Re: [PATCH v3 0/6] non-privileged commands in chroot

[Andreas Naumann <anaumann@emlix.com>]

Hi Cedric, all

Am 20.08.25 um 17:38 schrieb 'MOESSBAUER, Felix' via isar-users:
> On Thu, 2025-06-26 at 03:37 +0800, Cedric Hombourger wrote:
>> When building root filesystems for foreign architectures with package
>> source
>> caching enabled, apt operations are executed within the rootfs
>> through QEMU
>> emulation. This results in significantly degraded performance,
>> particularly
>> when downloading source packages sequentially.
>>
>> This patch series introduces a new wrapper function that enables
>> native
>> command execution against a rootfs while preserving special mount
>> points
>> (such as /isar-apt). The approach:
> Hi, are there any news on this series? Was there a follow up version?

I also find this series very interesting, but unfortunately I was not 
the ML when you originally sent it, and getting a patch out of 
googlegroups is a nightmare.

So I'd really appreciate a follow-up. Eg. the patch which touches the 
deb-dl-lock could imho be merged as is. It would fix an issue we have in 
on of our setups.

Other than that, I have played with various scenarios to run the build 
in an unprivileged container and being able to use bwrap for 
bind-mounting /dev and /proc without sudo or privileges would be a big 
step forward.

So looking forward :-)

regards,
Andreas

>
> The upcoming SBOM feature from Christoph already wants to make use of
> bubblewrap. We also have the tool in kas 4.8.
>
> Some quick tests against amd64 and arm64 also did not show any issues.
>
> Best regards,
> Felix
>
-- 
Andreas Naumann

emlix GmbH
Headquarters: Berliner Str. 12, 37073 Goettingen, Germany
Phone +49 (0)551 30664-0, e-mail info@emlix.com
District Court of Goettingen, Registry Number HR B 3160
Managing Directors: Heike Jordan, Dr. Uwe Kracke
VAT ID No. DE 205 198 055
Office Berlin: Panoramastr. 1, 10178 Berlin, Germany
Office Bonn: Bachstr. 6, 53115 Bonn, Germany
http://www.emlix.com

-- 
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-users/c0d487bf-574f-476c-8ca8-cba4af1277ff%40emlix.com.