Re: [PATCH v2] meta/classes: generate bill of material from image

[Claudius Heine <claudius.heine.ext@siemens.com>]

On 07/08/2019 10.08, Gernot Hillier wrote:
> 
> 
> Am 07.08.19 um 10:01 schrieb Claudius Heine:
>> Hi Gernot,
>>
>> On 07/08/2019 09.56, [ext] Gernot Hillier wrote:
>>> Hi!
>>>
>>> Am 07.08.19 um 09:52 schrieb Quirin Gylstorff:
>>>>
>>>>
>>>> On 8/6/19 3:55 PM, Q. Gylstorff wrote:
>>>>> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
>>>>>
>>>>> To create products it is necessary to have a list
>>>>> of used packages for clearance and to security monitoring.
>>>>> To get a simple list of packages use dpkg-query and generate
>>>>> a list with the following pattern:
>>>>>
>>> [...]
>>>> I am thinking about adding json as alternative output format. The yocto 
>>>
>>> Why? Is this some established standard somewhere else?
>>
>> I don't know any standard format for manifest files? Do you? I 
>> suggested JSON because its very easy machine readable and expandable 
>> without breaking other tools.
> 
> Well, if there's no established standard, I'd prefer to go with 
> something which is easy to consume in shell scripts.
> 
> If we don't have clear advantages for JSON, I prefer

Well IMO, we do have a clear advantage being JSON is sort of a standard 
format and this is not. But we could go with CSV perhaps?

> 
> cut -d "|" -f 1
> 
> over
> 
> python3 -c "import sys, json; print(json.load(sys.stdin)['name'])"
> 
> - or adding another dependency to "jq".

We don't need an additional dependency in isar. But if you like to use 
json in a shell script, jq might be the way to go.

Otherwise we could also use the debian format and print out the 
installed packages in deb822 [1] format.

regards,
Claudius

[1] http://man7.org/linux/man-pages/man5/deb822.5.html

-- 
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de