From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Sun, 13 Jul 2025 18:59:20 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-qv1-f61.google.com (mail-qv1-f61.google.com [209.85.219.61]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 56DGxFdE004574 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Sun, 13 Jul 2025 18:59:16 +0200 Received: by mail-qv1-f61.google.com with SMTP id 6a1803df08f44-6fac45de153sf52443096d6.2 for ; Sun, 13 Jul 2025 09:59:16 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1752425950; cv=pass; d=google.com; s=arc-20240605; b=C6fsuEIzN8l1gu/c4lKGC8VRX8y6x8yt6FTjZrtfZkLDed8/rrn8biVjF9Id0su0h5 62HaLfP9cAwxwBmyo3VVOK+RYeMRRoZG4FS2OgmnqDvKczSQg04tqjB9pR9WbEcp2xlt nFv8Y8X2hGhq6KqZmX2UM/kg2GXuu2Y9uj8Hgzw6Vyh+SLFE9peiXHVzpTWDYxWDg/rq sndsJxdYlT+b308RtgdpWvP8z5l+lVT8Fh1ZKR3OxW3aCEy1+1F5p+ovrn+hST27J5HV iHxDaK527tdLRwBRLH7Lm2NcSNhh31GGb2rW659QPXnbH2jY4ceAyIHekBpertRZpCpd H3EA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:in-reply-to:content-disposition :mime-version:references:mail-followup-to:message-id:subject:to:from :date:sender:dkim-signature; bh=Zgh9+Wh3w6iy5CEDO1XFuwPsfI6T17IUB7O5u26SMHk=; fh=be/+Dcr6wIc3+aHqS7KilYAhgxFCO6y2Fw3fWQ+8AG4=; b=Bt1Pwz8w5xQKwJX9kPl7bYfQUs4jhCrzNsJLI2DAEazajGLdNeeJiHswEj97vEeVmD nDP3Gieu8alLgEkdXC3b3pt04lrUo0bA3CeaqD3vTkhyoxwX9Jl43aM/ih6cLHyDvbqK wCSaVAGOkbf9sQ18Pio7xWN+HXrAXLBi4++EipetDAKUxFU2RV5kfMiW/dllV4Llh5Ww bEoGOX326O9P7l6h6Q5y1aNxM2H5msgyeZK4QkeyyUYRZTu1s9QoRruQE1M0Hnk7hFVo /MeRYJmB/Ys5pL59ggEcLVDI+wCMnOCCQAX05DbmSVOlRkBmO9Hnux1TZBc4osHyaN37 j+zQ==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) smtp.mailfrom=ibr@radix50.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1752425950; x=1753030750; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:in-reply-to:content-disposition:mime-version :references:mail-followup-to:message-id:subject:to:from:date:sender :from:to:cc:subject:date:message-id:reply-to; bh=Zgh9+Wh3w6iy5CEDO1XFuwPsfI6T17IUB7O5u26SMHk=; b=BLdVGmIm6PGFiiAWQkgsFVvKrMeOvPvBDIu+zClBBhXCYk0/btptzSYwtz0KrCAITB Kat3DMeAhiBWWavB2M+W12nzXH6bv8pWhCaZNZptOxT+xRO7hkUkW9YmervlmyjMRWiB r6U6OKVdG1GUF08kmm0JiG4Vl7h6Fm3x8ujZFRzqufeTPRAF2ma5a4hHshgIeJaXWW81 UfhzCo5/fkDLoiFiQtgEA2gzYLkwGSW6fU8cIcWZzn9Wp5vMXdO1Lt1D6LbDOey5jXHW V+SL6PJZNZMio80XtACvWyFSF+zwJknRmZHxf2BVhnBztaHIgmrK/YZxWi7W3rqdAvmH /JGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752425950; x=1753030750; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:in-reply-to :content-disposition:mime-version:references:mail-followup-to :message-id:subject:to:from:date:x-beenthere:x-gm-message-state :sender:from:to:cc:subject:date:message-id:reply-to; bh=Zgh9+Wh3w6iy5CEDO1XFuwPsfI6T17IUB7O5u26SMHk=; b=HIj5wlKE3KmtqHSkKzZYB17+3Mc2u1+dGvnBIbURNnz5YqcPayToV5ONnwd18ABkLy 12jSyszfPLvV8KGRcu4I8Eofy5TvrRjKKoYbcUlDcx0/w9VCTPzKZUfM4RE4/7q6D0u3 PTXBZso2ed4yPr9dq32rSjNTpzQMh/34fyq1Tutnk6BjKS78LDhOvJWYlDiyr50r3Pfg AStoLXhyqRwRrP/faCyWBPAVtuKfozvz4NYDkxWWEH8qllIXx1O7ORMfZIoENcsl2Cs7 mPjTU1yMwfkqVhQD57dS3Bu6bqLysl4jL10TOzMLiUooOI2Ram8pUg/3MFlNyxEldkzP /cCA== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCVByfUlWdCkYY89Oe0Qf5CnsjsTayDPip4oyiofsBI+KbtTcD+bzp6j6a9VCg4arfchFBP0@ilbers.de X-Gm-Message-State: AOJu0Yx/lCRf5buw+NGiCiDpKQKBukShKXdWMkTQ/HmZ2HCtCJtuYRxx L8RwTEyuFp2TAQYFo3hzkYfVicJ9m/16Bi4IAzM7HVM2jvUEtOE98omq X-Google-Smtp-Source: AGHT+IG0pbPh1bpcRxY238dcYKdfXqEzxeG/CYSbjFUuLF8OIUA03u9Y1mhKnMhjEUmh2o1F8VAaaQ== X-Received: by 2002:a05:6214:301a:b0:6fb:1fc:788e with SMTP id 6a1803df08f44-704a3518a4fmr176279366d6.2.1752425949684; Sun, 13 Jul 2025 09:59:09 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZeCltz+tUuI/P0uZZKs0eUmXv+d7OyrHYSY9OwCgNeWYQ== Received: by 2002:a05:6214:2486:b0:6fa:bc23:a7c2 with SMTP id 6a1803df08f44-7049572f8ccls63441156d6.2.-pod-prod-02-us; Sun, 13 Jul 2025 09:59:08 -0700 (PDT) X-Received: by 2002:a05:6102:f06:b0:4e9:963f:2d09 with SMTP id ada2fe7eead31-4f641174ad9mr6513625137.10.1752425948783; Sun, 13 Jul 2025 09:59:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1752425948; cv=none; d=google.com; s=arc-20240605; b=U6vWBntg9LzoquBUwTsw5enpF/MsX3dKcvP4Zbe6RhoYcEffGimiCZdZaluq8kl4/W HeR3ji4vFed3/ks9alFj0pizLqL/2lEJ0xzPVUAaL9UD+0++pFDN4mu1L0fT+45UR+O4 Pp/f+0gUvTtsRxYYGN2txWU1PXwTuBqkDG/3zVfkwzaLQ739wI6rVlS/AyxRQ48LVCeC SPNK+2gN7xxB0AnxaDM+0UbnA2KDf6RkJCJ5id0S+ey1Y3zdaf2W1LYPjyDevhRTLRls xkvV58evs59QdrXJPyIclYPnSCgDI+PiEF77kjqkiqAlx1MBE+9sCvvv3taKGABcHDyy kfPQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:to:from:date; bh=h0fSqJQRRFsZ1D35Ao5z92uzqNpKzYxiS4+LlTRbtC0=; fh=7tclEdh7YbwSQowgJ6LNq720O7H5HTEaqj22NJWRE2E=; b=P2wWXOZIQFKUJH1DYi1uSvFA1CeiUAGCX/gRAJR0EX/Wf1UfZcu7GXJXM3MtdTon3V gyTLsTuEPXfkmeLdIcnsh/f2LaN+oPX2rt/d//URONlPSE1Sc6mvTqkYISRhkbXqd5GB IHbUy7CAs2gB4WXp5R+VReZU+syvXdh84V2CRAmNYLzZF1iD7wwz3Aj3lJf/LBnX82j7 DQyKi+3w3Tn74YARsuYQAeSCzQWh+v7aOruuTJCcx0+ASPfJ6PfvrpIVdOFkly/7wSxd VroBYNcBNZqTDU6SMSKYJX/Ewvh2DxjFqK7yeqkBhsueouiDU0+GmFYabJkBdehsb6aC 1ZFQ==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) smtp.mailfrom=ibr@radix50.net Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id ada2fe7eead31-4f62f3c7c7bsi277171137.0.2025.07.13.09.59.08 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Sun, 13 Jul 2025 09:59:08 -0700 (PDT) Received-SPF: pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from abai.de (ipbcc035d2.dynamic.kabel-deutschland.de [188.192.53.210]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 56DGx55R004559 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Sun, 13 Jul 2025 18:59:07 +0200 Date: Sun, 13 Jul 2025 18:59:00 +0200 From: Baurzhan Ismagulov To: isar-users@googlegroups.com Subject: Re: [PATCH 1/1] wic: disable generation of python bytecode cache Message-ID: Mail-Followup-To: isar-users@googlegroups.com References: <20250605145837.1384007-1-felix.moessbauer@siemens.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Disposition: inline In-Reply-To: <20250605145837.1384007-1-felix.moessbauer@siemens.com> X-Spam-Status: No, score=-4.4 required=5.0 tests=DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE, SPF_PASS,T_DKIM_INVALID autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: ibr@radix50.net X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of ibr@radix50.net designates 85.214.156.166 as permitted sender) smtp.mailfrom=ibr@radix50.net Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: axrQTTqBaVPE On 2025-06-05 16:58, 'Felix Moessbauer' via isar-users wrote: > Wic is executed as root, so the python bytecode cache is also > created as root. This is problematic as the cache is created inside the > source tree in a folder__pycache__ next to the python script itself. By > that, we end up with files belonging to root inside the repo source > tree, which makes it impossible to delete the source tree as a regular > user. > > This problem became visible with the kas purge plugin that removes the > fetched layers as a regular user (these layers are fetched and managed > by kas). Also the read-only mounting of repos in kas does not help here, > as the fetched repos are not mounted ro for obvious reasons. > > Anyways, we should not create files inside the source tree that do not > belong to the calling user. To fix this, we just disable the python > cache for the wic task. This is the only task that executes a python > script from the source tree as root. If there is consensus on this, I'd like to merge this in the next days because it provides a specific improvement. Any broader / more optimal changes can be merged on top. With kind regards, Baurzhan -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/aHPl1I4EJuBCfYRb%40abai.de.