From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 27 Jun 2025 08:53:33 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-yb1-f192.google.com (mail-yb1-f192.google.com [209.85.219.192]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 55R6rLBX015129 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 27 Jun 2025 08:53:21 +0200 Received: by mail-yb1-f192.google.com with SMTP id 3f1490d57ef6-e72b0980138sf2769098276.1 for ; Thu, 26 Jun 2025 23:53:21 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1751007195; cv=pass; d=google.com; s=arc-20240605; b=YJdF0mcGeaIrh2+niSl5NBMXVQCG342Zc8t+F6+2AOT5uscMVWN0Inkp9WjzNZ5sjs Vieg5IkXr5Gqx8xHq41lGFamE+ODmxEJtOj6LFBHlMsGiakLn0sYvo1Jd3OmO46rQqqe 47IOMwWIJXpxLiky77Um0ecfeSmMlAP8GB+vPmr1NSZiaAduy9u9BsLZ92Tac7Qg8vUP Ga7rBG8DDJlKS0CLUO/kNvGUOBQPp/QdyoF8qo4vS6S1fkICOjkGrhOe2Qp5RDU5C+fi bERNXLtK2K2n45Mkrn/V3/ZK+V/Fd+L8d2r9i66kaJ9AFtFNVQmypurvXwbAN/ykYi// z5jg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :from:content-language:references:to:subject:user-agent:date :message-id:dkim-signature; bh=faYCdAISVbg9kMPZCJ0xL04tyttPxxByMJBlw7/6IS8=; fh=AGdrAywRU9Xhmiw2c8F9vfj9l6yfw4dTskf7mzYNiL8=; b=IMf/WuGjW+iHIFGxapnfxoyeog8AgcbtsFOdQe38s8NoQZfF8xEJKNv1fuAwBCK40w OEvPg8rh9SX/vhspmYp5Hz9m0YaDQToTkP8ZhHr5mPh+mZdTTJRZ1QNFL/EkacUyEahI DM3hPYes+BncLqHCHmaDWByWs3kMtNAQqOv8cfmV3aoYQrfm7fUS7nsrcEOVxRYPH06S /Nghc+biQNgvWOoNF+J//OsJfecAhgUrMSMF49eGlaq9oVaHmmWW47+VGYdPV87cDouN zzuojlaAsoY/R1mQ+7oDbRkQO3VvQ7tfuDEVGIoZLlE0qzrovNcSAQKiIlGa17fKTz+d AwtA==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=eVvwPCp7; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1751007195; x=1751611995; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:from:content-language:references:to:subject:user-agent :date:message-id:from:to:cc:subject:date:message-id:reply-to; bh=faYCdAISVbg9kMPZCJ0xL04tyttPxxByMJBlw7/6IS8=; b=FIQzykwkBoob7PqnElWkvNLyQ3TdGn6rjlTBf0YRQ+95vC6dI9d8b6wnXndRNlGWig bCkFwQeOyWlaBLwqTXeng+/P7b9c4BeYdVwAN0lXyq6Bbb/aT4OwyMg7Rxpq/bvPw8Xt A3Z9ZWZB6Boq3mk5HYQXJhc/1oFlGqvKDbsc+31p17LnR8J/yB1VZL7AZXgyTOQhYjG8 UdzQ6lYkeXXaebqw8sMOFCIXB0aDylUdpxeLDUaxvYipiVb4isr7D6G53esx/vrNu/+X qr/Sygk/TiCm1AcuHJWTTjFw4DBPOnAgMJB6AhatJwDZiA+h5CQFwanEOL+9Yv+IDPn2 pchw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1751007195; x=1751611995; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:from:content-language:references:to:subject:user-agent :date:message-id:x-beenthere:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=faYCdAISVbg9kMPZCJ0xL04tyttPxxByMJBlw7/6IS8=; b=CAHBu1B3RBQJkwDzhDNkk8fa8XLNm6QDRv6sBq8YsLQH5RjHMpCO+/52BxDJiMIVuu rGKgZo44UvTC92G1FLoiXKUNxojqY38RIhGetCmnswzSUSqjc9BFltRjOO/HQhTNydTa t2PGsJHlfW2rgTR2mtZiEg+0epqo+Ju86gM5+OIi3XYKElzzDxgoY9ex1BS5QiA1y326 hIe/J1SeWr73awX+saJtILr76UmMCunSxWSGPlJU5B6EFkt2sTBpmF9RfoHMXOJmPzaZ zPLXyxneu4MU/N7w4ukegfgwAAc8LfEkLNkByNplEhajQaGBIsNfD0ShLD5PXK8bBVpZ nmmw== X-Forwarded-Encrypted: i=3; AJvYcCW81f12Zs82P6kUhFPlDS7zKP314nqHkvmP5hM2RfIuSkkOg184KMbWJDX1yx7GX29xulpE@ilbers.de X-Gm-Message-State: AOJu0YwC7Ojgte7imN1VnrB1/jYhwGjy/6Ke8hLQpxsx1b8yAv6sta51 wc4l/4HUPC819RWaAf+Nb2OY28doRJz0K1CfTtqvTQnjtqVEaKzQFklN X-Google-Smtp-Source: AGHT+IFamClJuwKoehpMwrk5Cc4VxpTXi6lgScB1ZCTfI4vdLShpgmph3T2OKmuKMNRBrEC+FSLMzQ== X-Received: by 2002:a05:6902:120f:b0:e84:13c9:67d7 with SMTP id 3f1490d57ef6-e87a7b0f84bmr2861614276.20.1751007195245; Thu, 26 Jun 2025 23:53:15 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZdEPB/e7HlXk+VIjy3RllDYb6pNAtJ/mHi6qyxXET+3YQ== Received: by 2002:a25:b20e:0:b0:e82:492d:12c with SMTP id 3f1490d57ef6-e879c13780bls1607024276.0.-pod-prod-06-us; Thu, 26 Jun 2025 23:53:14 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCXW8GhXR+1IFMVgWMDW95qoeScxnOt+5mxt9XUEQgugOu4381bUe9OrSrAwZ1TZPbe6XGYFu78zhg6U@googlegroups.com X-Received: by 2002:a05:690c:6e09:b0:712:c55c:4e49 with SMTP id 00721157ae682-715171bc891mr31200977b3.34.1751007194145; Thu, 26 Jun 2025 23:53:14 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1751007194; cv=pass; d=google.com; s=arc-20240605; b=DeVZTceqwXXEmhoinTA2l0qlG9sB2Fl5xrf6H0WCIH3G3sUaI/ioibgiEUt2OotXuN m1/fDlqUdH0rGDoQ3/OnFNQUJvmVqOrijBg9I22EMytP0AJpOvKoQPiOYatJ93HSB9h+ 9GaXpuYQ1qIsg9D6ryIzbMIE5/epfBkL2npEHXt6sk9dgta4LVJcvaOgxtdWS0QNZ1op gHDeylJpiYktUk6Z90IxrArJTG97ZRSJvWEa6Bhb5rqGFuSssprcP9U1UhwFvP/yL+vb igCkjsYf085Lp3rTUyXs6DOx3BoW3jpKxgd2J9272TNR+4PgjKTqxmgeApfVTqJw2drg k90g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:in-reply-to:from :content-language:references:to:subject:user-agent:date:message-id :dkim-signature; bh=MHttdgBuYQajE2n876cZ1Y6S8skf3LsJ3urwRCFZY9k=; fh=O+ZMFUiiuyZKsfz7Fw8hsdknZlxcSFSsLsCydBEGD0o=; b=Nr36yGuDqnfbptJXp442x+z9y5vyAHzXdWuhLtK0S7Txl8c5v1JCVNENAPEAZaSoWc R0VgEPUS2wgWh5VDwGoOBHUMlWUANZhIbO5poKzHnZV2q0Y+OHOSP3LQTayjcKD3rh0N 1mPdQVhVhK0OYlMmvk9N0Yt7452n1VV0VUJGVx4G8b0VxxfBlkcqMKW5H529UencKcLX E0g14hRg+TOgE4YUzMur7Ph8C4ISFgewv3M1km2H+yMuR9zbelvWbq+DfH9BO2UXbUAi 7W/AOM38hc3Z6PIBnWGkTdF7hvFxvNf1fSlJTAWvpoS91EAAMGtON7z4jLM7u/eyMXs2 Zqhg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=eVvwPCp7; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AS8PR04CU009.outbound.protection.outlook.com (mail-westeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c201::3]) by gmr-mx.google.com with ESMTPS id 00721157ae682-71515be7850si1076567b3.1.2025.06.26.23.53.13 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 26 Jun 2025 23:53:14 -0700 (PDT) Received-SPF: pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) client-ip=2a01:111:f403:c201::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=i8UWweTMEVsDmEvbEAZs0bb83Qhp1c5ljpbvZivJ42yFIg4iZcnZfb5KL7rPqk7eqhsQfqb0QSFfNDKOxKseLatfFElv4pXZsMCMNJK9Q6BcEjZMsYuEATh1Mz0GgAFX680RfIijiIaMWNAUfCi2Y7MmRk+AfFQ9WqLcVu7EJGp9EQHYjoJWeoLEt20DTE7sl2uLcMlyUI6EMOxBIVt3FjGNA1PeD5VxbLBoUdn5NpULfb6JulIaTDz8wXB9IwaQnpTcuVF2u8+MK84E5ue6/mrhxwjqvRPSnpaU2yci1WQY/Zn+VF+vAUYK+GRY/F+605PNczAUBpcSENsvA8TXwQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=MHttdgBuYQajE2n876cZ1Y6S8skf3LsJ3urwRCFZY9k=; b=xe7pk4Ri8XjaVlGtzBn5d9JlPjQI8KwvNzpe6wLf5H/sYCSXOgzb3BlVNu50JrpVeDYEYywCs8MmpoiFddPR9CNZNsjD1hKfpBjXs23SYCWLhjgolQS3OWv1ornhwBFSgIF5PhhyDg7Tu3zrpSOCBj6aj+3AD78da8gRxLQakttTPh1uWnCsOJrEV0P8PgqeqUDgSR9dDDRslOAhVk4Ev9UMgSmnOeEI80kG3YNpD557E3YcDG5ieMdRoPArieOGIN7i0Vw2vzVpoI10q4whBqzQzNMmvJEuPGtD13jSWxEqTgaqRWMphYEoSZq++scak8XtlQFvL3tRq9OmygAPLA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:672::17) by GV1PR10MB6193.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:96::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.28; Fri, 27 Jun 2025 06:53:10 +0000 Received: from AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM ([fe80::184c:3bea:5551:1c43]) by AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM ([fe80::184c:3bea:5551:1c43%4]) with mapi id 15.20.8857.026; Fri, 27 Jun 2025 06:53:10 +0000 Message-ID: <953efeec-e0a3-41a9-a849-e5cc55bed601@siemens.com> Date: Fri, 27 Jun 2025 08:53:09 +0200 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v2 2/2] container_fetcher: Verify that tag and digest match To: Jan Kiszka , isar-users@googlegroups.com References: <20250626140731.2732545-1-clara.kowalsky@siemens.com> <20250626140731.2732545-2-clara.kowalsky@siemens.com> Content-Language: en-US From: "'Clara Kowalsky' via isar-users" In-Reply-To: Content-Type: text/plain; charset="UTF-8"; format=flowed X-ClientProxiedBy: FR4P281CA0042.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:c7::12) To AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:672::17) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS5PR10MB8173:EE_|GV1PR10MB6193:EE_ X-MS-Office365-Filtering-Correlation-Id: 31ddcd81-fac0-476d-a732-08ddb5474759 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|1800799024|376014; X-Microsoft-Antispam-Message-Info: =?utf-8?B?VGNCMUVHRDllRjNZSFFFRk4xTzhjT2kzcFlhNGVQSHN5Y1dpSlVMbFZJVE5h?= =?utf-8?B?N0djRDU5L1QwUlZsbm9XWVFOTmFxd1N5clQrYmJjL2JUZUhjdURVL1JVeXFy?= =?utf-8?B?SWpnelExNXc2cldEbGxFb1pZSi81OXFOdzM2MWdnMlQ0bEZza2xTYzBLZ1Mx?= =?utf-8?B?YWxmVHZYWVE3Sll2UWdZZVA4OTkxY3VLbmVPYjJQN1pXbmdzU0k2d1pxTmtO?= =?utf-8?B?T0g5R1lIeVdQRnF3RXZVSzQ3S0hFRmNDYnpyWXdOL3NBOUk2a1prRHRReUhw?= =?utf-8?B?NGhhWmtDMHlPL1hqTERaUUloUXAxY0JteXRqOGsvNVVReEx6b1JEVm9DVExQ?= =?utf-8?B?TEM0UHhXSjQzRmR3THVpMVMrSFRMQkZMb0Uxa3RqZ1BKUjZpNit5V1pCOE9G?= =?utf-8?B?UXhVbUk1cCtlNnNEUElmQ0R2TktiYy9zbU91RmVRM2ZwNjd1NHVXQTBJR3dX?= =?utf-8?B?WGV4TlN4cE8zRG9aeHBuRlVLMVhFZFZUalJ5NnhKNVVWL2lSUDgydlFKaVc0?= =?utf-8?B?U3BRbDkrZlBUTDZtL2xaVDRoNGYvemx4cWR0S2p6Z01YUUtxamVVNnBMSlhB?= =?utf-8?B?MU1acG9LQkpUdmJuMGlQcXUzc1lBOHFrcTNqUUJxb3VNRTNVeEdWK1RvQkdN?= =?utf-8?B?UERMb0xsWFV2VmpNUm5aZWRzK2hXTlZ3YlpGcXZnbzloalpSdnpMUkJtNktM?= =?utf-8?B?RW1rNU56enhTeW85NFR4bVJjQlNyUit4by9CbG1NMXhXRFF6aDduOVY5TGVk?= =?utf-8?B?aEpHc2dUdjdUdldyT3BUWUhwQW1EaUovV2x0NlRUb05wMXM0Uk5KcTUyRTVT?= =?utf-8?B?YUNOWHU2WU5vVU54aDZnUzVDMGVQNnAydEgrQnRFQnNVbVIrclIwY01NWkdn?= =?utf-8?B?KzFHWlBieDNwTFdDZ2hjQTdTdVJnZkF5RG5meTdqL09LblV6K2JpWVNweHl5?= =?utf-8?B?akwwV0F5eGQ5Q29PcmlBaWVjZlVPWjVuY2t0cEkxRWJZenl2aE1US0MvdEZI?= =?utf-8?B?cjE3d0F6RHNOZVNhUHpZLzRGSWpjcXVzWEo0aUZqdlhVNHg3ODVQZmRQbUoy?= =?utf-8?B?aFFNYkdaa0Vtb1NSRzRIdmZHSDJ3VWlyWUgvTjNTQ2YyRmRwN1BFSklYNGc3?= =?utf-8?B?cFBzcEN3SzA0eExET3lyRHJKZkxCRHQwc1M5RDZ6bFM3dHZUMXNDOWQ3QStI?= =?utf-8?B?dk4wbW1qdkhlN1NoOEJqdHRtR043RnZoVGlaS2U3Vld5OXRSeFN4Y25CVWVN?= =?utf-8?B?QzZIZ3NqOGY0OUx2RzZ4OFNQQ2tZcmJyeWpwdXl1QlhHOUtaSlRjaE5NbnR5?= =?utf-8?B?azZtQWJMQlA5UFc3UzRCU2lGU0RIMFdUNVBLekQrQXI2OWZiR2dZeXlSa0hJ?= =?utf-8?B?OFhJYzNJSU1XWll0MkZGWUVnTWZESzB3bWk0RjlCd0thZXg5SG5tRDBzMnJ4?= =?utf-8?B?QzZtQlAxZ3FhVTdEa2RnQm8vRWZWOWxnaTd5eW1PUVVpclBPZjdnU3Y4N05a?= =?utf-8?B?aFFsQzRiL2V0VVQ2c3UyY3pkNnFwUmFFeGh5ZTRUSGlkTjJ4V01XWVBOMCt4?= =?utf-8?B?RFlKY2hwQWpoNmtNU3E5dUUvK0JSbW5hQTN3WEpFbVVjN2xhdklvOUtuY2hK?= =?utf-8?B?M3U5aWwwbUdlaTd5SStTWHphd2RVNEJpRXVkaSs0ekdwYzNiYTdFa043Tkly?= =?utf-8?B?Z2p3VTB2QWlKUUdBV1IyOGdJYmxoTTNzY284bGYxMXhkS3ZYZGg3dnMvUUl4?= =?utf-8?B?cDJMcXRaQTRmbzVtMWhSZlFtSFRLV0V0ak1mdVRuTkhUQk82Tmd2TVlXSXZY?= =?utf-8?B?OEtqRUg1ZzJ1NGhPeTB4WTVGOTFHeTd2bjFjajFCWUR4aHNUNWZrMVF2cUR5?= =?utf-8?B?V2tXWTVMT21XQ3dXaDVrZXJzNFp2c3lWb1lpbHU3eGIwYlZ0b0dMWXVsKy9n?= =?utf-8?Q?tmlORlp5T6M=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?azFFbmNoNE8vT1o1WG5FOWYwSThlazNRczVRTW9CV1pYVWVSMlpiMmdxa2lr?= =?utf-8?B?T0pBcFJKUDlIQzd1bUhTaU9tb3ZvRnJiWXUvZFN3S0xmWk52bGZUcmFzMkwx?= =?utf-8?B?YmdRMHVuNTZBbTRNKytmamZtNGVINlozbHlrQlBWQjlvUXZnVEhjMUYxSXlK?= =?utf-8?B?MVhsR2U5clNhTDRsWlBad2kxWG9CYy9LaFdyb1A5SkEzeXlPZUFidE13SVNI?= =?utf-8?B?eEl5eG53SkRhbXRVSnNkbE44SmtyVER6eVNtS1B1WEozNi8zL3RYSWpzZEgw?= =?utf-8?B?TmthcklxUURieFZ4dkJ5VXRzRjlIcllWSk5QQUV4M0FLdVBhN1RpdXUrNzQy?= =?utf-8?B?MFY2SGlBL0NTZ1lTaTBBTW40eEZ6SHZHK0MwQnZOdzlOaHJkR0FzUXlDeDk1?= =?utf-8?B?aXRWdjlQVDUrZXNJdGswREwza29aZDFhZVlnMlR5T0htR05xYzErSmh2empk?= =?utf-8?B?eDVVK2xUR0xzdXB4L1dUMkxzS01FdjhkOHYxa0pEM3dtK0FITVgyMlM1MmNX?= =?utf-8?B?UkZ2LzJmSEl5MXFmSzZrbk1rSXZnNXBzMDdSK201VkNlYXhUZkt1NFVSc3pO?= =?utf-8?B?T2Q5OFdMSGMrSVk1M2Y1TzVDeFVQNHFHcVZPZ3QvSWhzUmQxV3laeUVjMXJO?= =?utf-8?B?VHZvTm14QUVIMXVPZ0NmVnlkRDJiZ2paREl0RExrNFMxOE1sU0lURC84bjRl?= =?utf-8?B?QjJ3UTRnSGkrWWhiL2hXTXNpc3Q3MjV3ODRlQ0xmVklXa2hubzdWVVMxcEJJ?= =?utf-8?B?cThxSEY4M3A1R0lGZExrTks4Mi9JODNxUVZqdEhZMDJXWDhVamJqby9UQzhN?= =?utf-8?B?eE5oeWRSWHoyMFRnLy9EQ3h5N2pLTlhCWGhBV0ZMSEx4WlVSVnhCMXVLVXhJ?= =?utf-8?B?RURjY1dWTjJmcjNieUtXYXA4SlRzSVVBYTQvc1hJN2dZNk9lL0xlTWIxU3BT?= =?utf-8?B?Rm9RQXNNRkxpT0J6SEdYcFNydlYwWEJoTG1hQnJ1R3RUSjRJekROSnlNeVdT?= =?utf-8?B?RDJ1RjFzM0paTFJKSHZjSGlDbEJWcnZ2RFBSc2tVaEsrQTRLcVJxS2xVMmVv?= =?utf-8?B?TFpoR3daU1F3ODMzdEltN0VodUlncm1YTlhvenBoYVRualhuRUl1dllYMnFU?= =?utf-8?B?ODdlaE11S3dwV0MzcURjNXJMeCs5ZjZwQXlsSnNmc3dGOTdsc1ExV1pvS1ZG?= =?utf-8?B?WGdRMWo5TkZOOWczdU5uOXVTbGExaFpyWlE4OEdURmRRcFpEZVFoNEZTVkFj?= =?utf-8?B?a0FRV1doWGE4c3E5c0tub3Z0N0V0SVEzUVJZekhoSFdlVWd2bkdjQjM0ZFNv?= =?utf-8?B?QVZaUnh0UHFSMkxlaGJYRldKd2w0alFPTTBDQnNUSHRLQ1VHSkVCY2xsOENE?= =?utf-8?B?Q3EzNk1MUFhIM0paQlNkSWFpb1J4cXhRRTErQnREL3NWYmFGQ2c0cUhCNC9O?= =?utf-8?B?R3VNQkh5TllkVDhuQUtsV0RzeStMY3NoSCtOZFhCcFZGckFldWl0ZlJSWTJu?= =?utf-8?B?d1QzbTIxczY3V01WUUthUHA2SW5ad1dDaXdSVUtwb0s1R2xsVFVETzRmZnNN?= =?utf-8?B?MGp0S2prVUo0UmVTdkZPOTRORjkxbmVsSmVzL2huMjQzVThNQ0xOSk5jeERS?= =?utf-8?B?UEZ1K1pJRXNSNUY5VnVhOXROaUl1RnZFMHNoOFdMMWJnNWkweGk3cElqbjBi?= =?utf-8?B?bEUwUzhKbXpTS3JNMHdWOGdweXQyNEhnVnJ4TXYyem1NUkxtdUhkcjREOHhT?= =?utf-8?B?cHR2RzZvMXo4ODNCVEgyNit6ME5uZWRaTFZoVFZLSW9pUGo0dDIrN0lkd1A1?= =?utf-8?B?UVdmMmJsQlJzSHpNSjhnL0t4S3pKYjYwZGJWS3F4UW1yY29ZUDZoM2ErTWtt?= =?utf-8?B?ZHBBUG5oNVF4ZG5nZmxicW1tb1RuMm13dE9KNG1YUkFwMUNnUGdQVVVZdkwy?= =?utf-8?B?UG1zUUlCMVpOT3Q0UGp3M1FFMUtXM2k0ZExkTGNibGhaQ0I5bi80aW8rd09Z?= =?utf-8?B?WTFZM1YyZnpVcVZTenRNWStqcTNHdklPMzRoZGxKMitDaFZlZlV3aVplNGN3?= =?utf-8?B?UFpKVmJmWnlkRUtDc0lhQURDaEZ5SVdYaWJiUXE4ZWtkdXV6MHRIMkJRUmYx?= =?utf-8?B?KzlycFNVdGNqSVBITTRIYjZoWWxiQU44ZXgxZ2NJWFpIOUltQ1VySjZhMkN4?= =?utf-8?B?WUE9PQ==?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 31ddcd81-fac0-476d-a732-08ddb5474759 X-MS-Exchange-CrossTenant-AuthSource: AS5PR10MB8173.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jun 2025 06:53:10.2124 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: NWSB5ZIbFbEoVG5MoH7mzLW9wsq6wrKV9bpS4j7QacFa+2dHsCf147J6tZms5vZKC4bdsNtxl9vI3FhUcS9xsnfeG1rlvu23gUmGD2mfDuI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB6193 X-Original-Sender: clara.kowalsky@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=eVvwPCp7; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of clara.kowalsky@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=clara.kowalsky@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Clara Kowalsky Reply-To: Clara Kowalsky Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: PWbOYjBJ245b On 26.06.25 18:00, Jan Kiszka wrote: > On 26.06.25 16:07, Clara Kowalsky wrote: >> If a tag and digest are specified for a container image in the SRC_URI, >> the tag is ignored until now and the container image with the matching >> digest is fetched. >> With this change, the container image is fetched based on the specified >> tag and it is checked whether the digest matches. If not, an error is >> thrown. >> >> Signed-off-by: Clara Kowalsky >> --- >> meta/lib/container_fetcher.py | 17 +++++++++++++++++ >> 1 file changed, 17 insertions(+) >> >> diff --git a/meta/lib/container_fetcher.py b/meta/lib/container_fetcher.py >> index 16467abb..08766742 100644 >> --- a/meta/lib/container_fetcher.py >> +++ b/meta/lib/container_fetcher.py >> @@ -11,6 +11,7 @@ from bb.fetch2 import FetchMethod >> from bb.fetch2 import logger >> from bb.fetch2 import MissingChecksumEvent >> from bb.fetch2 import NoChecksumError >> +from bb.fetch2 import ChecksumError >> from bb.fetch2 import runfetchcmd >> >> class Container(FetchMethod): >> @@ -47,6 +48,22 @@ class Container(FetchMethod): >> def download(self, ud, d): >> tarball = ud.localfile[:-len('.zst')] >> with tempfile.TemporaryDirectory(dir=d.getVar('DL_DIR')) as tmpdir: >> + # If both tag and digest are provided, verify they match >> + if ud.digest and not "tag" in ud.parm: > > Hmm, I'm confused by my own suggestion right now: Did you test that > again? Don't we rather need > > if ud.digest and "tag" in ud.parm: > > ? Forgot to fully test this.. Yes, the v2 is not working. With "if ud.digest and not "tag" in ud.parm:", we only enter this case if no tag is specified in the SRC_URI, which is not what we want. The digest is then compared to the digest of "latest"... Tested with "if ud.digest and "tag" in ud.parm:": This is correct, it means we have a tag and a digest explicitly specified in the SRC_URI and then we want to do the "skopeo inspect" to check for a mismatch. Sending v3 with this change + Reviewed-By. BR, Clara > >> + inspect_output = runfetchcmd(f"skopeo inspect docker://{ud.container_name}:{ud.tag}", d, True) >> + actual_digest = json.loads(inspect_output)["Digest"] >> + if actual_digest != ud.digest: >> + messages = [] >> + messages.append(f"Checksum mismatch for {ud.container_name}:{ud.tag}") >> + messages.append("If this change is expected (e.g. you have upgraded " \ >> + "to a new version without updating the checksums) " \ >> + "then you can use these lines within the recipe:") >> + messages.append(f'SRC_URI = "docker://{ud.container_name};digest={actual_digest};tag={ud.tag}"') >> + messages.append("Otherwise you should retry the download and/or " \ >> + "check with upstream to determine if the container image has " \ >> + "become corrupted or otherwise unexpectedly modified.") >> + raise ChecksumError("\n".join(messages), ud.url, actual_digest) >> + >> # Take a two steps for downloading into a docker archive because >> # not all source may have the required Docker schema 2 manifest. >> runfetchcmd("skopeo copy --preserve-digests " + \ > > Jan > -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/953efeec-e0a3-41a9-a849-e5cc55bed601%40siemens.com.