From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 26 Jun 2025 18:00:39 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f60.google.com (mail-wm1-f60.google.com [209.85.128.60]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 55QG0RYD012151 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 26 Jun 2025 18:00:32 +0200 Received: by mail-wm1-f60.google.com with SMTP id 5b1f17b1804b1-4535f803ec5sf8660735e9.1 for ; Thu, 26 Jun 2025 09:00:27 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1750953622; cv=pass; d=google.com; s=arc-20240605; b=PDvDUzGVNZyoc+Rdk0TSaBwWroe0dDsfkfJOqr9TCeV6sbGIDVOcnJLrGVxeBQrb0J Tz/dLNc8WlraRVTM541AKnwESxL+kiT7krYOPRBWSnV7FotT11ZE62pEfU21L7ZUVDoe EzfjTa0ypIgPR7uzQyeiOz06Fs6rncQm/hUQipgh9wXY9llOTXVEdhXR71o4XbHpM8ng ncSC9oA85MMulf00KZEJ4DLlF0tlyH7rL3mAGXs8kJ7DYpITQce5hyWlpO4ztr2trpxt fXEOl0R7T6DmxbnOoUaaiP7BXXkhSI1LwfPbiVlNc0wFP8KpOK+LkMhHFwYGBcwqNi46 ub1A== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :autocrypt:content-language:from:references:to:subject:user-agent :date:message-id:dkim-signature; bh=tsBE1ae4KF5aTdPePDrxPI9Zqo4gumCHLIkBsdpuQak=; fh=RYhVCaqCSA3TlApwh/mESmysKgHQG2FjpCh+U5GFZAo=; b=bOXpdpJjEbgmcAgn3hf+qa0D7bbPUH/1YxDhIEp4faaEPPTRjPcNkUeECTdZ21YZ/C OpY1M6etDdB5iTyoKM0RPMKzk2Y5xYi7fEzqwgbVSTiwvhlzjqO/uKRAIxaJk4zdKPIx SEYtoJ6SrUR8ISBAX6BVRfOVqETHNFptS+vyMMvSGfWadLNpA8OPeoYVNYuWRQw1H85h 6Cf4UuWOqxWSeMaugySoOCq0jbiWXvgLPv4k9sEUl20rVGwGY1YjSsYxiriNSdrbuy70 0jvP4XPTTSO8iTzCXMNHa+py7xM92xipoFtrSBkKUM3m4IB6u/bk1I6AEbnOCnBhbECZ C1pg==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=cA1Ovu2T; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1750953622; x=1751558422; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:to:subject :user-agent:date:message-id:from:to:cc:subject:date:message-id :reply-to; bh=tsBE1ae4KF5aTdPePDrxPI9Zqo4gumCHLIkBsdpuQak=; b=bYgzHGvK109Ddd2FFxUyBEJZfFX7S/Hr1SGRrlcSAzJr4WQA4TJYDeYwQrn1XnQEgM q71bZBJJRJGm6HAPflrlVbOxEQ4awQKLhKmiOhZdDXfQa4iZ7vgEWVy2v/R0cX/bPed8 djRcJc3CZJeExL9YpwatH4AjyikePDhLzC7Cs0I/ajfn/ZKx32LvfsFzKHGkIRK5ZDWz 7+LKADh/Q+xX+DC7EPnMYa7DqA2mYKhUMxgVKzApVCQN624LHsDxD6ySv6j6tmlYjav8 hUrTfkhjjGnaWzyWN3ELG+3EZaPHbnirXYHmnAQjJ1O/cQQCPKOL4UViCbPsrNWBIDKD ptsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750953622; x=1751558422; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:to:subject :user-agent:date:message-id:x-beenthere:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=tsBE1ae4KF5aTdPePDrxPI9Zqo4gumCHLIkBsdpuQak=; b=tf5Z9NhQO+0/DOE83gqptzftApaYFCVaB4N9zfUQg2Jf2V6oBZIHstRca1lSG9jGjK hr6uRdmtNZhSSPQBJiAwMadWTHI9rYO3OJxVe+vvPMD7engfY/Q0c1P+hkK58MEtlAjg 3J9N4QRrRAFoyMXW6K4k5Kv5eswN1O8MmMqYwIMWAcBSNl6W9wzZrLo4JnTPVBDrRZwv y49kPGUUy3kw7vDU4LCpbL+10pSw2tTOkQGho1njf2QnvP5lNwsmHZog6dLer7qL7Yn5 qnGfTnJhuKHcbQvvBJGwUsWx3VD+5Ye+FubacIMPFQJOKdzpRgdFwFLHcY808K+95Rhv 2B5A== X-Forwarded-Encrypted: i=3; AJvYcCW+ksnG8Q0Dh7sqMDwF40fkivRRUZDgKYki9OBWEkNO/oGhTHIqTEiIGEJNq3SepWcJrKR6@ilbers.de X-Gm-Message-State: AOJu0Yz2xSn7n/xyN0Q8nEWnUVcK0MnPIMM2Mt0lq/ASqEpyBKK0m0xy yxXGlaDqoNJDcKdmC8frz+ygi3OacY+1sW0O4CuWnVhhJLAEIs7KgVj3 X-Google-Smtp-Source: AGHT+IGKTD2SVcmd2h3xgVRa/fHW0JoS9nspwWSzh+V8rSDfMoW3PsPWTL562uOCOTEduHg51PPXKw== X-Received: by 2002:a05:600c:5306:b0:441:d2d8:bd8b with SMTP id 5b1f17b1804b1-45381aaa03fmr74819915e9.8.1750953621026; Thu, 26 Jun 2025 09:00:21 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZcf51oPv9mw0L136bJAWgNCTHAqFFeF/B/+s4ctKDdA0Q== Received: by 2002:a05:600c:1d22:b0:44b:1fb8:71a1 with SMTP id 5b1f17b1804b1-453889a851dls6195605e9.0.-pod-prod-09-eu; Thu, 26 Jun 2025 09:00:18 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCUHBxIfZnRPNNUw1loqlzPAwRkB09FP58EVy8A3fCDTvDNbKJIz10Jy38wR7pGHL0hgGYdF8fL2jDzl@googlegroups.com X-Received: by 2002:a05:600c:4f45:b0:43c:f895:cb4e with SMTP id 5b1f17b1804b1-45383906f07mr82499455e9.17.1750953618027; Thu, 26 Jun 2025 09:00:18 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1750953618; cv=pass; d=google.com; s=arc-20240605; b=ZQ+AyIZ4Mz0y8JL/hmBMSLfmgimgXkH/sSeCHnKyNKjnvFqsagC64tdrkJ2CdXZEm7 jW5jDms8mTlSZW5UlP+ZSkSejSVCa9DEYdVWlfsR9qOcZCPLgjrUl8Ccre5Ckubei0eS kg06Rk7/zt5DR0VhomwHXLXqslYJeS+peQk28+FmkEx9AGeqTqCkGoMAJ5Gn8Nx6y8om /ie+vIoUm88DfZRX0q1l81llfB8NOJ8enA7s9AEbwkR42854OhmL5ub8GP2XD5nl3Ihy HjPeePHDKJuhWrELwJGu02k2nuMjJwjYl7XMOxDK8rcjDFRUuYESoyXxn+34KV0GgFlO LbZw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:in-reply-to:autocrypt :content-language:from:references:to:subject:user-agent:date :message-id:dkim-signature; bh=xDZV7+sqkp9etxUofqoJ6MXRuDM768ynt3ufvx/Byrk=; fh=lOecfPjbysiGzlRBef36l/WlHWoMC0vHaB+pO6uJ+To=; b=Er9XJ+nDJ78d+iQSH9UznCwul8qPkYY+9iALFF1N2nlx7WZM51R14uTL8c2EtJ/sk5 y+Uazoj9Cx+93/Z6OLlrUCqj9t3aKNFwwpSxF3BZ788ReFb39CpbYvk4lF4ViJExyeqy jatEMvu1HDv0qVLA6dNnopdL+Jrm8QOATWb8B4mM1/0EMtfS0QJqMQhnMRMUVpQrafVq H8nPNqbUgx/AgeuYi2sx9XidhzwxeTVspbaSIszPa1bU1il6zcHlpGN5vFiFb3qavJ/i eVmPid0edwy6UzqXScYnDnzchxNeNviumdf07mwjk+4LydMHv0xXlCaEEmg5XbmgEXbd G8KQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=cA1Ovu2T; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c200::3]) by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-453814a4debsi1182265e9.1.2025.06.26.09.00.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 26 Jun 2025 09:00:17 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) client-ip=2a01:111:f403:c200::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ewByiqTmNNslYSRX7pBzx/TAna77mXnS/Nns7hA43ShmoMLSuTY4PTA1VV5SIM4GbhaTKW9NeXswhLvBvt6Fv5PSZ16MQhvdH2pfAk8wyOFz88cMKsVW5d+eGmKzZ4uEtTvw5caHN41Y84iX28KxSJ0Zs9alZQx8/Sn7grTvLN7G4OdO752tMJcX7qtBvGXTsewggRGLCzr+HPRFddvh4efP0K6CvY9n4ryLvN62YZreDrJpqddE7r6L97/4oIlUJaIzvJv89z3e0W0n2sFIl6XXO2Hxxa0fTDFCNYFfPunLOe2E+AzD+2rz0YV3xtBIDpLEaVRkpb0f2rcv8uLIUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xDZV7+sqkp9etxUofqoJ6MXRuDM768ynt3ufvx/Byrk=; b=PBSFcAuZFMn5/viBLc2Znfpn0Zwi2x+blOumZnXvzo+CWuXuFgR5WCNHQ2mp9fDX0gMkjqh17iLV3bMQ6btLL+FLQS66JmAJIY5XeWhIZsIUQ2qCDEw4/iuXKpOoiT5mtwaDBjXqx4gt6n78qf9isvChqQHTAoT1nE8tq5uA08v4xwZr9qhYs/b9bG1WjDjcoRU0m6vu2kwRYojN/8YJ0n0G3jVan8xbUXWIPGkYDy9A2uD7e8zxDHUmm7xQfDPXkcRMbhXO3xwlze0DXcQqIS2lHeFlldu6qd0nZ6gb3zWxFRTDzgQiDFSqJnM/czFjGX0oTTDl75/232zQw8P0rg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) by VI0PR10MB9218.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:2b8::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8880.17; Thu, 26 Jun 2025 16:00:16 +0000 Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::8fe1:7e71:cf4a:7408]) by AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::8fe1:7e71:cf4a:7408%5]) with mapi id 15.20.8857.026; Thu, 26 Jun 2025 16:00:16 +0000 Message-ID: Date: Thu, 26 Jun 2025 18:00:10 +0200 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v2 2/2] container_fetcher: Verify that tag and digest match To: Clara Kowalsky , isar-users@googlegroups.com References: <20250626140731.2732545-1-clara.kowalsky@siemens.com> <20250626140731.2732545-2-clara.kowalsky@siemens.com> From: "'Jan Kiszka' via isar-users" Content-Language: en-US Autocrypt: addr=jan.kiszka@siemens.com; keydata= xsFNBGZY+hkBEACkdtFD81AUVtTVX+UEiUFs7ZQPQsdFpzVmr6R3D059f+lzr4Mlg6KKAcNZ uNUqthIkgLGWzKugodvkcCK8Wbyw+1vxcl4Lw56WezLsOTfu7oi7Z0vp1XkrLcM0tofTbClW xMA964mgUlBT2m/J/ybZd945D0wU57k/smGzDAxkpJgHBrYE/iJWcu46jkGZaLjK4xcMoBWB I6hW9Njxx3Ek0fpLO3876bszc8KjcHOulKreK+ezyJ01Hvbx85s68XWN6N2ulLGtk7E/sXlb 79hylHy5QuU9mZdsRjjRGJb0H9Buzfuz0XrcwOTMJq7e7fbN0QakjivAXsmXim+s5dlKlZjr L3ILWte4ah7cGgqc06nFb5jOhnGnZwnKJlpuod3pc/BFaFGtVHvyoRgxJ9tmDZnjzMfu8YrA +MVv6muwbHnEAeh/f8e9O+oeouqTBzgcaWTq81IyS56/UD6U5GHet9Pz1MB15nnzVcyZXIoC roIhgCUkcl+5m2Z9G56bkiUcFq0IcACzjcRPWvwA09ZbRHXAK/ao/+vPAIMnU6OTx3ejsbHn oh6VpHD3tucIt+xA4/l3LlkZMt5FZjFdkZUuAVU6kBAwElNBCYcrrLYZBRkSGPGDGYZmXAW/ VkNUVTJkRg6MGIeqZmpeoaV2xaIGHBSTDX8+b0c0hT/Bgzjv8QARAQABzSNKYW4gS2lzemth IDxqYW4ua2lzemthQHNpZW1lbnMuY29tPsLBlAQTAQoAPhYhBABMZH11cs99cr20+2mdhQqf QXvYBQJmWPvXAhsDBQkFo5qABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEGmdhQqfQXvY zPAP/jGiVJ2VgPcRWt2P8FbByfrJJAPCsos+SZpncRi7tl9yTEpS+t57h7myEKPdB3L+kxzg K3dt1UhYp4FeIHA3jpJYaFvD7kNZJZ1cU55QXrJI3xu/xfB6VhCs+VAUlt7XhOsOmTQqCpH7 pRcZ5juxZCOxXG2fTQTQo0gfF5+PQwQYUp0NdTbVox5PTx5RK3KfPqmAJsBKdwEaIkuY9FbM 9lGg8XBNzD2R/13cCd4hRrZDtyegrtocpBAruVqOZhsMb/h7Wd0TGoJ/zJr3w3WnDM08c+RA 5LHMbiA29MXq1KxlnsYDfWB8ts3HIJ3ROBvagA20mbOm26ddeFjLdGcBTrzbHbzCReEtN++s gZneKsYiueFDTxXjUOJgp8JDdVPM+++axSMo2js8TwVefTfCYt0oWMEqlQqSqgQwIuzpRO6I ik7HAFq8fssy2cY8Imofbj77uKz0BNZC/1nGG1OI9cU2jHrqsn1i95KaS6fPu4EN6XP/Gi/O 0DxND+HEyzVqhUJkvXUhTsOzgzWAvW9BlkKRiVizKM6PLsVm/XmeapGs4ir/U8OzKI+SM3R8 VMW8eovWgXNUQ9F2vS1dHO8eRn2UqDKBZSo+qCRWLRtsqNzmU4N0zuGqZSaDCvkMwF6kIRkD ZkDjjYQtoftPGchLBTUzeUa2gfOr1T4xSQUHhPL8zsFNBGZY+hkBEADb5quW4M0eaWPIjqY6 aC/vHCmpELmS/HMa5zlA0dWlxCPEjkchN8W4PB+NMOXFEJuKLLFs6+s5/KlNok/kGKg4fITf Vcd+BQd/YRks3qFifckU+kxoXpTc2bksTtLuiPkcyFmjBph/BGms35mvOA0OaEO6fQbauiHa QnYrgUQM+YD4uFoQOLnWTPmBjccoPuiJDafzLxwj4r+JH4fA/4zzDa5OFbfVq3ieYGqiBrtj tBFv5epVvGK1zoQ+Rc+h5+dCWPwC2i3cXTUVf0woepF8mUXFcNhY+Eh8vvh1lxfD35z2CJeY txMcA44Lp06kArpWDjGJddd+OTmUkFWeYtAdaCpj/GItuJcQZkaaTeiHqPPrbvXM361rtvaw XFUzUlvoW1Sb7/SeE/BtWoxkeZOgsqouXPTjlFLapvLu5g9MPNimjkYqukASq/+e8MMKP+EE v3BAFVFGvNE3UlNRh+ppBqBUZiqkzg4q2hfeTjnivgChzXlvfTx9M6BJmuDnYAho4BA6vRh4 Dr7LYTLIwGjguIuuQcP2ENN+l32nidy154zCEp5/Rv4K8SYdVegrQ7rWiULgDz9VQWo2zAjo TgFKg3AE3ujDy4V2VndtkMRYpwwuilCDQ+Bpb5ixfbFyZ4oVGs6F3jhtWN5Uu43FhHSCqUv8 FCzl44AyGulVYU7hTQARAQABwsF8BBgBCgAmFiEEAExkfXVyz31yvbT7aZ2FCp9Be9gFAmZY +hkCGwwFCQWjmoAACgkQaZ2FCp9Be9hN3g/8CdNqlOfBZGCFNZ8Kf4tpRpeN3TGmekGRpohU bBMvHYiWW8SvmCgEuBokS+Lx3pyPJQCYZDXLCq47gsLdnhVcQ2ZKNCrr9yhrj6kHxe1Sqv1S MhxD8dBqW6CFe/mbiK9wEMDIqys7L0Xy/lgCFxZswlBW3eU2Zacdo0fDzLiJm9I0C9iPZzkJ gITjoqsiIi/5c3eCY2s2OENL9VPXiH1GPQfHZ23ouiMf+ojVZ7kycLjz+nFr5A14w/B7uHjz uL6tnA+AtGCredDne66LSK3HD0vC7569sZ/j8kGKjlUtC+zm0j03iPI6gi8YeCn9b4F8sLpB lBdlqo9BB+uqoM6F8zMfIfDsqjB0r/q7WeJaI8NKfFwNOGPuo93N+WUyBi2yYCXMOgBUifm0 T6Hbf3SHQpbA56wcKPWJqAC2iFaxNDowcJij9LtEqOlToCMtDBekDwchRvqrWN1mDXLg+av8 qH4kDzsqKX8zzTzfAWFxrkXA/kFpR3JsMzNmvextkN2kOLCCHkym0zz5Y3vxaYtbXG2wTrqJ 8WpkWIE8STUhQa9AkezgucXN7r6uSrzW8IQXxBInZwFIyBgM0f/fzyNqzThFT15QMrYUqhhW ZffO4PeNJOUYfXdH13A6rbU0y6xE7Okuoa01EqNi9yqyLA8gPgg/DhOpGtK8KokCsdYsTbk= In-Reply-To: <20250626140731.2732545-2-clara.kowalsky@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: PN3PR01CA0003.INDPRD01.PROD.OUTLOOK.COM (2603:1096:c01:95::14) To AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS4PR10MB6181:EE_|VI0PR10MB9218:EE_ X-MS-Office365-Filtering-Correlation-Id: f952e780-99b6-483f-0433-08ddb4ca8aaf X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|376014|1800799024; X-Microsoft-Antispam-Message-Info: =?utf-8?B?a3lqdDhVblNEcVN0ZHBJeWF6UEl4NFpKTEFyZW1jQmorRGJLcVRXeEcwL1I1?= =?utf-8?B?WlZ2YysvQUtwbTFoVjJ6dThnUnViVDRHVTVRcWY0RzAyZWFQRGZpZXJPRHpE?= =?utf-8?B?R0ZFeDhCVU1lOExyRjdWN0F2QWJ6RjFycEplYVdwdUNlMno5SW83aFkyYWEx?= =?utf-8?B?cmN0V0lVeVB4TzJYc0dSVnZ0N1pMSkFRN1I2RW1LTEp4QUduRVc0MXFxTkxC?= =?utf-8?B?cjYwRHl3cjNmWDZwcVpST2JET3BnQmJJTWpkOVdsZGVGNWlQZjNiWTF6WFMx?= =?utf-8?B?MDZteTVQQTdNYTJmWkpjNERXbXErUGNpeTltbExyWWVGSnhaeXNTWUplSnBr?= =?utf-8?B?NjY1ZFRRYzhZblk3NktxNjdHM1BFclIwUCthS0psMHhURWxZVFRVeGx3TWN6?= =?utf-8?B?cW1MYWQ2ZlFuWWtrVm5Ud1E1dW5UQ3FuYVFObWtmc2pSYnpVU25uM0dHc1Rl?= =?utf-8?B?cVZhenRDcC9kTnlRMVhKVGJQN1oyR2R2Q1VNWnBnL0h3MjJjSis5VFFqaG00?= =?utf-8?B?UzNPVkh2YjA1anBaaXEwRnk4U01ML2dXc05ubjNNSDNmY2VSd0JmNlpudkpn?= =?utf-8?B?a3ZKK2VhbkdydTUzOWpScXR0ZEtWWjh1ZW9MVTMvMEZNY1pkMW41d3VXazUw?= =?utf-8?B?QjM2TURXa0FISmg3TWRQVmVBYlBMeFRacnArLzBCbVZPTDkrT0hSbTV3ZTJP?= =?utf-8?B?TzZLU0ZjUWx3OXNrMXhHbVkrVlRMQmY4T3JSbGM1a0lmcHhGcU9pUzNEVmk2?= =?utf-8?B?UEQ2VmRwTEpYOStPS3I3QVNSM3VuN0FYcmI5QmlycG5hb2F0WlVRQ2hYVzZR?= =?utf-8?B?T29JOURUNUJ4bnFFOVNnN2tJSW5aL3NtQjZQRi9sbE9uWE9QUUdHUEJHS1Qw?= =?utf-8?B?UUd4TUhmSGVDM1NLWXdUMkwrQ3ZqT1RCNitVTmp3VFhxNml6NkwwSTdDR0RZ?= =?utf-8?B?cVBuVjNicm1BNjk1dExKd2pXQ1VuVGI0ci9BZVRVVjN3cnVqakhXTVJELzFr?= =?utf-8?B?L24reUxzL21GMjV3V3JhRFpqVmMzZFZEYXVKVUp3M1Jlc2NXL04rZnhRM0FI?= =?utf-8?B?TlhqYW5LYWxnWm5iQWZDczBQSW0zRDZGSFN1b05RYWVSbzBhTWNNZncrZ3dF?= =?utf-8?B?QlA2b2t1WFhmMEpEV0VQMkhzaHVhV1c1TG9rNDZCbUo2b08wYjMvYmhENE51?= =?utf-8?B?VGRhUjBtRmVEOVBrMDBHbjRrdXU2N2ZLRjF0Nnc5Zk1CQThnb3U2QSsybnM2?= =?utf-8?B?U1k0bU9Gc3h3bFp4eVhxZmtOTnBlcFZ3RDVHUVp2OHdhUldCVkxWU1pZWmVU?= =?utf-8?B?UDk4b2RxZmlFQy81Q2MzaXFmc3F6Sjd1dW9TL3hhTUlOSGw4U0M2bG4zYTlJ?= =?utf-8?B?VFVWaWxId2RXMm42VmpRdUUzNnBtWnRkSVhxb0UvR21VdGRRamJLOUROKytY?= =?utf-8?B?MHlCMnczNVRGOW44NVp4QzVYK3dmL1kyRkhyOGVKOSs1WEtCWnQwbGtEeTNK?= =?utf-8?B?bGlOcEFacU93N0tMNnJHMko4ekllcDVCMFBkOUNxWUtkZUZMSGNVSXBudUdY?= =?utf-8?B?dFVKWEpFRnpUVEFQL2doc08ybFZFc3lvWXFLYmp2VEdVODkrV1hXU3BPWVk5?= =?utf-8?B?b1lWSGtwMTRucnU3Q05BNXN5L2tTR0MvWk9FeUt3RUp3c3A0YjFySStqVFE3?= =?utf-8?B?eDQyZ0wzQ2hJSE9Db1RBb2hwVnV1VVQ2Ukl1b0tvNjJKZXU5clA2VGdaOXZQ?= =?utf-8?B?S09CbnQzZFg5Q2FCNE9RZTlEOHFMblRRRHBHNEhlZGs2R1ZLVTRIdGMyWTNq?= =?utf-8?B?Y3JWbjhhb1E1TGpqV3JaMVJyR3JjVlAvcCsxbWE4MjdBMWpuL2Y4T0Y0Qys2?= =?utf-8?B?a3pkR1U2OUZKa0I2OVVLWGFiSEhKblk3c2VYK1BrZFdUY0F3NVMxc3l2Vzho?= =?utf-8?Q?uO/B8zx5NBI=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?QWtYUzVpSFNROWprWXJJSUx3RVBlWU1TUDk5N1pEdXRCV25sWVdZOW10UkVq?= =?utf-8?B?Z1FYTy8zKzB2aGpORnJZbzJvR0dBemV1N2c0YzZoQVlqU3k5V1hadCtPV3oz?= =?utf-8?B?KzBRUmx2UTdrdDdGVkg3RDV6Z0RuSjl6UGRNUTN2WUdnZEdXaC90clg5QkxX?= =?utf-8?B?MWdIZ0hJVDFJV1lwU3VVZEM3TzMyTGVHTzJsR2hnZ1ZKZ2FzQjZqbnNPL0dx?= =?utf-8?B?N3dlbFh2N09YUHhCWGRUbGFzdCtUeHR0dFNKeXY5L0xDeVBweXhkc09LMWVZ?= =?utf-8?B?aVFCQ2hVK0ptZDl3ZHhkK0JFb2dFaUxwUDFrZUdDT2V0Y0JubnlPYnlhd3R6?= =?utf-8?B?ZWhQWVlCZ1V2OStDNTZabnQ2dWJuZSs4ZC9CNnVIZWpLR0k5Q2d0Y21HY2FZ?= =?utf-8?B?cVRpekluS2V0WlF6azBWUmpIT0g0aStNalRxczQwZ0QvbXdrbnBnWEVDRXhj?= =?utf-8?B?SFhvb3g2WVdycUxNY3IyaFl4MG8zMm5OdW1ac2FCZzhoRmw5YzZ3VEZ6TENG?= =?utf-8?B?OUFTcXdqZU9CMDBJNm9WYnJ4dHl3MFRpaHlCa1V4NGJmb2d4SGorcHVXeUhx?= =?utf-8?B?SGNFTGltcUoyUk9KOXFsMkptUEl2MExIOURGTTF2U3ZZeDJkWUNpZjk1clZZ?= =?utf-8?B?REM2UUtsckovQ0pQSzljdThweWs0U282aHFzcjl3YTlYb1ArSjN5YWl0Rzlm?= =?utf-8?B?Tm45bTBWcTZwUHNTVFJrQklxeGtwWm40dDBmWTJxckkydjRRTlVhNjN3OXIy?= =?utf-8?B?NlJRbHA4TG84dG1KM3ROZHpjdGg1dS9mQ3JBVmNFK0NlZzYvQmFlbkowZU5L?= =?utf-8?B?UkU3OGVTdWcrNWRWM3l2TVhGV2d3UE1lNlhkMy93ZDB4bVF5SlpHaGtjS0tJ?= =?utf-8?B?SWxCZWU3ZDBydnc4RmJWMWZWZ0E1KzAyNm9hNitCUXIzckIwMTVsdDd4YndJ?= =?utf-8?B?NHpEd0VNTW15YnY1Zmh6NExOSzBXMFkyUTJnTHZTK2IrTDhPLzh4bVNnOStv?= =?utf-8?B?R1dVZVpMTlprQ2wzdmNhUzN6Q0pPNnhlS1lGYm1BL295WmZwcnNqck1mUDR6?= =?utf-8?B?ak1DcWZlVmM5U2lrN3ptSkZHRmw2TmJrRlBrdWtXRTJpT1pobFl5Ym81SGNJ?= =?utf-8?B?bk1kZUZySU8yazhMTXhaU0F6UTFURXczSm9jRXI0UjZEYWpWenR1aStRc0pK?= =?utf-8?B?NkdGZzRpTmVsQ210NkxtelBhZ3NIN1U0M2xhbXB5V0pzWUxRdU9PLzk5blFX?= =?utf-8?B?RC91OGxESlVXR2g2YlAxNnZtNzdDYVoxVE9MczhrSnoyUGU2U2RBNGlBdlZv?= =?utf-8?B?Yll2b1dOWk9zZ2V6NFRYTWhWT2FCVkJIbUliK2FJaWVUU001VFhoQVhLUlN2?= =?utf-8?B?K0RWeUFKc0NRcm00QU9zckh4MWVyaW5hSFNDTE50U0RONVlzMmcyODFWVkNY?= =?utf-8?B?cmdTQmpwWmZCWHFQaGhJMWM4UWt2RDZuTmdDRm1PV05jdlVIN244eDlCRDYv?= =?utf-8?B?cW9VbkNXNy9kdVludk1nRFVOQmE1ei9nNUFRUnhGTnN1SU01eG9mNnlZVXd2?= =?utf-8?B?Nzk5YUw1TVN1ME1lYll6dmZ2WHJRVVJOMWdhazlYUEVCMytiWG5hL0lrZWs0?= =?utf-8?B?ZUdkdTA3d1Y0bVQrSUtUYmMxYStXRlltNUVPckFZd251LzVMSXAwejhYQTFu?= =?utf-8?B?a3JjN1dBVkRpbE1DQWVDdGZQcmUxZDR4UWdJaVhYVEdNdW5uY2piRVcva1NJ?= =?utf-8?B?aUVieWR1c01jZWdvZjhrWnM0TU0vdnBjc0lBdVBmSFFFZlpoZytnNG1BMEtv?= =?utf-8?B?NDEyeS9sdVBGL0VQSkh3WXVLL0tmUldjemJUMVcyVkJRTXl6NHFYbkNIVWto?= =?utf-8?B?VUZET015VkxES1N1MUhJMnFVRFZ6Y2tiMUhWV0h6RlgyZS9CNTJ3cnVWY1RZ?= =?utf-8?B?WUJpRHhMemwwY29vRWlaZFBEZkhOUGwzQzZoV1dXNjV0OFRJQ3lsdlZNUXNN?= =?utf-8?B?UmxlL0ViQkpOazQ0NnVhM2dwL2VqK0dlemtsYW4zRFduSFNoZS9OMFFtUU9r?= =?utf-8?B?Y2lLaTA3YklTNDFYMjg5UlJlSnowSi81SFBma2RlQWdmaTFEbmg5TFA0VndQ?= =?utf-8?B?QUdCTjNrbXlqV2MzaVhmdFA5SnFaMFZYS2FUZ2RXTFhiOGI0YjlZUExOWTB2?= =?utf-8?B?Nnc9PQ==?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: f952e780-99b6-483f-0433-08ddb4ca8aaf X-MS-Exchange-CrossTenant-AuthSource: AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Jun 2025 16:00:16.1746 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: fE7MXhzvGPD235NG32ZVmHrjK0exKmsuuAMfL7Mx5Xtf6rc8FWrnkQJDU0TqsPSh8g93tWZ7q7gdGc/5pOhfPw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0PR10MB9218 X-Original-Sender: jan.kiszka@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=cA1Ovu2T; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Jan Kiszka Reply-To: Jan Kiszka Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: E3Olpux2KIOf On 26.06.25 16:07, Clara Kowalsky wrote: > If a tag and digest are specified for a container image in the SRC_URI, > the tag is ignored until now and the container image with the matching > digest is fetched. > With this change, the container image is fetched based on the specified > tag and it is checked whether the digest matches. If not, an error is > thrown. > > Signed-off-by: Clara Kowalsky > --- > meta/lib/container_fetcher.py | 17 +++++++++++++++++ > 1 file changed, 17 insertions(+) > > diff --git a/meta/lib/container_fetcher.py b/meta/lib/container_fetcher.py > index 16467abb..08766742 100644 > --- a/meta/lib/container_fetcher.py > +++ b/meta/lib/container_fetcher.py > @@ -11,6 +11,7 @@ from bb.fetch2 import FetchMethod > from bb.fetch2 import logger > from bb.fetch2 import MissingChecksumEvent > from bb.fetch2 import NoChecksumError > +from bb.fetch2 import ChecksumError > from bb.fetch2 import runfetchcmd > > class Container(FetchMethod): > @@ -47,6 +48,22 @@ class Container(FetchMethod): > def download(self, ud, d): > tarball = ud.localfile[:-len('.zst')] > with tempfile.TemporaryDirectory(dir=d.getVar('DL_DIR')) as tmpdir: > + # If both tag and digest are provided, verify they match > + if ud.digest and not "tag" in ud.parm: Hmm, I'm confused by my own suggestion right now: Did you test that again? Don't we rather need if ud.digest and "tag" in ud.parm: ? > + inspect_output = runfetchcmd(f"skopeo inspect docker://{ud.container_name}:{ud.tag}", d, True) > + actual_digest = json.loads(inspect_output)["Digest"] > + if actual_digest != ud.digest: > + messages = [] > + messages.append(f"Checksum mismatch for {ud.container_name}:{ud.tag}") > + messages.append("If this change is expected (e.g. you have upgraded " \ > + "to a new version without updating the checksums) " \ > + "then you can use these lines within the recipe:") > + messages.append(f'SRC_URI = "docker://{ud.container_name};digest={actual_digest};tag={ud.tag}"') > + messages.append("Otherwise you should retry the download and/or " \ > + "check with upstream to determine if the container image has " \ > + "become corrupted or otherwise unexpectedly modified.") > + raise ChecksumError("\n".join(messages), ud.url, actual_digest) > + > # Take a two steps for downloading into a docker archive because > # not all source may have the required Docker schema 2 manifest. > runfetchcmd("skopeo copy --preserve-digests " + \ Jan -- Siemens AG, Foundational Technologies Linux Expert Center -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/bd021656-53cc-4218-9b7d-9ee5323114b9%40siemens.com.