From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6721684426774806528 X-Received: by 2002:a17:907:20ed:: with SMTP id rh13mr2044766ejb.34.1565080737194; Tue, 06 Aug 2019 01:38:57 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a50:ac62:: with SMTP id w31ls22639523edc.10.gmail; Tue, 06 Aug 2019 01:38:56 -0700 (PDT) X-Google-Smtp-Source: APXvYqyeyaghHK4WwRs3rYIMxcGExDrjIfDO2+1qtOf1tk+2LNxxcz9VGDKnjCxBJIKdWv3bEcM5 X-Received: by 2002:a50:fc18:: with SMTP id i24mr2527828edr.249.1565080736720; Tue, 06 Aug 2019 01:38:56 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1565080736; cv=none; d=google.com; s=arc-20160816; b=Pp2JmDABVVRbCA+ZeW60BT+lwDU7j4zivla52BdibXlDoSymWL2ErWLUg9wmTfcF4D Q5C6Y2Kf4r+rPT2zcFq/oWuu5ZCf3Jaj3boIlWn0z5bL8uAUP0yaHMCtKbTidCL9UUSM Nc2lIMEvHbBsctyncevwKYk3uJ0mwYTkCDAIIksgfn+jqHb93jnmPye8GsqKfHIOzm+a zNVuJj8JoMfvmU1am5OIeDA4fpQhmY3w87qxqeuyqGlI//xWiOJ8CuLr2kLDehHuY20F lUj870IqFRcKOVseOAoqlTQpwE70qqolJ+E/jmL4uc6drhwJ7VpNzKrhGvYqevq8V5IA YPiQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:to:subject; bh=tfw30iVBI2kItckWxMPbns65OMQWeVqPzpVKH6FNERg=; b=sLhJnOG0m95aq0oFuLuXcyw4cwkExla4S6yoZiRnQdxmi+aIw//oeTNmjvvd6rXMjU kW2ayKTNjMnhP098OhldMXO7rwDIVs/VMh8dmebArYYgQ3YEbeIQdv77HnbAnS7BQkI2 Ex1v2BqAH+lTBDgvmFRzLqjQ8W2VunEyZZR34fL0jik6TsdSnaSjV+an8Ki3Jv2MH27r Nm31NxKbiFKQI9K6kYzTOkE4thmBR6Vaz2S9m+vX/YvAO6PTXgdACrmazKM0d6Rq6gTG JDclWVbXjuTP+lKa420wPmHz8HVUDRY40dj3RIcQRS6fYt7azOezj+W2iD8xufgugVD5 p/xg== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from lizzard.sbs.de (lizzard.sbs.de. [194.138.37.39]) by gmr-mx.google.com with ESMTPS id s30si1661562eda.4.2019.08.06.01.38.56 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 06 Aug 2019 01:38:56 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 194.138.37.39 as permitted sender) client-ip=194.138.37.39; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.15.2/8.15.2) with ESMTPS id x768cuBX031501 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Tue, 6 Aug 2019 10:38:56 +0200 Received: from [139.22.35.89] ([139.22.35.89]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id x768ct1W017145; Tue, 6 Aug 2019 10:38:56 +0200 Subject: Re: [PATCH] meta/classes: generate bill of material from image To: "[ext] Claudius Heine" , "[ext] Q. Gylstorff" , isar-users@googlegroups.com References: <20190805140742.11479-1-Quirin.Gylstorff@siemens.com> From: Jan Kiszka Message-ID: Date: Tue, 6 Aug 2019 10:38:55 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: ao/DsWjaf0o9 On 06.08.19 10:07, [ext] Claudius Heine wrote: > Hi Quirin, > > On 05/08/2019 16.07, [ext] Q. Gylstorff wrote: >> From: Quirin Gylstorff >> >> To create products it is necessary to have a list >> of used packages for clearance and to security monitoring. >> To get a simple list of packages use dpkg-query and generate >> a list with the following pattern: >> >> source name| source version | binary package name | binary version >> >> To use it add following line to the local.conf: >> ISAR_DO_PACKAGE_LIST ?= "1" > > I would rather that the commit message would not suggest adding this to the > local.conf and instead adding this to the image recipe variable scope, wherever > that is a .bb, .bbclass, .bbappend or any .conf file. I think the best approach is making this opt-out, generating this list by default (as in Yocto) and allowing users to disable it here this way. Jan -- Siemens AG, Corporate Technology, CT RDA IOT SES-DE Corporate Competence Center Embedded Linux