From: Zhihang Wei <wzh@ilbers.de>
To: Felix Moessbauer <felix.moessbauer@siemens.com>,
isar-users@googlegroups.com
Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com,
jan.kiszka@siemens.com, quirin.gylstorff@siemens.com,
stefan-koch@siemens.com
Subject: Re: [PATCH v7 0/7] Add SBOM generation with debsbom
Date: Mon, 2 Feb 2026 17:55:21 +0100 [thread overview]
Message-ID: <45067661-4b18-483d-8632-f8d568d37e36@ilbers.de> (raw)
In-Reply-To: <20260121150719.2719579-1-felix.moessbauer@siemens.com>
On 1/21/26 16:07, 'Felix Moessbauer' via isar-users wrote:
> This patchset adds proper SBOM generation in the two standard formats
> SPDX and CycloneDX during the rootfs generation process.
>
> The generation is itself is handled by a SBOM generator `debsbom` [1]
> which is developed as an open source project at Siemens. It is still
> early in development, but it has enough features for what we require
> in isar. The required dependencies which are not yet available as
> Debian packages were minimally packaged directly in isar too.
>
> This is a followup of the previous RFC [2]. Since then the series has
> changed a lot. The SBOM generation was moved from a simple OE lib to
> `debsbom`. This also meant the introduction of a separate chroot was
> necessary. The SBOM generation process was also moved from the image
> step to the rootfs step, along with a lot of minor changes and
> improvements.
>
> [1] https://github.com/siemens/debsbom
> [2] https://groups.google.com/g/isar-users/c/8L-CF4BJY0I/m/p0N3o_zfAAAJ
>
> Changes since v6:
>
> - fixed imager bom failure on transitive image types (detected in isar-cip,
> wic -> squashfs).
> - updated debsbom to 0.6.0+git
> - add support for license information
> - rebased onto next
>
> Note: I'm still not able to run the full testsuite. The related patches
> to cleanup the testsuite are pending on the list for quite some time. I
> did some extensive local testing with isar-cip core and product layers,
> but any additional testing is highly welcome.
>
> Changes since v5:
>
> - fix isar-image-ci on qemuamd64-bullseye (set IMAGER_BOM according to
> machine changes made in image file)
> - rebased onto next
>
> Changes since v4:
>
> - rebased onto next
> - fix race condition on creation of ${DEPLOY_DIR_SBOM} (aka ${DEPLOY_DIR_IMAGE})
>
> Changes since v3:
>
> - fix issue on external bullseye initramfs (we now disable sbom generation
> on all unsupported distros rootfs instances)
> - update debsbom to v0.4.0
> - rebased onto next
>
> Changes since v2:
>
> - fix issues when HOST_ARCH != DISTRO_ARCH on derived distributions
> - update debsbom to v0.3.0, which fixes the Origin: bug reported in v2
> - generate SBOM for imager as well and create merged sbom of .wic image
> - resend imager manifest + wic manifest patches to reduce conflicts
>
> Note, that the patches p1-p5 are most important as they add basic SBOM
> support. The remaining patches address the imager + .wic bom part,
> which also can be merged later on.
>
> Changes since v1:
>
> - remove tarball
> - refactor packaging (auto-derive python dependencies)
> - only build missing packages (varies on bookworm, trixie, noble)
> - add ubuntu support
> - only generate sboms for supported distributions (bookworm/jammy and
> onwards)
> - update debsbom (includes bug fixes and more information for source
> packages)
>
>
> Felix Moessbauer (7):
> debsbom: update to version 0.6.0
> feat: add license information to SBOM as well
> add support to add imager dependencies to BOM
> wic: create uniform manifest describing all image components
> qemuamd64: add IMAGER_BOM entries
> imager: create SBOM of IMAGER_BOM packages
> wic: create uniform SBOM describing all image components
>
> doc/user_manual.md | 1 +
> meta-isar/conf/machine/qemuamd64.conf | 1 +
> .../recipes-core/images/isar-image-ci.bb | 1 +
> .../image-tools-extension.bbclass | 29 ++++++++++++++++++
> meta/classes-recipe/image.bbclass | 9 ++++++
> meta/classes-recipe/imagetypes_wic.bbclass | 30 +++++++++++++++++++
> meta/classes/sbom.bbclass | 3 +-
> ..._0.5.1.bb => python3-debsbom_0.6.0+git.bb} | 3 +-
> 8 files changed, 75 insertions(+), 2 deletions(-)
> rename meta/recipes-support/python3-debsbom/{python3-debsbom_0.5.1.bb => python3-debsbom_0.6.0+git.bb} (91%)
>
Hi,
I have tested this version on top of the merged test suite improvement
patches on CI. There are several failures, all related to
'do_image_wic', and
the errors can be categorized into two classes:
1. "bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory"
2. "dpkg-query: no packages found matching systemd-boot-efi:arm64" or
"systemd-boot-efi:amd64".
I'll write here some instructions on how to recreate the errors using
avocado.
For each catagory of error, I'll show one example failed test case.
To redo the test using avocado:
1. Have a clean clone of isar, checkout to branch next and apply your
patches:
$ git clone -b next https://github.com/ilbers/isar.git
$ cd isar
$ git am /path-to/0001-my-contribution-to-isar.patch
2. Disable unrelated targets to make error appears faster, by applying
the following diff to "testsuite/citest.py":
diff --git a/testsuite/citest.py b/testsuite/citest.py
index f11cd5af..225a07a8 100755
--- a/testsuite/citest.py
+++ b/testsuite/citest.py
@@ -78,7 +78,6 @@ class DevTest(CIBaseTest):
def test_dev_apps(self):
targets = [
'mc:qemuamd64-bookworm:isar-image-ci',
- 'mc:qemuarm64-bookworm:isar-image-base',
]
self.init()
@@ -238,10 +237,6 @@ class CrossTest(CIBaseTest):
def test_cross(self):
targets = [
- 'mc:qemuarm-buster:isar-image-ci',
- 'mc:qemuarm-bullseye:isar-image-ci',
- 'mc:qemuarm-bookworm:isar-image-ci',
- 'mc:qemuarm64-focal:isar-image-base',
'mc:nanopi-neo-efi-bookworm:isar-image-base',
]
3. Run kas shell, setup CI prerequisites (avocado, qemu) and cleanup:
$ ./kas/kas-container shell kas/isar.yaml --command \
"rm -rf /work/build/conf && /work/scripts/ci_setup.sh"
4. Run the failed test related with "bwrap: Can't find source path ..."
$ cd /work/testsuite
$ avocado run citest.py:CrossTest.test_cross$
(took ~13 minutes on my laptop for this error to show up)
5. Run the failed test related with "dpkg-query ... systemd-boot-efi:amd64"
$ avocado run citest.py:DevTest.test_dev_apps$
(~4 minutes on my laptop)
6. Run the failed test related with "dpkg-query ... systemd-boot-efi:arm64"
$ avocado run citest.py:CrossTest.test_cross_debsrc$
(~11 minutes on my laptop)
You can also view the logs and download the artifacts on GitLab:
Fast CI: https://gitlab.isar-build.org/ilbers/isar/-/jobs/2741
Full CI: https://gitlab.isar-build.org/ilbers/isar/-/jobs/2744
Below is a summary of the reasons for failures on test cases:
Failed in fast:
01-/builds/ilbers/isar/testsuite/citest.py:DevTest.test_dev: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.109500
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
02-/builds/ilbers/isar/testsuite/citest.py:DevTest.test_dev_apps: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.263618
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
03-/builds/ilbers/isar/testsuite/citest.py:DevTest.test_dev_rebuild: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.346091
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
09-/builds/ilbers/isar/testsuite/citest.py:CrossTest.test_cross: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-armhf/isar-image-base-nanopi-neo-efi/1.0-r0/temp/run.do_image_wic.849937
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
19-/builds/ilbers/isar/testsuite/citest.py:CrossTest.test_cross_debsrc: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-arm64/isar-image-ci-qemuarm64/1.0-r0/temp/run.do_image_wic.996506
Error: dpkg-query: no packages found matching systemd-boot-efi:arm64
24-/builds/ilbers/isar/testsuite/citest.py:CrossTest.test_cross_rpi: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-arm64/isar-image-base-rpi-arm64-v8-efi/1.0-r0/temp/run.do_image_wic.1341846
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
25-/builds/ilbers/isar/testsuite/citest.py:CrossTest.test_cross_dependencies:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-arm64/isar-image-ci-qemuarm64/1.0-r0/temp/run.do_image_wic.1449197
Error: dpkg-query: no packages found matching systemd-boot-efi:arm64
Failed in full:
01-/builds/ilbers/isar/testsuite/citest.py:ReproTest.test_repro_signed: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/raspios-bookworm-armhf/isar-image-base-rpi-arm-v7/1.0-r0/temp/run.do_image_wic.282174
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
02-/builds/ilbers/isar/testsuite/citest.py:ReproTest.test_repro_unsigned:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-base-qemuamd64/1.0-r0/temp/run.do_image_wic.452427
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
04-/builds/ilbers/isar/testsuite/citest.py:InstallerTest.test_installer_build:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.662656
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
07-/builds/ilbers/isar/testsuite/citest.py:PrebuiltTest.test_prebuilt_containers:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.722781
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
10-/builds/ilbers/isar/testsuite/citest.py:KernelTests.test_kernel_cross:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bullseye-armhf/isar-image-base-de0-nano-soc/1.0-r0/temp/run.do_image_wic.1250406
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
11-/builds/ilbers/isar/testsuite/citest.py:KernelTests.test_per_kernel: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-arm64/isar-image-ci-qemuarm64/1.0-r0/temp/run.do_image_wic.1509493
Error: dpkg-query: no packages found matching systemd-boot-efi:arm64
12-/builds/ilbers/isar/testsuite/citest.py:InitRdTest.test_dracut_in_image:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.1541317
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
15-/builds/ilbers/isar/testsuite/citest.py:InitRdTest.test_var_initrd_image:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.1662133
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
16-/builds/ilbers/isar/testsuite/citest.py:InitRdTest.test_var_image_initrd:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.1673793
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
17-/builds/ilbers/isar/testsuite/citest.py:InitRdTest.test_var_image_initrd_and_initrd_image:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.1705223
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
18-/builds/ilbers/isar/testsuite/citest.py:InitRdCrossTests.test_dracut_in_image:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.1759604
Error: dpkg-query: no packages found matching systemd-boot-efi:amd64
20-/builds/ilbers/isar/testsuite/citest.py:WicTest.test_wic_nodeploy_partitions:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-arm64/isar-image-ci-qemuarm64/1.0-r0/temp/run.do_image_wic.2000487
Error: dpkg-query: no packages found matching systemd-boot-efi:arm64
21-/builds/ilbers/isar/testsuite/citest.py:WicTest.test_wic_deploy_partitions:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-arm64/isar-image-ci-qemuarm64/1.0-r0/temp/run.do_image_wic.2010205
Error: dpkg-query: no packages found matching systemd-boot-efi:arm64
22-/builds/ilbers/isar/testsuite/citest.py:NoCrossTest.test_nocross: FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-buster-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.737468
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
Failed task in:
/builds/ilbers/isar/build/tmp/work/ubuntu-focal-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.736880
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
This test case has 10 errors like the above two in total.
43-/builds/ilbers/isar/testsuite/citest.py:NoCrossTest.test_nocross_debsrc:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bookworm-armhf/isar-image-ci-qemuarm/1.0-r0/temp/run.do_image_wic.1846403
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
45-/builds/ilbers/isar/testsuite/citest.py:NoCrossTest.test_nocross_rpi:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/raspios-bullseye-armhf/isar-image-base-rpi-arm/1.0-r0/temp/run.do_image_wic.2624140
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
46-/builds/ilbers/isar/testsuite/citest.py:NoCrossTest.test_nocross_rpi_debsrc:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/raspios-bookworm-armhf/isar-image-base-rpi-arm/1.0-r0/temp/run.do_image_wic.2823215
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
55-/builds/ilbers/isar/testsuite/citest.py:CustomizationsTest.test_single_customization:
FAIL
Failed task in:
/builds/ilbers/isar/build/tmp/work/debian-bullseye-amd64/isar-image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.3377222
Error: bwrap: Can't find source path
/builds/ilbers/isar/build/tmp/deploy/sbom/sbom-chroot: No such file or
directory
Zhihang
--
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/45067661-4b18-483d-8632-f8d568d37e36%40ilbers.de.
prev parent reply other threads:[~2026-02-02 16:55 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-01-21 15:07 'Felix Moessbauer' via isar-users
2026-01-21 15:07 ` [PATCH v7 1/7] debsbom: update to version 0.6.0 'Felix Moessbauer' via isar-users
2026-01-21 15:07 ` [PATCH v7 2/7] feat: add license information to SBOM as well 'Felix Moessbauer' via isar-users
2026-01-21 15:07 ` [PATCH v7 3/7] add support to add imager dependencies to BOM 'Felix Moessbauer' via isar-users
2026-01-21 15:07 ` [PATCH v7 4/7] wic: create uniform manifest describing all image components 'Felix Moessbauer' via isar-users
2026-01-21 15:07 ` [PATCH v7 5/7] qemuamd64: add IMAGER_BOM entries 'Felix Moessbauer' via isar-users
2026-01-21 15:07 ` [PATCH v7 6/7] imager: create SBOM of IMAGER_BOM packages 'Felix Moessbauer' via isar-users
2026-01-21 15:07 ` [PATCH v7 7/7] wic: create uniform SBOM describing all image components 'Felix Moessbauer' via isar-users
2026-02-02 16:55 ` Zhihang Wei [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=45067661-4b18-483d-8632-f8d568d37e36@ilbers.de \
--to=wzh@ilbers.de \
--cc=cedric.hombourger@siemens.com \
--cc=christoph.steiger@siemens.com \
--cc=felix.moessbauer@siemens.com \
--cc=isar-users@googlegroups.com \
--cc=jan.kiszka@siemens.com \
--cc=quirin.gylstorff@siemens.com \
--cc=stefan-koch@siemens.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox