From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6721684426774806528 X-Received: by 2002:a1c:1a87:: with SMTP id a129mr9020924wma.21.1565164873973; Wed, 07 Aug 2019 01:01:13 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:a557:: with SMTP id o84ls2249606wme.3.gmail; Wed, 07 Aug 2019 01:01:13 -0700 (PDT) X-Google-Smtp-Source: APXvYqxLVu4sTYWVpMcEfR+lA+6pGSL/F4NlWUVGfWYpTuTl2frmvpj4O0mBSfbfF34zjYa+g043 X-Received: by 2002:a1c:a8c9:: with SMTP id r192mr9450467wme.43.1565164873519; Wed, 07 Aug 2019 01:01:13 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1565164873; cv=none; d=google.com; s=arc-20160816; b=D6pfpKn/ALY8B2rYtAHgms3aJj907CrJIeOLM6e3WxBqX+AGE2PNXPIR6H5q+rRJ01 zuTA90jz9PboInlxOZg6juBmLEjHKivooVc3G6NS8TFuTxP1NmE5Q4YKSEHTN+qgG++q lWs5Vfk7DF5uFxdAlR2TgKQq8C3KDjux1ErEEO9DE266Ny4Z5Wzv3mRH2blGxyPQCyyV iOCf64aCyPUuSop0dXKUmG7FVfTcArjnqx0UMvbuhta/+E4OyK0u6ckYHEwyI3GhoJQW sak1wXrfkUWUfW62aiSTP88zMVKH/zUA3m3TedHZZtvepAYoan09UzAjj3IHXcwF/Dh9 DL+w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:cc:to:subject; bh=/ruoRckIG5gPE2KXv3DK0S/VatusriqVAcdmjOG9FGs=; b=eWKSN58MrsgbHRA8s8YFU1bCYBODndNKxKrJoZCnFEyaH/O24E0UBofOUfYMWBENwb fZh89NNFU8FWOSvNkiqCh3bQbB5NjbZiyItdJa2dMxNArUaR20v9Jllzoajg6ascPCAI sWmNeyx2E8qZWPTOgGX6ezNLwScvWK83kRAX95MAaUW400jQXPN5ZpEUBBe/5MYM1Wna 1gW12gxCKHk5nhsvt2icrXz/DiZFhlcULPFxUNmrML9bzqGu0Zdqh7rLc59/8o6HGMt0 9c1wiAdAjiAvtysV6LRY5l6oBK6cYhUxibfoxD2Jkwv1IV72xTcrSWiTGph+dKjLUcDw J/NA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from goliath.siemens.de (goliath.siemens.de. [192.35.17.28]) by gmr-mx.google.com with ESMTPS id b15si49037wmg.1.2019.08.07.01.01.13 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Aug 2019 01:01:13 -0700 (PDT) Received-SPF: pass (google.com: domain of claudius.heine.ext@siemens.com designates 192.35.17.28 as permitted sender) client-ip=192.35.17.28; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by goliath.siemens.de (8.15.2/8.15.2) with ESMTPS id x7781CmW008571 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 7 Aug 2019 10:01:12 +0200 Received: from [139.25.69.208] (linux-ses-ext02.ppmd.siemens.net [139.25.69.208]) by mail1.sbs.de (8.15.2/8.15.2) with ESMTP id x7781CwG015788; Wed, 7 Aug 2019 10:01:12 +0200 Subject: Re: [PATCH v2] meta/classes: generate bill of material from image To: "[ext] Gernot Hillier" , Quirin Gylstorff , isar-users@googlegroups.com Cc: Claudius Heine References: <20190805140742.11479-1-Quirin.Gylstorff@siemens.com> <20190806135539.1826-1-Quirin.Gylstorff@siemens.com> <217fe8c3-9dfb-41cf-b95a-fa793b05d9a6@siemens.com> <3bc2de85-2bfd-e6a3-0a78-47890b673f47@siemens.com> From: Claudius Heine Message-ID: <40f1532f-d989-cb1f-992b-d8c843e45499@siemens.com> Date: Wed, 7 Aug 2019 10:01:12 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.1 MIME-Version: 1.0 In-Reply-To: <3bc2de85-2bfd-e6a3-0a78-47890b673f47@siemens.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: YwnIw1mc7lkZ Hi Gernot, On 07/08/2019 09.56, [ext] Gernot Hillier wrote: > Hi! > > Am 07.08.19 um 09:52 schrieb Quirin Gylstorff: >> >> >> On 8/6/19 3:55 PM, Q. Gylstorff wrote: >>> From: Quirin Gylstorff >>> >>> To create products it is necessary to have a list >>> of used packages for clearance and to security monitoring. >>> To get a simple list of packages use dpkg-query and generate >>> a list with the following pattern: >>> > [...] >> I am thinking about adding json as alternative output format. The yocto > > Why? Is this some established standard somewhere else? I don't know any standard format for manifest files? Do you? I suggested JSON because its very easy machine readable and expandable without breaking other tools. We could also go with the Yocto/OE format. kind regards, Claudius > >> manifest is: >> packagename arch version >> >> The current isar manifest differs from this already. > > For Debian, the (subtle) differences between source and binary version > numbers and source and binary package names caused a lot of confusion > (and effort) in the past, so I'd really love to see both included. > > -- > Gernot > -- DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de