From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6721684426774806528 X-Received: by 2002:a5d:63c9:: with SMTP id c9mr9329157wrw.15.1565166598994; Wed, 07 Aug 2019 01:29:58 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a5d:53c6:: with SMTP id a6ls26294402wrw.2.gmail; Wed, 07 Aug 2019 01:29:58 -0700 (PDT) X-Google-Smtp-Source: APXvYqzFkI8/TQm98jSe4bp+TEUBfQ3ukYo4ONe6X91Y7oEsLmUGGAicRAcdXMSq/K7UgiLKP2P+ X-Received: by 2002:a5d:51c7:: with SMTP id n7mr8938798wrv.326.1565166598724; Wed, 07 Aug 2019 01:29:58 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1565166598; cv=none; d=google.com; s=arc-20160816; b=kotc6RzVT+pouwAp+fxr3i5oa1fycEDT2/Vs4phX1m2YvEEbW3M2gaQFgWZnn7pxXO 2jxRmQoRkzLl0EcAzbnv7UqVZw+rvsDoueHd2MlBYfu/bFOIkhhxfsQUkcEDFxm29Xwe Xe6RwXrvzCAfFmFMyg7W6QLoSe/yxnhSyOh7plUuY3VAfCbB1K9cxDgIJe4daH2Mmpyc Z5JQMOXks4MJ0oOUspFSA/Xq/94dVjF9qj5rzncGh/Jxy30zNXqDWG83KxWUuPVxfGlq VZEfSQXYpDJk3TAKAhaOZj+DDYr7zopcZsE+mj2ZxPiGZbbymVnFCk6aC4UwoLRc2STW BkrA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:cc:to:subject; bh=HOGp7wUh7DT97t0FT9LW0LZDwSdfq3bw/XiJPFNN4Uc=; b=b59/hdWKhBaKlcys0VtW/oknDeOnw9sLQWv5Qc848g5VLLcyMNYi40JTm1JpCOv0sl ++fSevp4Vqgpiu6jW8GoYinxk8N/Gkz3BerLSgNEuQrxHVNJjrMGnufpSOUhzGwTUYT1 xYg84Xow2Jp+hPh3ARNM5unhGCjY5j/BMZ6Iutr3LGtwGChoAHn9a/FnefuDDxeTMXmw 1jsQl7/BLaGWcJMrMLx1gfGUWO9ECjFFmaeW5KHiAS3yK5txS0Fj2YC5fpXinu+9aysH SbvikoO34gaon9FnWAM6mBo2HLnXAttF4C7sFXTi8THp0BjKxU+UFpsFyRmmqPfFVKbI fXfA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of gernot.hillier@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=gernot.hillier@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from lizzard.sbs.de (lizzard.sbs.de. [194.138.37.39]) by gmr-mx.google.com with ESMTPS id o4si1278050wrp.4.2019.08.07.01.29.58 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Aug 2019 01:29:58 -0700 (PDT) Received-SPF: pass (google.com: domain of gernot.hillier@siemens.com designates 194.138.37.39 as permitted sender) client-ip=194.138.37.39; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of gernot.hillier@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=gernot.hillier@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.15.2/8.15.2) with ESMTPS id x778TwjM016728 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 7 Aug 2019 10:29:58 +0200 Received: from [139.22.118.51] ([139.22.118.51]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id x778Tre5000517; Wed, 7 Aug 2019 10:29:54 +0200 Subject: Re: [PATCH v2] meta/classes: generate bill of material from image To: Claudius Heine , Quirin Gylstorff , isar-users@googlegroups.com Cc: Claudius Heine References: <20190805140742.11479-1-Quirin.Gylstorff@siemens.com> <20190806135539.1826-1-Quirin.Gylstorff@siemens.com> <217fe8c3-9dfb-41cf-b95a-fa793b05d9a6@siemens.com> <3bc2de85-2bfd-e6a3-0a78-47890b673f47@siemens.com> <40f1532f-d989-cb1f-992b-d8c843e45499@siemens.com> <2d098930-f919-47fb-44e3-3429f9be04ca@siemens.com> From: Gernot Hillier Message-ID: <88db5513-33b0-b13c-edfc-624f8bacc0f4@siemens.com> Date: Wed, 7 Aug 2019 10:29:53 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <2d098930-f919-47fb-44e3-3429f9be04ca@siemens.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: P7ZyOVYevoGf Am 07.08.19 um 10:21 schrieb Claudius Heine: > On 07/08/2019 10.08, Gernot Hillier wrote: >> >> >> Am 07.08.19 um 10:01 schrieb Claudius Heine: >>> Hi Gernot, >>> >>> On 07/08/2019 09.56, [ext] Gernot Hillier wrote: >>>> Hi! >>>> >>>> Am 07.08.19 um 09:52 schrieb Quirin Gylstorff: >>>>> >>>>> >>>>> On 8/6/19 3:55 PM, Q. Gylstorff wrote: >>>>>> From: Quirin Gylstorff >>>>>> >>>>>> To create products it is necessary to have a list >>>>>> of used packages for clearance and to security monitoring. >>>>>> To get a simple list of packages use dpkg-query and generate >>>>>> a list with the following pattern: >>>>>> >>>> [...] >>>>> I am thinking about adding json as alternative output format. The >>>>> yocto >>>> >>>> Why? Is this some established standard somewhere else? >>> >>> I don't know any standard format for manifest files? Do you? I >>> suggested JSON because its very easy machine readable and expandable >>> without breaking other tools. >> >> Well, if there's no established standard, I'd prefer to go with >> something which is easy to consume in shell scripts. >> >> If we don't have clear advantages for JSON, I prefer > > Well IMO, we do have a clear advantage being JSON is sort of a standard > format and this is not. But we could go with CSV perhaps? Well, this is CSV with "|" as separator. ;) For sure, I'm fine with whatever separator you like. > >> >> cut -d "|" -f 1 >> >> over >> >> python3 -c "import sys, json; print(json.load(sys.stdin)['name'])" >> >> - or adding another dependency to "jq". > > We don't need an additional dependency in isar. But if you like to use > json in a shell script, jq might be the way to go. The main use case for such manifests is decoupled from the build process, i.e. far away from Isar and probably even using such strange platforms like Windows. Think about clearing personnel who wants to postprocess such lists in their MS Office world > Otherwise we could also use the debian format and print out the > installed packages in deb822 [1] format. So please don't let us use something which can only be consumed on a Debian host. -- Gernot