From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 25 Jun 2026 15:27:55 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f60.google.com (mail-wm1-f60.google.com [209.85.128.60]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 65PDRs5Z003481 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 25 Jun 2026 15:27:54 +0200 Received: by mail-wm1-f60.google.com with SMTP id 5b1f17b1804b1-492488f8583sf23764525e9.2 for ; Thu, 25 Jun 2026 06:27:54 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1782394069; cv=pass; d=google.com; s=arc-20260327; b=iWCA08wSXPXF3SJTo+F1+lZuoyIG1+cgUhJsS56dQEtkfouO7ObG51b9+4cZIyvJll 9lJDDPesDCEhXTy+HPTNqX+uL1WttXpF+lSS/sih/eVP9uLO61/h03wSXz4zdaW7mf6d hKCNXvXDD5VT5KaZY/pOybXkMB3dIx7wonozGzXCqAiZ95JyShmJXtavXIoDYhv3UReE nX9g7r5Jk+Q3Ky5wq5nkK/VMm4ao/zk5Js3c9j5/yVKv59DZN3dY06GfsRHYmE8CcfjA ehF/0MVER9lAdhj3AXwpTFu8IHPCQJU9gsKD0H3pU1Q3RenqjxRKtn9nIBoPhRhV4kS/ hV+g== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=YUEEBtmHOnejHfF9IaBWfR4ISC1+ecSBzWpI1PJUlPk=; fh=l3IFkgOX5qvkLlBD+1J4iK10jEzZnpTBWLi+9vRTZNw=; b=DTu9TsFiabb4jnzxvIowKUdCAaM4tKLAm3y6WoSmqGLSdaboK/ZPQ0WjowMZm5VkZi gwwVk/FS/5wpQjNpOz77uuR+yp7cEZlPeKaLalUGbGDscJpelOzX72vaTIggM/13fzbu qbEh7Mvs3tndWK+g9Emu1iYZd3z9BfUN/ALnE8/tdBCH5SMuGl41BR4zq/TJIF3whhWI e4+e6u1lpWhL1XSo+730AmFK6qAnnU6BuWmeVD5xSHNdEgy+R7O8VN2yt5n+erszAysF 37XkGLg+ZCzOA+D6ufWgAzsML7I5N3xSGYcfe7IFh+VMSsh9FyOq63V5Bj9Xd8mBPtmK x0Eg==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=egOfCGzg; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1782394069; x=1782998869; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=YUEEBtmHOnejHfF9IaBWfR4ISC1+ecSBzWpI1PJUlPk=; b=O6SvQJxjmsePDWF46E1x/A+Hw1ra3wmPF5+uCxHDg5w8SZB/IJUPswBsDQjzuiECdK zRQtiXtuNkzKa9SUeheY1NZKbC4FFYI57Ftc3Gme3zOvHrsrAFZre7HVnlN5BuOTYOGt feLSzCcV+yb2YwUd5lvD/DRlo5B/8J1/L8O1yG1/c4MtfL+l7aB11Uea2jOng5TM3yOw o9GVmLedD1b0yuQ5vfQ2HCASWyXJPatk68HA51dzbO0ZWQEfEV839Lwo6M9/7XEXYKUF aZh6OL+daWd2uFjSCk1zIuHPnLE5t/TViBEnDs3rJhI7hyKWcTMCEC3kYWtS/vocMdZ1 h/uA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782394069; x=1782998869; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=YUEEBtmHOnejHfF9IaBWfR4ISC1+ecSBzWpI1PJUlPk=; b=kmnpv8wUrxvmcIn6KmiSdYxR2ZnYyaqaRa0CYoOhjtuEYAwnQJBBsj0XUfbVcPcR8f 3Glgi1YN8Nw5Cmd7V264yHnxsGmEIdSls6Ze/Y+WXnKxBpUdO4/pPIAeu3KUnUTbiNGT OsZflsbtjyQ9Vokm+GUh0W22UyTlLv/rJoVl7Ds5r5LP0nsjz5gFFMfwifZ8+G6V1OEZ GYdcJoJbVtj3HPMelIN68tPClOn/lDq2D8EPCAjynabu4rZBd3ArcGReK969wsliNNKy be3DRTljddzYgw0fyYkpXgBJZJLbPHFoc92DHY6a6Nt5AknHFoxeSf9S3KE4kvP4SppB XF+w== X-Forwarded-Encrypted: i=3; AFNElJ8yzyMRhfs1gcN7HKMl9LDxLxlWQ6wTKkz64hjsgHSdVI1FQ0vxpuSsSlxindPhRS95vkB1@ilbers.de X-Gm-Message-State: AOJu0Yyk7KIYsV7h0mR04nZvqxyhEViDqJZNtEsi/Ap6SBnBB7uVuXRg U4y0JqdY9y5wSVggkahBmUyLtsMD0XYoBrlziUveLl4k+dst7JvByFGQ X-Received: by 2002:a7b:ce93:0:b0:491:91cc:d12d with SMTP id 5b1f17b1804b1-4926689998amr27137675e9.25.1782394068987; Thu, 25 Jun 2026 06:27:48 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AX0PUUdBogPss5/HFkuA9shENCzOVjCVUUzl+EMlAtx9q2/zlg==" Received: by 2002:a05:600c:1d16:b0:490:6b4f:82f8 with SMTP id 5b1f17b1804b1-49237da55a7ls68673125e9.0.-pod-prod-02-eu; Thu, 25 Jun 2026 06:27:47 -0700 (PDT) X-Forwarded-Encrypted: i=3; AFNElJ/Yq7brT9Ro6bXsP06q3Xp+Vk1mRJDR8Vk/nOKETyMyhWwcKU27ESjVJOiMMXqxD5p9KsgtZIWhSXF8@googlegroups.com X-Received: by 2002:a05:600c:4f83:b0:492:686f:372 with SMTP id 5b1f17b1804b1-492686f03camr9496955e9.12.1782394066844; Thu, 25 Jun 2026 06:27:46 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1782394066; cv=pass; d=google.com; s=arc-20260327; b=ck5+u1vN4Ivgnr/K3QouMV1SVTe+7eY9ShtpG6vm0i60fZiJA0aR+f3vcD0+M7MyaD KynbDugWP5kjL8mBfB3AVRflviPXo6O0VkB0nFp15rzE+30WHniHgyGbBhA9FxG5eEU/ VDAT/mgslOq8vCc2SOwGNHKAyn63+tGwMIcavAC1gpBTL0DGtsadGnA0oDsLp5k33F05 5UsekgLd/ozBqy4txzt8PUxyoOiLXS6A8Z82BKiFefFW07PS/DiMFw+AjRzOTHyTpqyv Nm0TKzDDVQfPHEpo+GkQ+Pc+X5iETD3BTEXYUJ/+QfuK1z9aHkaMOnzZLg7yU7vbfogc kZLA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=V12zYE9U/n4MK/ai4JlNsNHPpnusNaSEMrsNrBJMxBw=; fh=1OYwjxuzjLQA5I7ae2/k5FD/lA9HbhyyKAFqyV5DoNw=; b=bsgs+khFPSOFvITQ6vhAFkVHU2S2hljh0ysw3M5kb/TrE4CYftkLgi/4I60jSJWn5v qNb1DFgMihp58eMQ/HZSmM9RSrbHDvCjDecFnOmy+FSFSUwhuGnhrwDvkP1M+hZhrt+c 4RzAbs6KIh7edst2zR0BBxWIulAsBAskIzsnda/kcLBPW6h0ZAh+nrmjbv+ho2TD6syt axErKlwEY1TkKqvn2cBiRt1SKKqSOMiduDWrdF9tHxk1LsPBt+hwupjNrcBurUl3EImv s5iQcu3YfHBAnhSVzjuuqPEsiDyPHOLvltSl3pVQ8drsd03n/qolUpkFn3LQmgQwYelO mYUw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=egOfCGzg; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-4926605699dsi403665e9.1.2026.06.25.06.27.46 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 25 Jun 2026 06:27:46 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NOfIsSBSkPZADn0PnaYszzr32s3Y0sWK9Hp3yeeBs1V6jae0B/s/puBFi7XMeUfOjCrVIVGx3fgPI5ez6cJBbxMjhLLQGvUVB0dzeUZfXpRqYxcjIoT4Emdxk2jMWWWauV7xuKX2rXa+7rOWs8jjowLP+LzfHKD5A/2GJBcCQwx1CZBZmrUn0qP0lWnwstkXHfD2uP+2jlduSv7IAXg3NeNlyfMf3UjxVu/8QiL/IEGywoUA4btGwDbXqhcGZjlFRkbzxqjo1EuXExUabzyG/e4/zXfQV+z6izvQZWVfqS8AcYPIv7z5vweYBtReVreMdgeT15MUn8H1N3/swR5Q6g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=V12zYE9U/n4MK/ai4JlNsNHPpnusNaSEMrsNrBJMxBw=; b=MU6XtqWHmkF1RbT5CBe66eMe13FH9UTPis0yujxcagXfGwdJQ0m/WAN3Y4iOPVbq6hudQeAqlqPZOrSL7YuqVhBFuVD+/LTVEErPB91uVJl4HAOGtycBMcb1DpB6qeNmUGb+gURv0jVNT85E6UUEo1hEGy/2fJ/wRYld+yXXSWOw9Ve+zjDnWnE97Ghwqre0eq3P0ReBjoh4R1adJ5B5I8ndUc7/Y2+6ZypwJuiOsrA3HKqX2CJs0/R46oe91y6gPSNrVxF7cYHcUm+WJKjUYgPpNcoHCLlSuuXOw62jSV8X/zS2Eui7s94ubVozFnI+3Fb912LKG8yXzX1/bKe39w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by PA1PR10MB8730.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:440::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.159.15; Thu, 25 Jun 2026 13:27:44 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0139.018; Thu, 25 Jun 2026 13:27:44 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: Zhihang Wei , "isar-users@googlegroups.com" CC: "Kiszka, Jan" , "Gylstorff, Quirin" Subject: Re: [PATCH v6 00/17] add support to build isar unprivileged Thread-Topic: [PATCH v6 00/17] add support to build isar unprivileged Thread-Index: AQHc/KjcYp/dR5V9p06B7WavCHAEArZPCKoAgABCnYCAAAg2AA== Date: Thu, 25 Jun 2026 13:27:44 +0000 Message-ID: References: <20260615092458.259691-1-felix.moessbauer@siemens.com> <8b64ce39d3096fd3399056ae2aabf36d763ba88c.camel@siemens.com> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|PA1PR10MB8730:EE_ x-ms-office365-filtering-correlation-id: b0ce0da0-6a83-42c3-c543-08ded2bd8a6a x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|23010399003|366016|56012099006|55112099003|18002099003|22082099003|38070700021|11063799006|4143699003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(23010399003)(366016)(56012099006)(55112099003)(18002099003)(22082099003)(38070700021)(11063799006)(4143699003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?My9vYVB5ZjVHbXFWQzZRc3NJZEkxS0R2L0krR3B1M0FFRjFYSmw2RjFjVFJN?= =?utf-8?B?T09JSDZzeUcvVnVsbTlyZUkyM2loSjM3WWRhYkN6VHA3cHQyUCtRaGhmQ1VM?= =?utf-8?B?VHRrT3NHRFFzaXlpeXJ1MEtEdEFvTHhXZFY1cmg2QjlxZ0ptMThnTC9MY0xj?= =?utf-8?B?MXM3MVpMT2lOc2lsSXB6TW40ei9SbFZOZnlQY3BKMmFaR052ZW5UVVdONVM3?= =?utf-8?B?b05kbHQwdkpYSHA3OTRFMkQxaDhTUW15MlBrL1RieTEvRUljYWNjZVhNR0Fw?= =?utf-8?B?aHJ4NUdObHdydlBOQ2JmR3IzZ3hjcEIrMHZNN1ZNNjdjN2ZXOGNud3gyRHpR?= =?utf-8?B?MndxUUE3SHBWMkJPcHhvbnRTSEx6WXNKUTBYSXg0WXpVOGhIdHR5TlBmK2RZ?= =?utf-8?B?bGRiUVB1R0QyY2JRcjl4K1V1NVlKRHBmNnd4M3pONVNFTlRmMmxHbHA1bXBx?= =?utf-8?B?NU9Kbjl3VFY0TTU2dHk2TThNWkorTTFBbkQzQUtZVjViSnVYZDZUcXorLzdX?= =?utf-8?B?U3dyaTBXejVPZ0U2am9hRWNzOWNNeFhKK3lyRDlPampmckpFQjB4eWdUVWFh?= =?utf-8?B?YXhkd1I3ZytUYldIcndpUWFIMGdHOTIrbjRLRkUrOGI3aFcyeVJsL2c3NE5r?= =?utf-8?B?bk16bHNsSUgwOTdvWFNCOWxsYmxOVit6QXhWU0VsQzZzVzlMZXJML1dGOXB2?= =?utf-8?B?U1hwanFJNFJneGFpUVE3c05lY01aNVhTWDBvTnRJU3U5ZkVpK2JrK051UnIx?= =?utf-8?B?UVhudFh0eTQ0VVNBSFhLSlhabXVtUTdXcGwwV0VPY3dQN3RMLzFWUUNLQmtw?= =?utf-8?B?MzVwempIeG1pV0hiRVlXbk9EbEg1UFEzQndpODNkamtqSXpOVzRxVjdnVC83?= =?utf-8?B?UTFWcjBDL3hyYjJZN0d0SVNuZ0JMMVZyQWZ3eW16eFh1Y2luSXZFTllBejRL?= =?utf-8?B?ZXJQMUx1N3Q4djJsSXpXb0hkOU9uWXVaNU9jbVBvVCtUMjJnZ2xvdXB0N1Ev?= =?utf-8?B?SVcxR3lseVBldWt5R09QOUlZZHhmRnliN3VOOWhTVG5JZWFlQ1BXcHpNdUtG?= =?utf-8?B?emdidnpET0RaRGJPaHV3bzZZeFpCZ0Mxc2xjQmdiL2J5NE1CL2lmd1JhS3Fw?= =?utf-8?B?U1U1Yit5T2taVldFamVvY2wxT1VwNjdZeTBpTC9meGQwSDg0cUZjR2lzOTRr?= =?utf-8?B?VmlLVFV2eWp1WERQbzYvYTc1ZGl4UU9LYzUzL29reUxaVGZkRDN4eGZ1cTVo?= =?utf-8?B?Z29jYzlrLzYyM2kzMHZWZzEyUVQxSC9wSEw2Mzd4UWxKRFl4a0JzeUEwQlhQ?= =?utf-8?B?VmdScXUvdDVKVExpNU9xYTN1Y3BUdnJEOVZ5Q2h4Y0dacFhsMU1hcnA3Y3dQ?= =?utf-8?B?Z2crK0I4Q0FvUDBBOWdkSWIvSTNKYmxFK3F6SzAvanU1cDZla1I1WjEvdW82?= =?utf-8?B?N1RuSjJ1L2V1MHRTSHpPbG92ekkyQTBlejdZR3F1emczTW90L29lYlN6UXhk?= =?utf-8?B?RU5OUzZaVUdVbS9JQ0Q2QzRUMEhNdnhabitET2JSUWZHL3NDbzFFaHBHYkk3?= =?utf-8?B?bkEzVzFpVktOL2pGN1RHMmdtVlJLbXlCUHUwbGhVZ0lUcVRFV1psaUNGV2Vl?= =?utf-8?B?M3REUllqTkVPWTQyVnNGbFhxcVpZTjRkRGR0SVlROVBGV1dGR2JyanBVMGZJ?= =?utf-8?B?cC9VYWR3NFJteXVWZE4xeHNMbHdpTlFTTlF5blZRSkExcHAyVzdiMUk0TmJX?= =?utf-8?B?MW4zejVpMzBFcTU2ZThJSnhTbjhFc2EvUHladnZYb2NHRnBkOUNQSE43cTY5?= =?utf-8?B?NjZ3SFhQRE0rZDVpWU1NSDd5T3NzYUdiaTI1VFhBT2g1VS8yNlNsU29teW1m?= =?utf-8?B?bm1MZ0trUVYweUdEOFNROWh2bTJKT1hTYzNQQ1YzYWxwejZVdlRWK1RKemM3?= =?utf-8?B?SUNjL2FhT3A5cjU5ckpETXBwNlB3VnNDQTRzaXFFTWk2MkgrWjk2USt4cGZ5?= =?utf-8?B?eitFWjhNOGxNN1lpUzZsWGVwQm5sOFhOT0EyMmM4b2MxQmZRZ3ZGenJDRXB6?= =?utf-8?B?WFBwMTBCVFBCUGFYekdXTGxqZHNHQXlQcU1MNjQ3aEpQS2FyOUJzaG9GVGg3?= =?utf-8?B?QWp3T0IzeFJYN1dTN3ErK3RCY3lIeGlLSWNEb1lVdEYyRVcvcXNwRDcxQ1Jv?= =?utf-8?B?VTRUSjRlcTUzMFlmMHFicC9FempSSlB3bVVmRWRrNVhaK1JrL1Z1UkJtSkpr?= =?utf-8?B?ZXVpc0NZcWREMXFIbUJTL2oyTVhtQVVDcW0xZ0wyamp6K01VVklIaE5RcVgr?= =?utf-8?B?S1JiUFYxdjVIcmRPQ0RCZkZOUENQN1BWK09mTG9kNkkwcCtKNS9EZz09?= Content-Type: text/plain; charset="UTF-8" Content-ID: <824E022AAD99674483FDF1583AA26935@EURPRD10.PROD.OUTLOOK.COM> MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: b0ce0da0-6a83-42c3-c543-08ded2bd8a6a X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jun 2026 13:27:44.5843 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: HxMj1hJv7Q1Tbolo8ZNCn7dSgzA1ok5L7xP/xHaNxM/RIMrD2YYDIRhCYCGWTIQ6tiY0o1zpQMVsrK2jW1AvoqAetZ5veELzItpR1m2p+EI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA1PR10MB8730 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=egOfCGzg; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: xhd+c5Fgh9cH On Thu, 2026-06-25 at 14:58 +0200, Zhihang Wei wrote: > On 6/25/26 10:59, MOESSBAUER, Felix wrote: > > On Mon, 2026-06-15 at 11:24 +0200, Felix Moessbauer wrote: > > > Dear isar-users, > > > > > > currently isar requires password-less sudo and an environment > > > where mounting file systems is possible. This has proven problematic > > > for security reasons, both when running in a privileged container or > > > locally. > > > > > > To solve this, we implement fully rootless builds that rely on the > > > unshare syscall which allows us to avoid sudo and instead operate in > > > temporary kernel namespaces as a user that is just privileged within > > > that namespace. This comes with some challenges regarding the handling > > > of mounts (they are cleared when leaving the namespace), as well as > > > cross namespace deployments (the outer user might not be able to access > > > the inner data). For that, we rework the handling of mounts and artifact > > > passing to make it compatible with both chroot modes (schroot and > > > unshare). > > Hi, > > > > are there any news on this? As this series has been successfully tested > > in privileged mode, I would like to get it merged, so subsequent > > patches already can use the run_privileged helpers. > > > > Cleanups and improvements still can be done later on, but my fear is > > that we will get a lot of back-and-forth between sudo and > > run_privileged if not merged. > > > > I also have some patches regarding the rootfs_postprocess idempotency > > issues in my pipeline which also depend on the run_privileged wrappers. > > > > Hi, > > We are currently integrating rootless build testing into our CI pipeline. We > need to ensure that future patches do not break rootless build. Hi, sounds good! I have an improvement for p10 which avoids the emulation of apt in rootfs_install_pkgs_download, which I would fold in in case a v7 of this series is needed (or if you want something to test your infrastructure). Otherwise this can also be added later on as a standalone patch. Just let me know. Best regards, Felix > > Zhihang -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/b1e51aaaaea11d2c48133571fcf41a7e8942ef7c.camel%40siemens.com.