From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 21 Oct 2026 14:21:40 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-yx1-f61.google.com (mail-yx1-f61.google.com [74.125.224.61]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 69LCLcJe014317 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 21 Oct 2026 14:21:39 +0200 Received: by mail-yx1-f61.google.com with SMTP id 956f58d0204a3-67994567a44sf970815d50.0 for ; Wed, 21 Oct 2026 05:21:39 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1792585293; cv=pass; d=google.com; s=arc-20260327; b=Wwp+tq4/bIBiQiQLvcEuCI+cA4t343aUBsmZmRWrZcc7+z2IEe2SH6akLZyjnWVVl8 fYfptwPn2o2kaw6omc21j5S2RRr6dbtGNYCFTIfZVOe2tsWexmluVeuTHS8Vtx+M3IZw 0gTlVmGw0x0CjG8X+u4XGcNPdaE9SbUg3xRra31QidBiq7eSavjf1VBptBtWK98/jVnW w6yNX63nFUHhRPqGx44XYEr0Us7bqTzHVV/EhMsgjMHz1A11IyH6IIUnhWsac7Sc6csl Hmg5/mXOB3F2jPr/tVDgEsMGKTJTuj9WRQRERw1RqKCazXsRUIvJ5sZc/J4Hml3bHvmI 1QZQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :from:content-language:references:cc:to:subject:user-agent:date :message-id:dkim-signature; bh=+ZlEFdkuGCGibRtDYTkj+4WV+tCB6jQrx7iYJV8cXik=; fh=Sxt75SCjIGCKnkGYLhel1O9HgP3Mh0g67fCHCXQ2o/w=; b=QrclrJbheIQTbMhFqmGfABDyerdjH6B73T8ePEZSwKwOgTyphMQ35ED4/vVd/LqbQf G/tz3uNPTrmo9vsy5pqbA81AtR5aqms0z8ZMOduF/At1zLTp7uylt1xwduyi7FTsoldQ iQt+vhxVPeGyO3kClfRnDj1V9T3/GO4OKGjfPbM+Y4Sa6A39CfOqKZN/EVrrFVHGCnlx MC79K9ePc4FyTgd1M1anuxSPR1AnpVC9CMOKtpmX+AHif4UkB7/fBMKSMXHsI5NBr2kJ C4hbrvQe3asUTUvSpgOvl7i2xW7H8Z/eKAElijHKkjGdX+WYR9zDtXpHbUSsmn4EsDok P7pA==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=v2HIRl9h; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1792585293; x=1793190093; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:in-reply-to:from:content-language:references:cc:to :subject:user-agent:date:message-id:from:to:cc:subject:date :message-id:reply-to:content-type; bh=+ZlEFdkuGCGibRtDYTkj+4WV+tCB6jQrx7iYJV8cXik=; b=uWoUQq3BDVdzWXdAVXqFrzV6GWbeSJvNeT4GwwAN5+HA/SKAEny4tHTQeFz6RfnNIu JcN28XCnood9jVwpe58LU+boD/DnltRBZ9yb0vjNTAnN2nsIcVoCxoCbi5RH76teLgrP Q/EzWLX91WzWgR73u46ERCtxXQMsZ9p/ZH0I7dI+2BLWxDH6FHbps23KJ7O6Vhym0lRa Ho24lP/blNyD28wchp1cODjbxOwAdIQbhct3Xp+UzUwaHvFH3QOPCd0EmEsq0DgqpUa2 NfXlvGhFDydHzYbaeCpyamvBSgMXhwbFUvLr2Rv72/PChuZQoa8irweuxlRVewPYomZ8 Jg4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792585293; x=1793190093; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:in-reply-to:from:content-language:references:cc:to :subject:user-agent:date:message-id:x-beenthere:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to:content-type; bh=+ZlEFdkuGCGibRtDYTkj+4WV+tCB6jQrx7iYJV8cXik=; b=tqOzgp8DixiSMi6iJileKFUg6prjRUl/8tJkR5Kz+6iZ8vIXmG6Y+8P5UDyouBiquS wl9AHmTIW0f9RPXzSs9vtx0kEIv187nJ3g0iWNjrSc7ZLi+uF+40p2FlehJ0wZWBagqy w4O9eBQoWQzVXTXWL1fFgFR32EoTI0yJNW1iYmsMn8TyG2y+wjZC8+3Ag0BAwRZxOPOz z7zK2BGZrMD2Ln7ps1Nm4XRDlA95suIiPlxADqppHwUo+GHTd0SayP/OmFt7rWe5DYFS s4hBWgmDIb8Yk2rFTC4PHL7blxSOnwmclQOnhNigcqs5o2xkw7VbYSFhuECUN5nmFFLw DdkQ== X-Forwarded-Encrypted: i=3; AKwUvBzlOA5e48Y+p0zPS9AQDeSYT1zh4mD0CdOohRnxz3szvKIUZ4yvrX9tQyNLMxwPuV6hy1qs@ilbers.de X-Gm-Message-State: AFq9FYJ4GY3IYvZLsy+em2Auy6N/3e1pULobARghpZ4sFTOSCVgH4Fdk 4F+pWVLSVKhOYABNhzbF2V9Mtm9K8Y8zkB1RuggFeS5EzQnGVctIOb50 X-Received: by 2002:a05:690e:4a:b0:674:17ca:25dd with SMTP id 956f58d0204a3-67a0e5845cfmr626426d50.78.1792585293013; Wed, 21 Oct 2026 05:21:33 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcCTM0aB4neuFolZ8u7mvdZSDw3t0lbDGNaI+7q9fLRDA==" Received: by 2002:a05:690e:1246:b0:679:8a05:b832 with SMTP id 956f58d0204a3-67a0bfb9d18ls971938d50.2.-pod-prod-05-us; Wed, 21 Oct 2026 05:21:32 -0700 (PDT) X-Forwarded-Encrypted: i=3; AKwUvBx9HHcO5Y9TeUCmYaFBP8PQCBXSnUXQaHvdO1DDPqp7+qLAKpggG68ULS87ZVu+6dt+Jf4SExXz1eWO@googlegroups.com X-Received: by 2002:a53:d60a:0:b0:679:9b4c:5baf with SMTP id 956f58d0204a3-67a0e5036d2mr629323d50.49.1792585292027; Wed, 21 Oct 2026 05:21:32 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1792585292; cv=pass; d=google.com; s=arc-20260327; b=sevx3LGgK1PeoJZmPTH1HaiFZ4ldY5WFDLwe4M8yX04g1ITjh+MOXxT8sZIeiPu4Oo fGVfViEwJBPCVj1zRtQLfchRuATNDNa0hhqHH6GKWKmHSkRpP6+N2qRpaZ/ygoLX2Ce8 PxaB/sBju2C7GDtNlM05SrHGFHqlfFyUefEz9miNYh2qgrr9tpVJ2jerYnRHKBbO4+AR Grpl/yrI8ztWLJUnYngTWOdwKyIrFxAwFPldXDPd3e9N6bGAJa0oomed44u54wO1djqj luWjtMdtEwkBQUOkrqqqJKCjqJaXZ+1qyWRjPl9Qs5M6GPxvpvS0xpYjV04mTovxdLs1 ELTw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:in-reply-to:from:content-language:references:cc:to :subject:user-agent:date:message-id:dkim-signature; bh=zl2CvQ3gXkXjTY08dSuy0aB98clJcIb92BMCQqg7exo=; fh=yIKyRkk9HUpfWtdvOIrjjnpAneBEhJ67yZ3BOH5wdcc=; b=mqMCNjZ+BxH2Z8bgFdMRQRaqanQuDi6sX7FplHmeHA6VVVXS1PUW+5iNvXFYXgd9Hy en9ctjWUKwcS3FX+YpqGvle0VZIeTPCQmo8SkGHbfDmQDStHB+CjhodNRyB74f+JJaDe YG/EbFbPea3Ez4J1xhZYqK/Xsxz8BExov/xELySismxxbSOBD9+NlGemnERN76M5U3bi ENTppaf19uH/JkuiIrsJ9i5I7A42uiifKVrKqjgchh+vxZSmg8lyj1mHux/Uam7rsNEM gPbrzucXi9zdxFI8963iroUMNKowpfZgrw4AOVoyZE3IHVaH2PnAxe7BzWqQboLO8Cy0 Wg1w==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=v2HIRl9h; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AS8PR04CU009.outbound.protection.outlook.com (mail-westeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c201::3]) by gmr-mx.google.com with ESMTPS id 956f58d0204a3-67a0e4df488si49411d50.6.2026.10.21.05.21.31 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 05:21:32 -0700 (PDT) Received-SPF: pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) client-ip=2a01:111:f403:c201::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=HmvIXDKr7H8phm7zY62a6prtGd4qk4loRUH70E+EPBgmdT+FvSbs9otP/7a6G3v9v1+XEx/OQTxusIROtWvrXhTdtJRtICVwWNc3xJKXRTFtjsEpCeXZnNYi9WnJ7IKXgX04WGi2a1dXuKx7Ly9BwudoAJFuUGX4VAMiSl6xQ9yKbcCCyC6BREJM5cdPtB/OZZETu9YzvM13hCDBFcOptiGVl0Sh6IuLdMgZnTqa0BOPxPd5jaj12oFu/teXqrFDYVWe3xaHk9RW2CZRLRDdvd1J/RLtpYJuMe0G2H8sQycG7OtWyK/UXONWjt7aZYRnHSxtd0Vgij/Rs7tZfn7ziw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=zl2CvQ3gXkXjTY08dSuy0aB98clJcIb92BMCQqg7exo=; b=wKIrtqykKYu4d4/A1piH9K9D4acfzMMr7cvBQzsfjNp+9NjU9LK9zQL8NGK3x+shzKD2HRbvE9456m0yj28uKMVHbZcGLCrF5k76PhLR0AJIBiWg9bTFAFqk2max7/t3ObnmhYSfQvOa8xWvh9U66pVmVScjM9BIPdavGxYlVJV0tbglgDVJKU7m8xIdKr5yXTxJCW0lN4lVAv1cI188Vo1qvnEUx18AqtqAyZSuTWaylA3XWBXXw3M10N5pPjFSHmMEYIg96eKDxC2OoPZq1bWHW8F6W8McYv8/4q0YUJSiOm0CLu5BWcjHt7z5t0Xa4+V+jimsjghLluiCTi4ayw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:740::12) by GV2PR10MB6164.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:75::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Wed, 21 Oct 2026 12:21:28 +0000 Received: from AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM ([fe80::527e:14a7:bd3e:86be]) by AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM ([fe80::527e:14a7:bd3e:86be%6]) with mapi id 15.21.0546.012; Wed, 21 Oct 2026 12:21:26 +0000 Message-ID: <20379368-dffd-4b96-8f6f-68e94259267d@siemens.com> Date: Wed, 21 Oct 2026 14:21:24 +0200 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 2/2] rootfs-add-files: use privileged execution helper for rootless builds To: "Moessbauer, Felix (FT RPD CPC OES-DE)" , "isar-users@googlegroups.com" Cc: "Gylstorff, Quirin (FT RPD CPC OES-DE)" References: <20261021112532.3824701-1-clara.kowalsky@siemens.com> <20261021112532.3824701-2-clara.kowalsky@siemens.com> Content-Language: en-US From: "'Clara Kowalsky' via isar-users" In-Reply-To: Content-Type: text/plain; charset="UTF-8"; format=flowed X-ClientProxiedBy: FR2P281CA0158.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:99::11) To AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:740::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM0PR10MB9645:EE_|GV2PR10MB6164:EE_ X-MS-Office365-Filtering-Correlation-Id: c33d047d-c2ee-44d4-b713-08df2f6dd3d1 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|1800799024|376014|23010399003|4022899009|56012099006|4143699003|11063799006|261009223027099003|10067099003|18002099003|22082099003|55112099003|6133799003|4133799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(23010399003)(4022899009)(56012099006)(4143699003)(11063799006)(261009223027099003)(10067099003)(18002099003)(22082099003)(55112099003)(6133799003)(4133799003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?V1dzU2k5eVN2ZlVRNmhETFk5V0JjWjZ1R2JsWFdGNWtvdEtnZ2pzYWlyRkd3?= =?utf-8?B?WEFGQzVFL0hVZjlocUZEVnhyeEwyL1dCejZVcHVteitxeXRBQzdjaG1RQ0dz?= =?utf-8?B?YUQ5UEVoZ0M4a2pzTXJhYktmWTJuKzl3WlBUYlBuTXNaUHE4dTQwcUhmWGRH?= =?utf-8?B?MEFvYXZrc3gwTkIwT1p2VlJzTEhzOVBFNExPUXgxQ1pEaU41NUZnQkZOUEJQ?= =?utf-8?B?d3RoWGpXcFhUaGtjdFZhZFczS3l6YVY0bjNqQUo5TytQSXZka2xmT2NKV0Q0?= =?utf-8?B?SDJkM0lXSzBvY1dkRFk1ZkdrTEYrdXRJT2hYRlUvT29pVDlUV0lleS83Vmti?= =?utf-8?B?Y2FxUFVkV09laUtFL1YwQXcycXFZQkZ5b1BIYlB3UGxONXQvb2oxUDArM0N6?= =?utf-8?B?SnNua3BGdjJ6d21DRTZBdzFwQXRjeHpJU2ZXK05TTEVBMXVSbmRRangvVVQ1?= =?utf-8?B?Z0VLK29ab2VSN0dHUmZNOVJ0RnhpTkRWZWdOWU05aVp5L3dTUC9yWEUxSVo5?= =?utf-8?B?dUk3SUtZSTFuOVl2NEY2L0FJRkZ5Q3IyWkRkejZBbjFZdmxiYUJpKzZ0NUJh?= =?utf-8?B?QnhoQ1JJenlEa3hZa0tvOXZHUWpUaktvRnc1RVZXMmx2NTVjaE8ra3BHRE1j?= =?utf-8?B?bnVUVXVrTnZWa1gramxIVlgwcTB0Ukd6dGUyUWpTSGZGdE5qYjd0QTZZak51?= =?utf-8?B?bkF1Y0lPWXoybDFoRGNvUDhZOVZZVjJmRERMbFllVHFUNTlvK2VpKzFxNVRN?= =?utf-8?B?Y2NSa0pDMHFKd29KTXZSOUJwS1lzNUljcDdDbDBCNCszRVJJMHRZcHdhSFE1?= =?utf-8?B?bHBnaUM2Qi9YMzZicHBSQ25GRFh4NkhwdHB2eWtqc2FkR24vQkZEQ2RWcWRD?= =?utf-8?B?Y09XM3J5WEtmWGlabVQ4VnBVcmc2a2pScFN1bjJIT1dPTFVaN1VnUGFBTnNq?= =?utf-8?B?d01BYm9xV2FxZCt2akNFTkUxdWFaNE8xZHRPSkQ3MmNRa25UMURmOFVVZ0tD?= =?utf-8?B?RVZiODNld29TVHJtTnkrTVJxVjFTcW5acnc4eUFrMWlkVDJ0VEo5RDVQUit4?= =?utf-8?B?V2VqZWxTSk1VT0U2ZExrUXZJeGVGSy9hZ2hYaFpJanQrcUZmbWZOc3RORTdP?= =?utf-8?B?cStwa3p3K21CYXh4WVV1WkFUZkh4UzRqdmxTU3VBQjZ3OXdWSlZpZnExUk5R?= =?utf-8?B?WE9pTFpqWFV6aWxkSmkrbHQ1eUlGQnltOTUveGV4YUNXREMvNEloeHRjY2VU?= =?utf-8?B?NGJySUp3L1FlNHp5L0xHUkZielkrZkV0citCWWRUR0JZRlFOUmhMZUJMc1B0?= =?utf-8?B?YmRFS3A4aS9qVjNNUklTNUFKSnpGYVZwVERIdkNjWUNDWllNY3Vyd24rWVpM?= =?utf-8?B?S3FmTG5qUm5wZ3o4WjgwNE8ycnhZOXY4UzJNR0lGVUdoUUw4cmNOWHhpM3Ru?= =?utf-8?B?YXRWTHpsZElQRGF4dTRuTEtwQW4vV1JUb1UwU2tnMTQzTnMyMTNCbFNoQjZZ?= =?utf-8?B?bzB1R21QV2lQbjhQcXpwMzdrVnh1aTUxazI1UCtsZ3A3U1ZhR3ZseDJYa0J0?= =?utf-8?B?N1Z0eW1JcTg0TkZpWmZJbWQzT09wcXBuamNaWFo2VUx3Wm9zNWk5OG0yUzlo?= =?utf-8?B?V2NzZndzR3hHUnhnUHBpN0lFeGk4REppOGtITHB3UGJHTmx5d2VNbmFoNEhw?= =?utf-8?B?Z0M1bGtiV281c3JHaUdxbElzNVJFVlJHMGtNUW4wbEEweVBKZENzcEhOaHVD?= =?utf-8?B?ZTdkUGEwcCt2WUpRRVJtNzFET3BsZ1Q4dnAvTElUVXdnYm1IaitoMEtXYUxN?= =?utf-8?B?NG5PUkFsdlZ2cjFwL1UzclpzOGlLMEYrRlZqaklrY0F3aUR4YmZkZm9pZU1T?= =?utf-8?B?WHNIc09OdkY0dkM1RCs2RmVRSmsrUkM3blpmem44SHRZMU8yekhQalB2Q3R2?= =?utf-8?B?S2dHSWF4TjJSUklNVmRKWEI4TnJaSmxFRUJYMlYzMzQ4TlBFYjNNMkxtRldG?= =?utf-8?B?S2ZLSXUrSUJqYW9JRjlwSzBoNmJqR0RHdWVZWFB0UjdRdWNHaW5GZjRnamlC?= =?utf-8?B?UEVIeEF4ZDlmNW5ITUNvTVpqUFliL2d1MXlPQ2ZuRVJQSWJSaTlZbFR0UTN3?= =?utf-8?B?RlgraDhlVzhONGFyUkNRVVFLaDlFL01KRWZkaFhkWlR5cmtMV1JpUXk3MkMv?= =?utf-8?B?STg0SU9LZ0ViL0lVcXRtWStuSFliMDdha2xRMnJnay9uRFJ3dU1HZkRzK3Bz?= =?utf-8?B?MGZsK01aSGlmb2thYjZ0ZkdsV2NaeGxJUjM2STVCbHBQTU1VZDR5enU1WGNi?= =?utf-8?B?SVB2bUdqQW92LzlFQVpKajVUVFhKTndJYk8vQWdHQWt2NElpcUZ5NjFSZ2cw?= =?utf-8?Q?1ztjswE+jx5Bz4cE=3D?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: c33d047d-c2ee-44d4-b713-08df2f6dd3d1 X-MS-Exchange-CrossTenant-AuthSource: AM0PR10MB9645.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Oct 2026 12:21:26.2830 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: i2MTdSF2PQGYK/Im4X1LR/BG8KhYnBLokfElGhxm8z87dYL47kz8dVo3aBDZml9Vh4O/qcw7Z8Z6vffJ01x/2uCRXZc414HoMfupJxj9P7w= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR10MB6164 X-Original-Sender: clara.kowalsky@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=v2HIRl9h; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Clara Kowalsky Reply-To: Clara Kowalsky Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-3.7 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: sXd58ZG5NkH0 On 10/21/26 13:54, Moessbauer, Felix (FT RPD CPC OES-DE) wrote: > On Wed, 2026-10-21 at 13:25 +0200, 'Clara Kowalsky' via isar-users > wrote: >> rootfs_add_files uses host sudo to create directories and files. >> In unshare mode, package installation runs as root in a user namespace, >> where host-root ownership may not map to namespace root. Dpkg can then >> fail to replace a rootfs file with: > > ... and in rootless mode we don't require to have sudo installed at > all. > >> >> Unable to create `.dpkg-new`: Permission denied. >> >> Use RUN_PRIVILEGED_CMD for rootfs operations and disable ownership >> preservation when copying files in unshare mode. > > The question is how to control ownership at all for these files. > The whole rootfs_add_files logic seems to be broken. > > I even vote for just removing it. There can't be many users, given that > nobody noticed that it breaks under rootless. > rootfs-add-files is used by installer-add-rootfs and therefore by isar-image-installer. So it is quite essential. Either we fix this or find a good replacement. BR, Clara >> >> Fixes: 4fedb1ae6f90 ("add support for fully rootless builds") >> Signed-off-by: Clara Kowalsky >> --- >> meta/classes-recipe/rootfs-add-files.bbclass | 15 +++++++++++---- >> 1 file changed, 11 insertions(+), 4 deletions(-) >> >> diff --git a/meta/classes-recipe/rootfs-add-files.bbclass b/meta/classes-recipe/rootfs-add-files.bbclass >> index d33752f3..b21e282b 100644 >> --- a/meta/classes-recipe/rootfs-add-files.bbclass >> +++ b/meta/classes-recipe/rootfs-add-files.bbclass >> @@ -16,6 +16,13 @@ ROOTFS_ADDITIONAL_FILES ??= "" >> >> >> python rootfs_add_files() { >> + import shlex >> + >> + cmd = shlex.split(d.getVar('RUN_PRIVILEGED_CMD')) > > bb.process.run executes the command in a shell if not passed as list. > With that, we don't need to split it. > > Felix > >> + copy_args = ['-a'] >> + if d.getVar('ISAR_CHROOT_MODE') == 'unshare': >> + copy_args.append('--no-preserve=ownership') >> + >> postprocess_additional_files = d.getVar('ROOTFS_ADDITIONAL_FILES').split() >> rootfsdir = d.getVar("ROOTFSDIR") >> >> @@ -24,18 +31,18 @@ python rootfs_add_files() { >> destination = d.getVarFlag(additional_file_entry, "destination") or "" >> source = d.getVarFlag(additional_file_entry, "source") or "" >> if os.path.exists(f"{rootfsdir}/{destination}"): >> - bb.process.run(["/usr/bin/rm", "-f", f"{rootfsdir}/{destination}"]) >> + bb.process.run(cmd + ["/usr/bin/rm", "-f", f"{rootfsdir}/{destination}"]) >> >> dest_dir = os.path.dirname(destination) >> - bb.process.run(["sudo", "-E", "/usr/bin/mkdir", "-p", f"{rootfsdir}/{dest_dir}" ]) >> + bb.process.run(cmd + ["/usr/bin/mkdir", "-p", f"{rootfsdir}/{dest_dir}"]) >> # empty source creates only an empty destination file >> if not source: >> - bb.process.run(["sudo", "-E", "/usr/bin/touch", f"{rootfsdir}/{destination}" ]) >> + bb.process.run(cmd + ["/usr/bin/touch", f"{rootfsdir}/{destination}"]) >> return >> >> if not os.path.exists(f"{source}"): >> bb.error(f"{source} does not exists and cannot be copied to the rootfs!") >> # no recursive copy only single files >> - bb.process.run(["sudo", "-E", "/usr/bin/cp", "-a", f"{source}", f"{rootfsdir}/{destination}" ]) >> + bb.process.run(cmd + ["/usr/bin/cp"] + copy_args + [source, f"{rootfsdir}/{destination}"]) >> } >> ROOTFS_INSTALL_COMMAND += "rootfs_add_files" >> -- >> 2.55.0 >> >> -- >> You received this message because you are subscribed to the Google Groups "isar-users" group. >> To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. >> To view this discussion visit https://groups.google.com/d/msgid/isar-users/20261021112532.3824701-2-clara.kowalsky%40siemens.com. > -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20379368-dffd-4b96-8f6f-68e94259267d%40siemens.com.