From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 08 Jun 2026 11:31:47 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-lj1-f186.google.com (mail-lj1-f186.google.com [209.85.208.186]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 6589VkEb030726 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 8 Jun 2026 11:31:46 +0200 Received: by mail-lj1-f186.google.com with SMTP id 38308e7fff4ca-396a4ef1af2sf19006941fa.2 for ; Mon, 08 Jun 2026 02:31:46 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1780911101; cv=pass; d=google.com; s=arc-20240605; b=LzcFdg9sQu+39Z+JT678CkOMhGxlV+ckQ+3s9QTvtvFHXOXFQfN3i3vIiNS4+Covig /Fj1kJCDTxNu3Q5sCr5VEy2s0+xQhQLBaCiMdBBf/mBpnMx+uJlp6LWk24w8L79cnfRY shV2dyKnYlKaf9KHth9ilDnD4n01uI8olPhPWz1UylbEUVPkEVkDhHKW2E5OqgBDimsv iAk8n9XrTP6YuvWaITFXjAnGHwHbbLk5jtOrGuxNPTiycLyezGVw9F31YE/whnABgBeD K3FGnARdppuQhNxslyEMxW9IpO+RVqq/p40Z6mVsp4ma24CKKu3f1cvx99UZiP2xCLCE Q/LQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=6BKKeX/t7evhKAn6Xz991JZkxiROk8QyvM9bpfW7BLs=; fh=adF5MJS/z2sDxpyw/QuopAtTS2MSCnJxtuIHFFYF85Y=; b=KkpLbvKUd3mPUVa9B7ZlYZC3FnuMKRYF/v8eqzfr4H6Cu9a3r7+HHjMk8Pns9U4AEX scojG/xeX9oKIviC5fTN1CsElAudzImk0lxEnyHrU2ggpQUhGrmIaA5QDfKFbutHhYGU PoP5GZpsBSeWZa9UJOBnEhMSIglOyVpcMavWG1TfqOfz0hFvy5uHaAgfz7nNWspg8hU7 FNVluOrU0FDbxxYleyoucOSxh3uppdUmmQN4b7g20BCjLm9kkKL1KgzjJu/C9v5b1y/o bpywOaZny0/dbgte4hmnrTfg36/wvuSqznWAF/8D5WrykT3tNeesuwSgb6zCyaw/lwEF vvAQ==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QoVow0mn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1780911100; x=1781515900; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=6BKKeX/t7evhKAn6Xz991JZkxiROk8QyvM9bpfW7BLs=; b=Z6dgiGlgJIeZttBuLnF770gDViR556zS0X6n4hBjPfQvKyvOPhfotKqSbKl3im0qEl Mj4/W1yMiAETnSNVCrjZR4xxmILApXmIZ0HkEet88MJRb139KKch8ta31TgDX8RFO1wd uAaPvAsk6Bdwn+2n4RNv6cPCsoSgnu9pFPZJ8NB2oTFbiq9BTLxbUXRwF8DS4aa4w7/2 IpES+9fUZ9AeNGKNMXz/Eme+TPwbLkrWryTl13iFtCK2bj2+5Ur0SMm8yJBNAskNG+2K vwIU2zWUzifyjkzIQv2DEJtl2aBaFDiiG5leCzir7e0SnzdChrRB4aOwKyj6wBsIhhE9 o5LA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1780911100; x=1781515900; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=6BKKeX/t7evhKAn6Xz991JZkxiROk8QyvM9bpfW7BLs=; b=FcgS7dP2UtRXW/D0JTSUAq2739M4p6PVCP6R9+c3410cvLgVtjO86H62rsUU6B57yg wFseiFHBhf0iyaK/fjhva1kFrea9bW7XfmQkIrFBjZldqzSWVf81dI/bEUy3ItDVOgh6 QBwqcFaVbiPJgXLtEumk87W17BcwhHWj3iTTWLME95UkArqtPAlZj2+2XW8u9FsoQpMT YL04TAVHzb05MOk5t/hazDVGjzztI/MR1eEdeqHEjpyxmfQoJpCahEOG1YFILsn/JJ7r MeLOcvaga8mRDqww0PgJ7C//77Gdx+GmmC6LCjYgw/AAbP03zGEwV8rlysN2GYlrZCt4 az5A== X-Forwarded-Encrypted: i=3; AFNElJ/QVdTVfoqj/LmT7DSlv3ULlUxZl0+lc9fue5rSifa2GxPXli09KN1lh5u7OM0rmxMrOxqv@ilbers.de X-Gm-Message-State: AOJu0YwrtQbQLrHv73vQjnOskYBvBjotIJqJ88hegnwqGpfpWrsG+IVU l+IF94C60cypG1Vzh41w4E8JW3j9VW68jk2sy2uT1H24HYMNFZNYTzRt X-Received: by 2002:a05:6512:3d12:b0:5a8:64fd:142 with SMTP id 2adb3069b0e04-5aa87b7cbd9mr4138307e87.15.1780911100230; Mon, 08 Jun 2026 02:31:40 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AX0PUUf788S7UARHjqbiXtH6vWB2BM7zVKmwlpy8T4oi/wgYyw==" Received: by 2002:ac2:52b6:0:b0:5a2:8c41:339e with SMTP id 2adb3069b0e04-5aa80b0d717ls1146092e87.2.-pod-prod-09-eu; Mon, 08 Jun 2026 02:31:38 -0700 (PDT) X-Forwarded-Encrypted: i=3; AFNElJ8vuHxal6qU8FbdqcA2iwdAcpgnbYmay1LOPJg6ghI3GkzaZFbOlj2Bm56AE8IHcf3slDNm/EZZs/6P@googlegroups.com X-Received: by 2002:a05:6512:1388:b0:5aa:8823:aebc with SMTP id 2adb3069b0e04-5aa8823af1emr3367939e87.49.1780911097659; Mon, 08 Jun 2026 02:31:37 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1780911097; cv=pass; d=google.com; s=arc-20240605; b=fUa5U3JnAizzTstaFkfhV7GabuqJ9NqJ5AZjqusgCkKq7K4n6Fq4w20aUh9kRtaiMn plZXcaaNHFzBEewM0MtxttVroo1SKBGOzXvpX34b8vlHntsArDjiVtI5jRPIB9Qsy6KJ GeWnqYQKOjV/vKA6be3QcGqwLyLjxVGBVQhCpundwX66THrDjjWJnkqksSKKINFDxqL8 bFopi5SXwPlYEWWLDCOBtSAkVa5Z8hWVboseJGWzAZ85Y+nDy0mrN531dytDlAUiw5nH NAtzCuCtJZWtpheDX2l9Ws6Dx0OY8CduVWdJmZzDJ3liSTeL9v0TJVse0QRsm56Yw4D2 Y2Hg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=DmWCnSE+yc3yCXjB1bGpRyMPM/P6m0ecV8eoZT93T0A=; fh=MJr7USxkRnfDjKLzhF4I/D/VeI63/MdOoAZq+1RyjtQ=; b=DAg8hI7EgRITjfPqgxeNP5wpDreFPTcms4Q7qdeAbtSJXo4fBXEw2gWdJZ/ee+aLiL /Ooc81EtwY2DOkS/AJdJO9CCbaNFaPYhsFYbtdfKnSXFL7MQxE4RdYmqJgVgH7r6FR6Y QbkNCXmHDG/UBw4y10V6GAMHPRFC8uoD2BFW+MzmIM+Lc3OjndcpbUgGcCUUn8cXj/XK 7MlWHkru4eOiVmDaJBd6R5QYtsqMkyB9HRz4ZvhIZ/O+U2SEErG0QgC+Mj8UuqD/sMsP TMSi0khWoYz0GPwgNKijacBqVwlF7AfIwFJitU0v4WTnwfOwfxyh6wpRRgOzPyjoAH8d IicA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QoVow0mn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com. [2a01:111:f403:c201::6]) by gmr-mx.google.com with ESMTPS id 2adb3069b0e04-5aa7b971dafsi450787e87.3.2026.06.08.02.31.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 08 Jun 2026 02:31:37 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) client-ip=2a01:111:f403:c201::6; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Ghhoo9Rnf+ZN2xGBe+FC+oDXqjslHxXBZZHDoenlmwKW9lpmmkLOoLNYjP42pYTEJ+C36h9OVwELKQ1RsDsv4K4Hv5OIRKjEw6SA6loMCJ0DBU+ZolHYUrk4xG/EgiUhfTki9zq3mfZvsffQ5tNrde3eWILZqQHXWr12KdPI9Kuu45AVt216aSkCVmFt3vvkciIlAjRFSsGKN1P8jrHIi0Z2SMTrwKKz9CeCEzBiHV8xEzcdVko2PB8vGUs2hkzwAbE9anGeBRu0t8Y5M/Y/OwZDirU8In2MiVialbdP0oZX9k4O3hrvmdm5kNVpEIJxR+aVhRYfxHXPWbd6q52EzQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=DmWCnSE+yc3yCXjB1bGpRyMPM/P6m0ecV8eoZT93T0A=; b=caWouJdh8ZHgzU5hLO0/jp7kv7PvcPR1EAgRsCwAgRP3wqi5nNH/WNHL9BDZB/pDKMsUyVBHyc2qSwrbiQ7SBcAFAjAisW7XU4pXKmTTg4DvRnejm2z4+HOHepwvvD3Ahi0NiIMTCl8sqyECeNSs3c5JU0iyj2SU4dGmHSiKfwME3g9L6z+bQKL/7+eOwC1Z0E9WP0Hfu1IL73D1v5HTlu+KB8gWX+ZstfF9OOb8SV7LVquCMlN6QZVPGHMSnpIODmqIYC1OCBsoeJ3O9v+LxKaG2RhSWGuhZ+8NutJINfZqiCenbvrSDiDkFi0UNPM9Ykigz7bkOcEl9WXRZlAkAA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS8PR10MB7254.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:619::6) by DU0PR10MB6849.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47c::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.12; Mon, 8 Jun 2026 09:31:33 +0000 Received: from AS8PR10MB7254.EURPRD10.PROD.OUTLOOK.COM ([fe80::c0c1:ae4a:a803:8b8a]) by AS8PR10MB7254.EURPRD10.PROD.OUTLOOK.COM ([fe80::c0c1:ae4a:a803:8b8a%7]) with mapi id 15.21.0092.011; Mon, 8 Jun 2026 09:31:33 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "amikan@ilbers.de" , "isar-users@googlegroups.com" CC: "Gylstorff, Quirin" Subject: Re: [PATCH v4 00/17] add support to build isar unprivileged Thread-Topic: [PATCH v4 00/17] add support to build isar unprivileged Thread-Index: AQHc8bq2g6d0pH3Lo0aTNSz8WQsicbYt9tMAgAZ454A= Date: Mon, 8 Jun 2026 09:31:33 +0000 Message-ID: <364e5b31aade11ec20d1a65da29b6d6684662e42.camel@siemens.com> References: <20260601113505.2898877-1-felix.moessbauer@siemens.com> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-9 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AS8PR10MB7254:EE_|DU0PR10MB6849:EE_ x-ms-office365-filtering-correlation-id: d5bf3960-cbeb-4068-d17c-08dec540baeb x-ld-processed: 38ae3bcd-9579-4fd4-adda-b42e1495d55a,ExtAddr x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|376014|55112099003|11063799006|4143699003|56012099006|38070700021|18002099003|22082099003; x-microsoft-antispam-message-info: OBl9hANHqKfuW/vt26cOH6AdniaJHl33wiubIWNHfYXfh1Pj1ziFsLnthQJF5GhwfjJ1AGyrr4ADF/qf71VpswPz06hNcW9+cLyu0vrL3Qht4l5dLbSFve3rm39vFpSDnHDO5t3dm7fLtL1M5cl8GUIz9sBegwG24n+3IxLo1Wag7MQi+XUbwx5xugAR1z8/TOlOnNxbUzPtXhYIcuoGK/TNTzSMr1dKVM8SAzbvgW8cgHpCYDbWHNVShHG/8n3MnfXjSJg7EOEcKzK9wiDrd7DSs3mHvxHis2V1zm9xUjYXNOJF7haZDYOhbxHZlW6qcC8TZUemqIY+kLziLz4Jc2ckO5+hOqPQdoo8w8FVr32TNUrrzWzfZ+ZaKA+LIx2Ns5H1XB0V4pbEzUuK09c/ZZiqi+I8OF6/Sc+ftQay0oVePNDLtIb0vffYVxf/QkpbwxCpb7Ed4ATgF8vathz+OH73qMDMp1j+A6vJjKpvowHS6X/8ubkzzzJfkXMU7REfV28fILVyd7+r3V9pe7coY6z8uxBh1KG0qBh96GQQbJ50/3lcKskfcaaCYTbjwRgqEHZBF6zpuBoUZWR3SUZ1jd9+8cHl1y7DaRMeZsTAwBw4cu5p/9923hs7Qle2XqFtb+wKyuPU5XkDdgzlOxu/UBdJF+mGYqwY86xOuCdbGkaf/BGlHGw8adbmU5P7D/LLUvJdPCN2LCH2WoQBr8BZHFB1Hhd63VoEZt5s8UsPB1oVtLZ+b4emjtE7IHIww7bT x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS8PR10MB7254.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(55112099003)(11063799006)(4143699003)(56012099006)(38070700021)(18002099003)(22082099003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?T1JWL0hzUG9lNWJTcmdLUnBCRDR1cmg2NVNwbTZkZ2lRZ1JTcFZaUjJDSVVo?= =?utf-8?B?MVpiYXR6VERHQkcyUjQ5dm9PeGRaRDZaV3RsQzIvcS9PKzVZZ0ZDU1M0TEhS?= =?utf-8?B?S01DY1RBWHJjNE1VK2pJblhjL256VDd0TFI0NVB5Yi9YWkJ1eWpNYjc2a2xL?= =?utf-8?B?dWpqOXg5QWtTTTlZcDFoQkkyRHRnMDFjTW9SZ2YwTU5yWis0SEJla1krckR6?= =?utf-8?B?aGcvY2dibG5uNnViWkdzUlU0czkyRnVjSDNXOGhFVGk2bjBtZDVvK0hmZ3hH?= =?utf-8?B?V09LRlJCS01WZjRjMWNISnBhc2tLa0p0ZmY3dlVLWENHSXJmUys4eWtLalBF?= =?utf-8?B?YzhPQXNLbzRvNkMwKzhGREF6SmVkREhjbGJ6WkxMeG9lMmJHdEgzUHJsOVZt?= =?utf-8?B?RUtKMm4wMFZnMGpvZmdnTEljbElNNlVQN1hsdHhEY1FGbXZtb0M1QVdjc1A0?= =?utf-8?B?eWFPVEhQSjU3K1g0NmN3ZDYrQSs3R2t5cFhDUVl6b3lUMXhmNWRUbW9FRDh2?= =?utf-8?B?aHBtOHBuOXRkeTdDS21MNjNzSDhQQ25ZcjlOWDRONEhPNUdtREhuUStkci9U?= =?utf-8?B?blBRV2JEQjNXcE1DOWdxcGJGVVpxTmMwS0FUcEljdGlZSjVLanZpbFQzS0NP?= =?utf-8?B?MjFqckR1V1FNNWUyaFRHanZKTnZKNStUSmhLOUNtcTFvQTF1MVRWNENlL1F0?= =?utf-8?B?VUs1ZEFLRHFveWdkLzlZRGJ0ZDRncG05V3F0LzVTWXNFZmtiZ3NNTjJxbWJo?= =?utf-8?B?SHo4QkZsd0Z3YzUza0M1cTB6WkFnUkNrN3A0RHJqTTcxVjlwN0s5YVVSeG10?= =?utf-8?B?QjI4VjlOczdTNWZ4OE9hNC9vTzZQaVBQWVd1aVhkcm9EakxKT2xoQmo4a3Zx?= =?utf-8?B?QmxDNXR1L2FDL2xaWG9FWmFzRVRzejlYVVk4K1oxZ3FVaVJYVHByMHlhaTlP?= =?utf-8?B?Z20ybmFqelVEQUQzdVZ4ODgrVE5ydWZTNXJqYTZNR09Gd004RmRydlo3eWdy?= =?utf-8?B?RCs2SEhVdyt5Qmg3dnZta3BlR0hyU3BHSWtScUNyL09hSHBnYkpxMXJYT3Ur?= =?utf-8?B?YS9zRmxEVXR6M001czNHK3dSd1VqWXhhWHZOQmpTZ0QxbHk5eURwSXJRbHps?= =?utf-8?B?RjNkSkV1OWpPNEZaYmdTZnhxZVdOWG4zWW94ZU14KzBKbHkrdmVRV0c2VDg0?= =?utf-8?B?YWFpR2ZJd1huU1RhYlFpalpBeTNzWS81OUt3TzZ1eTZNUk9VSmNadExVMmlV?= =?utf-8?B?Wi8ybnVlQlEyQWMwOExGM240R2ZNZWdQSUFybTNodFgwTHhtYWo3TGNsMHZD?= =?utf-8?B?THlZeExqZi9XY0dwNTVKSHB5Y0l2R2lFck1jaDN6bUx4SjZNVzNrL3MxUnE0?= =?utf-8?B?SmJBd1RtMXE2dXJmdVMzUmMzWW1oWTVnNjJidGFmeHowMFRUMzVJUXQxa3Jn?= =?utf-8?B?aWVDQ1Vma3BoOGsraGFKZjV3aGlyYzdSSTZWMlJpSVFrcS9KRjNHZUtXQTg1?= =?utf-8?B?RmZJREpnNlFhdW0zcThpazkzK0EzZTExNlRJZGNOTldrZGJrcUgxcy9RODFh?= =?utf-8?B?bWVhcURiZWdMOFZtVHFRSkExZWdvM1JJcS9VYVRvZGhVcTl6czJuTkZKMWtJ?= =?utf-8?B?SWtsU0FralhDeFdWcXlZVU4rSzFVRFFmNlA1MHVkeTJiRFNlWlZMcmJGOE91?= =?utf-8?B?ckRQZU9xNW1mc21oYTdKb1dKSXdrSUdVdEcxYUNTK0RnU0d2aTE3VkgwZG5j?= =?utf-8?B?ZmJzRDIxYXdxbzRWU1FkT2JQcXdXYVR3TGJmYmgyTjJDS0dXc0hua3lhRndF?= =?utf-8?B?SGY0bVBUS3NmVDhQek8wVVpUZWIvTHd1NXcrZGQ0Qk1aSXJiQkg0NGN1YVU3?= =?utf-8?B?K0VGb1A5ai9OaklUQ0x2RmliUTlocWNvY0V1cDVDSndnc1BGMDRZc1Yvb3ZS?= =?utf-8?B?V29kQVJKaWJab2QycGJSWFc3YnNjTGR4Sm1jZEx2TGNLNW9rQi85V1E1ai9z?= =?utf-8?B?dWVVeWUrZzRGWk1sck9wQ09KOThSMTA5WWtkVDRmN1NETWNucXpYRE9tRDdt?= =?utf-8?B?RDNBU2hiZnBpOTh5LzRWeUhIdUtVM01qemRqSTBhT2dnVWlERVNDTjBQK1FK?= =?utf-8?B?QlNyWkJVSXFBejFmL2FGVmZtNHFIV2ZEMmtRaVhWV2ZEai9uaEg1em93SVF2?= =?utf-8?B?ZU1RaFpINWFocVZJSnpWSE9jSFpwM3dmWXVhTjQ1SlJrMFVFRS9jOVV2R0JI?= =?utf-8?B?a1QvUHpsQ2dDWjBvSE9MeWRmL1NwY3lIU0JMdkxxa29HWHM3VlVQUFYxTUFZ?= =?utf-8?B?cUEybENmVWFGWkRyemtDcDhOZmU5MjR3OWw2V0ZXUEh5b2JRWmFuUT09?= Content-Type: text/plain; charset="UTF-8" Content-ID: <637DEB482118B84DA2A865D40A435511@EURPRD10.PROD.OUTLOOK.COM> MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AS8PR10MB7254.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: d5bf3960-cbeb-4068-d17c-08dec540baeb X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jun 2026 09:31:33.7737 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 47kI3tPh4+KHLpf9BDajHrkqU0q30/ZNq1pmBwWWCjV61LW7oIY7xL1L3Ai0iL0QSySebNFJ8/35KqrFwP988FWnZ1/ZAF0gzoIAJ3O7ufE= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR10MB6849 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QoVow0mn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: tnM96qckpJRp On Thu, 2026-06-04 at 09:41 +0300, Anton Mikanovich wrote: > 01.06.2026 14:34, 'Felix Moessbauer' via isar-users wrote: > > Dear isar-users, > > > > currently isar requires password-less sudo and an environment > > where mounting file systems is possible. This has proven problematic > > for security reasons, both when running in a privileged container or > > locally. > > > > To solve this, we implement fully rootless builds that rely on the > > unshare syscall which allows us to avoid sudo and instead operate in > > temporary kernel namespaces as a user that is just privileged within > > that namespace. This comes with some challenges regarding the handling > > of mounts (they are cleared when leaving the namespace), as well as > > cross namespace deployments (the outer user might not be able to access > > the inner data). For that, we rework the handling of mounts and artifact > > passing to make it compatible with both chroot modes (schroot and > > unshare). > > > > Note, that this series can be tested on a custom kas-container build > > provided in [1]. Hints how to migrate downstream layers are provided > > in the API changelog. > Hello Felix, > > This patchset version just have passed both fast and full CI. Thanks for testing this. I propose to merge it soon (ish) to ensure all future patches already use the run_privileged wrappers. This also allows downstream layers (like isar-cip-core) to adjust to the wrappers and offer more broad testing. The corresponding kas patches also landed in kas:next. CC Quirin Felix -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/364e5b31aade11ec20d1a65da29b6d6684662e42.camel%40siemens.com.