NhRTNub0gralUvbzhQQjYraTJE?= =?utf-8?B?TDlCakpuenljY3JsRnV2UUo5bEMrc2JDbHNIMTNmTlEzaTZUMzhRTksvTFBz?= =?utf-8?B?VjZHMnZ0d3IyMGZDUG9wQXBlTmlFMndHaHdiODEyZGtTaU53aHdWVzM1dDdh?= =?utf-8?B?bVJvenp0djQyb2NnWEpaTFRseXovVWRUTjJ3eHRlcHF2NFFYeEpTZGI3WWs5?= =?utf-8?B?UkJ1S1dKYnczT0xCMXhhSU9CMlhLN09IamFwbkFaYlMyeVI5eUVVRzlGZG9t?= =?utf-8?B?ZlJ4SHFZcW5kUUVFdnJieWt3UlhmN2FncGJabVk1cG00OXI5UWNXSkVyOWIy?= =?utf-8?B?S0tZdVNlNzlhUnJnZnEwWFM3QStMbWlDazhPM3BSbU5EK0p4V3lNTkZHR2dT?= =?utf-8?B?T3lBYmhCY1dlKy9FellabUxhV2x5QnJpcDhLZEJyNDNuN2xIbjdqOXV4N1hJ?= =?utf-8?B?Wmd6ODFmc3FjYmszeHdpbWQ3Nnc1bXQ4aHNxWXB3Y2Jadi9vY29Pcno3cllp?= =?utf-8?B?bytTcTVMamhTSVFtdlJad2drZFVMdGN2NHVGMXcyQ2Y1L1A3SnpTTmMxSGxX?= =?utf-8?B?TW5vTlRpMWZCa3NGU0FCQ1hRT2J1R3g4d3Y2MVZoWUpmQmpkV2hlOVFDZG50?= =?utf-8?B?UTh6bkZLTnc4bjM0bEhhanlKenVQekU0NCt6eGRYU3B1TDdSZkZEMkZWdGV5?= =?utf-8?B?NEtZamZHcWE1Z0RDRVU3c1lQcVlqa1ZzZEtEK2RwcCtmMTg1eEg2SDBndFNI?= =?utf-8?B?R0NITEVkdDNkT2RyczNoR3BGNjgzZEJaOVdSQndTU1loTGpIcmxQVDF6OUNw?= =?utf-8?B?OGxNSTZKTjIrUHZ4S3BoWUg3eW1adVR3QjkvWkNMRVJ5RWRFdkJmN08rQzVr?= =?utf-8?B?ZHB1S1BNQTNRR1ZNempuR2hjbTVtcGpsZ0g1ODNzU2VnU085RWJjMjBSSmtx?= =?utf-8?B?c3FiM0I0Vnp5Q0UrcEtzSzV6d1FDU1I4MHVLZnB0VjRnTXNnMVlxalRjSXZ3?= =?utf-8?B?QjZkckpWZ2V6RzBFeFdETktQSVVsU0Q3Y2kva0x3WVdRNWJPVFo3OERaNWRw?= =?utf-8?B?K2swcWl0Yk1IUXhHbVhYbFFQZkdmSkF1VjdTWmxmMHEvcFJmbVdlZkVQaytn?= =?utf-8?B?SEoyVGdUdEovZGYwemV1MTRXY0RKS1U2QWZkMTI5Y2FUeVlBdXJ6MzdrS241?= =?utf-8?B?NGlVR0lDTmxUazRxTTcxSnhaZTA5dWdmTU00M0ZocCtQNklISkZZM1JmaGNH?= =?utf-8?B?RkZtdjZsSmJrSWZWOVM0VDJFWWZNUHdTYm0xaDdEYkpwamF5ZHFhYU9qbldK?= =?utf-8?B?ODlKWU5nNlRab2VWckRPNWtHeFpZYVlqWU5oQWJzSWNKZzRlbU5DazdyVU9u?= =?utf-8?B?MW1QQk53OVg2SGpwcU9EWmU2V1ZkY1dIS2dITEc5QldnNG1oTUxBMUYvbFFX?= =?utf-8?B?RWRCVThpNjE1YlVBQWtGL0VUMnFwNTRoT2p1aG1tYlAyTFZvOUt5OXpqN0tt?= =?utf-8?Q?MY/ifFAHd7TpwBu8=3D?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8d8aad4e-a251-49f6-c8ab-08deec9302b2 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Jul 2026 10:28:48.5441 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: FgyI+l9MmCmWGdTIGbqkDNYfvRrSXKmiVYNTsfJ4o56/pNbKk7AHt01K6T1OgvqQAMy2D6l9j2DE1aJ2yN/H3+DIZXNgDUP5hY/ZLiCkkWk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR10MB6130 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZajZNZkX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: M53EvVElc0Qp In accordance with Debian Policy =C2=A74.9, sbuild disables network access while running `dpkg-buildpackage` (from trixie on). For technical reasons, this was not enforced on the schroot backend, leading to silent policy violations. On the unshare backend (rootless), this is enforced, which might break some downstream builds. By providing a variable to override this, we restore compatibility with the privileged mode. Pre 0.89 versions of sbuild (e.g. on bookworm), always allow network access, independent of the backend. Signed-off-by: Felix Moessbauer --- RECIPE-API-CHANGELOG.md | 9 +++++++++ meta/classes-recipe/dpkg.bbclass | 15 +++++++++++++++ 2 files changed, 24 insertions(+) diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md index f5b84c84..69560e9f 100644 --- a/RECIPE-API-CHANGELOG.md +++ b/RECIPE-API-CHANGELOG.md @@ -1129,6 +1129,15 @@ environment and cannot be deleted from the outside b= y the calling user. To simpl the cleanup, we provide the `isar-clean-builddir` script that helps purgin= g directories with mixed ownerships (without requiring root privileges). =20 +### Network access during package builds (on rootless) + +In accordance with Debian Policy =C2=A74.9, sbuild disables network access= while running +`dpkg-buildpackage`. For technical reasons, this is only enforced on the u= nshare +backend (and on sbuild versions > 0.89). The schroot backend retains its e= xisting +network access. Recipes that still require network access during the build= can set +`DPKG_BUILD_ENABLE_NETWORK =3D "1"` to explicitly enable it when using an = sbuild +version newer than 0.89. + ### Add Hyper-V machine support =20 A new machine `hyper-v` has been introduced for building images diff --git a/meta/classes-recipe/dpkg.bbclass b/meta/classes-recipe/dpkg.bb= class index 1b2616db..d8e129bb 100644 --- a/meta/classes-recipe/dpkg.bbclass +++ b/meta/classes-recipe/dpkg.bbclass @@ -15,6 +15,12 @@ DPKG_PREBUILD_ENV_FILE=3D"${WORKDIR}/dpkg_prebuild.env" # Note: must not have any logical influence on the generated package SBUILD_PASSTHROUGH_ADDITIONS ?=3D "" =20 +# Debian Policy =C2=A74.9 forbids network access during build. However, th= is can only +# be enforced on unshare backend. For schroot backend, network access was = still possible, +# resulting in builds needing it. To override this, the variable DPKG_BUIL= D_ENABLE_NETWORK +# can be set to "1" in the recipe. +DPKG_BUILD_ENABLE_NETWORK ??=3D "0" + def expand_sbuild_pt_additions(d): cmds =3D '' for var in d.getVar('SBUILD_PASSTHROUGH_ADDITIONS').split(): @@ -112,10 +118,19 @@ dpkg_runbuild() { =20 DSC_FILE=3D$(find ${WORKDIR} -maxdepth 1 -name "${DEBIAN_SOURCE}_*.dsc= " -print) =20 + # networking is automatically enabled on older versions of sbuild + sbuild_network_option=3D"" + sbuild_version=3D"$(dpkg-query --showformat=3D'${source:Upstream-Versi= on}' --show sbuild)" + if [ "${DPKG_BUILD_ENABLE_NETWORK}" =3D "1" ] && \ + dpkg --compare-versions "$sbuild_version" ge "0.89"; then + sbuild_network_option=3D"--enable-network" + fi + sbuild -n -c ${SBUILD_CHROOT} \ --chroot-mode=3D${ISAR_CHROOT_MODE} \ --host=3D${PACKAGE_ARCH} --build=3D${BUILD_ARCH} ${profiles} \ ${@'--no-arch-all' if 'cross' in isar_deb_build_profiles(d).split(= ) else '--arch-all'} \ + ${sbuild_network_option} \ --no-run-lintian --no-run-piuparts --no-run-autopkgtest --resolve-= alternatives \ --bd-uninstallable-explainer=3Dapt \ --no-apt-update --apt-distupgrade \ --=20 2.53.0 --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 20260728102838.962383-1-felix.moessbauer%40siemens.com.