From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6721684426774806528 X-Received: by 2002:a05:6000:1186:: with SMTP id g6mr4256688wrx.17.1565088760126; Tue, 06 Aug 2019 03:52:40 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:5411:: with SMTP id i17ls1100421wmb.2.canary-gmail; Tue, 06 Aug 2019 03:52:39 -0700 (PDT) X-Google-Smtp-Source: APXvYqyzAFc2r37A6QHK8UH9AXcJJfzWIG0SBXjKNMfW06amvOiTiWex8LbEgy/E5mRgTEDVvq6R X-Received: by 2002:a1c:ac81:: with SMTP id v123mr4236773wme.145.1565088759730; Tue, 06 Aug 2019 03:52:39 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1565088759; cv=none; d=google.com; s=arc-20160816; b=JYpe2rMnzV/1tN+S3uFHsIOinqJh9vJ3951HMPHRLAYlbCGog7Xt2GrskIH3Mgct9M rrDmqVnUN+JL+8vD19G9M4Zb9F/F5uHuvb/gufGYxVWtw8mUSIBuJCtcJlXig44GpnDb RTFDKqwQs3rmWYGXZMyPAelm5DdH/QSzW4PitulErNDXOWY7gKyEU6/Y5Nv+RgzPIv++ jd/2E5bEg0Pw2KjkF55B381HIaF736e6mlGvTK2S1zNkl0MkmvBRaFX2D4jS5dXDlO5V Kbao2WtU0lpOs1+VIWyjdySdjOJfB6t8GfSjgMHHSLJA7arX0UJWaunIr+Z6Tp+wRDpT +66A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:to:subject; bh=/XPr6xWN+eyqzb3+IR3TPIAd7plxVFUJaSo3A1GvBPQ=; b=MAJQu7LLx5fqTw0WMSvqqSCXy3U+s3nmoYbs7hlV+yLWbfQMWWm4U4XGZ2yOVcZcIv 1vO2CIFUMhPCH3ezYWi8l6jsKwxLsVlsAkQiicii3C9WMpM76NGJlr3+xOGw4phqCrM4 SoefD9IjNVwyB3pJC8ldht3U91HFUHihBY9Skb40oza9hmj8ZvaPZ72DoTZC/oTwDXj8 859UVqbxbxiwSYlg61eVwbltCTLQNHXSEcxOaRko30sMCO2hpMAw/q06el5PNJr3Exmj Q2FNoyWKb/LZv84JjE5R1ZFTB3fEHTKcM6XMr7ofj5kwvw0v08uGboGHy9yJK4EV1H56 xoSw== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of quirin.gylstorff@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=quirin.gylstorff@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from gecko.sbs.de (gecko.sbs.de. [194.138.37.40]) by gmr-mx.google.com with ESMTPS id e12si642301wma.2.2019.08.06.03.52.39 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 06 Aug 2019 03:52:39 -0700 (PDT) Received-SPF: pass (google.com: domain of quirin.gylstorff@siemens.com designates 194.138.37.40 as permitted sender) client-ip=194.138.37.40; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of quirin.gylstorff@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=quirin.gylstorff@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.15.2/8.15.2) with ESMTPS id x76AqdmP015323 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Tue, 6 Aug 2019 12:52:39 +0200 Received: from [139.25.68.238] ([139.25.68.238]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id x76Aqdkw000429; Tue, 6 Aug 2019 12:52:39 +0200 Subject: Re: [PATCH] meta/classes: generate bill of material from image To: Claudius Heine , Jan Kiszka , isar-users@googlegroups.com References: <20190805140742.11479-1-Quirin.Gylstorff@siemens.com> <573b3e00-a588-2de4-78e0-010e8ab63755@siemens.com> From: Quirin Gylstorff Message-ID: <54e1d469-e642-2658-1c7f-9351fe3c3814@siemens.com> Date: Tue, 6 Aug 2019 12:51:50 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <573b3e00-a588-2de4-78e0-010e8ab63755@siemens.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: sIE7SYQHUkfT On 8/6/19 10:48 AM, Claudius Heine wrote: > Hi Jan, > > On 06/08/2019 10.38, Jan Kiszka wrote: >> On 06.08.19 10:07, [ext] Claudius Heine wrote: >>> Hi Quirin, >>> >>> On 05/08/2019 16.07, [ext] Q. Gylstorff wrote: >>>> From: Quirin Gylstorff >>>> >>>> To create products it is necessary to have a list >>>> of used packages for clearance and to security monitoring. >>>> To get a simple list of packages use dpkg-query and generate >>>> a list with the following pattern: >>>> >>>> source name| source version | binary package name | binary version >>>> >>>> To use it add following line to the local.conf: >>>> ISAR_DO_PACKAGE_LIST ?= "1" >>> >>> I would rather that the commit message would not suggest adding this >>> to the >>> local.conf and instead adding this to the image recipe variable >>> scope, wherever >>> that is a .bb, .bbclass, .bbappend or any .conf file. >> >> I think the best approach is making this opt-out, generating this list by >> default (as in Yocto) and allowing users to disable it here this way. > > I agree. As I commented in my review. > I will change to opt-out that in a v2. Quirin