From mboxrd@z Thu Jan  1 00:00:00 1970
X-GM-THRID: 7076124590445953024
X-Received: by 2002:adf:c381:0:b0:203:fc6b:a072 with SMTP id p1-20020adfc381000000b00203fc6ba072mr10333424wrf.522.1647861954472;
        Mon, 21 Mar 2022 04:25:54 -0700 (PDT)
X-BeenThere: isar-users@googlegroups.com
Received: by 2002:a05:600c:1c21:b0:38c:a3fe:5d59 with SMTP id
 j33-20020a05600c1c2100b0038ca3fe5d59ls1463365wms.0.gmail; Mon, 21 Mar 2022
 04:25:53 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJyfXsW2owefwFH2WypqX2sYJ+BJ6/xXe/NJH8K15/rCA1+oDsiUMiodEW4OLJxZT+ekDQjj
X-Received: by 2002:adf:f30d:0:b0:203:fed7:c206 with SMTP id i13-20020adff30d000000b00203fed7c206mr9156675wro.144.1647861953581;
        Mon, 21 Mar 2022 04:25:53 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1647861953; cv=none;
        d=google.com; s=arc-20160816;
        b=Id18ePs+Xbb4WKsLkIAFM3aa4uieR6UsBgMsI7+r6pe9C83jF7evWO4vXS9orhQbTF
         GpDOJGtkuof4wQfxhApsnktJS4QhMw5v9t6b5o8vrZ3WS7ennGrpF1QlPypoHxqGuexZ
         UomG9PNcd0tu+1mc0ThJz8geR/M9PBW8EYZUkRAB0z/rwv9fNe/462uSjupE8sHIUENN
         +C3SveFMvKsbxabFo3o98WAzw8E5XqHEams9Hz3cfGt5mEK4XThekP/YzYHgJDyymU0j
         c3tXwFbFkxWJBo3QdlUwrOIQVt811bOK2l2GRrrkF+pSEOaZn7pfSwqoG+fkllUd9F+x
         FgwA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=in-reply-to:content-disposition:mime-version:references
         :mail-followup-to:message-id:subject:to:from:date;
        bh=ze1sdQ0sXXa/HBqSjuH4iLFjfAHqqjrz8rkkzf5njAY=;
        b=mvt3sAHyAUwds+ME0oRu+JRwy4VZMZolgbyR38samvqpF0g+h5LgPMCVnySzIMJhRg
         xdeql1miYqVxunh9jT/0EeOzSU229XYnXrHrMTcjOTYuRp2BPO/ySGr72CZT3YwmLsRP
         6/q585swLD8LTEMV5EHLhDWY6wCYkwdKD0hB7cki2wniq/f0KwnmJDrzps43ymrJ+OGV
         uliIWAtBmC7BeHqUrT2Fp+nTxGoXYMaN9kzz8KuHO5Y6aVLfGvvz7+ESVT47vQ4XbN6n
         Y7tTPt9ByoQfyUN0BLbONiQxgrD1LXpvx6zAkFia0r/vjSp4e5ya4GtOtfw1W0MzU9OS
         vewg==
ARC-Authentication-Results: i=1; gmr-mx.google.com;
       spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net
Return-Path: <ibr@radix50.net>
Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166])
        by gmr-mx.google.com with ESMTPS id h81-20020a1c2154000000b003819dad2a19si1252833wmh.2.2022.03.21.04.25.53
        for <isar-users@googlegroups.com>
        (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);
        Mon, 21 Mar 2022 04:25:53 -0700 (PDT)
Received-SPF: neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) client-ip=85.214.156.166;
Authentication-Results: gmr-mx.google.com;
       spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net
Received: from ilbers.de (host-80-81-17-52.static.customer.m-online.net [80.81.17.52])
	(authenticated bits=0)
	by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8) with ESMTPSA id 22LBPpQP012402
	(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)
	for <isar-users@googlegroups.com>; Mon, 21 Mar 2022 12:25:53 +0100
Date: Mon, 21 Mar 2022 12:25:51 +0100
From: Baurzhan Ismagulov <ibr@radix50.net>
To: isar-users@googlegroups.com
Subject: Re: [PATCH v2] Avoid sharing of /dev/shm from the build context
Message-ID: <Yjhgv4JSdNmIy4Ve@ilbers.de>
Mail-Followup-To: isar-users@googlegroups.com
References: <50a15579-0b26-8dbe-6c71-d037f04bf53a@siemens.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <50a15579-0b26-8dbe-6c71-d037f04bf53a@siemens.com>
X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED
	autolearn=unavailable autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de
X-TUID: wtv3NuQuo06F

On Fri, Mar 18, 2022 at 06:46:00PM +0100, Jan Kiszka wrote:
> diff --git a/meta/classes/buildchroot.bbclass b/meta/classes/buildchroot.bbclass
> index dd8f4206..01078684 100644
> --- a/meta/classes/buildchroot.bbclass
> +++ b/meta/classes/buildchroot.bbclass
> @@ -42,7 +42,8 @@ buildchroot_do_mounts() {
>                  mount --bind '${CCACHE_DIR}' '${BUILDCHROOT_DIR}/ccache'
>          fi
>          mountpoint -q '${BUILDCHROOT_DIR}/dev' ||
> -            mount --rbind /dev '${BUILDCHROOT_DIR}/dev'
> +            ( mount --bind /dev '${BUILDCHROOT_DIR}/dev' &&
> +              mount -t tmpfs none '${BUILDCHROOT_DIR}/dev/shm' )
>          mount --make-rslave '${BUILDCHROOT_DIR}/dev'

Thanks for the update. If we don't mount recursively, I guess we can drop
rslave? The same for the other occurrences.

With kind regards,
Baurzhan.