From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 17 Mar 2026 19:42:08 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-yx1-f62.google.com (mail-yx1-f62.google.com [74.125.224.62]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 62HIg6SO028210 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 17 Mar 2026 19:42:06 +0100 Received: by mail-yx1-f62.google.com with SMTP id 956f58d0204a3-64ad0c50067sf1461627d50.1 for ; Tue, 17 Mar 2026 11:42:06 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1773772920; cv=pass; d=google.com; s=arc-20240605; b=Ek9PQi3Ebn5bczfiRKrReq8Qq3LzUFcW5ZGiv9R7Mwuwe9fTrMVA+BYPiSblk9FpsQ mEyq+Z6ZnSMCtEpKJGuC17FH74estVAnBHSrMqG6yaowEz0KGv4IknH/AOdrQnzvg94H jKpy9hNOlVjjg9f/YBkO4hdrcJ9JbR7SrzB9VePmcuFXHNV6e/gSkL4v142N1ImJTFTg TUmk2wJM+a2LLVvgwTAqdKonI8orfyrXRVO09SezqLyb+RU+dIJqIdpnMgVHUN50GJ8k HHBnsnnTT+tKccl9IRn/t4dQ6oAbWfK7Et5pOvX+A66+dQeLdnpACZP4jVNk5g4bASvp tGmA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=DXIP4yu7LvfME0+twX8xDo72VNSdUhVSr9/5mBRWEwY=; fh=m4y2KmX+AkPX4JSDB0st5sBT2KJyV6BZqa8DS5yKRQE=; b=PrCItCGtRVDvULhpAZBB1k5Omu1Evd6HO9jC3NULt7POIaDE3LJaPOKIiT5jMUxchc Lq6+k0UTBX1FIQT6NwDB3o+Ltonl1Vsn5dO92s86TuDnr+5PHZHw0D6L0exO2pt7wxbh RACa8wOMzJ8Ign5YZp/VHRkBIFdq6eL+vfrfQMzOV0PL4iKELuAznPUuuwV1Sp5cgUPx 4p5zg/Al2XXUONCrx6uoByZn5qypVWHBx/KNTY2v7qf3vjEJBSGumtmzADj0GyDSbciW a+oPbKjLQSgXBpoFREN+5ySfjCO/aqBJiVqK4/HmBh+rYSZ9CsGKordDnrsP0dvGK+MK Efww==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=TlRmxzdK; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1773772920; x=1774377720; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=DXIP4yu7LvfME0+twX8xDo72VNSdUhVSr9/5mBRWEwY=; b=VPwXtwV4BGV1u6aIoiZk+NEXjyLgONykY6tS6p77tiDUq32zLd29peuEkpoz31jagL TZSNzqNoQLaImsrrqAQHoe3fw632x8b12Ik/IsDzH0V0RugItwW/ODeQaF6f0WEGkcbP AXIo7n8vwxXFxdvYahdr31Q8DVkk9TyYTjhY2MsHWk5aMJpgKi0DmgUelweCfLnlEmTe ds7q1ARMDiwvgF5AoeM4MmTU/we8oHPyB4zcJ1HHmfSQKMId3O+JhD8xMerJ8kiwuWqL y9FsrPT+5srMzIAGUeqGfPW0005bNlXATDR4nYjaqNImkwSugp8v6+43/834v1BvyMyh z8Ug== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1773772920; x=1774377720; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=DXIP4yu7LvfME0+twX8xDo72VNSdUhVSr9/5mBRWEwY=; b=arSCXWeu9PMaA+ut6NQN+uahuZeMGuHWwOffOgfsBVK55aRK0hPtfe96nP+s7F+9Kp 7/qN7FtiPAw/CcZfhblVzAPLu0Uj1L9vStZWbuOJ4ClNVbeidpNkZSDTCy7m7DB6M7iQ a5+9otdRC+TYDSFArXIQSbKBTdivG12RMWIJeAAiwbuwPPstHPBE3NbNsX5ISycdOvca 8J13hDt9fd/4ZsMLkl7/UrOSexisGOrnn9mi5p/IDUYmKuV9g5L0Af/Ehj9FPQDg88yV wwvENwHBC4x98SE4ZS55WmZZdha5EgAieajWIxQwbXAkv/OextnlbBV7zOIbgFIxSQso at3w== X-Forwarded-Encrypted: i=3; AJvYcCUrp/4MWTp+SSaHUeU6k8H8ej4+by5wgCVSEVLtrSbQ3wCFbftP66grbx5zByVgla2I6EF3@ilbers.de X-Gm-Message-State: AOJu0YwS+adpoWOoJ6FLHcd8tN2tQkkJbs/Wwj5J1jEg03RzGAP59hrS 0wCcZWEZDPIww8ZrCvyScouF6WwaroyMBtuh4FRtiR1BScr2jcJPaHk6 X-Received: by 2002:a05:690e:158f:20b0:649:ccde:d6fd with SMTP id 956f58d0204a3-64e913233e9mr736080d50.24.1773772920287; Tue, 17 Mar 2026 11:42:00 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+HYYdEQ70BYsbGhUbE93E44OH2T8GgrlNDSaA3/w893AA==" Received: by 2002:a53:ab08:0:b0:649:3fa4:9e9e with SMTP id 956f58d0204a3-64e61a4b97els3919829d50.2.-pod-prod-05-us; Tue, 17 Mar 2026 11:41:59 -0700 (PDT) X-Received: by 2002:a05:690c:7281:b0:798:c349:7207 with SMTP id 00721157ae682-79a718041ebmr4398387b3.4.1773772919310; Tue, 17 Mar 2026 11:41:59 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1773772919; cv=pass; d=google.com; s=arc-20240605; b=d40NxbN0fnWU6t3iOrGdbOQCANaidYy+s7n0pr9gdcvXyW7N0eN+ERAwd9T/oDMuAN Znf88xpl1jiOrRR20CP78e7lyO3+Z4XO8Aq5g/ukf5ibSViMEbZgGrazPdNAAQHN2ZKf s+a2+H4W5YIVJ8Pc4J+8RNO9A7NpjF4uDzwT6rAvoLSJ9Qkgp2Ut/C1easImAIr05yQw 67HRulIMJ3vCoW3ZN+IbTif2l1PwmbFc2f2QAF5jVHwzzTh8I3j4L5Ln00VvOOFlKRLT 7tqTqcz338U3Jn1yqfQLeln7dhiamb0MD1PknGAi0q7S05X7lKC1CkXCAKaxomeQ3HEv Kd9w== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=qQikmP/111ugFNvoVHSWAom1leICX/71OmW3xRCxAcI=; fh=i+Xhw+gZGsy07LUNtnOuPudI080xuV0bGtnk6RWnV2A=; b=gshFIawrQulWORMXbXrSvMDa9mO3gf//+r/kyB6zwNjxXAoHX5V9OdK1IahHTKXN+E 1DSKZLVwALc10uBPNnTDO0jPitTOvwh7AuUQRSQu4VM6BIG9m+aKB63QFuc5NALx0Phr i2AUq5ddbGF3BHaRVQHVvRzOXRxftG070GVUkVR0Ef72/mBjJ9+EtfTusiflhohmVvtL dtYv25UAf14Ct5Gj2+8siBDPegJ1Fd9T++yPtDwG2Hw0X8Gd+misc3iYqQauiYGl7i4a KJ1YpAquFtRydMCPVZEoOtoEflbXO2HPthgiOow2rX38WGz/GpbBqR15DYF6Rhr9wZ4i 3pPg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=TlRmxzdK; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c200::3]) by gmr-mx.google.com with ESMTPS id 00721157ae682-79a7154b6d8si130087b3.3.2026.03.17.11.41.58 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 17 Mar 2026 11:41:59 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) client-ip=2a01:111:f403:c200::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=N+j1LD2q4rt16vauzwOu55vgo2cU3ccGGhh4XOocDRrw0JJyaAmmgvfWEpQqisLa2lWESETgeawImSZ1cH/PwUlK3qWYmq/U/PZr52GH87aGsJ7AfQIsGdXNY/hdy1uj+A2clmyoN08Zga8gyA6/48uHTH/1baWERcVOmxgZDGsrk/HPWx1uc8kr6Qc2a8eGfLteLBWGZcxG8V66cVh/7imxXp/Psn2txXSI2emz3VBtyhdP9EMzHI+baVKj7DDudrVggg70gC5xYypbzTSuAkvFmHwZc5uaQ9Nn5sHNdpEkLXwg4wD3HkLCiMjmrn97SNBqsYsMSR6o5VKJhqU52g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=qQikmP/111ugFNvoVHSWAom1leICX/71OmW3xRCxAcI=; b=rQtarJ2deQ+EKmB2Hxd17382LzDpIguXfgRjXRHrOOix7Yt+gw8XpKixQeOphOyb3utzL+GXC9OqqzsCuLSdABgNBaUetzL6ONDvWykAr4saA6BV7U/44HyH9f3KJxYDkX5Ar1kIDRkkjogO6192HVMfQsId/SsJR2Z0fQTUAEgtoAlklrSh9jBTq3Iv9IO+qL5egDJfW5cfWBttJuYt0DV1H9oX54okah5q8Jrdj36r0Zgy62z21PfAvg3Rev88MNbHZdFF6JPNvRNfWAQTP90tvd1kV5C/y5U0LnqFQkprciDrJRQl67rfu101OzLLmnUBX9UCSjugArZ/WXbuMQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by VI0PR10MB8426.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:235::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9700.24; Tue, 17 Mar 2026 18:41:55 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab%3]) with mapi id 15.20.9700.025; Tue, 17 Mar 2026 18:41:55 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "isar-users@googlegroups.com" CC: "Gylstorff, Quirin" , "Kiszka, Jan" Subject: Re: [PATCH v2 00/16] add support to build isar unprivileged Thread-Topic: [PATCH v2 00/16] add support to build isar unprivileged Thread-Index: AQHcp/llUxhor368KUuMg//RNL2iGbWzK4AA Date: Tue, 17 Mar 2026 18:41:55 +0000 Message-ID: <6f5e70f4bffa0b21b3956f64d3699856bd2734a0.camel@siemens.com> References: <20260227145716.3794146-1-felix.moessbauer@siemens.com> In-Reply-To: <20260227145716.3794146-1-felix.moessbauer@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-9 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DU0PR10MB6828:EE_|VI0PR10MB8426:EE_ x-ms-office365-filtering-correlation-id: be028bff-f058-42d9-3a90-08de8454dd50 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|10070799003|366016|38070700021|22082099003|18002099003|56012099003|55112099003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(10070799003)(366016)(38070700021)(22082099003)(18002099003)(56012099003)(55112099003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 2 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?NjRPVGxSN3Y2TVZkTWp0aHpZOUdqZWZqK3FkNHBBbW9pUWRmeEhta2dBWnU4?= =?utf-8?B?VnJrTEtoeGRjY1Z6SEFmQ0JwQ2IzYkpQRWg5eUE0dnd4ZGlTdjRoYkZSdzVF?= =?utf-8?B?Ui9xMmtDdUgySHIxeEQ4ZmxZKzVCaS84SG96WXdCWVNWUDdjdjdrUHd6cm10?= =?utf-8?B?Rmk3Z0JHSVVucTM1NWpxV3FrNFczSDErRzlvN2VzeWZxcHo4RTZIeDR6aHM5?= =?utf-8?B?cEJWcEt3QVNkSWlSUC9wUTZhQXdLdUdRQlZON29mTDBjRlE2OUxZcGExY2wz?= =?utf-8?B?RUpKbTkzd25TWThpVjVkOUJCam5GQVZCNlk3Wkhwd25GNnNjb2pLTnNhMmJI?= =?utf-8?B?V2dXdk1FRkRnTmE0MTdmQ28zaGFZa0Y4ZktYaDVQMlFManFIMlZDUlJLTmQx?= =?utf-8?B?WE5WY3piN3ZpRmNrVlFXUzZOWjlhYmtRb2RJaVJENU5RbG1RenVQemJwQzNL?= =?utf-8?B?TnVUV2E4UUFYWnljK3lBYXZ4VWtCSm5nWG8yZzd2ZGFvN0VXenY5eUZtRnNG?= =?utf-8?B?SDNQODRBUlF3TitqWFNjd2xuVkJQaVBTT2Iyck83YUhwRmtKZExGSi9NRGo3?= =?utf-8?B?VllzZXNZSi9nMEt4aEJ0NVd4aGdkWVVuVkZNZlRzRlJqNlZ0WmxmRGk4eDlm?= =?utf-8?B?dXB1QTIrdVp3eU45TnduejRBMGc3dlBjVUdWVFJYVitGRTRLY2VadUhGWDdm?= =?utf-8?B?RlhzUkVwKzd1V2NoSVNDTXhwdTRDK3Z2WXlCSVV1Yy8zWW5xOWZnVmhHbllU?= =?utf-8?B?TU5RV09TWHVvK3FzcktBRy9YRXhtR2FnU1V0MEdQWUcxSjFiTUphZ3BRdyto?= =?utf-8?B?dzVCQWpKUXlCTjBPUEdVeExVQ1N3dDFUd3cxTWJKT3pvVy9DTmNjcFV0d3Bp?= =?utf-8?B?bUFLWWE2TmswYUVhK1NRbk9DQ09abk1CbkFkQ09ocm9ITVpsVU5DUG5Ocjcy?= =?utf-8?B?djFONi83K0hyYnB2Z0pGRTE0UXlIZS8rYXdqZEdrRmF0enVzMmk0eXFFUnRJ?= =?utf-8?B?U3VtVE5XS2dwa2lvUXEyNlVvdExoZGh1aFNmcS9IK3ltb1JHTUJabFJsUXAy?= =?utf-8?B?dHZPbmpDSFNqaXlXRnc2SlRJQTRMOWxaMDBINWpHSWh4ZW8wRlhjRnBNaXds?= =?utf-8?B?VmZiUTZHNGY3RTBIaERMSWxZV2xTdlp3RkZuSk84OWNVank3UGl3SGNaRGNN?= =?utf-8?B?anlyakY1MTFiT0I1dDkvTXNwL3gxWE9EUHhvVjMrM0FkWjIyTFZ3bTZ3ckFv?= =?utf-8?B?K0xCVGtqTG5KbzRJWndldmpMV3h5MzJWamtmMFloOEtrMEpUaTlPa04ycUJm?= =?utf-8?B?eEFxMG9MSmNQeTFxVHNkMmFNQlQ4OVNVajd2ZHh2SCtXYStCajJDUnlNclpk?= =?utf-8?B?WmlIM0tWQ21NKzB4NnlpVHB2MytnclVRdzR2NkozbEFEYVZ4dkNqRGwybEFP?= =?utf-8?B?bnhuRmd5WnBWWTZUOU5kRkR2akFWRThralZHVHNJYjZPOHB2WDVWTEk4TjQw?= =?utf-8?B?UlZRT3RVVmtRV2lCZ2V1SEY0Y3JoVW9DMVpOTGtMRERiZFEzaUN4ZzE3RGZC?= =?utf-8?B?MkZaakN4V3FzcVFuY1ZiTFBhakowS1orV2hSQzBTTVQyUk85Wkc5QXdyZFQy?= =?utf-8?B?QXNySHVXK2J0Ynlxb25zRm5ZdnJXWG9DalIxU0pjZGtqVGw0aTh1RFFnTzJl?= =?utf-8?B?YlZERHlCdS9tckxmZ3FPM3RpNnJuUzJjSEZOSUZpREpLdW9PdU9pcXlLZ2tV?= =?utf-8?B?dFVHUStaMjBvZGV1dlYvenowbUNMWS9BQjh4OHpnSkU1V2Zmd2xLNGJFT1dN?= =?utf-8?B?ZTMvOXF0R3hTdTlmMThLYjRMOVVNS3RGK2p4V0ZFN0I0ZWpUZmg5Y0JHcWpT?= =?utf-8?B?NVo4ck9yV3N5ZWNDdWF0WlJTb29xVzk5R08ralZjZHUvV3oyejFMbENsSDZp?= =?utf-8?B?aWplUllFcWtJOUhBZUtuZjNpWUxad2xESHY2LzJKbUNoLzhuQ0RxRVpYelBE?= =?utf-8?B?NytjY1pSdmVBbXRLaHAvbDJyVk5JZ0UxTWY3ZEJITjF0YjJtREtsYklnWFlC?= =?utf-8?B?VEVVZ2xkcnUrVk5OaHFqZ1psTlh6UEE2eEE5TUFxU1JaZXhpZVVUNWtJd0Fs?= =?utf-8?B?WThXWlAwN1FCcTlDVDFCalNwYk9NcUcxUnNJMjdWaUdBSURBWHRnNDRidi80?= =?utf-8?B?WFlIQzU2MHROL3VoK0dJMXBmVmdQbExHRjY4TG8zTkZwalI5SzVLQWlJZ3VW?= =?utf-8?B?U3RHK3lwS252VWR3ZnM2UEVlNmFDT1NZTEJmV1VaK3QzaVdnVjBIZnlJNkFT?= =?utf-8?B?QWdvNHJtL2xTa2UrazRYTWpydDF0ZlZvTHdrUENVWFpBdERaSjREakEzMzdt?= =?utf-8?Q?Z74XSEpY3gWg6NOajXnDO2xDIvTKNpu6SrhfnfjVTLdkR?= x-ms-exchange-antispam-messagedata-1: J/uAP/2Juz8jkJTo6EGTds06GC4KKUVuWvM= Content-Type: text/plain; charset="UTF-8" Content-ID: <0B2FA34253925B44AD2A4C1013A835EE@EURPRD10.PROD.OUTLOOK.COM> MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: be028bff-f058-42d9-3a90-08de8454dd50 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Mar 2026 18:41:55.7860 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +IYf/SNCTEXF5ul3X79M7v26UZ8zlgOxf4xSQMdQKVDh6k9a96XHSC/YragxzZoLQ532VrqnhANbONfstkyjCjC8/gBap+wSeYVdBK3rBJU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0PR10MB8426 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=TlRmxzdK; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: 4JtGsW/C/ZUy On Fri, 2026-02-27 at 15:57 +0100, Felix Moessbauer wrote: > Dear isar-users, > > currently isar requires password-less sudo and an environment > where mounting file systems is possible. This has proven problematic > for security reasons, both when running in a privileged container or > locally. > > To solve this, we implement fully rootless builds that rely on the > unshare syscall which allows us to avoid sudo and instead operate in > temporary kernel namespaces as a user that is just privileged within > that namespace. This comes with some challenges regarding the handling > of mounts (they are cleared when leaving the namespace), as well as > cross namespace deployments (the outer user might not be able to access > the inner data). For that, we rework the handling of mounts and artifact > passing to make it compatible with both chroot modes (schroot and > unshare). > > Note, that this series can be tested on a custom kas-container build > provided in [1]. Hints how to migrate downstream layers are provided > in the API changelog. > Dear isar-users, I'm currently waiting for the isar release and then plan to send out a v3 that adds support for the cached-base-repo and src / dbg package downloading. By that, the series should be feature complete. The last remaining aspect I don't have a solution to (yet) is the sbuild_dpkg_log_export in dpkg.bbclass. To me it looks like the dpkg dump is generated but never consumed anywhere. If someone could guide me how this is processed, I'll implement support for this as well. We further need to clarify the interface between kas and isar. The current proposal is as following: In isar, the rootless mode is activated by setting ISAR_ROOTLESS = "1". In kas, the rootless mode is selected by setting build_system: isar- rootless, which then sets the ISAR_ROOTLESS bitbake variable. We need this two-staged approach, as kas-container needs to be able to parse the top-level kas file and extract the isar / isar-privileged / isar- rootless mode so that it can start the container accordingly. Best regards, Felix -- Siemens AG Linux Expert Center Friedrich-Ludwig-Bauer-Str. 3 85748 Garching, Germany -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/6f5e70f4bffa0b21b3956f64d3699856bd2734a0.camel%40siemens.com.