From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 25 Jun 2025 17:47:50 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-il1-f191.google.com (mail-il1-f191.google.com [209.85.166.191]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 55PFljqV006420 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 25 Jun 2025 17:47:45 +0200 Received: by mail-il1-f191.google.com with SMTP id e9e14a558f8ab-3ddbfe1fc8fsf42486255ab.2 for ; Wed, 25 Jun 2025 08:47:45 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1750866459; cv=pass; d=google.com; s=arc-20240605; b=gQXiFRAt3Ywck7C6Ug0/Ufi/IVVECkjmCEELAlSSZiaBl+ijEXNEOlAkEO2Ws8C8gG ECBqGZVl5afOGSLNkfCsgxTS8TrtddFFk/1Rw1NuISuGwXjUfK8XcWU/su3jz9HQm+qb TDclI4eqOHXU13/oyQJ0BgN22fK4kIoImSlGZhOn9ZDlo5P5u5T4cCmpGoNdNlsJZ98M hVnmtG+HcaIzszhxd4/qAe3Y9kXn5ATchJRowB7CAl+mMDZuOTcSAr6bbV2WXTVfq+Pa w97plexOtd3EtUY7WL9yS2PMnzWdBTZzhqHVtNSX8Dwa0fztCwhIXjpIEQGw3WV9g/5o zwlQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :autocrypt:from:content-language:references:to:subject:user-agent :date:message-id:dkim-signature; bh=4SsTXUjJPIJ6sfRQWUdkq4wBOVKWFkgOzx1K+hw9as0=; fh=ZZf+bjO2IOLjEEUCDrVe5YsvRqU9g2RggMppB8m/kEg=; b=MsNEPV9MeWN7ZtJz2Jv7VK12Fj2uCpjaOgyQKVJq6pgAdToZN/f16fmR1RLrtbh3Zu zOTvXhLElAS2XCryekTYLCm0QC15kr420fUP2tBn75/kOD2R9/7EVqoYXhxnKg9bGSoY zWMTzJVDE4lCcnn7S6TmBk6cwl8sTqoiBwA7g3/vmfoHIoWwBG30p/y10GvdUIzoEFG/ 46Reg1OfxDhs6sM/bj3J9n5NyBBxvXrlCvOgThPQCTV3f0pumSCcNb5N0mXLZJaByH0s AG8kpU/WxnZKhTTcSn4Xo8ZmSwyg3k5oyNhz6t7oLD+y63FFhPKuiwwWCmYRbKS2qrQu yB5g==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=FM0JNpvn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1750866459; x=1751471259; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:from:content-language:references:to:subject :user-agent:date:message-id:from:to:cc:subject:date:message-id :reply-to; bh=4SsTXUjJPIJ6sfRQWUdkq4wBOVKWFkgOzx1K+hw9as0=; b=r/m5/PQ99dwnq3K2DIpEdUqe1qxgTcczDY2jkEoFwAziCLPE2NYcySmjvBb9AxQN7Z ja7kZiSIAOQW1AxHbBtiFHec2kk6YmM4RAga1eHQ19GJMYPEat+hfsUagbwKaSbVx9rY KfDrctI852JSfu6vsOb/5fFRYkvq1rP9nbGTt5PHiZ4ZoeiWhbQjuvOg5mULVoX4BGNp wnhRpp3Rjic2olKyqERSsmb1TYgUdhIj7AbP4cXMZjlqWNkJ+TofSMmVoskFyijtUkpM RYm0gRntYbEHY+wz2spWOtzBktxj1VGIH1EAyA1QILz57r1l7t2s6lvgaITCqNMCdw68 414Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750866459; x=1751471259; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:from:content-language:references:to:subject :user-agent:date:message-id:x-beenthere:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=4SsTXUjJPIJ6sfRQWUdkq4wBOVKWFkgOzx1K+hw9as0=; b=uiVx7rZY84XmqDmNpp7AGRKJ9emtgqsLkAtaQ52bPDLH+hS2K3Lq1/DFX3ytMtlVQX aT09SdPZyNYikh4XCms2rPDPAV3htGbmWelHHOuZyFbFUWmSQcy3qbKMonTLR3I2irk2 9iS1fGIY0O9Ee8lovxY+ayPjWnSWTcpwD7iw9ZBuK7AHfDPZfPXsSS3afVNwo9aKQuZl ycTKtoz6LufHFvqeMDfPflRrooHvjs6UatsFiWIyygFBWuILvf9acGjkdDfxuE0YpvCJ 7NHes8nRzB2C116Qk3k3ZWjUY0L+wRgaE51a8ayrUTdqKbidzalLgdLqQP7xXSfGKHae 1XMw== X-Forwarded-Encrypted: i=3; AJvYcCUAq/cRE6dJBuo+Ke1KUwixGn9EqrCrs8/PPvmjszvrc5Mjh2Sje15W7OhPmsVbEQz4qtM0@ilbers.de X-Gm-Message-State: AOJu0Yy3FC+Grf54JOA0FH8pP3H8wibAfgugWH3pnOq5J/v22uLsbCtJ AHuOkJhf3w9Jh3voWUsWRJJo/f4CDYmU3gGJkdSeRuF6UpGyvjFr3C/7 X-Google-Smtp-Source: AGHT+IEL4cPc+68VEftwa6WXRqr9rIt3Z9RE/D4TXNvEA0Ib6KkRirea74akauSvNmtFvAaYh0yJ5g== X-Received: by 2002:a05:6e02:3e90:b0:3dc:87c7:a5a6 with SMTP id e9e14a558f8ab-3df327eeac0mr44996435ab.4.1750866459284; Wed, 25 Jun 2025 08:47:39 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZfRMPXyTOJPVy+FYlalpSXM2ipcWz76EjSDELmlHW+pog== Received: by 2002:a05:6e02:f05:b0:3dd:bfcd:ede4 with SMTP id e9e14a558f8ab-3df3dfbc0f0ls425235ab.1.-pod-prod-02-us; Wed, 25 Jun 2025 08:47:38 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCV5ExgYukeg9rMMIV46pJEjuS9OuPpCXh1ypiFU6pg/yWe0ihH86vk/GhKYTPySNLAcuWyi+MIzts6V@googlegroups.com X-Received: by 2002:a05:6602:15d1:b0:86d:f35:a100 with SMTP id ca18e2360f4ac-8766b89f844mr466773039f.5.1750866457874; Wed, 25 Jun 2025 08:47:37 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1750866457; cv=pass; d=google.com; s=arc-20240605; b=Z/oHIM2rVmApee5NHCqkwMfw8otgxlRh4XqkVr0h0NEy/Tbh/UZju7YNEw05GLxK7o Wg9RBNP1D3M4Ob/usUyKhItpsMd6+3HR87xJIfJuN4e9+kc+fOk8w5rAVoIpsvwBtEFb +ICLdNPgj9D9JxHJ7VGds0jdlsNr8OMhdupFPE39ycnAeE4pIfu66BsAhEMKqNcS2oVl ADS8m34AljYAJyc2fWlmuyszBxzuCtYKKzTXzV5jUsjGLhlbtuaeSjaYa8m5oWZZqPPM GWjGb9LoFuudkgShxwNJaZhtmPBtmFxWKYt0Qwp5yvWD4X0hsbMW3pBfcXLyP+bjRXxr PC3g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:in-reply-to:autocrypt:from :content-language:references:to:subject:user-agent:date:message-id :dkim-signature; bh=CUrwhALaB8piMeiXJyEEdh/QCrG2UPf1wYOmuFiCyZs=; fh=lOecfPjbysiGzlRBef36l/WlHWoMC0vHaB+pO6uJ+To=; b=YxX9Vn4CObY48AhnxSjZHcQWxEzqttrTs+pNiFJWI2jrZJXW98SlSJ3m8H3uP+Wfu/ AGm6qRg+t6XS5pmy+8YPOCbGnxjPiEu7cJMhUIYimnDuW5d7uElEf1JffWcvqO4nTsDO RjSSNY1WhhjT7lC1c1vWFOA+C4ROKjZ5C7pL9l506oBkyOsZA0wHdd8eEz5TVQdy8m56 nYJ9XQOUVM/G46ZAZqWj2Ux9Vkh0/8hl9nhmyQ03ekBFexFU1Q1kZNE/Spr8srfrLUsA XM3JdmH+ywsqpJc162hn2oj15zACGtz3rtcM4fZP6J6qEkM6JaUIf+JRpX9TUUh+RD9i StDg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=FM0JNpvn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id ca18e2360f4ac-8762b67309bsi65197339f.4.2025.06.25.08.47.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 25 Jun 2025 08:47:37 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=EO9WEQPtYQq9s0cmeUFwOk0zAOhajV8qVaGE5W9lsN34Oo7SUtEtXlmabRcy9MhW6C0/9kVdHwV0/ibyQ+oB9qFaPLak8uD3SSf6WouyVaImaAtUL0l9OaoMdQXe2vyw8EHxMqHo5NNEjqSp6V5gdHpyDRWfgBlghfOrJ5cMBI7fqdsCR0305kcpCfdYsCaW4Nl9shyL57H1mewWt/VB63e8lvjvhG/ypjkvZzJabB+RMa13+NFowhCozD837VMBH4uYzdS4zA3dUUvhNvyd+tamnsZuC7pCWFRGQ7BhZ2JU67N7ddmiqhgbC9AD8On1dwvE5DOWwjMXBlKf0s6LRg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CUrwhALaB8piMeiXJyEEdh/QCrG2UPf1wYOmuFiCyZs=; b=N8xuE27vrrZNZUNu/1uCsoPUej0KOW3R0wnpHwqMY6AwFdJGR2BqTeky0/RpOfQeUEd4Zk8UkrOdvw8XWxzYYcnUrrLAWOPK3tF0Igt1VfM5r1HPZd/siAFPBU0gIVrjf5PSdxdM0QUmaQWArDPPZ2/hiV7UUb7A4FpLrHcKLe9q7CCmbojhfBNnLrJs8rpXUWqDmGn2rUipK+Awhm+Rjray5PzBspbiHyDVetE7mlFI2S5g2P3kI+JnmbQOFRwTwF8EhTeByuNgAv9O/ES1ZZgumK52UN+bD78s55EbpIgl7AqgHqbq9UpKqn1ezMCDKpzdSqoDsQm3EtrEVCrTeg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) by VI1PR10MB7784.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:1bd::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.26; Wed, 25 Jun 2025 15:47:33 +0000 Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::8fe1:7e71:cf4a:7408]) by AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::8fe1:7e71:cf4a:7408%5]) with mapi id 15.20.8857.026; Wed, 25 Jun 2025 15:47:32 +0000 Message-ID: <6871c387-5857-4cd7-ab93-fbd27d740cc2@siemens.com> Date: Wed, 25 Jun 2025 17:47:30 +0200 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 2/2] container_fetcher: Verify that tag and digest match To: Clara Kowalsky , isar-users@googlegroups.com References: <20250625135442.1420977-1-clara.kowalsky@siemens.com> <20250625135442.1420977-2-clara.kowalsky@siemens.com> Content-Language: en-US From: "'Jan Kiszka' via isar-users" Autocrypt: addr=jan.kiszka@siemens.com; keydata= xsFNBGZY+hkBEACkdtFD81AUVtTVX+UEiUFs7ZQPQsdFpzVmr6R3D059f+lzr4Mlg6KKAcNZ uNUqthIkgLGWzKugodvkcCK8Wbyw+1vxcl4Lw56WezLsOTfu7oi7Z0vp1XkrLcM0tofTbClW xMA964mgUlBT2m/J/ybZd945D0wU57k/smGzDAxkpJgHBrYE/iJWcu46jkGZaLjK4xcMoBWB I6hW9Njxx3Ek0fpLO3876bszc8KjcHOulKreK+ezyJ01Hvbx85s68XWN6N2ulLGtk7E/sXlb 79hylHy5QuU9mZdsRjjRGJb0H9Buzfuz0XrcwOTMJq7e7fbN0QakjivAXsmXim+s5dlKlZjr L3ILWte4ah7cGgqc06nFb5jOhnGnZwnKJlpuod3pc/BFaFGtVHvyoRgxJ9tmDZnjzMfu8YrA +MVv6muwbHnEAeh/f8e9O+oeouqTBzgcaWTq81IyS56/UD6U5GHet9Pz1MB15nnzVcyZXIoC roIhgCUkcl+5m2Z9G56bkiUcFq0IcACzjcRPWvwA09ZbRHXAK/ao/+vPAIMnU6OTx3ejsbHn oh6VpHD3tucIt+xA4/l3LlkZMt5FZjFdkZUuAVU6kBAwElNBCYcrrLYZBRkSGPGDGYZmXAW/ VkNUVTJkRg6MGIeqZmpeoaV2xaIGHBSTDX8+b0c0hT/Bgzjv8QARAQABzSNKYW4gS2lzemth IDxqYW4ua2lzemthQHNpZW1lbnMuY29tPsLBlAQTAQoAPhYhBABMZH11cs99cr20+2mdhQqf QXvYBQJmWPvXAhsDBQkFo5qABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEGmdhQqfQXvY zPAP/jGiVJ2VgPcRWt2P8FbByfrJJAPCsos+SZpncRi7tl9yTEpS+t57h7myEKPdB3L+kxzg K3dt1UhYp4FeIHA3jpJYaFvD7kNZJZ1cU55QXrJI3xu/xfB6VhCs+VAUlt7XhOsOmTQqCpH7 pRcZ5juxZCOxXG2fTQTQo0gfF5+PQwQYUp0NdTbVox5PTx5RK3KfPqmAJsBKdwEaIkuY9FbM 9lGg8XBNzD2R/13cCd4hRrZDtyegrtocpBAruVqOZhsMb/h7Wd0TGoJ/zJr3w3WnDM08c+RA 5LHMbiA29MXq1KxlnsYDfWB8ts3HIJ3ROBvagA20mbOm26ddeFjLdGcBTrzbHbzCReEtN++s gZneKsYiueFDTxXjUOJgp8JDdVPM+++axSMo2js8TwVefTfCYt0oWMEqlQqSqgQwIuzpRO6I ik7HAFq8fssy2cY8Imofbj77uKz0BNZC/1nGG1OI9cU2jHrqsn1i95KaS6fPu4EN6XP/Gi/O 0DxND+HEyzVqhUJkvXUhTsOzgzWAvW9BlkKRiVizKM6PLsVm/XmeapGs4ir/U8OzKI+SM3R8 VMW8eovWgXNUQ9F2vS1dHO8eRn2UqDKBZSo+qCRWLRtsqNzmU4N0zuGqZSaDCvkMwF6kIRkD ZkDjjYQtoftPGchLBTUzeUa2gfOr1T4xSQUHhPL8zsFNBGZY+hkBEADb5quW4M0eaWPIjqY6 aC/vHCmpELmS/HMa5zlA0dWlxCPEjkchN8W4PB+NMOXFEJuKLLFs6+s5/KlNok/kGKg4fITf Vcd+BQd/YRks3qFifckU+kxoXpTc2bksTtLuiPkcyFmjBph/BGms35mvOA0OaEO6fQbauiHa QnYrgUQM+YD4uFoQOLnWTPmBjccoPuiJDafzLxwj4r+JH4fA/4zzDa5OFbfVq3ieYGqiBrtj tBFv5epVvGK1zoQ+Rc+h5+dCWPwC2i3cXTUVf0woepF8mUXFcNhY+Eh8vvh1lxfD35z2CJeY txMcA44Lp06kArpWDjGJddd+OTmUkFWeYtAdaCpj/GItuJcQZkaaTeiHqPPrbvXM361rtvaw XFUzUlvoW1Sb7/SeE/BtWoxkeZOgsqouXPTjlFLapvLu5g9MPNimjkYqukASq/+e8MMKP+EE v3BAFVFGvNE3UlNRh+ppBqBUZiqkzg4q2hfeTjnivgChzXlvfTx9M6BJmuDnYAho4BA6vRh4 Dr7LYTLIwGjguIuuQcP2ENN+l32nidy154zCEp5/Rv4K8SYdVegrQ7rWiULgDz9VQWo2zAjo TgFKg3AE3ujDy4V2VndtkMRYpwwuilCDQ+Bpb5ixfbFyZ4oVGs6F3jhtWN5Uu43FhHSCqUv8 FCzl44AyGulVYU7hTQARAQABwsF8BBgBCgAmFiEEAExkfXVyz31yvbT7aZ2FCp9Be9gFAmZY +hkCGwwFCQWjmoAACgkQaZ2FCp9Be9hN3g/8CdNqlOfBZGCFNZ8Kf4tpRpeN3TGmekGRpohU bBMvHYiWW8SvmCgEuBokS+Lx3pyPJQCYZDXLCq47gsLdnhVcQ2ZKNCrr9yhrj6kHxe1Sqv1S MhxD8dBqW6CFe/mbiK9wEMDIqys7L0Xy/lgCFxZswlBW3eU2Zacdo0fDzLiJm9I0C9iPZzkJ gITjoqsiIi/5c3eCY2s2OENL9VPXiH1GPQfHZ23ouiMf+ojVZ7kycLjz+nFr5A14w/B7uHjz uL6tnA+AtGCredDne66LSK3HD0vC7569sZ/j8kGKjlUtC+zm0j03iPI6gi8YeCn9b4F8sLpB lBdlqo9BB+uqoM6F8zMfIfDsqjB0r/q7WeJaI8NKfFwNOGPuo93N+WUyBi2yYCXMOgBUifm0 T6Hbf3SHQpbA56wcKPWJqAC2iFaxNDowcJij9LtEqOlToCMtDBekDwchRvqrWN1mDXLg+av8 qH4kDzsqKX8zzTzfAWFxrkXA/kFpR3JsMzNmvextkN2kOLCCHkym0zz5Y3vxaYtbXG2wTrqJ 8WpkWIE8STUhQa9AkezgucXN7r6uSrzW8IQXxBInZwFIyBgM0f/fzyNqzThFT15QMrYUqhhW ZffO4PeNJOUYfXdH13A6rbU0y6xE7Okuoa01EqNi9yqyLA8gPgg/DhOpGtK8KokCsdYsTbk= In-Reply-To: <20250625135442.1420977-2-clara.kowalsky@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR4P281CA0142.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:b8::6) To AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS4PR10MB6181:EE_|VI1PR10MB7784:EE_ X-MS-Office365-Filtering-Correlation-Id: 70cb353d-1024-4999-7d36-08ddb3ff9955 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|366016|1800799024; X-Microsoft-Antispam-Message-Info: =?utf-8?B?WUI3a3IzTzFQRmE2TjNqcFBubGtCM1U2OEpLTUM2emlmTUNZTWVNb2JUZi95?= =?utf-8?B?OFVPNTRHOFdjNU5sU2ZGS1Rid094Z0hURFdOL1crNG0zVm9WbjFlcEdwNWpJ?= =?utf-8?B?SDdBZmtpWjhVN0dscytzL3pGM283QitkcGRVclIzcmJacjE2Q1RUYkRLTDZL?= =?utf-8?B?Qi9qd2ZIT0ljZklZTEFTL0V3SmZFWTJTRDZoR1l1QmdVVzc0L2VkZVAyRjR1?= =?utf-8?B?dmJSMkFLSHArekY5ZXErcHJJT2JPNFo4ZC9LN0FHSVRITU52eDR2OGdVZWZH?= =?utf-8?B?RFN0QU1EcUlFYlBGU1FqWU5xTG1IY0JuRFJWSGUyV3UyK2FKSWh6Y2VVUTBa?= =?utf-8?B?SmRWb29uWTRuaW5na0R1TDd2K0hlOHVuV0RjWGNoOFJVRXdYb3hYUjBScEk3?= =?utf-8?B?L2tsdnRidUNFckx2aURyY0pBblM1Q0VCMUhHSkhtcFNJTzgwRFp3cHpQWnNC?= =?utf-8?B?ZnE4cEw0ZzhKazZEKzdZYWNhSFplUU5WdmFkbllHOU9jQnhObkZoZVdRVWRI?= =?utf-8?B?V0hmcFVtcENnYW5HTGdITGxBT1ZJNHpWNmRCblVGRHEzWHd4d2JTS3VUUEc5?= =?utf-8?B?SHNFdCtrdEtna0VNa1R3VmczazA5cHNVd3c4dTh1NGc2Q3Yxdm4wL1hMQTBU?= =?utf-8?B?b2c3cHNrMzBHT1RRRjdzM0RXVjkxM09Rdll4U2tKcHV5NHlheitDamFncEhz?= =?utf-8?B?WnIvTUpIYlE4eTlhbHhUM1N6ZjhJMUVpM3E2ZiswdTVUYXRUM25WckNuSkFW?= =?utf-8?B?bk40R05TTm9Kd1pPZGF6UzhFSkFtMUJnblFUUFBtS3lRZTRTK0lSY2dTSHcv?= =?utf-8?B?Y0JWUUtGaDRsRGVleFZzTjJNenVPK01DMWpTRzEwT2lmWWM3a2ROUXJMN1Bq?= =?utf-8?B?emM3NW8vSG5oc2pJL25TT28rTDV6NHJUWThGMW1sTDNCSURWOFFLMGx4a1hK?= =?utf-8?B?R1NuTVJ0cXoyTGVDMnByN2dEV0FHbzBobDVTZTBJcWsybkM3WS9BakJvNXAv?= =?utf-8?B?eVEvWXFScTI4Um5tU3dLSGYxQmFGYWRKa2lWcWZKWHozVE9oN2doaG43dTZZ?= =?utf-8?B?MWhmVWZCR0NaeFI0eXpLbDhwbzM0NHd5cFVQMFl0YVRPVjVnTFY2eDFhUGo2?= =?utf-8?B?WTFzdkEvN2h2TitObHN6aGNaZHJqZkllbnZrd29WWlUyMTlVODh6eVcyYStP?= =?utf-8?B?UDRTNkxtN2JwTkhGSnBWM01jMVNLUk9STG0vdTI3TGNmcmppNWl2N2hXa1Fn?= =?utf-8?B?V1VLMUdydTlnTGh5QnVzOW5KdmhyV2dOYnBNczlyMndDUDBNTE9ETnZxNjJn?= =?utf-8?B?RjZTbzdSS2paQ3NLemw0MXZ1N0pFZHJDdTRFaDRPVW9iZmh5djFlWDJZdFlp?= =?utf-8?B?SmpHaVZkZVp5YW1JYmlQbWhDTUZpeXJOYVJBUm9ZOEN1MXZwN2NHeTNKb2Nl?= =?utf-8?B?eUNIa2dXQ2ErNzdDaFFCclQvZmNZUU51d2NDWUlUQlJJSk1ORnBqL0RKUnA5?= =?utf-8?B?MWxMSUpoOHE5VUxYbmVxaGcyWmQ4em5nUHFjYkEyWDFuM3VScEMxbGFhdGF6?= =?utf-8?B?bXFFV2RTalB5VmJudXdwMEVEUkZwL2ZyUi9PVlJMV1RGK3FoYndFQUhidXJY?= =?utf-8?B?YlRMNmNPYlFIRVpIdGhGUlF2UTdXN1drZC9LY2xHZVlqRDc5VGpSRHJNQ1Zj?= =?utf-8?B?WlJUTDNXL3ZBMmJOK1hRNEhNbW5teFFIT1BybVh0OFpjaCtUQkEvTXlzNWdS?= =?utf-8?B?VHUybGh1NDZvMDc5Y1RhdFRFTjJGZHdBYWpOWURWNnZjaS9ST3Y2SHNjd1ZW?= =?utf-8?B?djFuZ0lMT2NuWmpJYkZYSVkrUjNUNFFINmlvQUNqV21OUGliY1JpZzIyUFRw?= =?utf-8?B?TXc1cG5nVThWaHp2MldZY3VSYmZRNmhpYTZvZnN1SStRMXphbXcvcTlzY2Mr?= =?utf-8?Q?SdNa7q8+d/o=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?MXdPMWpxd3M5Y2RaMDlVNGtIS1JDTWlGMDhuWmZIYkJWSTNMYWRWRXJBaGFa?= =?utf-8?B?RHhNZlhXQ3BVK3ovUHVnTXVuY3NmMDVUSDhzbEYyL0o4QjZHK2RNS2Nad2tR?= =?utf-8?B?TzFsOXVTZExWSURoNTJCMFE3cHdjZC9xVXFqdnUwNUVwQTV2WFprQ01VaGVL?= =?utf-8?B?bTJrTjd5aVBhb3dhM0JubjQrWUdnUTJkSzBzajZuZHRlODBQdnBGaGhpcEs3?= =?utf-8?B?TjlxZUpoL3NSK1NJVk03OXhNMUtIb3JXdFRsSGhsZkNMUGoxSUdqdzNyWXp3?= =?utf-8?B?UlZOWUFPZlF1M2xoZW9ObDl1TlZ3aEU4RTR0c0xpcHZTR0RjZnQ2aFh5NjBj?= =?utf-8?B?a21EUGFqeCtEUmpuQnlHU3BXM1BQQzJ5OTM0Nlp5TEJQazl3Zm16SXBndGVr?= =?utf-8?B?QzhHa0VQT1poSW5HNmdSVm1TWE9OZVFFenN3ZHJUSk84TmVyNmtRRVhjbUM4?= =?utf-8?B?L2VNczVrNzRJV05zL1NKSVNadjM1Snk3WHRpamZhTW9wQ05VMjVtZmpXTlA2?= =?utf-8?B?WmFMVnVwci8xV1lqNTdQcXE1V1B6UWtpSHVVOStnbHNvT2VQTTFYNWR2akJV?= =?utf-8?B?MEo4aFM0dGpJN0MveW54cWNjZEt6TXFQdEdYQnJQMTlZSlBDVGhqV0ZJT3gy?= =?utf-8?B?QVV5L0VTQVEyTU5namJBY1FVckxRS0NScEJIMVdvcXRDNmtUanByQ25qd2pY?= =?utf-8?B?T1dkNTk0OUpCQUFheE9LRDc3RlV2Rll6Q2szUUdTcHNBWHAxRzlYUE16VFJo?= =?utf-8?B?UE54RXROdWVBdDlHcmFrRkNDYUZURU1OMHpQcW1tbUdmSjVUc1JTR2l5VFd4?= =?utf-8?B?V1EvRVZpOXBMKzhTRFM1SXZnakZCY3RFWGtEdmNMZFk2ZDhIWE5reTdDeEJK?= =?utf-8?B?VnQ2VGhxdVJzL1FaUXRacHVFTVZ0eHhBNE1MZUc5cHdpTExoMXIrUTR5clpK?= =?utf-8?B?SDViTW9tZnpaTUJVT1J4eW5ZVUw0NGQrRC9XMEVmenJ5RXB3QXpoQk5JcFhV?= =?utf-8?B?cWdwVTFrdXFYU1l4R0g1VnZTNkNDTHRySnJBUWRzbXNBMXBJTzNsNWh2K2Yy?= =?utf-8?B?ZFN4Z1RZYTVHY2FKMVdma0hyUmVyNllnMTFRSmRqKytjR0dYR21ZN0xldFY3?= =?utf-8?B?QzVHb3NsOVZyOEVFNmhYTXJyNTcrR3ZwcWJGSjROcFRTVEh2Y2YyOXd6MEdR?= =?utf-8?B?emtaaFJUdEJYaUZwQWJndER6ejJNOUcra09ZdVYzMzVMZ2FhQjdlU1NaN1o3?= =?utf-8?B?WFdkejRHWkNnUDV5ZnE5Rk9yeUhqRWRUaExLRzQ2L081dnRpS2ZXYXo2S1Zh?= =?utf-8?B?dEtxZnBNTWRPZWJGYU1pYmlrY01uRkxXVGVFcnNnTG1Oc1Rkc3VDaFlBNmlo?= =?utf-8?B?ZHNBVVl5czM3ZU1tdkoxazQ3ME1nTmgxNUZkZkZFTmlZalptbXVLcVd0bGpm?= =?utf-8?B?MnZRMGJUNXc0eFBYbU1rZkIyN0hUNlhzbGRzbkpJU2FWc0FlL1R1TjNuNEJ5?= =?utf-8?B?T2pucVlKVWJLZ1JBVUpyai9VZytwZmVEWDFHVkFKZWs2TkhMeVRKQkcrdWVw?= =?utf-8?B?SGMrdmdIcEhxMnlCbDRnSFlUV2tpMVRGZzRLTis2Q0hwMXFWLzVNdmNHa1hp?= =?utf-8?B?dW9rNWRiU1hoZVdBalpXV0Qwd1hJVEVqZlFaSEp0SjcxRG5CclZ0WEt6Y3BN?= =?utf-8?B?emVPUGRyYkNSMGo0R1lWS05JMzQ3dVBsUno5UG9VdDg2Q3NxWW9seFQ0Ulpo?= =?utf-8?B?cjJBM1VKMDdYREJna29jL20zOElwMkVQUTZnbUtxUVBkbTYrcUl4d2hYN0Zn?= =?utf-8?B?ZEFuZWNtWFkySFFFV1JQT1VFVnJjeCt3ZVZiN2NmTDJYNkk0NlcxV2pTV1Zu?= =?utf-8?B?MVVBRGtlSytKY3JWRC8xVDREVlYyelJlTCt4d0FrWWZqMUMvMldKWlVZeTM0?= =?utf-8?B?UXBaQ3pLcGk2bXdsUlVocklNaCtrT3doN1JkN1Y0QmEvQ0JoWjg1WHlVUHVE?= =?utf-8?B?VzlLUVhMNG9PaTY3R1A0Z0RRYm1mRENDY292L2dzajFuYlFIQTM1blJ0R3E2?= =?utf-8?B?OXo0cVBERXlLU05jdEdtMUh1TUFQUy8vb29lQkV2MGpjZUZjdkZnN3ZyVW9a?= =?utf-8?B?NW14K1QxZnlKTHk4N1ZtN0x0STJuVEFGUTV2ZEV3WjBiODJYdDUrcWFxUExC?= =?utf-8?B?Znc9PQ==?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 70cb353d-1024-4999-7d36-08ddb3ff9955 X-MS-Exchange-CrossTenant-AuthSource: AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jun 2025 15:47:32.8631 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: oIqpQ1XgqD4/KfDInMxniWGk5f8yBtF8VjnGhemn/xHsE4L8n8C+sHCyOz43WOe+elYEWjoLllORwzCCkbd/tQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR10MB7784 X-Original-Sender: jan.kiszka@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=FM0JNpvn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Jan Kiszka Reply-To: Jan Kiszka Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,T_SPF_TEMPERROR autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: kxNMQQXIKgYC On 25.06.25 15:54, Clara Kowalsky wrote: > If a tag and digest are specified for a container image in the SRC_URI, > the tag is ignored until now and the container image with the matching > digest is fetched. > With this change, the container image is fetched based on the specified > tag and it is checked whether the digest matches. If not, an error is > thrown. > > Signed-off-by: Clara Kowalsky > --- > meta/lib/container_fetcher.py | 17 +++++++++++++++++ > 1 file changed, 17 insertions(+) > > diff --git a/meta/lib/container_fetcher.py b/meta/lib/container_fetcher.py > index 16467abb..75366988 100644 > --- a/meta/lib/container_fetcher.py > +++ b/meta/lib/container_fetcher.py > @@ -11,6 +11,7 @@ from bb.fetch2 import FetchMethod > from bb.fetch2 import logger > from bb.fetch2 import MissingChecksumEvent > from bb.fetch2 import NoChecksumError > +from bb.fetch2 import ChecksumError > from bb.fetch2 import runfetchcmd > > class Container(FetchMethod): > @@ -47,6 +48,22 @@ class Container(FetchMethod): > def download(self, ud, d): > tarball = ud.localfile[:-len('.zst')] > with tempfile.TemporaryDirectory(dir=d.getVar('DL_DIR')) as tmpdir: > + # If both tag and digest are provided, verify they match > + if ud.digest and ud.tag != "latest": Instead of "latest" (which could have been specified explicitly): and not "tag" in ud.parm > + inspect_output = runfetchcmd(f"skopeo inspect docker://{ud.container_name}:{ud.tag}", d, True) > + actual_digest = json.loads(inspect_output)["Digest"] > + if actual_digest != ud.digest: > + messages = [] > + messages.append(f"Checksum mismatch for {ud.container_name}:{ud.tag}") > + messages.append("If this change is expected (e.g. you have upgraded " \ > + "to a new version without updating the checksums) " \ > + "then you can use these lines within the recipe:") > + messages.append(f'SRC_URI = "docker://{ud.container_name};digest={actual_digest};tag={ud.tag}"') > + messages.append("Otherwise you should retry the download and/or " \ > + "check with upstream to determine if the container image has " \ > + "become corrupted or otherwise unexpectedly modified.") Rather long. Is bitbake similarly verbose when detecting a checksum mismatch? > + raise ChecksumError("\n".join(messages), ud.url, actual_digest) > + > # Take a two steps for downloading into a docker archive because > # not all source may have the required Docker schema 2 manifest. > runfetchcmd("skopeo copy --preserve-digests " + \ jan -- Siemens AG, Foundational Technologies Linux Expert Center -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/6871c387-5857-4cd7-ab93-fbd27d740cc2%40siemens.com.