From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 28 Jul 2026 17:28:25 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f62.google.com (mail-wm1-f62.google.com [209.85.128.62]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 66SFSOeL010730 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 28 Jul 2026 17:28:24 +0200 Received: by mail-wm1-f62.google.com with SMTP id 5b1f17b1804b1-49559c03731sf934115e9.3 for ; Tue, 28 Jul 2026 08:28:24 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1785252499; cv=pass; d=google.com; s=arc-20260327; b=B0Tqxa7nErVYL7I7QnDToaWVT+CIyajGDKi15pBlZV+cnG6Vvx0mjOnhlo3dFXHjpf V53S50mcKbYk1iHCy7Io90Km3XwRpYDWlWS2b7VVFFRSMvv5/UctwQX6ZOjzr4vRimk1 OgRqR4XS315h7T60crQbk0ElvtX5qCo4E/JEI5MQxirxcXUR0i59PwubLG49pk4T0HVY GpvPDt8P26d+BLdW2MpA2qTavkq85A/gZ0L88NG/AEwBYrAup6D0YDOvF1vF/Fb2h7Rs DpvHBsJWLLR8hdJyZ2jZwd7UByS3nW/5OWrvi75QX0uiu2B2I/G7L9dpjFg9/Cphc3AD ofTA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:dkim-signature; bh=X0ANrAWj/SAiKzNFHuXQs68gXPnol0YvgeFTqzwIWdo=; fh=zLitjNYwhC5CD0+qAafV2ppIYP3vGD2IZXWjjmQEZGI=; b=gtiD7WkRRgP9M6/qIkZmWSd6+IgE3SZGSAhUZzYaBBrpMCbHd5/3Rc6lpYn+IdQ1SA gl3sds/COxklKQBfnIhCSv2tEq+PtyipLFjV+s6mKNxk7Z3v6Upi6qRKDzuGEmyRyCF0 vBz5y+9M05SUDkTETtIrkAt3PKy7o5OYDJCErpzBsXi1ibL1F93T/saQb8zz88EudJOd ATGZhORMPD/mBkr1B2QEtUPvK2DnNWdEu+FQZPjHWyZcKE0/ObtIvx8eC81gNQiIRB5b UMyACLujUh2wT5XYiSobyKuwLriLBRqvOgID264Rn2KvoJcuAV8DaW9rIFLQg4/pFx+q W3yA==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1785252499; x=1785857299; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-type:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:from:to:cc:subject:date:message-id:reply-to:content-type; bh=X0ANrAWj/SAiKzNFHuXQs68gXPnol0YvgeFTqzwIWdo=; b=sSVNHh27bfb6RFQAAMkq46BiHlLMcwXFH3tjyUEGP79bv5+rl43SQDbc6o6DHda9q7 LzzrTsxAcBB4RItKmEsKr9WU9c4BYMhZ9PKCiuE7eB8Z0AK6dI7OZJcUhW32CSzx0HUy 80gC1euv4BG3y2hqypwhlK1fUzGrlG7kfZ6cevR1HJtybQ7fd+JCQGHNhCcYO72I+H0q H/Ou8qV9DXHmOEI6PN0Az8paPUoIoEbWqKHroUvADm1M/Vj46ZgmUuD7ygIWH+CLiZer 1/VK7yRbEJKFbC0mRsyR8BxyVF5OGr7rNRQDcGNun0EelGOh3xFMw1291Iju+WZQ8ri2 ZCEA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785252499; x=1785857299; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:content-type :in-reply-to:from:content-language:references:cc:to:subject :user-agent:mime-version:date:message-id:x-beenthere :x-gm-message-state:sender:from:to:cc:subject:date:message-id :reply-to:content-type; bh=X0ANrAWj/SAiKzNFHuXQs68gXPnol0YvgeFTqzwIWdo=; b=c1XKPIxtp8cot/OS9aTNm+SlWhoyfFhogVg775MxxOgLozCiPDRRZ4eXT/KaCr0DVQ GRST4Iy+26+8RpPY8R6GkQe7GZ4Ip2ks/IC08bjt2PFA9CryGALtRGb5C3LtY/BnOHz6 JwwKiqhve+AirUAuUF0hhYRi8a+f1qiZAbJsUxlLpeeqjyKfpnefGVP1W4QBWdIeqhrU LAT5jR8SqcjU0BHRS8eeErtf1DT4bh/EA6RcsmBJaN7Hs+AJAiwhiL0yeJRb1wBNiSWM 8kQvxnXvrDvEWNOznF0C/CqeHya03+TV7D1qQAcdHsIt6qqTP6bcQcy12iYnXQHWRcHW 1m9g== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AHgh+Rp+kYzOM16WJpDmDPnVa6pNgiiPBg2GYHD1TXTTBz1UTDRn7huN75C4uNn6VrI6CBetrfGx@ilbers.de X-Gm-Message-State: AOJu0Yw6XT0dpBl0GR8CwusqlKvVRYxUcuTgu9N5/L77gNss2erXnb3+ Y0g3om225eu0vk6SqO/WcNC/KbFaV9QKEKnoscND10AVFplIqTCc4WzE X-Received: by 2002:a05:600c:1382:b0:492:4a7a:e415 with SMTP id 5b1f17b1804b1-496c9df0059mr14943975e9.2.1785252499403; Tue, 28 Jul 2026 08:28:19 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="Aa7YSPRt3hkYZl9zjStd0HHLnkB3JvSLKi9JnhyBHEw8pB1Hsw==" Received: by 2002:a05:6000:2481:b0:47f:9475:3914 with SMTP id ffacd0b85a97d-47f94753af2ls4823013f8f.0.-pod-prod-04-eu; Tue, 28 Jul 2026 08:28:17 -0700 (PDT) X-Forwarded-Encrypted: i=2; AHgh+Rr69d4KQ+YJZE1L3WZB0fk+pYm1nTLPChDYrfgNNTk5vrsGU4Kp3I7ieo/Ih7ASCI+6YiY0U3CCPjnc@googlegroups.com X-Received: by 2002:a05:6000:1842:b0:47f:6742:170e with SMTP id ffacd0b85a97d-47fb1f27200mr3527553f8f.54.1785252496812; Tue, 28 Jul 2026 08:28:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1785252496; cv=none; d=google.com; s=arc-20260327; b=Ak6D70xl//4x2O5tsrio9zP7lIfNQ7eKJM9UX36nuqkgjXefZJO8j6NgXIdUMPoWA/ kJalhb88SB9Og93cyg5KqC1YgFtot0cAdLCCLygb6Vro35sVBCHHUB6X+vXNUSK0s815 k70c5mlNL34e/D5p1A4JbFVDHWuKigyMBDBCEUEnryQaCi9HvJK2ytHZiud2GUAZHEEA 0jVAkV7TY59arop4zRrp7m4ypDcu77MDyLX55qGSwYzwGSI9VWWD/ddFMIqAGocy0bys 4ODUSWQsJw5285kamEAdE+rmY/mBhG3UJPsMknHjfy6jkZQnAKuogDB9M2iWVI3cN7f/ E8Mg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id; bh=U0hJ2Fk8qIgDFEzC4lYO7gecj4aAuZdJ1fJ2n9byZ8U=; fh=SHpB8Ttqf4xaa1+CilPOZogNAoQLHQ4ysawgTXOO4TI=; b=UMgwVte2cHAahqQjs7jr+m5dYDtbHxzK6+gMxTgRPaxHWBNVA38wrRiysamdLx6uHk QC1GWlkDmhv35wlArLDTqMuLfJxVuHNUjhJmmiMFlqly4+MaZdYjQGqDJQ4Q2RgygfVV OKkRuY2FchIN5EN2cUcUUYn32le52zjG9RzzZlvdX1OvKUJca7Hui8YBHkd2wS7BCb37 0+bw9xuM2W6407QF8vQdtATQuD+q7yuN9OHKY48M+3RoMTDFgAFfOTydCc6YiUfmZefW DwZ+sANWPISCD/3u3EoLzAZiPZ1pLvi3MohWEhHgPjWCnnrJ7Dwy3JUWgAAddhw6nhzM RVxg==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id ffacd0b85a97d-47f85c81b94si383791f8f.7.2026.07.28.08.28.16 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Tue, 28 Jul 2026 08:28:16 -0700 (PDT) Received-SPF: pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [192.168.178.139] ([88.130.203.42]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 66SFSGqM010722 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 28 Jul 2026 17:28:16 +0200 Message-ID: <54cb22e2-d300-4dd4-92e8-551652b849f4@ilbers.de> Date: Tue, 28 Jul 2026 17:28:15 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 0/6] Rework SBOM generation To: Felix Moessbauer , isar-users@googlegroups.com Cc: christoph.steiger@siemens.com References: <20260720081347.3835974-1-felix.moessbauer@siemens.com> Content-Language: en-US From: Zhihang Wei In-Reply-To: <20260720081347.3835974-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: wzh@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: M0OQFtwnDCSd Applied to next, thanks. Zhihang On 7/20/26 10:13, 'Felix Moessbauer' via isar-users wrote: > The SBOM generation currently fails to capture the package checksums > in case of partial rebuilds. This is because the apt-state is not > captured before the rootfs cleanup. > > We fix this by capturing the apt-state (and copyright data) while it > still is available. Then, we run the SBOM generator against that data > in a dedicated task. By that, the SBOM generation also can be cached, > if the rootfs does not change - speeding up the build on repeated runs. > > We further fix a SBOM chroot deploy race on multi-config builds. > > Best regards, > Felix Moessbauer > > Felix Moessbauer (6): > rootfs: capture apt-state before rootfs cleanup > sbom: run generator as task with apt-cache as input > wic: make dependency to sbom chroot explicit > sbom: deploy sbom chroot to distro specific file > sbom: align deploy dir names > sbom: cache artifact in sstate cache > > meta/classes-recipe/imagetypes_wic.bbclass | 1 + > meta/classes-recipe/rootfs.bbclass | 27 +++++++++++++--- > meta/classes/sbom.bbclass | 37 ++++++++++++++++------ > 3 files changed, 51 insertions(+), 14 deletions(-) > -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/54cb22e2-d300-4dd4-92e8-551652b849f4%40ilbers.de.