From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 28 Nov 2025 15:32:19 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-il1-f188.google.com (mail-il1-f188.google.com [209.85.166.188]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5ASEWGKL027505 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 28 Nov 2025 15:32:17 +0100 Received: by mail-il1-f188.google.com with SMTP id e9e14a558f8ab-43377f5ae6fsf12798695ab.1 for ; Fri, 28 Nov 2025 06:32:17 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1764340331; cv=pass; d=google.com; s=arc-20240605; b=ZbVhZyCBHMDVJbyOhk3a++3Da7ApO1Wn+oc8Ca6jQIyvKhBmJdvigh2LMMcM3m8r17 SCoN4/+Rbj9WnrYXRrwJIfx0ZQGZYBBlczjxgxLleXaaN2Um+oZBc5vfrGgiPfDmMIhC YA4WKDieZFtp4otv26XQdd+y0y3U2E2lCIaURegnmkCH49o5ZSmwUKcz6MaZl7l5Ha87 uM/BGNkUYh4Y7VUJxLwXxdk2tZtXjmkXlPMOn/CPqiw81IAdo62GpjIlyMd5OJL9wXlK nngyWDVhNVl50u+ZS6nIvABMd8H/Z1MNK/0VaNG1x+SxhjqrA5qbDJ7dgF7c9fXapSld s5Pw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=vjNHRdNq0QYISXi93z3oPgtskUu0qUUPWdnA7LrHZ9Q=; fh=Dz0KU3xV4tq6ccBNiOlWaI1DF+xAtiv4sXhAoSCQMMg=; b=C2DimxJYgZZdz55aaJuCXzPbufCJ/eNV6sX2MFwMlcfgkVXQe9iYTSWhOVFaQCnEMa r9k1CkbAHfXiaK1AYmnOxhpFWhHjTy6wDNyvit4juJ7Zb+cHvBwD3n2HH2lLhNm4jQjB cYwBHaaF5O0UMv0ez0UNBkngEqjWtYDzPEl+wbeWG3gsI2vIDdhZxBo4i+Ex34MiFdM2 b5Zye3N/Adam1e0QoTWFatkh1gr5wUnvWateJ4ugXgt0meVlaH0X9anDEp775NyN3izx mzbFlHwLZHgTK/GWZ4EV+RUtZCb6SGiMLKcmRe28jfDyEdgFCslEuEK/xz8NpfrswgVT DSPw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=T8dQyIg0; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1764340331; x=1764945131; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=vjNHRdNq0QYISXi93z3oPgtskUu0qUUPWdnA7LrHZ9Q=; b=db0emWwcJcDBxI+XfS0HA3rwvSr4BuLkdw9TbHOZUkgg1U/1J0ZnT8SBluPqPgsMWo sP2V/+0x+LQbP0i4gcC8SBuLV4/w6sMPTzV7COFtKEp3n8fvfpDEtz1GvYU63ZgnvAIN Yun0NcDs0NtNT2HbM45lYcT0O4UexpPfFPpblF+HVAatwke4CTpd7gWtjGDI3xkqXZAJ 5Iw0Cq5C0IMZWBEOnzpo82gzyNDvRxJ0Ew4EW5NUmQhEU6roZB5HJJwl7aRx2peEMUad frEG2mW0yAKHjWcB+fo77/iE6vqNst1gmjAjysrCU1TpdbORtjjR5KseG+LGaD/IX3o6 Gi+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764340331; x=1764945131; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:x-beenthere:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=vjNHRdNq0QYISXi93z3oPgtskUu0qUUPWdnA7LrHZ9Q=; b=Yz5p15HUpNf9le0eA5T4rr+rpaztk9ITsTGXRUCCII2NEBGvvomLPgUJxk/2GWupOr 0LUszAdQyE0KDIWpAZVYVJ9oNYVgW3vyOAe487qKAaGxcKl69czgY42hA9QGXWYYrJLU co17GXdp3u4zMbtatK/onNh+xNnzdWKSduTuNyjan24LSuHH3KQkYzbEAYnBehJ2wOUj 7TeXjQKJAIEhsxF75yfbcc04KwBHE4OEwCd3fT6iQplbLDVCKWF7yIubaUtSOPaT64Jm J1nrfc+sgQMUnPmOSfvOqsVkskCNzAadjg8Dmu4OSbdY/CE3+GyAl8+kAC8dn426Coa8 zFaw== X-Forwarded-Encrypted: i=3; AJvYcCXiJPQ+kXQUSubKCwv5J0TKZ/VIQWB6/J8FrNPSkbzK921xkRI91tiBN69Ztoprgagd74uF@ilbers.de X-Gm-Message-State: AOJu0Yxi6Qcs2xqAGOZPA85NEIT8d0vG5rQrjj1U4Syj3cHV576gF93L wB9fEEZfq2Z24rXLnvC1WBpULxJtPX8HjpKyqDaJSWqfR3WdJQ6iN2eE X-Google-Smtp-Source: AGHT+IHUZvb2++7ecaeFwjpGu+W9QSAfPsT6MAjiLYQ5UP0SzDVmOrjKmUrr0IyAOhQ42Eqs82R7CA== X-Received: by 2002:a05:6e02:12ea:b0:434:a86a:f162 with SMTP id e9e14a558f8ab-435b98631camr208290455ab.16.1764340330819; Fri, 28 Nov 2025 06:32:10 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+ZFae4SVPP1Ub9AGKRDts0CYOiGc7Pi/Em4AZ+0Imbzfg==" Received: by 2002:a05:6e02:1a02:b0:433:7ab2:fb7b with SMTP id e9e14a558f8ab-435ed3f1835ls10338625ab.0.-pod-prod-05-us; Fri, 28 Nov 2025 06:32:09 -0800 (PST) X-Received: by 2002:a05:6638:ac0f:b0:5b7:bf63:9c2b with SMTP id 8926c6da1cb9f-5b967a7c4b2mr17214789173.12.1764340329603; Fri, 28 Nov 2025 06:32:09 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1764340329; cv=pass; d=google.com; s=arc-20240605; b=lNLgKGwcinGD1Ql+1f2Srn05PFGs+pDFJTgtA62wBdfUy5XnW3WnYqTnRdxLLjqfyh uybE+muDMGbAoUxPlG5EIvuuA4vyIgzWp0zBly5Njb68zI6rtWPEiDEuEuzzL/C2BAhA b1LwzNiShSxB8t3tBSO1XJS0z+pNjzgymFywZToNm2+aX3QskVEVytDEwX4xi2pd+iES 2HzWhxcDBaMzdoSdmVRJeYtrLEQrNnSjD2n/TDsyQGFRJ6BviZQN7F2a/j6uLfZbi7CP proCWPcp1By/Ap1er6b6hw/bxEzyJloNrV/TEgkE9vezv2tNr/8mBPX7OWqn2bDF8kXZ RS2A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=BF901GfY4WaYiOxDHOQHi8d2VN5tCEM6pznxl/l4Omg=; fh=f47vEJqKj84w4CMbzvlozHlc2bcnyJNI5qT4z3MtCFo=; b=gKbZeIFYHhbewbs6HokhPfUK491Xx97qoqfrdYlN+w4HHpSxg6xdmLHmocDJI794jM cgknwhCoCSLApGvxdhUxdIC5YAniLqTOalKfPzI/8r6mg4nbD1eQWakvE2pB9JfQzpzf AcVnKLUB8DustAMPIDzUSp7HqJdyAVfL8kt5HUyZ6wT5baNz0LMsK8S8TAeSPDdLjuK6 SC7ps7d93ZURjEFGCuU1m9ll/mlYoppm8Cynx4Vtn2lFnRrxtlbYYuC5kxE+GUK7EuDH RnTDH1XpbD6MbGmA+z/sUJv7kBVMj2zi9GRlUdLeKQ9o2At6iSceDOT6k4iiaNaRoE78 jq0g==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=T8dQyIg0; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from PA4PR04CU001.outbound.protection.outlook.com (mail-francecentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c20a::7]) by gmr-mx.google.com with ESMTPS id 8926c6da1cb9f-5b9bc793d5esi95842173.4.2025.11.28.06.32.09 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 28 Nov 2025 06:32:09 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) client-ip=2a01:111:f403:c20a::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=pcC/3YmagJkwuiFqEciG+6yFVvM64tNjcKD9E0TNR3sQW6j7RHsmj+zO7D/GLPpEKro+DleF9Y6BP5JmaPoUZ1c0NyNpLySuG/UxfaVX2u4nrQ2vci1ZnHy4NPvL3pUF1AbxI6mEjLUrMp7y/64iVDw9za7LdOpbE1Ww9axLHvZ38f6X93xgPL0Gx8X1sGWKLeE8Ua4pDSk89rSsd9Kfwm6rFbWnAdscFZmNZuXqGZgMO+KljvVQqpf4cR97sLlF0qRLJAobulPto29IUo8szyDgeeZDPgdG5jMcvtKGs/BacJofWHOMlqN2j9bSw8DNABZEBxUMfRfM8yu7w5rGng== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BF901GfY4WaYiOxDHOQHi8d2VN5tCEM6pznxl/l4Omg=; b=evKHDsqTtmBsYFQ0rgqyNuqRKTI9Umz9M1JyIb/MinLwoHthW2kCMUgUI1ZZNh6qYQ1EALgmlo+leoEccIJLC3SpFktTxMo4JPyl3X9/pPYjIKbnsWUfMxv/+F38khZ46x+srwQn+QDdggZcnlgs3k4CGJFbC0/VbLFvQR0U7UYE7NPzk3SORC2IqxqNZF3u+z9n3w+xqUdHru+J3YU5m1YSpE8Kiv59jQmAP5uEP03YA66s9rzH+W+WDpwjzIG/+qCmwtY7vNmLQVGoI3WBZrTeeQ81IYtc5DqtToacesBPrn9MlblMXkFbN23RbSiGGcnL6L2r+oabG89V6IRfpQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by PRAPR10MB5448.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:29b::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9366.14; Fri, 28 Nov 2025 14:32:06 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe%4]) with mapi id 15.20.9366.012; Fri, 28 Nov 2025 14:32:06 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "isar-users@googlegroups.com" , "wzh@ilbers.de" CC: "Steiger, Christoph" , "quirin.gylstorff@siemens.com" , "cedric.hombourger@siemens.com" , "Kiszka, Jan" Subject: Re: [PATCH v5 00/10] Add SBOM generation with debsbom Thread-Topic: [PATCH v5 00/10] Add SBOM generation with debsbom Thread-Index: AQHcXTgISVpPbtxLgEeSdASzNDz5v7UGm9aAgAGRQ4A= Date: Fri, 28 Nov 2025 14:32:06 +0000 Message-ID: <2b58f5057a9dffdb136c49959a387e7b1f0e5a60.camel@siemens.com> References: <20251124114638.2238090-1-felix.moessbauer@siemens.com> <1e26bd54-623a-48f0-a400-34a454ba4993@ilbers.de> In-Reply-To: <1e26bd54-623a-48f0-a400-34a454ba4993@ilbers.de> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-7 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DU0PR10MB6828:EE_|PRAPR10MB5448:EE_ x-ms-office365-filtering-correlation-id: bdd44d79-b408-4dc0-1825-08de2e8ae81e x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|10070799003|4022899009|38070700021; x-microsoft-antispam-message-info: =?utf-8?B?bFY2RW5MalRPTXgrTjlNaC9wbmxjSzdHdzNkNFBPb08yOEtVQVRoVUQ1SlFi?= =?utf-8?B?c01ZVFZ2aEovQms1UHdXMHRDdnQ2QWFjeUt4emNjQ05WaXdpam9ZVE5uakJS?= =?utf-8?B?OVBCdFdXT0JuRThSWUpSYkNKUzcwUnIzUzUxcG1rV3hHZTdqRDNvTVcvc2VG?= =?utf-8?B?WjRlaGh2NkpOK0prWHRldzdoWFEydnpxams5bUdSajF3N3RURHVYVnQwajFm?= =?utf-8?B?cndyWXFrWUNpRnpVZmI4WW01bkNPVEtta3RIcEZ3MTlqUEE0QlVDazI1UFl4?= =?utf-8?B?d3FaMHptTWVGdmxPbVFPT1NSN2cvbEJBQ3RkZWNrcHVpWFJBWDJSNzROWFBi?= =?utf-8?B?czhmTVA5NkRYaElmSFdiQi9hOTM5bDRXa3BvSnBOZEorSGI5MzUya3NTMkZ0?= =?utf-8?B?RWtLT2xoSHZ3dmtyOUxEbUx4ZVZ4S3VxNTQ1elR4c0kxQjUzOTAvTEpFUG1q?= =?utf-8?B?TEpsWlVqOUVFYU43MmtSTnJPaGZORktjZ0VVdUxvQ0tzdHRJMEJqdHBsN3FM?= =?utf-8?B?MGVtMHRHUmVud2Y5cWZrWkFLcHFHaVlpVHFnTXMzakU5YVRVR2pLUFRDSm02?= =?utf-8?B?aW9YVXh4cHdWSHNlZHhvM1ZDQXFSU2pEaTlaWTlUKzg5QUxNaENUcEVFTVYw?= =?utf-8?B?VlFGTDZYaWZZeE45cGVVcWFSUDRLM1UzSlNxVnRYMEtyRm15UjRDakRRaWtR?= =?utf-8?B?ZDdYbi9uUUIwbVRYUWs1SzhmUFIwaDkzNVB5QkQ1djRMTWVidzlzQ3hlMzdz?= =?utf-8?B?UXd6MitBWkVBK2F5QWRaeDYvVUh1am1nOUZ3aFZMWG9MUHp3WGh3cjNyZlNs?= =?utf-8?B?TXQrYlcyQk5KZ2hsRlQ1eGFFRmc3UWhzYXZoUUJiVTltS283NnJCYmZ5a0Yy?= =?utf-8?B?RWJyS1dkWlVEYmFDT2pyWGx6NzFxV1FPbk5xNnp3S2ZSQy8vbFRnUWRFanBI?= =?utf-8?B?SFNnMnhyT2JjZ2NZSnZtQ0NXUWNFSkF3VVQwSUVBclpLcmgxRzE2dVdrMjlt?= =?utf-8?B?cHRZTU9BdmRnT1RZR1JjTmpGLzVxZkNhZUl4ckdZQkJQVjdVODg4YUlxUVk1?= =?utf-8?B?RnFYV0x0K0NvdTBZZ1pTSXV3aDBWMU5zUHBLTm00YlNXK0Fzalo1dnRxdnlk?= =?utf-8?B?WXpwaUtMM1FDUkhUU2h3cWJwMUpBVWU5ekRHblNoenVNTlRWNWwyWVE0Zkpy?= =?utf-8?B?c1VlTG5vNENORlA1VTFyOU00ZVJ4U2Zxbkx4RWxrMlBIQ1VxLzkvTUxKRU0y?= =?utf-8?B?alpHOGN4V0NKOER5UHdIUWtJS0RrbEs4VkV6QUJmUjlkZTdQZUF0aHAxUUto?= =?utf-8?B?OFIyQ0gyVXVCb0IxRWJDZWVBdnlxUkNvQm9PZ2t0dkpQRjZFRGhoOUhUck84?= =?utf-8?B?Y3NjU1d3bXNWU3Y0cTd1YU5Va0djQVUydXV0QVdEbnZlUmJ6cVhwMjBVRG1u?= =?utf-8?B?RVZRaWVEL1pqa2pCUUZuSTc0ZVRhTFFmVWpyTnVjQXlXMCsySGNCYTFja1U5?= =?utf-8?B?b0U3TS93dEFGSHZjZUhmYmV5MncvSjA3UTZZV1NrRTduclhFdjZYcFU3ZnM0?= =?utf-8?B?RW9lbW43K1AxcHZOVGNDWVhFRnN6TzBRQm9VOEFtb2FhSllLdko2QkRrTUtI?= =?utf-8?B?cDJEdjlQY21UNTdOdHVrV2RJWlhYcElXRllFVUdwZzY0L3NRQitrRmZWWUVR?= =?utf-8?B?Um1lRG1hMU9FYzRFZ1FOUXQrYVhGdjRtNzVCMDBWS1RkczlybVdwalE0WUV6?= =?utf-8?B?WnVrL1IvM0cvaEVmNkZFTHh3dEVpRy9qNFZOZ3FhTWRrS3BXT2dLRUJ1eGZF?= =?utf-8?B?K290NmxNelY3S0hjY3I4Mm5jRURmMFZ0K09RMCszU2w5c0dVTTRYK3VORmVN?= =?utf-8?B?TmdsVVBsNGlLY25VQVNrSnJPN2VXZE9lTU5jSmpGWUR6SmVZbzFyZVA3SktT?= =?utf-8?B?b0czMnNqbXdQeWRzbzFpVU92dGZkSGtBYUdFSWxNYkV2Q0NtQ2NCc28vRDNk?= =?utf-8?B?TC9sb0NPZktBPT0=?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(10070799003)(4022899009)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?R296aEFJQWU3aG0rNzV5TE96ZFREbERRTnZ5LzhrclYzdEJJZFE0ekpudTAv?= =?utf-8?B?QUdpRTBzMnRzbEw0OWxpSmdROHU3VTlER3k0UWpOWkI0RTlRaHA2Q1JMMk50?= =?utf-8?B?TWc3cXljMkkzajlDYUZLTE5CWG5CUUFXaEEwWEE0WHdVTWg2amZtTlRkMVpS?= =?utf-8?B?VFV6clE1L0xweUJyT3ZFdDBOYkV5VzJpT1RoRjZVaHpWbFFpeG4zVCtpSlp5?= =?utf-8?B?dkMwdDg3QUtGbUFpeUxQaUt3a3hLYWNkNXZRd3cvYVVRMU1vM1VEMHNxaWZH?= =?utf-8?B?YVUvUUhaSGt2M1VJNTZwUG9vSW11YVcveVJrRUJMa0pnRGg1VHpTMkVYTnBP?= =?utf-8?B?UnZBNFhNMWVjWTZReXVMOC8vTFJhNTNhaXNFb3JoREFEaEZpS2lKaWNzVkZp?= =?utf-8?B?R3haQUdIbG1aQWtleTlrOFpMVHoxMkcraFdLdDQxOTRkdEtDbFRzVWF0Tmoz?= =?utf-8?B?Q3dzdy9lcmxPbnFJcG05WE1xKzFQSm9ZYldsc2lRZ2ZOMVhvZFRYdWI1cEJl?= =?utf-8?B?YjFIYXZTbkFUVzZ6c3E0U1p2bmtpM1pRMFJsclFVdTJWR1RnVHJ5WjFkSTNY?= =?utf-8?B?NGdpdzF0WXdFZTd5VjRTblp2RnMrOGxDUzhkdVhhRlBHUUhYaEtheWRqU0p2?= =?utf-8?B?cytrU1F1cHE1Rm5HV0Q0dk91OEhDQ0N0T3hQb0JETEY3MTlMVllocVIzcjZX?= =?utf-8?B?SG0zczE0clNObDFvL2kwa3JzMjZLdW5adS9NYnhtOXpERGNFMEJTOGk1bTNZ?= =?utf-8?B?eTdzNWVlaERFd3hiNVJvRkZVSEVoRGgyVTZaVWhhK1QrWDBYQ3V0YTVRL1RF?= =?utf-8?B?WUVjYjlNRjlqZmw2N291OS8wWDVvTDRQcjZRZkZTeG1MSUVqbXh4cFJrYlFM?= =?utf-8?B?aVVZUzZKczlQamNOMzV3alZ1TEt3cnpXZ0NNZG1rUG5Sa01id0NidXJhYytp?= =?utf-8?B?YWpIcVRjSUpzdzZqeEZiNW1FRmhDcVJrbG94U3hua0xXMElLUlpNd3RKWDlq?= =?utf-8?B?T3pqd0JEN1NCTmxyMnROQTlhMUNsRm14ZlBiQXlYSmY0VURqR21iOENWN0w1?= =?utf-8?B?UFhzSjBlVkZUeGl6UWc2bkx1Y1VGUitUb05KYUthdE5JU0JjeUVVc29TbStx?= =?utf-8?B?M0FaM3lXRi90a2xzU0RXdHJGdDZtZVpSR1NUdjJXaUFoRFRZNkpKZVlGN21z?= =?utf-8?B?eURxeUpMQW5rTjhzR1ZhL0RSZlF6ODFoamNRZWIwNXY2cXg4V2x0YnhQcUtR?= =?utf-8?B?RUpVaG5ETUt5ankxVVBTcjFUSStjUVdPRVpaWlRpNFlIUkxpUWRDa2FaekJO?= =?utf-8?B?SWRwRTh6VXUzZGUvYndpRnN5QUNiN21rc3h3Vk5FN3Y1eTRQV0VTZmN6N3pV?= =?utf-8?B?dmNweDc2ZkdjNUlwdmJKVHpmYjIzT1N5UmNmYmNHd0EwNVJSbWN1ajQxODBI?= =?utf-8?B?ZnYvQXlXZW5KWEhkcVVwQ0cwdEc2MnMvTDFPK0RNKzZzOHlWa3NWSVBEbGw2?= =?utf-8?B?QzRpZ0IwQTRpRzQ2QUZnZDRrWjZWNm1ZMVpMVDJBdUtEMUs5cnVtT0djNkVy?= =?utf-8?B?aTZMMjFRNERPNmUyaEhrYXR5WXJmNTc4T0F0RUpCNzZlQ25sbzdpZDdHRllL?= =?utf-8?B?QTVxSWxCUm5QeXdkYldmaDZvVzQzYWtYblBQdzI5N1VNK3ZjNVZjeHNSSE9H?= =?utf-8?B?RkhFN0Z0UFpaN1B0YWtydW5IRTQ3a1pTaWV2WjgxdGM1azZDZW5wVTBUV216?= =?utf-8?B?U0Z3anZzYk1rWHJKbFNKZWtMOVhkVVlxTkJKRk9IbmJ2c1BwUG0zVSttZFhQ?= =?utf-8?B?a2l6aFhzZEpIZmdleC9Od0pVcWJnemtiNWRFZzdxYk03R0IrSXUyVWI3blZz?= =?utf-8?B?SWJNenMvUGEwK3h3MDRtQ3JVWUNyTmY1VU1zRmZCZXVMcFB3dElCTExWS1ZC?= =?utf-8?B?ejJxMmdRWkU5dlZEaVNYbWt4U2pLaCtwMTRBVmQ5RFNRYUwxL011bjhraFB6?= =?utf-8?B?dTRnTFNzQ0g4YldZc0RVcHQ4Y2V4N09OV1g1QmdtdU5LWWVlNFdrMXZYUDhK?= =?utf-8?B?UXprMFVSV3VQaEtvRDIzWGI1eHZGN1BBMGxkVDNyOUFNemVVRDE4RlVGaFRS?= =?utf-8?B?cjg4T2pZODE1S254dm82T2R3SkxqVVM1K3I4TWN4SFB6UGpjZjBsY0NIb2JP?= =?utf-8?B?TjU0b3IwQi85SjBuTlFzcm9kenQyblhqT3RhWVRkR2FSSERHUHMyNW1ZYTRM?= =?utf-8?B?OURvK3BRbFMvQlVFak95UHVuR1dBPT0=?= Content-Type: text/plain; charset="UTF-8" Content-ID: <3E53AB6090F31F4D8FD38EE4E5220A4A@EURPRD10.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: bdd44d79-b408-4dc0-1825-08de2e8ae81e X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Nov 2025 14:32:06.7676 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: /E7bkpIxEpm/5L37hkpVtjB0FBmfAvB8vRcu3XURSdEpswsreFbv8GKPJ7+v/JqEnQU3vwbrUGQciPO8KhvYGvWiduz3UEUPWb5hFVX/RoA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PRAPR10MB5448 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=T8dQyIg0; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: guYs5z8+4hAP On Thu, 2025-11-27 at 15:35 +0100, Zhihang Wei wrote: > Hi, > A CI failure occured in full test suite: > citest.py:CustomizationsTest.test_single_customization >=20 > Log follows: > builder@13751127e9ed:/work/testsuite$ avocado run=20 > citest.py:CustomizationsTest.test_single_customization > JOB ID=C2=A0 =C2=A0 =C2=A0: 5a0c694b516485d29feccb614eb23dddb0b667af > JOB LOG=C2=A0 =C2=A0 :=20 > /tmp/tmpo3rzdofv/avocado/job-results/job-2025-11-27T10.47-5a0c694/job.log > =C2=A0(1/1) citest.py:CustomizationsTest.test_single_customization: STAR= TED > ERROR: mc:qemuamd64-bullseye:isar-image-ci-1.0-r0 do_image_tar:=20 > ExecutionError('/work/build/tmp/work/debian-bullseye-amd64/isar-image-ci-= qemuamd64/1.0-r0/temp/run.do_image_tar.8314',=20 > 1, None, None) > ERROR: Logfile of failure stored in:=20 > /work/build/tmp/work/debian-bullseye-amd64/isar-image-ci-qemuamd64/1.0-r0= /temp/log.do_image_tar.8314 > ERROR: Task=20 > (mc:qemuamd64-bullseye:/work/meta-test/recipes-core/images/isar-image-ci.= bb:do_image_tar)=20 > failed with exit code '1' > ERROR: mc:qemuamd64-bullseye:isar-image-ci-1.0-r0 do_image_cpio:=20 > ExecutionError('/work/build/tmp/work/debian-bullseye-amd64/isar-image-ci-= qemuamd64/1.0-r0/temp/run.do_image_cpio.8315',=20 > 1, None, None) > ERROR: Logfile of failure stored in:=20 > /work/build/tmp/work/debian-bullseye-amd64/isar-image-ci-qemuamd64/1.0-r0= /temp/log.do_image_cpio.8315 > ERROR: Task=20 > (mc:qemuamd64-bullseye:/work/meta-test/recipes-core/images/isar-image-ci.= bb:do_image_cpio)=20 > failed with exit code '1' > ERROR: mc:qemuamd64-bullseye:isar-image-ci-1.0-r0 do_image_wic:=20 > ExecutionError('/work/build/tmp/work/debian-bullseye-amd64/isar-image-ci-= qemuamd64/1.0-r0/temp/run.do_image_wic.8316',=20 > 1, None, None) > ERROR: Logfile of failure stored in:=20 > /work/build/tmp/work/debian-bullseye-amd64/isar-image-ci-qemuamd64/1.0-r0= /temp/log.do_image_wic.8316 >=20 > In all of these three failed tasks, error log includes: > dpkg-query: no packages found matching grub-efi-amd64-bin >=20 >=20 > To redo the test using avocado: > 1. Have a clean clone of isar, checkout to branch next and apply your=20 > patches: > $ git clone -b next https://github.com/ilbers/isar.git > $ cd isar > $ git am /path-to/0001-my-contribution-to-isar.patch > 2. Run kas shell, setup CI prerequisites (avocado, qemu) and cleanup: > $ ./kas/kas-container shell kas/isar.yaml --command \ > =C2=A0 =C2=A0 "rm -rf /work/build/conf && /work/scripts/ci_setup.sh" > 4.Run the failed test in fast: > $ cd /work/testsuite > $ avocado run citest.py:CustomizationsTest.test_single_customization$ Hi, I was scratching my head how this could fail, but well ... it is a badly written test: In isar-image-ci [1], we do a ton conditional IMAGER_INSTALL:append and IMAGER_INSTALL:remove, which are not aligned at all with the machine configs. Please add the following line to that section: IMAGER_BOM:remove:qemuamd64:debian-bullseye ?=3D "${GRUB_BOOTLOADER_INSTALL}" This then should be added to p8. If you confirm that this works, I can also send out a new version of the sbom series. Anyways, I would be really happy if we could get rid of machine manipulation parts in an image recipe. This is IMHO an anti-pattern. [1]https://github.com/ilbers/isar/blob/master/meta-test/recipes-core/images= /isar-image-ci.bb#L25 Felix >=20 > Zhihang >=20 > On 11/24/25 12:46, 'Felix Moessbauer' via isar-users wrote: > > This patchset adds proper SBOM generation in the two standard formats > > SPDX and CycloneDX during the rootfs generation process. > >=20 > > The generation is itself is handled by a SBOM generator `debsbom` [1] > > which is developed as an open source project at Siemens. It is still > > early in development, but it has enough features for what we require > > in isar. The required dependencies which are not yet available as > > Debian packages were minimally packaged directly in isar too. > >=20 > > This is a followup of the previous RFC [2]. Since then the series has > > changed a lot. The SBOM generation was moved from a simple OE lib to > > `debsbom`. This also meant the introduction of a separate chroot was > > necessary. The SBOM generation process was also moved from the image > > step to the rootfs step, along with a lot of minor changes and > > improvements. > >=20 > > [1] https://github.com/siemens/debsbom > > [2] https://groups.google.com/g/isar-users/c/8L-CF4BJY0I/m/p0N3o_zfAAAJ > >=20 > > Changes since v4: > >=20 > > - rebased onto next > > - fix race condition on creation of ${DEPLOY_DIR_SBOM} (aka ${DEPLOY_DI= R_IMAGE}) > >=20 > > Changes since v3: > >=20 > > - fix issue on external bullseye initramfs (we now disable sbom generat= ion > > on all unsupported distros rootfs instances) > > - update debsbom to v0.4.0 > > - rebased onto next > >=20 > > Changes since v2: > >=20 > > - fix issues when HOST_ARCH !=3D DISTRO_ARCH on derived distributions > > - update debsbom to v0.3.0, which fixes the Origin: bug reported in v2 > > - generate SBOM for imager as well and create merged sbom of .wic image > > - resend imager manifest + wic manifest patches to reduce conflicts > >=20 > > Note, that the patches p1-p5 are most important as they add basic SBOM > > support. The remaining patches address the imager + .wic bom part, > > which also can be merged later on. > >=20 > > Changes since v1: > >=20 > > - remove tarball > > - refactor packaging (auto-derive python dependencies) > > - only build missing packages (varies on bookworm, trixie, noble) > > - add ubuntu support > > - only generate sboms for supported distributions (bookworm/jammy and > > onwards) > > - update debsbom (includes bug fixes and more information for source > > packages) > >=20 > > Christoph Steiger (3): > > meta: package python libraries for SBOM generation > > meta: package python3-debsbom > > meta: add SBOM generation with debsbom > >=20 > > Felix Moessbauer (7): > > refactor: move get_rootfs_distro from sdk into rootfs > > override distro vendor in SBOM on Ubuntu > > add support to add imager dependencies to BOM > > wic: create uniform manifest describing all image components > > qemuamd64: add IMAGER_BOM entries > > imager: create SBOM of IMAGER_BOM packages > > wic: create uniform SBOM describing all image components > >=20 > > doc/user_manual.md | 1 + > > meta-isar/conf/distro/ubuntu-common.inc | 2 + > > meta-isar/conf/machine/qemuamd64.conf | 1 + > > meta/classes/image-tools-extension.bbclass | 29 +++++++++ > > meta/classes/image.bbclass | 7 ++ > > meta/classes/imagetypes_wic.bbclass | 30 +++++++++ > > meta/classes/initramfs.bbclass | 3 +- > > meta/classes/rootfs.bbclass | 23 ++++++- > > meta/classes/sbom.bbclass | 65 ++++++++++++++++++= + > > meta/classes/sdk.bbclass | 10 +-- > > .../sbom-chroot/sbom-chroot.bb | 30 +++++++++ > > .../python3-beartype/files/rules | 8 +++ > > .../python3-beartype_0.19.0.bb | 29 +++++++++ > > .../files/pybuild.testfiles | 1 + > > .../python3-cyclonedx-lib/files/rules | 8 +++ > > .../python3-cyclonedx-lib_9.1.0.bb | 48 ++++++++++++++ > > ...icense-description-in-pyproject.toml.patch | 28 ++++++++ > > .../python3-debsbom/files/rules | 8 +++ > > .../python3-debsbom/python3-debsbom_0.4.0.bb | 45 +++++++++++++ > > .../python3-packageurl/files/rules | 8 +++ > > .../python3-packageurl_0.16.0.bb | 33 ++++++++++ > > .../python3-py-serializable/files/rules | 8 +++ > > .../python3-py-serializable_2.0.0.bb | 38 +++++++++++ > > .../python3-spdx-tools/files/rules | 25 +++++++ > > .../python3-spdx-tools_0.8.3.bb | 46 +++++++++++++ > > 25 files changed, 523 insertions(+), 11 deletions(-) > > create mode 100644 meta/classes/sbom.bbclass > > create mode 100644 meta/recipes-devtools/sbom-chroot/sbom-chroot.bb > > create mode 100644 meta/recipes-support/python3-beartype/files/rules > > create mode 100644 meta/recipes-support/python3-beartype/python3-bear= type_0.19.0.bb > > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/p= ybuild.testfiles > > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/r= ules > > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/python3= -cyclonedx-lib_9.1.0.bb > > create mode 100644 meta/recipes-support/python3-debsbom/files/0001-Us= e-old-license-description-in-pyproject.toml.patch > > create mode 100644 meta/recipes-support/python3-debsbom/files/rules > > create mode 100644 meta/recipes-support/python3-debsbom/python3-debsb= om_0.4.0.bb > > create mode 100644 meta/recipes-support/python3-packageurl/files/rule= s > > create mode 100644 meta/recipes-support/python3-packageurl/python3-pa= ckageurl_0.16.0.bb > > create mode 100644 meta/recipes-support/python3-py-serializable/files= /rules > > create mode 100644 meta/recipes-support/python3-py-serializable/pytho= n3-py-serializable_2.0.0.bb > > create mode 100644 meta/recipes-support/python3-spdx-tools/files/rule= s > > create mode 100644 meta/recipes-support/python3-spdx-tools/python3-sp= dx-tools_0.8.3.bb > >=20 >=20 > --=20 > You received this message because you are subscribed to the Google Groups= "isar-users" group. > To unsubscribe from this group and stop receiving emails from it, send an= email to isar-users+unsubscribe@googlegroups.com. > To view this discussion visit https://groups.google.com/d/msgid/isar-user= s/1e26bd54-623a-48f0-a400-34a454ba4993%40ilbers.de. --=20 Siemens AG Linux Expert Center Friedrich-Ludwig-Bauer-Str. 3 85748 Garching, Germany --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 2b58f5057a9dffdb136c49959a387e7b1f0e5a60.camel%40siemens.com.