From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7076124590445953024 X-Received: by 2002:a05:6512:3402:b0:448:970:c3a5 with SMTP id i2-20020a056512340200b004480970c3a5mr6299667lfr.576.1647618385156; Fri, 18 Mar 2022 08:46:25 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:6512:3f16:b0:449:f5bf:6f6a with SMTP id y22-20020a0565123f1600b00449f5bf6f6als416912lfa.2.gmail; Fri, 18 Mar 2022 08:46:22 -0700 (PDT) X-Google-Smtp-Source: ABdhPJymurvcGevtbo4f9skKqvDofH0QIw9k9ebtB2XjTsQEJKmPY2GA0RzNeSK+UJ5OjVRxXMH7 X-Received: by 2002:a05:6512:3dab:b0:44a:247:2d8 with SMTP id k43-20020a0565123dab00b0044a024702d8mr3751672lfv.628.1647618382552; Fri, 18 Mar 2022 08:46:22 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1647618382; cv=pass; d=google.com; s=arc-20160816; b=pIEq8SK14vMX3HS5Z5JOCVFR5NfmZNNm7Q0W4RZqpJ4nLJcyq5BGKrd5Zrib9s1Vnl 9ITQpcq3e5pRYVreyv2KatlfIkBLceRu+JHAIXcrVXlCzXOwkgIsocAbSTVzTNTajiR2 nVolTI8vpei/gLI8QKSga+B8NpiryvAYb+VpUVyFb1cbQkaRtCjyXzVhe44K0NLkAooO +b1r1WoKs4e6AyJmKsau2r0v3MBFu1vlDMYKF/gT4aDmBenuYr4Hm52Gdc4nweRJGWm2 V/nxfLEk/B2wjpyDfbg0tcCtQ62JlvcwBPXaVpZn1JjOdy9h3yAdTdPPUexVGtIhH1uv 6A1A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :dkim-signature; bh=OXXdxz3Hnc2zNYyVRwJ2yIIg+5k/2I7De5hRcDqp3T0=; b=lBiwlJfWOxLh9PGnuz4jsxDzhev+FYQcLBZtYl7rQNXQz4fx8cY5gCfo9jMwp3vo4T sq4kc+jwiU8UBBPrXK1WgbaNAHjPGd3VGIlec5QQixdiQTP+m24IIWPbQkcCbz7Y7R4y OdMJVme6FiuAZMsFrYlBc7Q3pp/dqZls5XoKyBnvwef0lZUeOQyUwwOgKwvodZv/zLx6 k9/vfkZnDEk6gcrIYj2YgFazP0l8HxpQoonHUItqTlRfEe/WpbEFy4Gb+0oT50k75CtW 4D8cEQ0FR1A2gzVPKWw+UMbEB5ths82XyzKFYUav+q91pq5Yn6qrnFlpLRTzsvCthJ5e c+YA== ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=D8Mi3+8s; arc=pass (i=1 spf=pass spfdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f400:fe0e::60b as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on060b.outbound.protection.outlook.com. [2a01:111:f400:fe0e::60b]) by gmr-mx.google.com with ESMTPS id i20-20020a056512341400b0044a03a6ac05si210611lfr.12.2022.03.18.08.46.22 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 18 Mar 2022 08:46:22 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f400:fe0e::60b as permitted sender) client-ip=2a01:111:f400:fe0e::60b; Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=D8Mi3+8s; arc=pass (i=1 spf=pass spfdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f400:fe0e::60b as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KF68B8d+hOpAHbXb9zxGQjS3TOFiEjdjm/F0QSDpvLLeQz1pp98lmojrd7jGJpTUn6GJxPxd7RrUF1FVU7Abz4Ks5eERR0Daw2pIVGzmb/cPKcVUmJlEu88gXY47lsGekpgWt221GbX+ydr2rPJpmXZ8j/dNty6ByanWO2z7dUuLuFuMKpgrJrE3ffBIMJ+1M7+oKt8g+iMpzD4Odx2T70EZ9rnidSySG858lmjrklt0IW3FRhiQdzh9ovEw2c8/nXbo1fTZAP/dB5gn2TsvJ7G1W96oq7OQhiC2zM76mp0BMBepEKFFvAgTEBSq+0u/L5PR0wk5xw9x7a2YQBedtg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OXXdxz3Hnc2zNYyVRwJ2yIIg+5k/2I7De5hRcDqp3T0=; b=J/bF3kyRZAo2vQkv2HrMYja5UnhF7IQ/uEruiz4teIk9qziKTM6d6UYZgwZJf9UgYA03XlWfcqP5z7Ejir1rD2ogaPqC5DcjsN+wwBnd+z3KFS7Cd904dlgfC3UdRnW5ryhjawanPVmKvl6v2X7yLM80QYNrC8BIus6ONww5xfO4qMn5DhVsIUHFULJ4lH52aLK6YGDawCbQB4Ub5/AaiITN8RGjC7nRU7jRoBk7EilSxpovYb5iFiN1kGFyZD9VKlvMW8gjAvtyuJD9y32lhA3YIE2jUXEhr6GGGTGkSFmYj1mvEQDYHCXKcqlRZAWSZbKSoxTiPSL10y32jzDrzA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 194.138.21.72) smtp.rcpttodomain=googlegroups.com smtp.mailfrom=siemens.com; dmarc=pass (p=none sp=none pct=100) action=none header.from=siemens.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OXXdxz3Hnc2zNYyVRwJ2yIIg+5k/2I7De5hRcDqp3T0=; b=D8Mi3+8s/JHdqIITcsY5mqSGoX4ZVdVPiGky7J+OuT//ejJgVcXEQWmLwEqgJZNOLvG/+5vTasJNBN+rOLYbsgC3on3ucECQpjZqAVR9HmCh9Dz3LXJL/ogXZMJWicIrVL38nHdf9qS1GqjNPU/ofZD/6ByYGkowen6sTQUPIqz2eUkVdgJoozB3ok7JGy2hpgWEYylauAUqdIWwBrwMePL1thdObGBpsqywbDfYOKPGJH8UHXPYginVKT0O0kateGNWg/6XkQS+g4/B8YYCi5DbCh9zs3KWQk4i6PRIFc6bD7FNf+4AwjNx6FIQLNp5FVTB1yMiAIlHfeIZgre5RA== Received: from OL1P279CA0036.NORP279.PROD.OUTLOOK.COM (2603:10a6:e10:13::23) by AM6PR10MB2904.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:ed::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5061.25; Fri, 18 Mar 2022 15:46:20 +0000 Received: from HE1EUR01FT062.eop-EUR01.prod.protection.outlook.com (2603:10a6:e10:13:cafe::8e) by OL1P279CA0036.outlook.office365.com (2603:10a6:e10:13::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.17 via Frontend Transport; Fri, 18 Mar 2022 15:46:20 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 194.138.21.72) smtp.mailfrom=siemens.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=siemens.com; Received-SPF: Pass (protection.outlook.com: domain of siemens.com designates 194.138.21.72 as permitted sender) receiver=protection.outlook.com; client-ip=194.138.21.72; helo=hybrid.siemens.com; Received: from hybrid.siemens.com (194.138.21.72) by HE1EUR01FT062.mail.protection.outlook.com (10.152.1.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.20.5081.15 via Frontend Transport; Fri, 18 Mar 2022 15:46:20 +0000 Received: from DEMCHDC8A0A.ad011.siemens.net (139.25.226.106) by DEMCHDC9SMA.ad011.siemens.net (194.138.21.72) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.24; Fri, 18 Mar 2022 16:46:19 +0100 Received: from [167.87.72.239] (167.87.72.239) by DEMCHDC8A0A.ad011.siemens.net (139.25.226.106) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.18; Fri, 18 Mar 2022 16:46:19 +0100 Message-ID: Date: Fri, 18 Mar 2022 16:46:18 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.6.1 Subject: Re: [PATCH] Avoid sharing of /dev/shm from the build context Content-Language: en-US To: References: From: Jan Kiszka In-Reply-To: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Return-Path: jan.kiszka@siemens.com X-Originating-IP: [167.87.72.239] X-ClientProxiedBy: DEMCHDC89YA.ad011.siemens.net (139.25.226.104) To DEMCHDC8A0A.ad011.siemens.net (139.25.226.106) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 32628562-4c67-403a-0cfd-08da08f67298 X-MS-TrafficTypeDiagnostic: AM6PR10MB2904:EE_ X-Microsoft-Antispam-PRVS: X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:194.138.21.72;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:hybrid.siemens.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230001)(4636009)(40470700004)(36840700001)(46966006)(36860700001)(186003)(6916009)(16576012)(6706004)(26005)(956004)(16526019)(53546011)(2616005)(336012)(83380400001)(47076005)(82310400004)(498600001)(86362001)(2906002)(31696002)(44832011)(4744005)(8936002)(40460700003)(31686004)(36756003)(70586007)(82960400001)(356005)(70206006)(81166007)(8676002)(5660300002)(3940600001)(36900700001)(43740500002);DIR:OUT;SFP:1101; X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Mar 2022 15:46:20.3109 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 32628562-4c67-403a-0cfd-08da08f67298 X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=38ae3bcd-9579-4fd4-adda-b42e1495d55a;Ip=[194.138.21.72];Helo=[hybrid.siemens.com] X-MS-Exchange-CrossTenant-AuthSource: HE1EUR01FT062.eop-EUR01.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR10MB2904 X-TUID: mWiSVYqZ+Y6x On 18.03.22 15:53, Baurzhan Ismagulov wrote: > On Fri, Mar 18, 2022 at 02:08:50PM +0100, Jan Kiszka wrote: >>> I'd personally convert that to if because I never remember the failure behavior >> >> You mean && - sure. > > Or like this. > > >>> in subshells. While at it, I'd also combine to a single mount -o rbind,rslave >>> to avoid potential shared mount windows. >>> >>> I think that mounting every directory explicitly (bind instead of rbind) >>> provides more control and avoids a bunch of issues with recursive mounts. >> >> Do we know what all needs to be mounted then? > > As far as I remember, /dev and /dev/shm were necessary for building; /dev/pts > was only necessary for interactive work (e.g. sudo). > OK, then let's drop the rest and see what explodes. ;) Jan -- Siemens AG, Technology Competence Center Embedded Linux