From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 03 Nov 2025 16:33:28 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-ed1-f57.google.com (mail-ed1-f57.google.com [209.85.208.57]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5A3FXRbX003502 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 3 Nov 2025 16:33:27 +0100 Received: by mail-ed1-f57.google.com with SMTP id 4fb4d7f45d1cf-64081e1f6a0sf3295237a12.1 for ; Mon, 03 Nov 2025 07:33:27 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1762184002; cv=pass; d=google.com; s=arc-20240605; b=hP4xJIc0T7cckyiE9DXeKJoW96aAz0/wdbrY2/SAFjkN0dF+hh56bZEspcF6sBCp/L cyGOBWLsItJ+F3i5Pq0pQfdpe7+xgEOzlzPDYlKt0YjZQlSi06xgabtFUgbAw3sWQKWi Jr3zPY23rSj+AMWYCQ8AdrL6oTjXUzuMWFvLAlI6ObbL6LQhh1Qv8J28ExB5U9xmw1df DnGC5ojN7xGXrYs9Er5BwRlYdAwaM7T931n79EpiqobJjc8PzTucbom/dZzPuQLWqZ5z bWSUWF3XzsammbVWYlTvl2p4DMsyQ12xpCgtgdwnwxPpaEDxDa2pMa/oU6CCqo5LhgAo aHoA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:content-transfer-encoding :in-reply-to:from:content-language:references:cc:to:subject :user-agent:mime-version:date:message-id:sender:dkim-signature; bh=UksIAwbbTjx01VaVRsJ2hiYZ0izDZ8tQOmZRnnQWYXQ=; fh=8ynAomrSIs/NINHaExs9+6jAnLeRwWuj//RtZ1Ft6Qg=; b=hYYmhrVEcUxL8EKqGoMvpnEwoJSw47aNj5YLFPLscQXJTdhm0y7sSfptwNrGnp9hnd w87LKj1UzPZX2TH9IpsZILo0NL0cosXlpsGBzRwsETvnxy8yadXnuk0TABV6vmL4rRzZ zrSonvHJnuhVXcL9pU2+YtLhS25/ryFigX4yj9jqX569eQrfwh88xqaxpfmH/9Fsyq9Z +2ICmzedJnWyGoqsjf9L1EuHirM3AhAzI02UwU7T8ykAzs/vlNx/pvlh25CKVK6pAbv9 Ow05AHSzeIYEs+LuNRH9NnBvbDwXqthG3QdcecZ8XXlwRifQhBbARSzrruoB12Cbcfmx H8Xg==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1762184002; x=1762788802; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-transfer-encoding:in-reply-to:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:sender:from:to:cc:subject:date:message-id:reply-to; bh=UksIAwbbTjx01VaVRsJ2hiYZ0izDZ8tQOmZRnnQWYXQ=; b=uyIIol0MwylWeS7ZEKNsobsjYwrdht9+fINuts/MpNPWMsVYGzUds1dA6S5cZCiaYe WgIcmMTE4xknql5nPzzTP3FYMxp7UcwJ8nyPH1aMQhGhg47DU2qhMoIafz4pFAyjjakv wdlwuZMAw3QFBC3vbVIU0s2aNXVF0xce7Bb5hLUTGMVpE8gM8ohRspMLUkM++yd5he6D urxo3bH8y1PXBymtClfc6wdpFEx0Q4JNQo1xN5g8eGhSTJlt5suspVpREjXLWwJDXVBT Lj6pr5hswXEtV3q5mZiY9XGPVpNXPwyq2CxSDgZwbg+Zo0uNGWTAzpfhDahy6SeCTqFW FLXg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762184002; x=1762788802; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender :content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :x-beenthere:x-gm-message-state:sender:from:to:cc:subject:date :message-id:reply-to; bh=UksIAwbbTjx01VaVRsJ2hiYZ0izDZ8tQOmZRnnQWYXQ=; b=kbbozlzdWHJlRNVfI2ya+M3IAFIK8wxxVGvH0+m+jEfaoElIU+gx9uihw7jEBgNP/l htk2QxxsgFEnlnkMQehpqZsI5A9UuA6wff+dzdWyhXZZBCyCYDD/4a6gMOtfOS9mb7UE iyLWvQZqgopjMcjEAJk5Cif5bAwIW/bj+o/8O79qmcUBFMQ0Vge1ygB4JSn+qWN5Xf2f OCzV5kvxh5aLG+Zly8VmQc4y0+gUhkZECBcCMDy06omSLK/m7attJ0Lxqe7MjHkf35hX G23uFHDCROLfjEgfcCe+kTzFcKlvGU4qaomaK+dJzxzIp84esKBfoTKiRjKa+9pdDUMs VnVQ== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCWx/+w0ABwVN3LqPmxJbla3T4CCHM05r4X8dw2cpgulOGy8lqeHMtrnECm6OutOHfmA51zO@ilbers.de X-Gm-Message-State: AOJu0YwEGbQ/Hq9+kkrwo+EmGUpwtPC3K5oILQRswgihE4IG9n54tB6g 16nFInK761ZZCYXkgx9mJLq3KgpfBtr4RkPacDLhTy9zlxeIQaQR97ba X-Google-Smtp-Source: AGHT+IH/O49FGHQn8YwgjmElkrhmYGGgMSQpxEMilRg1tCXimlGmwRJQXyPJ+bwVbftE4fpFTLeo2Q== X-Received: by 2002:a05:6402:210e:b0:640:b06f:87ca with SMTP id 4fb4d7f45d1cf-640b06fa98cmr5495654a12.6.1762184001847; Mon, 03 Nov 2025 07:33:21 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+ZGgUPxs+h7vkBxbnNPf0psBgg4enTWncwAeJghqd520A==" Received: by 2002:a50:bac3:0:b0:640:3d3a:5985 with SMTP id 4fb4d7f45d1cf-6406057a66bls4567609a12.2.-pod-prod-02-eu; Mon, 03 Nov 2025 07:33:18 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCW92I0NaaPDrbVUGCfi7oZOOT+tKrrEQu1CB1qcRjB/aO0HLIIphiPK/zYRmTLBCRJphS3VQRD8+6QN@googlegroups.com X-Received: by 2002:a17:907:d29:b0:b33:b8bc:d1da with SMTP id a640c23a62f3a-b70701061d4mr1177738866b.1.1762183997964; Mon, 03 Nov 2025 07:33:17 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1762183997; cv=none; d=google.com; s=arc-20240605; b=i9sp+ihWalhvm7Hi+KRKsRW0QWHQ8gjjW0m3Hwvm6AZmlpdk6flgy+TrUXzERG3CAn 8vVNdsmU9Yl4ntolt1peFxGpsHV2givkcAGU77fKjGZmcVe9+qG/Zyos7R63iurG0kGw MMBKfxmbPdr8uB3eN45LaXrV3nd9smdlBMWeJsigni5XjNMRujYeJ86XOuP1f7MlU8ku JUPGzWwhSSmO3qsjJ44AjomBy6lNCTdVjppVF/3jfTlZAOEt1fbhuVVtIF7bUTDuI7dY cy9yA5rAKwab1PDDP3OJezY0SMSsoLEOi4Ddl0xn9MAXOfhZg2qM9iO7QAUAq+7M8iAg XdTQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id; bh=trDfAJ0SuEwDJ6OeDPD28qtwfwnBQpM4MFOvL8bozDM=; fh=fNMifn2YP/z+/WwEYYqmDK6EfgHFPlBHL1rCvcAZdWk=; b=kM3erLX/RMrMMNQv4GlFCCrikgECCSJhTEutW8XHIkUZeo71iUcUO4rkJx8GgXPjnX oAVhOY6pprn2ZGoFqnTHnmdc1e9ml/dyZZrGQdGMdKTXZhuITOsPvN9yoB8o0Iu7bBIC MoUsDPEq/Po1Th93GHgKPBJZwHTNjxMbk43iS70S/Nq12LXETs5xgyxkI9+2FU/DjppE M1YE3tQInVZadE9BQArGiGSSG8Fh4bzF+fSTQn+03AzAJJhUP/hDMr+H1yYaB86vaNqO w3EHr4aBFLhPpiulCIKtW8M/MN8/Y38jBfaOVkkv89IM29GI9wzL/Fvr6t0sxxuVDFd+ u41Q==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id a640c23a62f3a-b7077b505d2si30429766b.2.2025.11.03.07.33.17 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Mon, 03 Nov 2025 07:33:17 -0800 (PST) Received-SPF: pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [192.168.178.117] ([88.130.203.42]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 5A3FXGVb003491 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 3 Nov 2025 16:33:16 +0100 Message-ID: Date: Mon, 3 Nov 2025 16:33:16 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v3 00/10] Add SBOM generation with debsbom To: Felix Moessbauer , isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com, jan.kiszka@siemens.com References: <20251022153921.2494749-1-felix.moessbauer@siemens.com> Content-Language: en-US From: Zhihang Wei In-Reply-To: <20251022153921.2494749-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: wzh@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: a5aihShkFGEg Hi, there is an error on full CI, when building 'mc:qemuamd64-bullseye:isar-initramfs': Log follows: ERROR: Logfile of failure stored in:=20 /work/build/tmp/work/debian-bullseye-amd64/python3-spdx-tools/0.8.3-r0/temp= /log.do_dpkg_build.76846 ...... The following packages have unmet dependencies: =C2=A0sbuild-build-depends-main-dummy : Depends: python3-beartype but it i= s=20 not installable =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Depends: python3-licens= e-expression=20 but it is not installable E: Unable to correct problems, you have held broken packages. apt-get failed. E: Package installation failed Not removing build depends: cloned chroot in use Reading package lists... Building dependency tree... Reading state information... =C2=A0 sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-beartype:amd64 < none @un H > can't be satisfied! Starting pkgProblemResolver with broken count: 1 Starting 2 pkgProblemResolver with broken count: 1 Investigating (0) sbuild-build-depends-main-dummy:amd64 < none ->=20 0.invalid.0 @un puN Ib > Broken sbuild-build-depends-main-dummy:amd64 Depends on dh-python:amd64=20 < none | 4.20201102+nmu1 @un uH > =C2=A0 Considering dh-python:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-lib2to3:amd64 =C2=A0 Re-Instated python3-distutils:amd64 =C2=A0 Re-Instated dh-python:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-all:amd64 < none | 3.9.2-3 @un uH > =C2=A0 Considering python3-all:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-all:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-setuptools:amd64 < none | 52.0.0-4+deb11u2 @un uH > =C2=A0 Considering python3-setuptools:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-pkg-resources:amd64 =C2=A0 Re-Instated python3-setuptools:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-beartype:amd64 < none @un H > Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-semantic-version:amd64 < none | 2.8.5-1 @un uH > =C2=A0 Considering python3-semantic-version:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-semantic-version:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-license-expression:amd64 < none @un H > Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-rdflib:amd64 < none | 5.0.0-1.1 @un uH > =C2=A0 Considering python3-rdflib:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-six:amd64 =C2=A0 Re-Instated python3-isodate:amd64 =C2=A0 Re-Instated python3-pyparsing:amd64 =C2=A0 Re-Instated python3-rdflib:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-uritools:amd64 < none | 3.0.0-2 @un uH > =C2=A0 Considering python3-uritools:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated libjs-jquery:amd64 =C2=A0 Re-Instated libjs-underscore:amd64 =C2=A0 Re-Instated libjs-sphinxdoc:amd64 =C2=A0 Re-Instated python3-uritools:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-ply:amd64 < none | 3.11-4 @un uH > =C2=A0 Considering python3-ply:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-ply:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-click:amd64 < none | 7.1.2-1 @un uH > =C2=A0 Considering python3-click:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-colorama:amd64 =C2=A0 Re-Instated python3-click:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-xmltodict:amd64 < none | 0.12.0-2 @un uH > =C2=A0 Considering python3-xmltodict:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated python3-xmltodict:amd64 Broken sbuild-build-depends-main-dummy:amd64 Depends on=20 python3-yaml:amd64 < none | 5.3.1-5 @un uH > =C2=A0 Considering python3-yaml:amd64 1 as a solution to=20 sbuild-build-depends-main-dummy:amd64 10000 =C2=A0 Re-Instated libyaml-0-2:amd64 =C2=A0 Re-Instated python3-yaml:amd64 Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: =C2=A0sbuild-build-depends-main-dummy : Depends: python3-beartype but it i= s=20 not installable =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Depends: python3-licens= e-expression=20 but it is not installable E: Unable to correct problems, you have held broken packages. apt-get failed. You can redo the test on your machine using avocado: 1. Have a clean clone of isar, checkout to branch next and apply your=20 patches: $ git clone -b next https://github.com/ilbers/isar.git $ cd isar $ git am /path-to/0001-my-contribution-to-isar.patch 2. Disable several unrelated targets to make error appears faster, by=20 applying the following diff: diff --git a/testsuite/citest.py b/testsuite/citest.py index a1214e9c..ec8115af 100755 --- a/testsuite/citest.py +++ b/testsuite/citest.py @@ -319,36 +319,7 @@ class NoCrossTest(CIBaseTest): =C2=A0 =C2=A0 =C2=A0def test_nocross(self): =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0targets =3D [ - 'mc:qemuarm-buster:isar-image-ci', - 'mc:qemuarm-bullseye:isar-image-base', - 'mc:qemuarm64-bullseye:isar-image-base', - 'mc:qemuarm64-bookworm:isar-image-ci', - 'mc:qemui386-buster:isar-image-base', - 'mc:qemui386-bullseye:isar-image-base', - 'mc:qemuamd64-buster:isar-image-ci', =C2=A0'mc:qemuamd64-bullseye:isar-initramfs', - 'mc:qemumipsel-bullseye:isar-image-base', - 'mc:imx6-sabrelite-bullseye:isar-image-base', - 'mc:phyboard-mira-bullseye:isar-image-base', - 'mc:hikey-bullseye:isar-image-base', - 'mc:virtualbox-bullseye:isar-image-base', - 'mc:virtualbox-bookworm:isar-image-base', - 'mc:bananapi-bullseye:isar-image-base', - 'mc:bananapi-bookworm:isar-image-base', - 'mc:nanopi-neo-bullseye:isar-image-base', - 'mc:nanopi-neo-bookworm:isar-image-base', - 'mc:qemuamd64-focal:isar-image-ci', - 'mc:qemuamd64-bookworm:isar-image-ci', - 'mc:qemuamd64-iso-bookworm:isar-image-ci', - 'mc:qemui386-bookworm:isar-image-base', - 'mc:qemumipsel-bookworm:isar-image-ci', - 'mc:hikey-bookworm:isar-image-base', - 'mc:beagleplay-bookworm:isar-image-base', - 'mc:qemuarm64-noble:isar-image-base', - 'mc:qemuamd64-noble:isar-image-base', - 'mc:qemuamd64-jammy:isar-image-base', - 'mc:qemuarm64-jammy:isar-image-base', - 'mc:x86-pc-bookworm:isar-image-base', =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0] =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0self.init() 3.Run kas shell, setup CI prerequisites (avocado, qemu) and cleanup: $ ./kas/kas-container shell kas/isar.yaml --command \ =C2=A0 =C2=A0 "rm -rf /work/build/conf && /work/scripts/ci_setup.sh" 4.Run the failed test: $ cd /work/testsuite $ avocado run citest.py:NoCrossTest.test_nocross$ Best regards, Zhihang On 10/22/25 17:39, 'Felix Moessbauer' via isar-users wrote: > This patchset adds proper SBOM generation in the two standard formats > SPDX and CycloneDX during the rootfs generation process. > > The generation is itself is handled by a SBOM generator `debsbom` [1] > which is developed as an open source project at Siemens. It is still > early in development, but it has enough features for what we require > in isar. The required dependencies which are not yet available as > Debian packages were minimally packaged directly in isar too. > > This is a followup of the previous RFC [2]. Since then the series has > changed a lot. The SBOM generation was moved from a simple OE lib to > `debsbom`. This also meant the introduction of a separate chroot was > necessary. The SBOM generation process was also moved from the image > step to the rootfs step, along with a lot of minor changes and > improvements. > > [1] https://github.com/siemens/debsbom > [2] https://groups.google.com/g/isar-users/c/8L-CF4BJY0I/m/p0N3o_zfAAAJ > > Changes since v2: > > - fix issues when HOST_ARCH !=3D DISTRO_ARCH on derived distributions > - update debsbom to v0.3.0, which fixes the Origin: bug reported in v2 > - generate SBOM for imager as well and create merged sbom of .wic image > - resend imager manifest + wic manifest patches to reduce conflicts > > Note, that the patches p1-p5 are most important as they add basic SBOM > support. The remaining patches address the imager + .wic bom part, > which also can be merged later on. > > Changes since v1: > > - remove tarball > - refactor packaging (auto-derive python dependencies) > - only build missing packages (varies on bookworm, trixie, noble) > - add ubuntu support > - only generate sboms for supported distributions (bookworm/jammy and > onwards) > - update debsbom (includes bug fixes and more information for source > packages) > > Christoph Steiger (3): > meta: package python libraries for SBOM generation > meta: package python3-debsbom > meta: add SBOM generation with debsbom > > Felix Moessbauer (7): > refactor: move get_rootfs_distro from sdk into rootfs > override distro vendor in SBOM on Ubuntu > add support to add imager dependencies to BOM > wic: create uniform manifest describing all image components > qemuamd64: add IMAGER_BOM entries > imager: create SBOM of IMAGER_BOM packages > wic: create uniform SBOM describing all image components > > doc/user_manual.md | 1 + > meta-isar/conf/distro/ubuntu-common.inc | 2 + > meta-isar/conf/machine/qemuamd64.conf | 1 + > meta/classes/image-tools-extension.bbclass | 29 +++++++++ > meta/classes/image.bbclass | 14 +++- > meta/classes/imagetypes_wic.bbclass | 30 +++++++++ > meta/classes/initramfs.bbclass | 3 +- > meta/classes/rootfs.bbclass | 16 ++++- > meta/classes/sbom.bbclass | 64 +++++++++++++++++++ > meta/classes/sdk.bbclass | 10 +-- > .../sbom-chroot/sbom-chroot.bb | 30 +++++++++ > .../python3-beartype/files/rules | 8 +++ > .../python3-beartype_0.19.0.bb | 29 +++++++++ > .../files/pybuild.testfiles | 1 + > .../python3-cyclonedx-lib/files/rules | 8 +++ > .../python3-cyclonedx-lib_9.1.0.bb | 48 ++++++++++++++ > ...icense-description-in-pyproject.toml.patch | 28 ++++++++ > .../python3-debsbom/files/rules | 8 +++ > .../python3-debsbom/python3-debsbom_0.3.0.bb | 45 +++++++++++++ > .../python3-packageurl/files/rules | 8 +++ > .../python3-packageurl_0.16.0.bb | 33 ++++++++++ > .../python3-py-serializable/files/rules | 8 +++ > .../python3-py-serializable_2.0.0.bb | 38 +++++++++++ > .../python3-spdx-tools/files/rules | 25 ++++++++ > .../python3-spdx-tools_0.8.3.bb | 46 +++++++++++++ > 25 files changed, 521 insertions(+), 12 deletions(-) > create mode 100644 meta/classes/sbom.bbclass > create mode 100644 meta/recipes-devtools/sbom-chroot/sbom-chroot.bb > create mode 100644 meta/recipes-support/python3-beartype/files/rules > create mode 100644 meta/recipes-support/python3-beartype/python3-bearty= pe_0.19.0.bb > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/pyb= uild.testfiles > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/rul= es > create mode 100644 meta/recipes-support/python3-cyclonedx-lib/python3-c= yclonedx-lib_9.1.0.bb > create mode 100644 meta/recipes-support/python3-debsbom/files/0001-Use-= old-license-description-in-pyproject.toml.patch > create mode 100644 meta/recipes-support/python3-debsbom/files/rules > create mode 100644 meta/recipes-support/python3-debsbom/python3-debsbom= _0.3.0.bb > create mode 100644 meta/recipes-support/python3-packageurl/files/rules > create mode 100644 meta/recipes-support/python3-packageurl/python3-pack= ageurl_0.16.0.bb > create mode 100644 meta/recipes-support/python3-py-serializable/files/r= ules > create mode 100644 meta/recipes-support/python3-py-serializable/python3= -py-serializable_2.0.0.bb > create mode 100644 meta/recipes-support/python3-spdx-tools/files/rules > create mode 100644 meta/recipes-support/python3-spdx-tools/python3-spdx= -tools_0.8.3.bb > --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= b9ad7124-339c-4701-b99e-09b0c02f428e%40ilbers.de.