From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 17 Jun 2025 14:58:32 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-pf1-f192.google.com (mail-pf1-f192.google.com [209.85.210.192]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 55HCwUN4030409 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 17 Jun 2025 14:58:31 +0200 Received: by mail-pf1-f192.google.com with SMTP id d2e1a72fcca58-7489ac848f3sf4999550b3a.1 for ; Tue, 17 Jun 2025 05:58:31 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1750165104; cv=pass; d=google.com; s=arc-20240605; b=kHLpC+K5zfIYtrhIeJwl3smfUGj9DeKUHZkKAGx7DQD97sUCIMbZJ2ygo91Fu17DfQ dX0bOokPg2BasdfAWYQwaG+uc45z+YpKxpsiuIBNdTE6jZgkoSxNyWJO7n9aPeuxD7bv QZWlYtzouXSnd202it/QgXnsApx985QohTv7FCFrzYDrtPojb5+rq7xDo/FuBN24vfiV +o6U9ObCKV7UJGQMw+OGe+lOVOXmRyzNO0Usg42OS0KvRzeLN2EKprXRln+w44vprs0O rtq+zX1J47AVOrNun1fNFARQcehyN7jobJq0UUvG/OWNpNgAK2wy4N+QKk2lqtkJROCF yyFQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=vF+TixFqhIln2Xgqv9LOYyYJT/TeBf/HWDibck1pfnc=; fh=alzeha/LHygHSlIA/37+1KmM/O2J4CfvoM+6TFbFUKs=; b=Fw4h8DLC+9X68OybrBmLa75n4J/nfvKBhco4ysgQxUbICar4jI5AWajwiAdG+kr0pF OTSVgG42oadG2yuZo4lEsZ3Qa+1fIF04x4pdFMqUoc2plPrxlpRZi233AunOviMYmi5x dzhFYdZMSzeo+GP0VkGvMS6CBdBH+0Wo3f4AvzriNnERNAcJodpCoMiio2TzRve02MBc EwyiRLu/JI1TOXNtT3VOQySZ+2otkH0PTzAKEaZ+R7RHQLVXfUhY+HwF/5qAY7Y95tOh roG/hcsK0SUYwhYS/IA09kLDYiL+XAlwnzDuARtoc3Chb3RoRZhxYMf5aZimmVlt0dYw y7XQ==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="NB/TOFMR"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1750165104; x=1750769904; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=vF+TixFqhIln2Xgqv9LOYyYJT/TeBf/HWDibck1pfnc=; b=rRfXIwiQhKBeGSZ1D2ReFDqQXoqy7ymNkS/buIaLCc+HeVmvOi/vcn1ADrTmOAr+0V wykfrhA6/HYEeY8UoaptyACtGMEz3GMTJ/x7VtQm7iaE/YtZuEKl/6nyi+oNuMKMfiG9 7pR6IbGcIyqHUw2ozLRL6AmLQB//B3Qr8BrNb0CAwiuk/6LlGUcYidFSJ8PcW4maNKPx 6OCjmEFDW9yj/sqLAsV4KugB5E4DvsZyponcjXshfq8J38+5g9R+tC0DlOAtiy+63emS fJRS7UPmeiQzxpjA7j8LVSrOd1mRKsPpA1sI+mgyAlKlDnpYBjZTnStUuDS1Ywhga5wk Tr8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750165104; x=1750769904; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:x-beenthere:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=vF+TixFqhIln2Xgqv9LOYyYJT/TeBf/HWDibck1pfnc=; b=RlW9EMF9tiA2be7zMtfMAg57vkPzQ661Gmci8Il14cQRzWhsJnBsRH7F7X6o10ZiWW 10C0TaUBc0Dpn/8/gz64H4FHhjUHW11+OwjGztor5fTuDj99vi7brwKhpTgbgDmh0TYu aXszpkSgI8ExNclcpsL4/cwB7nL6b1+Q4758sExQU+t8H5kbKtWK9ICwz1HIvw/oCisD UdX2Iujgm8Xr7gQBFYQDocxpHeWGXsQ23u/68VxkRR99Y/uAWeEQvqbKKlKgdtiyc+EE XMkCwJcoe4u2q5Lgu/64SaExcdh2UmVscqSY0eTx+5oMQ0ZucHWoG4fTIAu3CVrOePr3 ZnUA== X-Forwarded-Encrypted: i=3; AJvYcCWTbTr3idhFBAq0ooMrX3U/nMTGQezkw0ovGLT/yyR0DTacj95HKzDwAz+5UYdZuwU7Qosj@ilbers.de X-Gm-Message-State: AOJu0YwWOsn0zYOJVjvz8OXn1boNIP+aLVHtza9BhBGU/NvIFywKXcWD A2clxvPrmTqhr1hXwZNvy9sRTwn0279oiowUUucYi52CYYIZKlbDqfdK X-Google-Smtp-Source: AGHT+IGfi0sgvCJ7StRZTHwO4styqT0nMMzqjEv5iaiXmmnUFO8y9URGI7X0eyT4G+wMG87CqJRW7g== X-Received: by 2002:a05:6a00:893:b0:748:2ac2:f8c3 with SMTP id d2e1a72fcca58-7489cffb9ddmr21184373b3a.24.1750165104008; Tue, 17 Jun 2025 05:58:24 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZdjb/TdaBqeDF/TtZVCyRpi9tYyMZ5HYZw6S9Cv+6G+2Q== Received: by 2002:a05:6a00:8c1:b0:742:8b2f:6e98 with SMTP id d2e1a72fcca58-7487bf0d55fls6325240b3a.0.-pod-prod-08-us; Tue, 17 Jun 2025 05:58:22 -0700 (PDT) X-Received: by 2002:a05:6a00:f8b:b0:742:da7c:3f30 with SMTP id d2e1a72fcca58-7489cfde786mr18712077b3a.19.1750165102562; Tue, 17 Jun 2025 05:58:22 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1750165102; cv=pass; d=google.com; s=arc-20240605; b=WZiBR7Rq3iqJ/xDe8G7rxWQr9bhut4MDPoFc4+RC3Ch7PXLMMl5GiXFK794J96rkAS I+DcO3/Ew3ITLlQHEz/izzS47Kct18cc44u+7T+E04yk/4pZ6gQJYwcA7Hivw4k+ERy6 GuzuB+Xs31dGfz05eV6Qgqwo10jK+cd9m0CYX7kDEnL27Q9GVnFiCg7nycB1rH2d4jy6 eXR0h4B3qoxJwpfj6epqizb6w0d0YUOrMHbySlWrKyzObrtwySZl5R5n8/0pIyC/eG82 qyM/K1DIL07LYLS0R8BugYRdvKSvKG53wS2YVPaBldJ8wyNYSOzE4uH7pjzHy7JHjcMU 0pQg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=OCcn+gt/KU7sAG0ZVBmaVhcO7sbtKyUBl2kKnW3uCkE=; fh=/EqrzD8QQvYof3dXcHU57JSEhmdVu7BjmnQRmgti9f0=; b=acR2cGT2bJqcWV83z5v9KOA1EkKH7b9iuct30ScCIxYTKlBsrYb72wxjDgBrK0+pTr 2a6KAd+87vTJ/19zj0Idk5PbzNDFsF+92b//lpQYiyPKmyds7VNDCSVLYxiuow+8xwsM mQv0/8keRXy6odPC2js56hkCPB2j7l/WGhbI3KytY82s1SsQVI65UrgPPb6C3EhFbiaQ fojawy9UqtZK61nzMHCv8JpQTAWDceB53azl+dFe7U1jN6OqY+Zk9R5PZ+s1c8q/srUu fh/WoBZ4LBKx8lMniHKmWHNAuqszzGj9EudV7E05TAA3EO6oPvAeatPOp/cdq6dyZdpQ +JLQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="NB/TOFMR"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id d2e1a72fcca58-74890171eddsi424672b3a.4.2025.06.17.05.58.22 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 17 Jun 2025 05:58:22 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=tHtsqgTKRuwKEd8q+AEaPLQrIIOweQrs1c2uNB7+23LMA5Ky5MkKSj6D5bkDMVYYsoHHDSf8SY4CTE6puY9XfFgvCLmCW2PotU4GbZTc/sy7omIS+sl8qM+2DDKg+0c8MgVbqX4JMjJcT5vUvMc9z6QyZRzFbpCE0l24eUZHIxq/FuAPA/JF+sleY7/T0i5w5HuEiKYTbz1TIKrDd6ifMuO2/bovXNsdnQvdSzVl2ZiyesZmoPDl78WDQsXjJnFjedcJHe13F/LBbG1E0+zLoRGhkvUocKg2D8HX3UNPItq6teDbrp26KQ8kgkOr4JW5MqFpQtKNGWDqIe1NEH8nPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OCcn+gt/KU7sAG0ZVBmaVhcO7sbtKyUBl2kKnW3uCkE=; b=P2crZ4QJR50Cqox894X5IzFxRzDbjijt+/gh/lNfZx2OfrQ9MG2nICYpXDt9kr2nfpCbeoIDv6HBijmwIQ3xjgRZNFo474fJ5tRTzCcPNJS74/rIO3icNu9+IQoh9lqCZXJnoRRbxXl2WPSXkKRVA+D3e32CaObJPtULfp0k4t26h/gI8fC21AUSPGkAY4NIyqQg+6F37T+O+au7U4UIWeFYwOQTmDyo38HgUY2XIO+VUhAJdASe0WMubEvCOBYYeAzgz/u1PRv9pAjPHMXJQk9mklp7AQSATnS8/gVhOQvGRxHNrcjpMVRtRS7nOVBmW9+MGLIAwKwArJBCL8Xtqw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by PAXPR10MB5712.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:248::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8835.25; Tue, 17 Jun 2025 12:58:18 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe%5]) with mapi id 15.20.8835.027; Tue, 17 Jun 2025 12:58:18 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "isar-users@googlegroups.com" , "cedric.hombourger@siemens.com" CC: "Arjunan, Srinu" Subject: Re: [PATCH] rootfs: do not expose /sys/firmware while building root file-systems Thread-Topic: [PATCH] rootfs: do not expose /sys/firmware while building root file-systems Thread-Index: AQHb34RPI956IEE0EUWbv1kFLe9IMLQHT/OA Date: Tue, 17 Jun 2025 12:58:17 +0000 Message-ID: <23351a3bdc42f238a0b8341afd2d3611d5cbca03.camel@siemens.com> References: <20250617123507.2245-1-cedric.hombourger@siemens.com> In-Reply-To: <20250617123507.2245-1-cedric.hombourger@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.1-1 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DU0PR10MB6828:EE_|PAXPR10MB5712:EE_ x-ms-office365-filtering-correlation-id: fe6df60b-9519-4649-b846-08ddad9ea163 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|10070799003|376014|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?MC9ISXJPL0FzUmRuemdMcWVaVHRCUXZwQktvVTByRTNKUEt0OGZtSE8vTmNH?= =?utf-8?B?WEhpTFVmYlBvL09xYVp1TlJ2SjJ3VmM2cTlGdnQzVkJqQ09rTDlwMnJwdzJ3?= =?utf-8?B?TjdKUlZBa0ZhRjFrSWdpWnZKeHRlVUUrR1NjVkVqYVg4VDdrL2Z3MHFpOEJD?= =?utf-8?B?cnREbkZ3UmphdGNjTnc1d3dwY2I1SE1MTGRXQlhaUlhMODFEZXZTdCtDOEQ4?= =?utf-8?B?UDR4a1FNd05IT1NMNHZPcG5VSjl6SWptUGRsWTNNdi9EYmQwMW9sU2hQcXdT?= =?utf-8?B?Q0VyMVptdytvcEg0R1dDU1kwZzh2aU1WRXoxcnlOM2R5Tzl3Zmo4SVBFVTAz?= =?utf-8?B?Z1N0V1cyYUU2NG9sRnp4U24rOGk4VWZ5Z0l5N1lROHV1Zm9Ed0F1RXpFS0pi?= =?utf-8?B?Mmc3WVp3RWY4SmVWcjBQbHhqWVE0eUVHOXRNMmRHRVBwSHZwOG9LdjhzS21J?= =?utf-8?B?Rjh4MGxjUERzU1cxS29PUlkyTThoSlBwaUpJTVk2cWt4REl5YWI1WVpQUVh0?= =?utf-8?B?SWRrYkRLVVJGQmVQM3Q0ZzE1N2phOGc4ZERtaHNaai9OWjlaRklydk50bEQ2?= =?utf-8?B?Tmc3NXc4bkVzdEZZZ0lOSWUzeVlVVG5uK0pXTW14b2ZxaDVDWTVhREx1MWxS?= =?utf-8?B?enhPWGRETFA2VUtIYm0vcGExR0wxWlFSZk4xeFVsZlYyYVlPNGN1UDNRdEg3?= =?utf-8?B?TEZibjh0NzRRQ25sRFVOVHRxVlNncUpURTQ4dWtjQ2JwVWJsMzY5OTdzRUNG?= =?utf-8?B?YWJZMExHYWlyUS9jMnBwNkhlTjd1YjR0US9RVFRKcW9aeTFkQ09tVGFpUVlG?= =?utf-8?B?dk5TZDdtU2RvdExtZnNpRlFYNFJNMmsyeG5PaUFYRk5PSERnYmtCem9xb3Bo?= =?utf-8?B?L1AvWTMvREk5WHU0M3JsbHdlL005QVFoOWJMNnM2d21GTFhvYi9Wa21vM1dU?= =?utf-8?B?a1hjdVRlY29QRzJmMVpjeEZGY0tCbFl0b1dXNWtneFhIdXJHOXR6MjQ1aFF2?= =?utf-8?B?SXVZL2NMZ1E1YXdvdjk2NGdCbTllOHFEKzA3bFp0Mk9nNG9IUzg5RDBRaDBU?= =?utf-8?B?S3p1OUdlWlFHN3c1a3FCdm9WWmswU1ZsTkY2T3hEL3ljRGJqT2hwMGtTRkRB?= =?utf-8?B?ZDNScDQzbUVzNkpaaXRZTS9xWFB1YVlpaWlad3JwZDc1TGtUYmlWUjhiRUpl?= =?utf-8?B?cFpNQWM1MzB5MXhlVFlkSU9INW82VVJSVE5Sa1Z5aHVUTFhxZndFMkVlWmQ0?= =?utf-8?B?UERBTE5BbXZ4U2lFVFl3SGhSTFRVNlZSUjdlS0tLRTRORzhzUitsaXFMTFJ2?= =?utf-8?B?NWlBM0FJdTNwUzJ6cE5TWW9vYkRHMVYvcDN6ekpHSUhZY2x3ekZ2OHQ1aHYy?= =?utf-8?B?ZlU2dVBDYUxJQUZaMUtRaXlKL3FScTVkREZMdy9IR3pQLzRpajBNUEdhR3dK?= =?utf-8?B?UkRCeGFQRzRnOE5vOVJlNWt0c0tuUkJaRlpiQy9IVytYWktENGQ2YWRTRkZU?= =?utf-8?B?SVJOTlhwOUlnYlRNMWNvWFF3cXJIOFZPaDJkeWtEYnhPTmRVcnNab1ExRjVJ?= =?utf-8?B?cHBlUnduWkhhMWk5b1dwS25lYlJMbnNGaGxyTDNEWUJoUnFYQXFlMExhUWZj?= =?utf-8?B?YWhBT0FQS0pmTzYzZzFqVWVGL0hUdnpQcDFNc0VZU29XTG9FYXRPZk42eVgv?= =?utf-8?B?QWJjNXBnT3Y0VnByQmZKb2hPRHhQaXE2MTZScFZYbGpXdnh5c21hdmZycUla?= =?utf-8?B?N0t2Qkp5VURkd0F3a0xrMUhxQjJ4YVQwYWJta0o1UUd3c1FSbWorUXA5d0VS?= =?utf-8?B?ZmZrMGZpTGlmRm0zak4xUGdzNHUrSmNsbmZDeUFNcFJveWFXTnlLeVg0NUFz?= =?utf-8?B?RXVRWmM4T0tWeVBLOXl0TWpMeTdleTA2VmtucmFEbVdKUXE0VlArSlp3L1hP?= =?utf-8?B?Qk5JVEhyaVRFVjZoR0pMc1phVG1qQ2pLZnVhZ2lLSE1aNWxiU1BLT3ZtM1c5?= =?utf-8?B?UXVlR3ArMWp3PT0=?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(10070799003)(376014)(38070700018);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?eDdsWmFaUGdaZGMvVFhzejRIWEhqbUNIb1piaWRnSXRzbk5mZ2RPQmJYbENU?= =?utf-8?B?enljZndmMnBBUkpWQU56WE1GQVZLcDdDanp4a0REd05nbm1YcVh5OE14YkRa?= =?utf-8?B?OGgxa1Q0QURYZWVDNzR6Wk9FZHIxNTlwdFY1UHpkMGRneFdtbzF2cDU4QVpu?= =?utf-8?B?bkRDSTVlNldqcFNHeHhCUEtIWTRRRHppckE3VmMyZlZrVHgzekFUaTJyQ3Fl?= =?utf-8?B?V1dkUDZXcTJPd21kczA4b0hNejVTZytmRDk0bnJOVGxIdkNtQlFCbHJuRjlC?= =?utf-8?B?YWI4U0NEVkVKcmllaEN1R2gyU05QUXQ3dXpxRDZkZUNRcXptKzdsYjFMRzhk?= =?utf-8?B?U2g0SktwSnRoUkNaTzdtL0NTeWU0YzIrdklVTnRoYk1JZWgyQjQ4S2QwSDBV?= =?utf-8?B?WmlRcjdPTkJKeTZjTHhJNnN4aGdoczlXVzBZRGlUVzVFeDR4eXhwZVNJZWQr?= =?utf-8?B?OGF0ZWJ0M3NXZnhGSTUzZ2lWemFMbkh3eDhUaUYrWnZ6cFdFZ3JLaGNDdy9X?= =?utf-8?B?a0hITVNBYVN0NkQ2TU5JMEJTVUJDMGZKSUo2UU5sUm1ITEszT05mY3NjV1BJ?= =?utf-8?B?L21TMTQxTjlhY1crc3FReTQxVFNINnpRRGdPZ0pqWDQyeVBhMy9JTDlDaU10?= =?utf-8?B?VzdTNXVmclRCU0ZGL0VjamwyOENOdTZOS04xOUtkUStSaDFKdHdoK0VzSGxx?= =?utf-8?B?RGNobTRjWDlyQ0t6Z0hObE8rWkx1Qi9Pa2szZlF0ZUNWdE1QTTV2dDE5OVVC?= =?utf-8?B?MndpN1QzSk8zRXhqTURyNmMvTzhacWJVVHdtME1oT0hXUHZ1UmdCb0NXc3BS?= =?utf-8?B?YURzSTAvR2RMOFZQWnE2VzdNZkttM3pMVmhQYmR1bjBmT0ZhUENHZ0ZERzZu?= =?utf-8?B?ajNsNnlpUVpOZFlldVBDTGNHQzRtczIxcEdweVVjY0RCVlJCVEZWaHlOMFdH?= =?utf-8?B?K0RuamM2SFVNZVNlNVRjUExvbjJjWEZoWDhPdU5yUFQwYXhYd2NHRysrUUsv?= =?utf-8?B?NngzK2txQldCTCtnTlVxa2JjQTdRenpRem94WXhIeU12Vjg4TFNtYVQwKzVs?= =?utf-8?B?aWlJdzgzcHA3b1M0TENNTkxtMW5GSnE3eFE5UENZWWlvY3hSNWp1Q2hISitt?= =?utf-8?B?NHRsejJjNjdEYnlhbUF6YSttRWpQdzU0WUlVbVJqNDNUYk9neEZkSlB1b2Yw?= =?utf-8?B?Ykhxb042S29FeklsSDU2SDNwMDhkVFVuVDZsLzk2OGFsUHh6SVhlVm9IM3FT?= =?utf-8?B?eUZnNDVWajZ0N3F0dEI3aWtKbGxFRTR6V01BWVVBd0d1c3VVUEtsQk0vVjcw?= =?utf-8?B?b1dHMmdpN3VyM2N3VkJIUENNNGl4ZWtoMk1JRm9HMDFLKzROMnJPMmxlcWV3?= =?utf-8?B?T1c1T0lnbmwva0ZkZ1hIUE1zYWNkRm5HZWJDWnJrREZ1b3E3SEZMVmkxR2tz?= =?utf-8?B?NGo1cXRJOHQwMlpQdHVrcXFObjJoeG9MdlI0V0Rnam90a01rM01md2pyOFBE?= =?utf-8?B?NkEwV3lva1I3cy9OM01BTXJ2MlAydkFkT2crNVlRM2Z5NkJxbVFpeXNoYllE?= =?utf-8?B?aUxvTHZUL01jTXUvS2xuek1NVVRZb25aMFlzbFYvNS9SYU1IODkvUS8wMDQ3?= =?utf-8?B?blBiSENDV29OMTNacEZncHEvRWlYb25xbmt0MmlqQXdIVGM2SHptVnhGTDgw?= =?utf-8?B?ZEFURmhuNmUvSkQxN0s2OWhINUNRTFFlNjk0MFAxclJyMlRUV2gvSWxLeldn?= =?utf-8?B?OVZUWjNtZFhzK2FMK0d5Y3NiM3MvMkNQNmhxbGZuS21EK09qMk1iZ0tqS1dt?= =?utf-8?B?ZldFdUJyRFBCRFBjMTRKeTlBVkU5MG41K3VubThUM1E5ZU4wU0QyNlNPQ25r?= =?utf-8?B?T2QxalpqQ1pHdmlEV3dPZFFNVU1SNXE1YU95bTNZK2syZHBuc3lFNnc2WTNI?= =?utf-8?B?T2JCdGNoc3J3S05TYnFyaEMvNXE1M2Jwb2FMOEJOQjYveFJtUDhiOUxjdXF2?= =?utf-8?B?bGtpVmhHSnNwN284TVpWdkNjM2FzNjByd0FoQkZZN2FSa3FOdVpoblJRZFZu?= =?utf-8?B?T292Z2FKTjNUVDhER2Vjbjd1V0hIc3lFS0tEUzN2T1NsT2FaelV6VUNVR29r?= =?utf-8?B?QzFtb2hzdDhEVUpBUUloc0dVWGJsc2VLWjR0dnVWWUs2OS9OaDdGSWtFTmp4?= =?utf-8?B?aUJLKzIwSXlwMjdJT3l3VDNQcnU1VHkvNUY4NlVmMmFqZWFqRk11NFNEZkVq?= =?utf-8?B?SzhCN0hsdkxqRUFFTEVwSTNsMU9RPT0=?= Content-Type: text/plain; charset="UTF-8" Content-ID: <80DC75CC56304245955342B7E0B2D9AD@EURPRD10.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: fe6df60b-9519-4649-b846-08ddad9ea163 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jun 2025 12:58:17.9957 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: q9YHfnYjqonk8VI+iipa1XTeY6WYkALb6PtGku7/b7GYrxFwTxylLWzH8MbwJ2kpal+UBo0G+wkMCtPDTSQELgzR5sz4jjhQ4s7rB06muFE= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXPR10MB5712 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="NB/TOFMR"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: 2LX3FUIwCGgg On Tue, 2025-06-17 at 14:35 +0200, 'Cedric Hombourger' via isar-users wrote: > We need /sys while assembling the target root file-system but it > exposes > more than the build really needs. Some maintainer scripts (e.g. > mdmadm) > check /sys/firmware/efi/efivars while configuring themselves. This > would > normally be fine but for Isar builds, any information extracted from > there > is for the host doing the build and not for the target we are > building for. > In addition, packages seeing /sys/firmware/efi will mount efivars > there > and will cause do_rootfs_umount to fail unmounting /sys (because of > that > extra mount). By mounting a (small) tmpfs as /sys/firmware in the > root > file-system, we hide host details from the build; that extra mount > needs > to be removed before we attempt to unmount /sys (but we are in > control). Good catch! Eventually all these mountpoints should be documented as well. >=20 > Signed-off-by: Cedric Hombourger > --- > =C2=A0meta/classes/rootfs.bbclass | 9 +++++++++ > =C2=A01 file changed, 9 insertions(+) >=20 > diff --git a/meta/classes/rootfs.bbclass > b/meta/classes/rootfs.bbclass > index 5f877962..7b7859b9 100644 > --- a/meta/classes/rootfs.bbclass > +++ b/meta/classes/rootfs.bbclass > @@ -48,6 +48,12 @@ rootfs_do_mounts() { > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = mount -o bind,private /sys '${ROOTFSDIR}/sys' > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 mount --make-rslave '${R= OOTFSDIR}/sys' > =C2=A0 > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 # Mount a tmpfs on /sys/firmw= are to avoid host contamination > problems > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 # (maintainer scripts shouldn= 't pull host data from there) > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 if [ -d '${ROOTFSDIR}/sys/fir= mware' ]; then > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 mount= -t tmpfs -o size=3D1m,nosuid,nodev none > '${ROOTFSDIR}/sys/firmware' > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 fi > + Would bubblewrap help in this case? I'm also wondering if we really should bind-mount the devices from the host or better mknod them in the chroot. Anyways, this discussion should not stop the patch from being merged. Felix > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 # Mount isar-apt if the = directory does not exist or if it is > empty > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 # This prevents overwrit= ing something that was copied there > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 if [ ! -e '${ROOTFSDIR}/= isar-apt' ] || \ > @@ -94,6 +100,9 @@ rootfs_do_umounts() { > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 if mountpoint -q '${ROOT= FSDIR}/proc'; then > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = umount '${ROOTFSDIR}/proc' > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 fi > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 if mountpoint -q '${ROOTFSDIR= }/sys/firmware'; then > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 umoun= t '${ROOTFSDIR}/sys/firmware' > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 fi > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 if mountpoint -q '${ROOT= FSDIR}/sys'; then > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = umount '${ROOTFSDIR}/sys' > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 fi > --=20 > 2.39.5 --=20 Siemens AG Linux Expert Center Friedrich-Ludwig-Bauer-Str. 3 85748 Garching, Germany --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 23351a3bdc42f238a0b8341afd2d3611d5cbca03.camel%40siemens.com.