From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6690944878080163840 X-Received: by 2002:adf:f30b:: with SMTP id i11mr1589592wro.276.1558507053084; Tue, 21 May 2019 23:37:33 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:adf:82d2:: with SMTP id 76ls162231wrc.1.gmail; Tue, 21 May 2019 23:37:32 -0700 (PDT) X-Google-Smtp-Source: APXvYqwyK8H3TTTNTVo30D/aREfFuRNNjz4HGuMhznx9a3Fg1Z5OXw53ux1fBZxEFW7Urul5esht X-Received: by 2002:adf:f788:: with SMTP id q8mr54176573wrp.181.1558507052683; Tue, 21 May 2019 23:37:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1558507052; cv=none; d=google.com; s=arc-20160816; b=x+7REZPTL60pHW6pdNroIA4WllopY5WqDRcZz/to2ZLjA/7jXM2YZkJaCFPAZNnJoJ YEHd4LjEM6t5XWvM7kHSRc/9ddSGeeqVS7E6OGI/AWLtuWmVIurCf2RoycbToCjVef3b sjtOR3eIVzl4SkA2OpNYsSXVs22g93omQprvOltls6j+o1eNzr5k1D1cJMjH6BnjffSI CpLa4oOSLY8vvnQF4dFTrAqxgqzOD15cWt2kDEnKgxq3RDbq5/T/yD90c52fhayMFVnK 8RJfVj4RCO5S7S3q/TtrirCa9QTTUonxmQnL4Lj9ariEk0z0B4eLv0ZEHqustzsCAUUx oMwQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:cc:to:subject; bh=dtocCJ0EIOEi3/HupeDLKrR//bA7UqNDlQkLWQpBuC0=; b=FMERkW4O5VVn7XpnRTv1B1gc83AMFvyR7OaQuvd5rynnFOB/tG3/xoIgTr+Qjdeu3E BLtl58A2SkZ4mVsiHOfJHphIQyitfsLPBMGZuznbyoTKweYJc7lW0EBlPQqRkdtqGb5a 4vwy+6ng7nFfp5vnHWhLBKRcNIe8d77krcYX7VlXV6j3ceW7cGKJRYGlG112NdpqjRkF 0pMeCmtWZ9ZWRaxyWASEPTszsQb1R46DEWV4AbMF/nmB5W4PGY4tgn/C1Mt1V0Hni9EQ OfcIGk5BVsfjF1D8uHjnatJgTa8sWABxtYBm9gj9Sujk8wdKZprHxIi7YToPfUNTvf4V IL7A== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from lizzard.sbs.de (lizzard.sbs.de. [194.138.37.39]) by gmr-mx.google.com with ESMTPS id f83si238755wme.2.2019.05.21.23.37.32 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 21 May 2019 23:37:32 -0700 (PDT) Received-SPF: pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.39 as permitted sender) client-ip=194.138.37.39; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.15.2/8.15.2) with ESMTPS id x4M6bVEQ016765 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 22 May 2019 08:37:31 +0200 Received: from [139.25.69.232] (linux-ses-ext02.ppmd.siemens.net [139.25.69.232]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id x4M6bUVx014705; Wed, 22 May 2019 08:37:31 +0200 Subject: Re: [PATCH v6 1/9] isar-bootstrap-host: disable DISTRO_BOOTSTRAP_KEYS usage To: Jan Kiszka , isar-users@googlegroups.com Cc: Claudius Heine , "Maxim Yu . Osipov" References: <20190515101149.22187-1-claudius.heine.ext@siemens.com> <20190515101149.22187-2-claudius.heine.ext@siemens.com> <3745f4ba-e3c9-4d59-22e4-9746c6497f6b@siemens.com> From: Claudius Heine Message-ID: Date: Wed, 22 May 2019 08:37:30 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <3745f4ba-e3c9-4d59-22e4-9746c6497f6b@siemens.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-TUID: Js/9UI3uv5iN Hi Jan, On 21/05/2019 18.56, Jan Kiszka wrote: > On 15.05.19 12:11, [ext] claudius.heine.ext@siemens.com wrote: >> From: Claudius Heine >> >> isar-bootstrap-host only supports bootstrapping Debian root file >> systems. Therefore deactivate any DISTRO_BOOTSTRAP_KEYS from other >> distributions. > > Actually not totally true, as I just realized: What about bootstrapping > the buildchroot from a custom debian repo that was differently signed > (e.g. because it is a condensed version of upstream)? Seems we do need > HOST_DISTRO_BOOTSTRAP_KEYS, right? You are right, I haven't considered that case. Well, the next task on the todo list should probably be to refactor and streamline the isar-bootstrap, and especially the host bootstrap process and fix those kind of issues while doing that. There are a lot of possible customization options gained if the current giant bootstrap function would be split up, similar to how the rootfs system works in the pre-processing patchset. Maybe it makes sense to also start renaming "host" and "target" to be compatible with the gcc nomenclature [1] in that patchset. I am a bit reluctant to do so, because of the breakage involved. But the further we wait, to more stuff will break downstream. The plan would be to rename all occurrences of "host" to "build" and "target" to "host". That would lead to the following recipe changes: "buildchroot-host" -> "buildchroot-build" "buildchroot-target" -> "buildchroot-host" "isar-bootstrap-host" -> "isar-bootstrap-build" "isar-bootstrap-target" -> "isar-bootstrap-host" I am on the fence of that change. Correctness vs. no-breakage Any comments about that? Cheers, Claudius [1] https://gcc.gnu.org/onlinedocs/gccint/Configure-Terms.html > > Jan > >> >> Signed-off-by: Claudius Heine >> [Maxim: rebased] >> Signed-off-by: Maxim Yu. Osipov >> --- >>   meta/recipes-core/isar-bootstrap/isar-bootstrap-host.bb | 2 ++ >>   1 file changed, 2 insertions(+) >> >> diff --git a/meta/recipes-core/isar-bootstrap/isar-bootstrap-host.bb >> b/meta/recipes-core/isar-bootstrap/isar-bootstrap-host.bb >> index 7ee4c61..5501e35 100644 >> --- a/meta/recipes-core/isar-bootstrap/isar-bootstrap-host.bb >> +++ b/meta/recipes-core/isar-bootstrap/isar-bootstrap-host.bb >> @@ -12,6 +12,8 @@ DEPLOY_ISAR_BOOTSTRAP = >> "${DEPLOY_DIR_BOOTSTRAP}/${HOST_DISTRO}-${HOST_ARCH}" >>   ISAR_BOOTSTRAP_LOCK = >> "${DEPLOY_DIR_BOOTSTRAP}/${HOST_DISTRO}-${HOST_ARCH}.lock" >>   require isar-bootstrap.inc >> +# We only build debian host buildchroot environments >> +DISTRO_BOOTSTRAP_KEYS = "" >>   inherit isar-bootstrap-helper >>   do_generate_keyrings[stamp-extra-info] = "${DISTRO}-${DISTRO_ARCH}" >> > -- DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de