From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 25 Jun 2026 11:00:11 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-lf1-f58.google.com (mail-lf1-f58.google.com [209.85.167.58]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 65P90BgK002534 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 25 Jun 2026 11:00:11 +0200 Received: by mail-lf1-f58.google.com with SMTP id 2adb3069b0e04-5aea3494131sf187407e87.0 for ; Thu, 25 Jun 2026 02:00:11 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1782378005; cv=pass; d=google.com; s=arc-20260327; b=h07nY4w3OGgCJ3VhCJLCvE9s2FFJa27M5WN7jOFXsDZuFhoVh/H/Phjb6ak5xvPHi4 FjZ2tlOJ+HxEyh66H8ZrRomSYbb7+YHIIyVOlp5ym8F0xRAuckUfCGfUN1iXtpOwtOUl D09OWXCM+fNys37SDlb497kD0XYBVoHkt1srI4KWxZBfxwhgjjhiRBvClnEVi3byQ4dX 0xld4GWnL6CL9ghw7kiU+TE0oK1/RlptUhMZd05vMaIhJnRl9C2OYA1tERwULX4f55vO El1VODsRVu7qgpYWSmuuGTLl9npg+BWCKQ0pe/ZthW/Ns9wVBCoJumWVdDqpmQvHdiys 1PQw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=+5+HkOEu3um/8KJQNwUmQPDZ3ybKQYnO8Bqcg3xrX7c=; fh=t08SzI/jhd8C400F6O/Cr+rVuP4ovuVWYUUVgMcGvbc=; b=suk4stLOwO4XVKWCC2IyMWYSNt4uCz4iLAQbE3EG8qbZsI84mkbojhFPrlKcyHvz6k KhmSFYNr1JR246Bc27FNgTf5QQadFDbB0Kz63bWO4Tyy2BDHggVHrzKhGc9Q7dbljfZc 5Auy2Z3Pge69LL+/7eml4NwaWmq6v0tpir36bSqzLOQ70Rk6TF2wJai5WV0HlEzTWFNg JJSD4VWGgwDTHC6afm5N/QzLhUHOuGEoorIsBj+NaEOOh0JTPO4Z7p+lp09PVgflyH7c FjtAriwR7wuntr5EbiEalSQPm8enlwWFz/PHxcT8Jb2rVPVlB67prC6gSWRQJZK3ZCBp wlhg==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=dtzLv1LC; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1782378005; x=1782982805; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=+5+HkOEu3um/8KJQNwUmQPDZ3ybKQYnO8Bqcg3xrX7c=; b=nyapSwnd8nMrmtrKxP8+EsMFLe7noM4BxaOqXBlutbzBYXgPEHfWasM+9DZ/n8Xnop sPSRPazwdcMoePQp8aB/+nmZ3p4BTmXsUsjjNhKROrFDn8uTrZlNRBXsfx/TiHCC7O6a jKm7YGmk5Y6CH25kt6MreES6NvF2Rww/w6ZHliMR75j8667mfMzg6NTnofVlNIU45hzz y01yB8ZOXtFT0WaFFkRtG1R73yjLaz1Rth4MozbyzxzYT53tT+EJxmNJiZ1pWRbmmfwj JaHPA5j3pOLtXbCrlF+YLPxFQrqr7lf/zGyEuKJR4G+wfwByYbtYMYdVRCMeWd4gcCph /DHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782378005; x=1782982805; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=+5+HkOEu3um/8KJQNwUmQPDZ3ybKQYnO8Bqcg3xrX7c=; b=LHBdqZJAsNqtU9wJagPJYvXabaBHPVGZ+PUrPiOYLjL/MCkJPPv+PcQ1j1tuo/NLJB ixrdqKw6JOSQG4EB66K0RFYwzBn9FmDEdvC20s/jpz1X3dxqLexsZQ6no9b1ITEvbEMm nLPrdltXrrtHCQ3rCKiJNiSu05G53HUIWTctNjM0oTNE9NYyk+wHQxc4SfFNPtrjGaA/ LAa99hUhV1Pt0TeR249euMzGCPf6VK79K2g+6SQ/LGH2+PzNnZfAfoqJEwQqyoB4TgRI m4kWXUVh/b/ZEhDuPe4dhha+fmp60oLAb++pSjvqdx40nVzeJIGOVGV7aEBXBYhZQzRd z1NQ== X-Forwarded-Encrypted: i=3; AHgh+RoWHsTRdi6Jyll9CBXzE6mWkYcN44u+y920hd2akLKLJmzjerPLrHHHDdtFTMrz1ykjovel@ilbers.de X-Gm-Message-State: AOJu0YwhJRwZ6Vz9YuqKEwgNJnIm5CtL56PjMKLkuOSwRr2QCJLOyG4f nQaSXk2MkQUpTW3uU8tuvmWrEtXv9wyw0q243q7/Fuu33lUrZi/n0tb0 X-Received: by 2002:a05:6512:24db:b0:5ad:4a8d:cf29 with SMTP id 2adb3069b0e04-5aea1f2ede4mr373564e87.12.1782378004491; Thu, 25 Jun 2026 02:00:04 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AX0PUUdN4hk68lxSJqc0we9XXP2Lv/WUG6iTDUTsF+SKd87gBQ==" Received: by 2002:ac2:41c1:0:b0:5ae:9d5d:5be3 with SMTP id 2adb3069b0e04-5ae9d5d5d8fls378765e87.0.-pod-prod-00-eu-canary; Thu, 25 Jun 2026 02:00:01 -0700 (PDT) X-Received: by 2002:ac2:568d:0:b0:5ae:a4a4:b6ca with SMTP id 2adb3069b0e04-5aea4a4b71fmr37688e87.14.1782378001568; Thu, 25 Jun 2026 02:00:01 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1782378001; cv=pass; d=google.com; s=arc-20260327; b=bwp2pQXpgRJKYvV+3gagxGSgrz0EiBIDPphFgjFDnlP0MyTUNSt9sJuZJQx8lg1lzO mJTFPust3kbKwRghQsayNzOkxMdCwW6LBrf2sQInSyYshFfnYY3lUR4xE7Oma2JYf9UF 75bfTpmmB5MitNq5z2SaM3DIFB3sx4MduQfij3akRVxJSorGJiKeFI8sWttoVhgP7B8d nW7R2Rj/S8/dw2aNrFWy5XxknladkHXNSSJI0epUIHNBlNMUTEIw+ZX9WKP4BPKPYimo MPwjonKZBIEPILkK+D3LUAmOnFsGacCkYvT24sRb1NtyjHzZKJCM2VLbUSU16trm5tKM Il2A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=vmMLyCGvVrXTOaOjDdm7PzA5x15IJIhBBEDZrp6ADgU=; fh=kx5PYeafKdTXgIUfpNthY7cV72QjUGE9qbIG0Mf73VY=; b=gJG4jpW622LWYvzuKLk8RvRRG4kYqQPrnv4gTejyFCZVLP36TwtSaqrDaesVfkJlbb JcQt96phGdZ9qcofUeBo5hYOc89csJ3NtEoS7xEp6q4zoij8HJgmEOX+lou29yBMUxBb goqRGcQ4qDgBY46wwySC9j/GZ2Us/Zyl/V8rUEsSdsEgQwsSHV2bhfDSWHD47fall7Cc e8HNctYPHkiRdl5I/AgYNrfc/wIYN7NRiytepi0wizohxWugwOM+GI0P2Q15P54ieOEW ZwJTzFIaekY6h/QecfG2yAVRtUwiJMDCDajeA8SF8sGP9QahRjv9Lm3DRzf+1TaEb8Ho DcGw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=dtzLv1LC; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 2adb3069b0e04-5ad695704d6si203398e87.3.2026.06.25.02.00.01 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 25 Jun 2026 02:00:01 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=nP1K5cZEnJGuvfHmJMK8QgMfhN3AHeryuveKY/rBK9Uu7lVB6Odej74Jfv8IXC4QCOCOEYQNXj3yEqd//X2UIz202zmBFART0WIj93241UQv+6JqIuJlhexvQzRSyhYqyoVtN3PAuEFQy3bovcFHfCHWcoN+BrBQNZpoAgc8qh68IfoH4JZSZfwyrEl53v6FMVw4Cu6iZjbMg44s+IV3p7y0e+cWbraTZFBh4JpB4/+Vt6EtLgiJL3s38kdWKEA5qNjHBrzoKnlV9U4qyeGPJx7q/mswUCg3gJqt1kZzhMPyMJAHWXVSWCg7E/9KZbyZOAev3sdq3uX3Bn2ej0duog== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=vmMLyCGvVrXTOaOjDdm7PzA5x15IJIhBBEDZrp6ADgU=; b=WiqMj7gMBoEdi5BeLAl8ygFi+wVNYlgTdiLTJc/FQ7/iDYyL92lzaQL0H5ASwAw0/71iHaQLG+ErLvg5llU92zfL3MUdNF9uyt04HHZJag3z1p6oAbOSz1nzTkfxpDbRoLcPbW6G1pbjl3LzaDjnQUigOb1CDiI5S29U1/JrAAA6F/i3exViCY+lQZ22AHsQBzg5G08eBB1PQxzB/wB4AXqGf7b/s2Ag68vA1Z2Bt3QGMLpbnUPs7dZ565XndSNWOpRsBdJZPr6VGhn6i0Ap6Cyro2cowL6mhItzGecnKqIA+/vDAogBuR3rHi0Xj37h+xmlIkCFqKthZam1hKqGew== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by AS2PR10MB6950.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:57a::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.16; Thu, 25 Jun 2026 08:59:58 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0139.018; Thu, 25 Jun 2026 08:59:56 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "isar-users@googlegroups.com" CC: "Kiszka, Jan" , "Gylstorff, Quirin" , "wzh@ilbers.de" Subject: Re: [PATCH v6 00/17] add support to build isar unprivileged Thread-Topic: [PATCH v6 00/17] add support to build isar unprivileged Thread-Index: AQHc/KjcYp/dR5V9p06B7WavCHAEArZPCKoA Date: Thu, 25 Jun 2026 08:59:56 +0000 Message-ID: <8b64ce39d3096fd3399056ae2aabf36d763ba88c.camel@siemens.com> References: <20260615092458.259691-1-felix.moessbauer@siemens.com> In-Reply-To: <20260615092458.259691-1-felix.moessbauer@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|AS2PR10MB6950:EE_ x-ms-office365-filtering-correlation-id: 382c8c5b-52f5-43dd-716f-08ded2982146 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|1800799024|376014|366016|38070700021|11063799006|56012099006|55112099003|22082099003|18002099003; x-microsoft-antispam-message-info: WJOdJSp2Ps1EkIbqOYpPisHtnI1FXPHfSq6o/G/lPh3sHqwWDQFXR3vzzT+eoNvw9zgPFW0NwNefnCdbOdVxh78xo7Bf3+FWAHoKZsy0gA+u2aWJGS3cj9MgPL4EM9rq8Zyx5nphaFvXWxkH1oVHai9Hpsr63/HJBT0Z/QHyXhazFygiitrWP/nX+WP7usVlPshCFTBhWVzbXgH6psqTvO/gBO021FiBAiTqFL/j2r3vPab1wtvB+cnilQrCRwg8hSNyn1hoq+cyeKpwLrP0tP6xML0AMj3v1og9GHR4w0yqF4cNui1rzKOUdyQSOiO2foZ7gF4beXIfkkZW10OxDkG6nF8LjrLbMNEiNsPDjuPCKbUlct101fUNorJgwlMI/41ge9+358YZQ2S/kibPluNX0WXz8r19xEtpOxqPvy0/az+9EvTChMzMF6njUY1Swah0fWYz4prvOGJIC3+1TnAJuSW6EHfQaQCLsF5YcYQG1/eCNtnPDdbmSRjwi3fsj77A6i5NyGXOdkwkEL4oS8i+wg/xiMYLMM7sAoWHLC/KwOXEC1lEDEN2E5WzBip/2AMljezxtmNkw1+jD86xnhvj+TNgdKVhqk5mTfz7DIkAE/CscmoLDmM9nf7XRilWYPCth7mtfNqpCBq4C4bHGocNGKSqY4kar7qM60SUScbFFdeQOA2yN1yXbNp/bE3wCcThEuVXpFxfj4QMuHv/i1KYp6kKiJzdPEYsv8lIJb8= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(376014)(366016)(38070700021)(11063799006)(56012099006)(55112099003)(22082099003)(18002099003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?VUtPOE9qY1BCWVFDUko5UWVxOXVOQjV0aEtaeEtabWd4TVJ6dzBwajVRbEJz?= =?utf-8?B?Z2FJVWRZdHduY1ZWSHBseHBjZ3RBSEhIWUxFTUtLK05qRVR2Uk4xNzRqTUN2?= =?utf-8?B?ZUtBbG10WGo4Q2k3YmFJaW5xWk41c2xHMTl1S2Q1MGlvTjc2RzVSOFVKcENL?= =?utf-8?B?MVlNU3A2VDZZcXJ2NTFtbkhJTy9IUXE0MlY5N1VGaWNBUWRlN01jWm1COExj?= =?utf-8?B?aU1IVzYva0dodnV4cjNnYmhoa2hZV0V6NC8zTWpZNXdNL3BUL2pVbDhvR21C?= =?utf-8?B?N25KcTdqOHB6cUEzRzI1aU5LT2NodXVhUXRJZmNuNzF1Wkcrd0I3M1hPaHRY?= =?utf-8?B?L3pmNVJ6cVpjS2RZMS9heEFlUCtrUGo1U0pIdkFtSnJhOHNNSDVibEUvanZr?= =?utf-8?B?di91QkFuLy80THFsVlFIdzl4NmZpM0NYaDcyWjJVdUFxam5JVVRzbXgvdmRL?= =?utf-8?B?eGJBLzljTzcwUzYyNTJaR0FEZDlXdzZzLytIZXd1MHdZUi9vOEZFUnIvZnVo?= =?utf-8?B?VWtLRjd6YTJ6eVZkeEl5cWVNeXRhTGNvNnVSWlRZQnozaEdFYjJrK0JvMVhv?= =?utf-8?B?TGgyUGlpR3dqa25KT3IyQ1Q1SlVRVE5URTlFcUMvREhwRHpEd2thaW1IRWl0?= =?utf-8?B?UXFJVmZURzFZdkFsMUFRMlQ5SFYyN21zaDNuRWQyRWNJVHFFSUdnTExhWklC?= =?utf-8?B?ZmRhRVc3Z25JMEZleG53SU92aU9NOWR1WlpxOVVyMGtOKzNqcGhoSDlvQ1pM?= =?utf-8?B?WkdiK1UyejZkR0t5cnUxZmFRaUpLc3IyZ1N6U2VIQUVsNFhBOUxIQlVVUGhY?= =?utf-8?B?RVpjTTh3K09XTjVNQkVZOUpkKzZjM3lYN0FGNVR2WnNJaHhIQTlwUk5XQTg3?= =?utf-8?B?ZnVnZnJrUVhFZjJRMzRreU5BZWYwNFJBNXpEaUJRMGZtVUtZcytXdFN0L1VS?= =?utf-8?B?aXhobWRja25qL1JTU1V2UTdTNjh5aFYrWkdvL1BVYUpDQy80OThVaHBwZk94?= =?utf-8?B?eUZXYXFCa0k3OFVETFVINnM0bmJvaXpNR21GZU5GajltV0UyVlV2dDlMQ28v?= =?utf-8?B?ZnZVRkZKWFFONkdiM0txWW80TGh1YktaVm80SEsxdzhRZnZQaDVEQ1J6ZnBH?= =?utf-8?B?VmN6aVdhMkQyNzdSc21YeGp5QU00dDZPdjU2dkVmajNwTnRuU2VZN1M4c05Q?= =?utf-8?B?R0NVRUkvYVFmZGxXS0hrdm8rWmRpUGhycGRKUTNyMk9VRkw3QnNPbW9tMFZ0?= =?utf-8?B?anYyRXYvanMxZG1XMHgxK2srRGRMSEljWVIzcGY1SEZTK1B1K2ppTk1PMkxL?= =?utf-8?B?V3lWZlpiMVNpK0tvRXhRM1JrVnE2RVdIejlxbVNHYVF4OCtKVnArOGs3cEhM?= =?utf-8?B?UlJwVndxUlFTcklvbFlSU0FaVW5uT3NZMDg1UE9QUUJzcUVYaUppdElIOXlm?= =?utf-8?B?M0dncEVmZUlkKzhTS1VYbXpxeWY2L2VaYWdBK0l3cW1lYm96bjlLTzIrVC9X?= =?utf-8?B?UzY2czFrSEM4U2V6ajlUNzR2TVVuK245TC9BZEl1VnpkWjZxcUI1a0V6VTB1?= =?utf-8?B?MUJMQUMxbWgzdXphMTkxcndHbjU4YjVRMlU5aUlaK2dGOFE5RWZRMFhNTWtO?= =?utf-8?B?T2pjWG5MeThDMVorRUlwSzI3VHF3MndTNGVCWlFuUk5MMTRyV3BaUEpiK3oz?= =?utf-8?B?d1BOVktGaHdUVnlNVHVZQ3pUSm5lS1dnalhUUlJSY1VRVk5oZnJ3SmFmY0la?= =?utf-8?B?Y2l2LzFob0o0dFRvSjAyRDlvaUVmK09nUThKR1VBeVdrZEdMckZxOUwxSjdE?= =?utf-8?B?ZE9ZYzFVNUlpbWl6OGNVWVUvd2htWFBtZ2pHR0lSVkI2U1Q4TXFwRXlJZFF3?= =?utf-8?B?OUxTWHBwNlRJSWx0VHE3U0JXcFBLcDlTaDUveWtPQWRJOFNvSlQ1T25Fb3Jp?= =?utf-8?B?VytTNlpiNjkwR3FSU09CakFnZ09WWndyR2NpRjFrc0lJdG9DYVBFL1ZiZnVY?= =?utf-8?B?YXd1RkJ0Tjg2dldIeVZJaTBmZURVTnZ0YUM3RUw2aUxFZFB4NThKUEZmcmxC?= =?utf-8?B?RmVMR1REb3YrbFYrQkg1aG0yeGlHNytmbHJOa0FuT1IySkRXMjY4L0VZQi9t?= =?utf-8?B?UUE3MDFLanVicXN3eDZtVmVMWG13RTdkb1UreExlMWFkS0NuZGNyc01TS0tN?= =?utf-8?B?dzZ4bDFoWnY1bm1RV0VZMlpHVUU0YWQ1OHBiQUpnREVUK0J5bjV5MEdzU1d2?= =?utf-8?B?V2NIUHpMZXpkNXE2VHdrQTh2dDZSY0ZlK0ZqU2dmdFg2TVhONTNGT2N1ZERi?= =?utf-8?B?bVFVOHdFTk45dCtmU0pmRVdVSkJndTVqd2tUYXJ6UlJjNDJJaEpaZz09?= Content-Type: text/plain; charset="UTF-8" Content-ID: MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 382c8c5b-52f5-43dd-716f-08ded2982146 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jun 2026 08:59:56.8161 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: QvRui1L1DWa0Nt8OhXi5Bhgku4q6/M16+73p2ggqoXeiDm3LZ5UUiHTJ62+ASWumMvDY8y1SKkTnltkB4O+uu1KeaQagUnPQNdXktn8XSZ4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR10MB6950 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=dtzLv1LC; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: dkz/+BV3Q/Ml On Mon, 2026-06-15 at 11:24 +0200, Felix Moessbauer wrote: > Dear isar-users, > > currently isar requires password-less sudo and an environment > where mounting file systems is possible. This has proven problematic > for security reasons, both when running in a privileged container or > locally. > > To solve this, we implement fully rootless builds that rely on the > unshare syscall which allows us to avoid sudo and instead operate in > temporary kernel namespaces as a user that is just privileged within > that namespace. This comes with some challenges regarding the handling > of mounts (they are cleared when leaving the namespace), as well as > cross namespace deployments (the outer user might not be able to access > the inner data). For that, we rework the handling of mounts and artifact > passing to make it compatible with both chroot modes (schroot and > unshare). Hi, are there any news on this? As this series has been successfully tested in privileged mode, I would like to get it merged, so subsequent patches already can use the run_privileged helpers. Cleanups and improvements still can be done later on, but my fear is that we will get a lot of back-and-forth between sudo and run_privileged if not merged. I also have some patches regarding the rootfs_postprocess idempotency issues in my pipeline which also depend on the run_privileged wrappers. Best regards, Felix -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/8b64ce39d3096fd3399056ae2aabf36d763ba88c.camel%40siemens.com.