From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6721684426774806528 X-Received: by 2002:adf:d4cc:: with SMTP id w12mr9305785wrk.121.1565164564993; Wed, 07 Aug 2019 00:56:04 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a7b:c8d0:: with SMTP id f16ls2243180wml.3.canary-gmail; Wed, 07 Aug 2019 00:56:04 -0700 (PDT) X-Google-Smtp-Source: APXvYqyluZqDxbgOCxlv0oOZMD4d+IWsqyFtKrpbAs1tEgWkGgQX7hxGe6FWvJ7/c0QiTflCsYMH X-Received: by 2002:a7b:cae2:: with SMTP id t2mr9045838wml.157.1565164564616; Wed, 07 Aug 2019 00:56:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1565164564; cv=none; d=google.com; s=arc-20160816; b=pXXvcbHUEdQ0BPW4vGnHCug+zg9rujwKRIi5YQl3DMZngK/MUODlLV62pYhuQ7FMCv qSzGQZpzYCFvktDKZ4/gjqbhEsUd6qw0kSENYNc2iv1ggmE4Z/oJxaH/oHExouukE9qM QSh6LkRvWFdzeK92KPlCn+T7fMQBnVdUFf0TznPAmiaj+4ceZ44Lf2ueCfLw9Hxvum51 njJoNwhKn9Uj7ZsSHQ+0CkVcDvs47EiWB7FuYBPYstx5P5CBcS4+s9ztIPG85vUsCg7I Um6GsnFHDkQcuBPegLWIcmjoXu5gKMLiwWdUiqnvwIorv4SNoUvqxzbBLuVlmlESeTpu oDNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:cc:to:subject; bh=lYK49mb1BumQ5r8V+0S1s1j504QCHe016dzgqpFACGw=; b=LXfaVk9OwVDMEDR8WFRtDlDMo1jZUa8ROSCIzC9OuR5TF25MSRcb1lBe7f9FwdjQVl zcnCBgDvrQrbAivxWpDWSx3cSnkIyM4PwTiH9Xd9e4vj5Xrdy0MVHLJ5v1XYbJWm2bpB +Gynos2SETrVuwcH0qDd5Ir1tTNHtOAH6g4XGZgNO3mjjn1vadaWKrdVQYl6AEDnBSfW Wl4u63Zmxzftkfw3XMFDX/S4xDsvzt3sHgXJL4wJjqj3rhKeIF5qo5NKxPz3RuNMAPTT wj35BQoDPrr9a0mtuZesGWu+ZrNmGtCrUG3Z04iF9NTQk+Q5t5TtD74n2zbXGIVmPwnc f45A== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of gernot.hillier@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=gernot.hillier@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from lizzard.sbs.de (lizzard.sbs.de. [194.138.37.39]) by gmr-mx.google.com with ESMTPS id o4si1274374wrp.4.2019.08.07.00.56.04 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Aug 2019 00:56:04 -0700 (PDT) Received-SPF: pass (google.com: domain of gernot.hillier@siemens.com designates 194.138.37.39 as permitted sender) client-ip=194.138.37.39; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of gernot.hillier@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=gernot.hillier@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by lizzard.sbs.de (8.15.2/8.15.2) with ESMTPS id x777u3b4016942 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 7 Aug 2019 09:56:03 +0200 Received: from [139.22.118.51] ([139.22.118.51]) by mail1.sbs.de (8.15.2/8.15.2) with ESMTP id x777u3m8006743; Wed, 7 Aug 2019 09:56:03 +0200 Subject: Re: [PATCH v2] meta/classes: generate bill of material from image To: Quirin Gylstorff , isar-users@googlegroups.com Cc: Claudius Heine References: <20190805140742.11479-1-Quirin.Gylstorff@siemens.com> <20190806135539.1826-1-Quirin.Gylstorff@siemens.com> <217fe8c3-9dfb-41cf-b95a-fa793b05d9a6@siemens.com> From: Gernot Hillier Message-ID: <3bc2de85-2bfd-e6a3-0a78-47890b673f47@siemens.com> Date: Wed, 7 Aug 2019 09:56:02 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <217fe8c3-9dfb-41cf-b95a-fa793b05d9a6@siemens.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: rtcekZf0nSpz Hi! Am 07.08.19 um 09:52 schrieb Quirin Gylstorff: > > > On 8/6/19 3:55 PM, Q. Gylstorff wrote: >> From: Quirin Gylstorff >> >> To create products it is necessary to have a list >> of used packages for clearance and to security monitoring. >> To get a simple list of packages use dpkg-query and generate >> a list with the following pattern: >> [...] > I am thinking about adding json as alternative output format. The yocto Why? Is this some established standard somewhere else? > manifest is: > packagename arch version > > The current isar manifest differs from this already. For Debian, the (subtle) differences between source and binary version numbers and source and binary package names caused a lot of confusion (and effort) in the past, so I'd really love to see both included. -- Gernot