Re: [PATCH v2] meta/classes: generate bill of material from image

[Claudius Heine <claudius.heine.ext@siemens.com>]

Hi Gernot,

On 07/08/2019 09.56, [ext] Gernot Hillier wrote:
> Hi!
> 
> Am 07.08.19 um 09:52 schrieb Quirin Gylstorff:
>>
>>
>> On 8/6/19 3:55 PM, Q. Gylstorff wrote:
>>> From: Quirin Gylstorff <quirin.gylstorff@siemens.com>
>>>
>>> To create products it is necessary to have a list
>>> of used packages for clearance and to security monitoring.
>>> To get a simple list of packages use dpkg-query and generate
>>> a list with the following pattern:
>>>
> [...]
>> I am thinking about adding json as alternative output format. The yocto 
> 
> Why? Is this some established standard somewhere else?

I don't know any standard format for manifest files? Do you? I suggested 
JSON because its very easy machine readable and expandable without 
breaking other tools.

We could also go with the Yocto/OE format.

kind regards,
Claudius

> 
>> manifest is:
>> packagename arch version
>>
>> The current isar manifest differs from this already.
> 
> For Debian, the (subtle) differences between source and binary version 
> numbers and source and binary package names caused a lot of confusion 
> (and effort) in the past, so I'd really love to see both included.
> 
> -- 
> Gernot
> 

-- 
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de