From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 05 Jun 2025 14:20:38 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f64.google.com (mail-wm1-f64.google.com [209.85.128.64]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 555CKbkU002140 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 5 Jun 2025 14:20:38 +0200 Received: by mail-wm1-f64.google.com with SMTP id 5b1f17b1804b1-450d50eacafsf5086925e9.3 for ; Thu, 05 Jun 2025 05:20:38 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1749126032; cv=pass; d=google.com; s=arc-20240605; b=M+W7/uzbRhTEHWTkO77N0IdmtpEIQ1l90fifSr/HrfUmw6ov+oyVE0eLZtFo34rGWI 89oDk5e7GsM3LNRW7L8GpxmaZx+HqPjugPL3xEBySJ84DXdwkLaZ1vfpO/XF/BU3AQWk AL3ImF/MrUfDWsBoov3opHZReznbvfeV7IW30Gk+iti5AXwKw5rIwyyrmUw8Mt/aHqCl tQyP98yqfJzjEJQjcxOJ+yuSW0LfWJz04EOMyZvg9EG4Nj+eDoc5hfv3t3yiVERJRgig G9EwE1y7y8pb0K4KjvDHmF+IXioGCMYNCOwcGxD+ipsDZnthzS7lZhqocJTJC+TdIffe xqzg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=ToK1QziuFfrgQXNFBbzlVuonxBUti2IRvuRMmdKD4GE=; fh=X2YCF54XgD2YBigEKXOb5IhcaeOgQVeZvUURO6kNdbo=; b=U/TW4hmly0Mm0n9nKI87WQ9M7mJ5lUjEUcwYPV63o8c/gRRgAnhiAiFnawVHUQFNOU 31czlBXsjsoNJ6VLg30Khcy/Bg/0kedBoepmQkyZXhA/xYrWcV2gxke5EsTon82Mg7kb UM6Amz36advLu6oMWW72wLMv6VcRImW2cnatcwswLihK1g08ibKQazbcqkdOOe/oSl4E XZ2HQIMqWsKxpd9yp1iEqzwYnbyAC6GeAI20nFfAhT67qXfTkChVo8p5vTGoVyWopfCT UI9RcUrqcP5pD3P7JlrfVxHJc5VmCcUOCjEx+F7ayzH7CSUJURc/xRmaqinLsLCpE8Ew bylw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=DOecXjKd; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1749126032; x=1749730832; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ToK1QziuFfrgQXNFBbzlVuonxBUti2IRvuRMmdKD4GE=; b=N+RqUKEgFM1j+C+4YdcSoSlFnxz+bnasat4uONE5SfvH/t3jIRUsnKYRcMYlIExVo3 /jYOhi8YrJL3COi/GOuf19ZToTXRXqOsRvHJxsxuETaZt+BRJlST4WVRniOaQtgfgHg0 oQJQSvQiIggAbHk8O0erEnMaUv7pMELTCw1GKZytxz1Z0nSGoknF5pzOyaehqHFc7XU7 o5YTQExxMTFLrh31cRpxLB+eSa80GLlonznlwcp8Jo0LM0hRj/b9hrKVPo5qZSa2YmZD eZxuQaIvQ6XmCgKn3/Uz0Uu94sq+ewf5X3BkLK8zz82dWxDnNQKMpL6EzjApAPU+Qm8S xR+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1749126032; x=1749730832; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:x-beenthere:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=ToK1QziuFfrgQXNFBbzlVuonxBUti2IRvuRMmdKD4GE=; b=i12vELCrhfKNzSEamkkxj+BpQsroi4+BZ6/ZZaYj+zusYgBDbR1e6g1Ng+d+EWGAnI pSjwq9H6bcjS90YrkHu4fNkS+JwjsSq+nMcf/WWZmhIWqpsqMwAQolGGvJN7ixmlxbMP JUl2UyQYiflILruYrX4rQvg1UKD2UcJDIZJIMgThTtji/QSa+k/OjmqGJekXadq8zORA wHPuYLvGOCvs13LaPQID975uUH7pOKG4Fl2jFixAmkyRNNNTEVXvoHszUQNRi1LtD58R 9592qdWd8/wXPPqAvFG7yHKKMsyG+2DL2UW2bhoVfKfZihg0/oclvqYK70wZIkm6TXUZ D0CQ== X-Forwarded-Encrypted: i=3; AJvYcCVCnXYaO5dU3qallq8ZsV9X78+7sHWXbojqm9vUWZN6fTLL0zcKf9WQIhomdQcobGVCyft5@ilbers.de X-Gm-Message-State: AOJu0YyinPFjI1eKkEgAZyTTHgU5UfWheHUs+fkJYPC2Hr+AYcVlpsrW QhbFUv6fmHXEAdgHYrLRr6Oe1FVWLzxmEhm3Qm4KG5qnxEK76PDhHflF X-Google-Smtp-Source: AGHT+IH91AxptqCnMSf82ivJrL7fZGbvOpFu4iuTpS6BJuLqLWcipNxvuk/7TMXQgKMKc9Q9RCy94g== X-Received: by 2002:a05:600c:1c29:b0:450:cfa7:5ea1 with SMTP id 5b1f17b1804b1-451f0b156acmr62944555e9.16.1749126031976; Thu, 05 Jun 2025 05:20:31 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZexE9fDO1/bPRqRs8FIc9r4eAvSZ9StvzWrn9aZnPgGjA== Received: by 2002:a05:6000:2207:b0:3a4:bfde:c058 with SMTP id ffacd0b85a97d-3a526a135d7ls550828f8f.2.-pod-prod-02-eu; Thu, 05 Jun 2025 05:20:29 -0700 (PDT) X-Received: by 2002:a05:6000:1a85:b0:3a4:eeb5:58c0 with SMTP id ffacd0b85a97d-3a51d927c98mr5882864f8f.20.1749126029179; Thu, 05 Jun 2025 05:20:29 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1749126029; cv=pass; d=google.com; s=arc-20240605; b=O4zWDTiPEzQ4ZtCOSnhve1f+9XUaGMbcwMC4HZRwSbGF3h7JP1Oe3Mm0r85q6Vb7Ep rD8PHlwJYFbUmJdRwGZVhkP70YaNemY+Nxt3KwXPterdagzysp9Hb/EUD3+ioK2pFAD+ +k6i9sEojxngM15BlHlKiKXrZJZQ+8Mh2+NMA1eeSrJAebYbGzMVdtM/ybfuMl2dg6kQ QpoD3zHacJblSXfLjCjxegrL73GWmr2rHIV35LYU8zz183onauWQWw94NRgUhRjO3Qiu 3sOAhmQQTZvM11VuZwk7N/3XEOXo56j69HQrfczbyRKO9KRC5OzlRnthG6/NcCXOQYlX STJQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=VSmdgj4anRbh+jrXPmdZU5YXaza+wIwKZq4zon7AA2E=; fh=OpTo1M6IF1jI18Q6a/ow6e3EwA/jD0GQfTveua7DuHw=; b=gSzTcBL+vjOhPpSLKUBLX9QGthQEhL0E8gtNFnk02jnH77OqjqYsft2Z1clPSIIHvU 9uEe7z8xNn/mQJr/vQWamvh0VsSQwMY7Fk42GfPUzCSycBOMUHPpKnqJzMgOPF8Ix/f6 ZpAzG0mKLRrQ++rGmxpqRQXk0XInmP7UoZA1TFPXgzUlHwl/bbnASKJdPyguYMB1fByt 1qcIWBMvfSz8OFW8NG9jacdlQDhOVHEMRdq0qMlcRpkcBUSJtDdjRuUA9/E0zelyX7lz rMyTa60etq1cz+vuCgZaLR/ysXjH31aFsk/taOSlKp+rKM4Kvnubx5a3fkvSAsnTxa7p y3AA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=DOecXjKd; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-451f82780dbsi759695e9.0.2025.06.05.05.20.29 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 05 Jun 2025 05:20:29 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=FzlWxZ4cK/x+sPjeUPaHOfwW5NUg5LDrDJUdfEEoz906M9m8uXShqqvRS+PfFoo1XF9mJiO+NqhZ4K3oiBHcCoc/vrkSoLwbM4VZLk2zJ3SzIdFRSxPya5/2xpKfi1C8EcJolZyMfuO7gH0sitNL743MQcdw0SGI7Z8YFjvDzOYu51gJQGHpITvwJd0CkBfzKMDJLpzrMtvNjHVp4Q3Yvv/SeOnrfGnlzqBNlW5cWy4g/dSovzn9RNXFEC67OP0XTZUhNqW/4D8EuMcGuUZAccADI95qjvQiWlfGAPg5nhBZM4P2jBHBFWy59Yr8HN0vNjQxZtCjidEzmlBxj+LaWQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=VSmdgj4anRbh+jrXPmdZU5YXaza+wIwKZq4zon7AA2E=; b=v/PtlWoxdOG6u7aW/E/1Ko6RhE5SN8J5U0yrWyZEptOa85fhKmSZyKeizXK+pPpSLege1yxC4oW6kRI3xG8Bmgfl8v7UtR34Fo4jj7/9Ol/zg6S0oKflcy2m++GoLQVobGg/bIMVuU2aruBb6+eogV7Z5h24cUsVAPZJ16WVB3nGP30m5z5tse6/5pRnl6potF5jIjSgluY/K5VpqlhhOSIAFOo76w/XlM5dV7jjEa/u4ZJt6TiU1nprrMOGvxFUTfuT+/KJEdiK2aj3dPmdsCJuKYkE38H40UKM6SLtZWLXR2Fo+VkrCLPVVap8cIyCzVVkGYAWKF1lw8U9SOx+GQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by PA4PR10MB5657.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:262::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8813.20; Thu, 5 Jun 2025 12:20:25 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe%5]) with mapi id 15.20.8813.018; Thu, 5 Jun 2025 12:20:25 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "Kiszka, Jan" , "cedric.hombourger@siemens.com" CC: "isar-users@googlegroups.com" Subject: Re: [PATCH 1/4] rootfs: introduce wrapper to run commands against a rootfs Thread-Topic: [PATCH 1/4] rootfs: introduce wrapper to run commands against a rootfs Thread-Index: AQHbyLVNd87UhmzwJ0Gu5CR6xdVFhbPeu02AgBV9PACAAF55AA== Date: Thu, 5 Jun 2025 12:20:25 +0000 Message-ID: References: <20250515150727.1764989-2-cedric.hombourger@siemens.com> <20250519115750.3195300-1-cedric.hombourger@siemens.com> <20250519115750.3195300-2-cedric.hombourger@siemens.com> <27cd63ffc8d2ae1c7ad97367df6e1327993f4d1b.camel@siemens.com> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.1-1 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DU0PR10MB6828:EE_|PA4PR10MB5657:EE_ x-ms-office365-filtering-correlation-id: d2774d42-f4b2-4ee7-1a97-08dda42b59c0 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?QWV4NEdXZWx5bFpDNmkvdEgzY2tQQ0trNXN2RVdZNlI3eW5SQ0hzbUVweDNi?= =?utf-8?B?S2RhcXpsKzBiYktnYXVHcnZnNjRRZUZDTThpUmtiWGlqWU5TTUJZSkdJR2FJ?= =?utf-8?B?ZUhxS2ZhNlJGazdxT09DRndNQnRSVE5lYndYSDAxblVtRU9FcnFDMlVLUi9i?= =?utf-8?B?ZzJ4cnZzcm15QWJZWjlZditFQ1hIQmpuOEF6ZVo2NFRLODMxYkluek9RNVo2?= =?utf-8?B?WG51Z3hqbWlwdUdmMjZCWHl2R08wb3RmZTZuUzhIOFhtTHhyKzk0WVZoQ1gx?= =?utf-8?B?L3dFMXJLbk1hbUN5dUd5eTFYcDkzSEtwSXJ2ak82WmRMclZNc0dVVk4yaTlO?= =?utf-8?B?S2J0Qno2RFNsWG9ZbitQdjlOTjZocGxBczYwdkJPbFphZWx5SXg5Y2cxb0RV?= =?utf-8?B?NUJWVmNJVlpsVDQyVjBQV3c0QmtqeGh0cGVOQ01ld0o4a05wbjMvU3lueEF5?= =?utf-8?B?Q2FVYnU5TkIwTkJmQm80RGEzcjRHclYwand6ZGF5NkN2RzhzMHdRSEtzT1ZY?= =?utf-8?B?bU5EakE1aVBMeklXbDBSUUZRa0VuT3BaVm1pWmxvY05EdGx4WENKV3hMQUg3?= =?utf-8?B?UUpDVWJ1M21uV0EydFNPT3VQWmsyVWFhdkRLWFJCTllvQXh5R3NWTnpnR2Zu?= =?utf-8?B?cEMrbE9RMmJZcE9IVDJwSExMY3N4RitFMWhiU0owRk5VenE3bnVtZ1VFcHVs?= =?utf-8?B?bXVvNUFNVmM0TFVtQ1pPUzUxRHc5Z2pzb0dJTXBDcEhDNzJRR0Z2U2dWUkpQ?= =?utf-8?B?bE1Sd2tOU0sxdzN0SnlJc2g0c1lXQTNHZVg5TWk1UVBjRE01UkJmM0xjOU1n?= =?utf-8?B?dHJjL21RenBpMWVMN0J3dmdpbUw5ckFWR1lpbFFLMjV0N2ZlbHF6RG5qUXNs?= =?utf-8?B?NXUvSUh0TmxxZXc5YU5sM3VEZWpZWDl3QllPcGd4b1p4ekY5MnpIUy91ajhN?= =?utf-8?B?RmFacE1pcHVYRndRaUJheXA5aXM2Z1ZCZmxzSDlJUU9yWUl2TTdlbFVrOTZ3?= =?utf-8?B?VTZpSFJKSjNZaFdVamVEK0xRTUx2V1l4RlNMWTJVYlFzVDUzZnB3UllFekpt?= =?utf-8?B?RjQ4dHJhaFpqd1ZBYXBMRVo5L3RWeUNrQUxWTUtYbksrYzY1WTNFNHlHc1Vq?= =?utf-8?B?WG1pbjVXOTJ5TkNNYTJ6bis0bnJhQ3p2a21wcnR4cHZ6UG8yN0hlLzJiQXhr?= =?utf-8?B?NzdJOFNJMWQvZ1g2c1N2L3BRL3ZlS3k4UlAyY0ZONEdPaUtIYVVsb2xKanpW?= =?utf-8?B?WXpxUUdGc3RMc20rUTNxMUNEcXVXeDlaNEF3M3lJZ1lXOWJnZUpJSzNReFlt?= =?utf-8?B?QndiOXRhaXNReGsyMGhFR1FaUHZ6SXp5UHZyanBWNW1KUFFub2lJWm1YN0NI?= =?utf-8?B?L0pvS3BGcURjS3RNaHdoRGF3YnpxOG1uMi9QNWsvWEErUEZNSGYvREphdEFD?= =?utf-8?B?Qlg4RTdOaUQ2YkJTamlpemdWVlp2RmxObUJ4NFpCWXA4UkhQRUdpbi9UNUxL?= =?utf-8?B?dCtsNkdiRzZjdnBqUkNqdnQzSVRIMTg2Z3g1SENnT25GblJXRUdYdXdwMDdv?= =?utf-8?B?Y3MvTWYwM0ZYQlpaajBuZFZ1a1ViUXU2RStkK1dHM2Q2NlpXUmZPWExKdWdT?= =?utf-8?B?aCtRWCtLZm1lVjNrQTlpVHpRcmd5QWVBYzBjN3N6d0NUZHlxMWQ1OEFMMGgz?= =?utf-8?B?OEJFUFFWTGFsdTJzTXY3YUNWYTZmd09BRGFpRi8yYVdiN1JJSlg1OFZmeVZT?= =?utf-8?B?NEJuc0k4WGg5dmVIOFdJUFUvSnBzek93bDRZN3Q5RzA1YmZKQ3pxd1YvL3kz?= =?utf-8?B?R3lGQlIxN0JjZ1ZZZFY0S2ltcHlNVXRsSUcrczl5dE5oT3RicVMzdEJSQ01V?= =?utf-8?B?aWlqNmQ5OStaa0E5Z2x1N2c3VWRpUkcwNlNFZ25oMGoxODRoTzRqMWlqN0dT?= =?utf-8?Q?sh8AgzmTAcQ=3D?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(38070700018);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?dHpqWFo3dFR0aTlGdDRua3JpR3JFQ0R3TDNBMkdJcXcraEJlTUYyQllJSVhQ?= =?utf-8?B?NjJSOEx5WWVKL0hTVDVPNFNDMi82bUVOODdWWEdyTVBQeklqcGo5M1ZkenZZ?= =?utf-8?B?cHhWb2V4dGhMVHhYUXlNVStHem90elVpUDZlWVpwMXR0TkJCWW0rU05xWG1m?= =?utf-8?B?R2dJTy92VmhqZzZpWmNrQUt2OGR6SGFsZFdKcWk2dVIwb2oxK3hkRzlTVXNL?= =?utf-8?B?UWVUN1hWUjJaSUowOEdlK2tXbTFvVmpsc01QdnU2TWM1MFdiQWVUU1FxQmtM?= =?utf-8?B?SUdkZ0hyMWxpaDFmMm5mT2doMzZOU2x0T2hLWlZHMCtTNWpyZ2loaWZyV01O?= =?utf-8?B?a3AzUjdEVEJIODBwQ3JlamNtWjJqZDUrbGRZRS84cnh5WjBoMk9OSDNZb1Va?= =?utf-8?B?WEJkNUJyb2hXQlR5by8xZytjQ1JtMVBydlVSREVWNCtFUzFUcE10dm5FaStK?= =?utf-8?B?TWhUWDBmS3VmVzVGN0ZVb1YveUxsK3AzQ0Y0bjlSSkV2MGhmUXJlYitRTk84?= =?utf-8?B?K1B6K0JOd29iWDJPRnlDdGo5RGZEQitBck8yUGFUb0FtSWNZNFQ0bG1acTBB?= =?utf-8?B?WlhRSEtpY1MyUVBUSGpBWWFFS0t6bDgvenZFRnZheEQrbVRNZ0gzU0NZTnNt?= =?utf-8?B?Q0haTzZES3lwVmtySmdtU0tDWDhnYXFoSkVEdGJwUGQ2TWNvSjdkRFdWY0NQ?= =?utf-8?B?aGZkVXNJYWd5bVd0Sm4rY1pWWEppQmJoRlZIS1gxZW1GZUNuVEtFdkNRNkxM?= =?utf-8?B?ZW1YR2ZGc2VIS3lQNVdDR1c5YlNubE50VW1NaHhucS9XbHg4MitnMytZcUJu?= =?utf-8?B?R0ZUeTZJYXRVd3FMK2R6V1dvT2NGemxWOHM0dHFUenhjMnlqNTQxb28rRlBv?= =?utf-8?B?c1YrcmxMTDFsRVZ0U3Q0dFNiVm42SFcrRFZEelM2amdqK2lTZHR6R3FXdndO?= =?utf-8?B?dG81b3dBeVZUblI0SCs3ckV6czE2SXRnaDJoQ25WZ2xiQ1dsUDVmYmg2SkFK?= =?utf-8?B?SnV4blEzZGpxVmJTT3BZN1hMSml0RGRJcGh5aXBWMjZQTFFsMzN0SGpqYmlX?= =?utf-8?B?MXF5QnlPUU1rWHFySUdKSnZYa0JOTmhpNXBPNERIa2V5ZnlITEFrS0tjbG54?= =?utf-8?B?K29JMTkwM0hLbkswQUpHQ2p3RzJnYjlXdVAzT2RLbWlKYnZ5U2F3Qkh4ZjNH?= =?utf-8?B?UnhqVVB5ZDU0L3NzVVQrRFVESUlqSFE4c2ZFdnFYSTUwTHhadURSVUh0ZExM?= =?utf-8?B?cWxIYWUxdzRIa3ZpelVCdjF1bUxFK1QyUS9vVmpsU3JkYkRQSkcxMnAvWXdI?= =?utf-8?B?OUY1ZWdTK05OYVJqNGZKci9BZWRpNlhFbU9jV1NkRmFqRGhEbzVXS1ozWHAr?= =?utf-8?B?aFNLSTBtM0NBMUYwalB5akQ1RERKVDkwODBjM01HR1ozUFl5WjFFNS9FaTdq?= =?utf-8?B?eXVtOXJBbHEwcFlGMGE1VytkcEZSRU9EWGhMSXlZOXBHUTVVUFJydWVPK3pr?= =?utf-8?B?UFk3ZzlqYkl5NUJtUkJMUTh2VFZKSDF2NExEZnVqdVo3YnI1dGQxc2pQVjZS?= =?utf-8?B?YnljaTdNRXJNdW4vaEFubm95WFpGNGVyNXh6b1Bxemt4clg4RmhzLzBoQ3l3?= =?utf-8?B?SGNONnVpNmd5ZEE3QjJEY0NmcmFhTllEUitXQWFsd3FkQ3hCN05FVjAzbHJm?= =?utf-8?B?cjBTc3d3TGlsVmgxa2hXbklxUHJEb2hneStPK1hKMVg3eWpFUWtWOFVYRTFP?= =?utf-8?B?dXdvUVdrZUowK1BTdXNzbTQ0M3RtMHlSVjBqajB4TjlkNFJrNTQzUCt6MHdw?= =?utf-8?B?d1FZd0dzZ3hKZHpONnJSZFF0MS81ZW1mbHB3S0t1c2RTYzdNNTlvTElWT29j?= =?utf-8?B?MWtDZnEySGgyQjdITkZHQWpTL2dCalpVVHBIeGFRRmtkaVBYcjMzcnNnaWRV?= =?utf-8?B?TUN0VThXbkdRS2tFekJsUzhOQVdPWW9lTGxmazJhRDQxTWN1MG42bnFuWktm?= =?utf-8?B?R2dheHJraEI3RnNMK1RocW1hYk0xVGFYM24yaVBtNWMzY2RvVkFrMXczdE1T?= =?utf-8?B?UHpYcXNXM29RRmE5RUYrUGNSRzdLRXRUdFZtZ1RaNUUxWEJRUGNZMUYzenlq?= =?utf-8?B?Q0tiTTljZTVoYWpHUUdGRTBrT21kUFJyOHdYQnhjSVVSQ3NUSVJ3bFBwMmVv?= =?utf-8?Q?QwZ43zjl+MRZYQI6YtoOTT4=3D?= Content-Type: text/plain; charset="UTF-8" Content-ID: <0A9DC382B4CAB140BB117308D48AC2CC@EURPRD10.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: d2774d42-f4b2-4ee7-1a97-08dda42b59c0 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Jun 2025 12:20:25.2274 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fGv/g/qxfKFILhN6HW+D99Y67hOg6aY7UxSDZH7FylURUBX9ZC11knUW0XkyHvE+gn/eGF1MWaAdbMsEwCZgB/nqSVK9ShUNfpSM5iRUFa0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA4PR10MB5657 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=DOecXjKd; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: boQ1nEAdE2JN On Thu, 2025-06-05 at 06:42 +0000, Hombourger, Cedric (FT FDS CES LX) wrote: > On Thu, 2025-05-22 at 14:32 +0000, Moessbauer, Felix (FT RPD CED OES- > DE) wrote: > > On Mon, 2025-05-19 at 13:57 +0200, Cedric Hombourger wrote: > > > "sudo chroot" is used in several places to run commands inside > > > rootfs > > > directories constructed by Isar. There are cases where a command > > > could > > > be used without elevated privileges as long as special folders > > > such > > > as > > > /isar-apt are mounted (they are often referenced as /isar-apt in > > > configuration files found in the target rootfs). For such cases, > > > bubblewrap may be used to create a non-privileged namespace > > > (either > > > in a bare/native environment or within a docker/podman container) > > > where the command will be executed as if chroot had been used. > > > The > > > rootfs may also be the host root file-system: this should however > > > be used with care to avoid host contamination problems (note: > > > Isar > > > already relies on a number of host tools). > >=20 > > Hi, this looks promising. I gave it a try on some of our internal > > layers (arm64) in a custom kas container under podman. > >=20 > > I'm wondering if this could also be used to run the apt in > > do_rootfs_install natively (maybe in combination with dpkg --root). > >=20 > > Tested-by: Felix Moessbauer >=20 > Dear maintainers, can we move forward with these changes or are there > any concerns that need to be addressed? If we decide to integrate this (which I vote for!), we should also add the bubblewrap package to the upcoming kas 4.8 release (putting Jan in CC). Felix >=20 > Thank you! >=20 > >=20 > > Felix > >=20 > > >=20 > > > Signed-off-by: Cedric Hombourger > > > --- > > > =C2=A0RECIPE-API-CHANGELOG.md=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0 6 ++++ > > > =C2=A0doc/user_manual.md=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 |=C2=A0 1 + > > > =C2=A0meta/classes/rootfs.bbclass | 66 > > > +++++++++++++++++++++++++++++++++++++ > > > =C2=A03 files changed, 73 insertions(+) > > >=20 > > > diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md > > > index a4cf1338..725737b2 100644 > > > --- a/RECIPE-API-CHANGELOG.md > > > +++ b/RECIPE-API-CHANGELOG.md > > > @@ -722,3 +722,9 @@ Optional fields of the isar-apt repo can be > > > controlled by adding to the > > > =C2=A0 > > > =C2=A0Changes in next > > > =C2=A0--------------- > > > + > > > +### Require bubblewrap to run non-privileged commands with bind- > > > mounts > > > + > > > +Isar occasionally needs to run commands within root file-systems > > > that it > > > +builds and with several bind-mounts (e.g. /isar-apt). bubblewrap > > > may > > > be > > > +used in Isar classes instead of `sudo chroot`. > > > diff --git a/doc/user_manual.md b/doc/user_manual.md > > > index 0dc317c3..3cf1a9aa 100644 > > > --- a/doc/user_manual.md > > > +++ b/doc/user_manual.md > > > @@ -75,6 +75,7 @@ Install the following packages: > > > =C2=A0``` > > > =C2=A0apt install \ > > > =C2=A0=C2=A0 binfmt-support \ > > > +=C2=A0 bubblewrap \ > > > =C2=A0=C2=A0 bzip2 \ > > > =C2=A0=C2=A0 mmdebstrap \ > > > =C2=A0=C2=A0 arch-test \ > > > diff --git a/meta/classes/rootfs.bbclass > > > b/meta/classes/rootfs.bbclass > > > index 5f877962..5b96b414 100644 > > > --- a/meta/classes/rootfs.bbclass > > > +++ b/meta/classes/rootfs.bbclass > > > @@ -34,6 +34,72 @@ export LANG =3D "C" > > > =C2=A0export LANGUAGE =3D "C" > > > =C2=A0export LC_ALL =3D "C" > > > =C2=A0 > > > +# Execute a command against a rootfs and with isar-apt bind- > > > mounted. > > > +# Additional mounts may be specified using --bind > > > > > > and a > > > +# custom directory for the command to be executed with --chdir > > > . The > > > +# command is assumed to follow the special "--" argument. This > > > would > > > replace > > > +# "sudo chroot" calls especially when a native command may be > > > used > > > instead of > > > +# chroot'ed command and without elevated privileges (the command > > > will likely > > > +# take the rootfs as argument; e.g. apt-get -o > > > Dir=3D${ROOTFSDIR}). > > > If > > > the > > > +# optional rootfs argument is omitted, the host rootfs will be > > > used > > > (e.g. to > > > +# run native commands): this should be used with care. > > > +# > > > +# Usage: rootfs_cmd [options] [rootfs] -- command > > > +# > > > +rootfs_cmd() { > > > +=C2=A0=C2=A0=C2=A0 set -- "$@" > > > +=C2=A0=C2=A0=C2=A0 bwrap_args=3D"--bind ${REPO_ISAR_DIR}/${DISTRO} /= isar-apt" > > > +=C2=A0=C2=A0=C2=A0 rootfs=3D"" > > > + > > > +=C2=A0=C2=A0=C2=A0 while [ "${#}" -gt "0" ] && [ "${1}" !=3D "--" ];= do > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 case "${1}" in > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -= -bind) > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 if [ "${#}" -lt "3" ]; then > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 bbfatal "--bind requires t= wo arguments" > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 fi > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 bwrap_args=3D"${bwrap_args} --bind ${2} ${3}" > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 shift 3 > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 ;; > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -= -chdir) > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 if [ "${#}" -lt "2" ]; then > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 bbfatal "${1} requires an = argument" > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 fi > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 bwrap_args=3D"${bwrap_args} ${1} ${2}" > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 shift 2 > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 ;; > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -= *) > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 bbfatal "${1} is not a supported option!" > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 ;; > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 *= ) > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 if [ -z "${rootfs}" ]; then > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 rootfs=3D"${1}" > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 shift > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 else > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 bbfatal "unexpected argume= nt '${1}'" > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 fi > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 ;; > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 esac > > > +=C2=A0=C2=A0=C2=A0 done > > > + > > > +=C2=A0=C2=A0=C2=A0 if [ -n "${rootfs}" ]; then > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 bwrap_args=3D"${bwrap_arg= s} --bind ${rootfs} ${rootfs}" > > > +=C2=A0=C2=A0=C2=A0 fi > > > + > > > +=C2=A0=C2=A0=C2=A0 if [ "${#}" -le "1" ] || [ "${1}" !=3D "--" ]; th= en > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 bbfatal "no command speci= fied (missing --)" > > > +=C2=A0=C2=A0=C2=A0 fi > > > +=C2=A0=C2=A0=C2=A0 shift=C2=A0 # remove "--", command and its argume= nts follows > > > + > > > +=C2=A0=C2=A0=C2=A0 for ro_d in bin etc lib lib64 sys usr var; do > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 [ -d ${rootfs}/${ro_d} ] = || continue > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 bwrap_args=3D"${bwrap_arg= s} --ro-bind ${rootfs}/${ro_d} > > > /${ro_d}" > > > +=C2=A0=C2=A0=C2=A0 done > > > + > > > +=C2=A0=C2=A0=C2=A0 bwrap --unshare-user --unshare-pid ${bwrap_args} = \ > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 --dev-bind /dev /dev --pr= oc /proc --tmpfs /tmp \ > > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- "${@}" > > > +} > > > + > > > =C2=A0rootfs_do_mounts[weight] =3D "3" > > > =C2=A0rootfs_do_mounts() { > > > =C2=A0=C2=A0=C2=A0=C2=A0 sudo -s <<'EOSUDO' > >=20 >=20 > --=20 > Cedric Hombourger > Siemens AG > www.siemens.com --=20 Siemens AG Linux Expert Center Friedrich-Ludwig-Bauer-Str. 3 85748 Garching, Germany --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= c23de399099b651ad8d6fbb264cbf69564c640f4.camel%40siemens.com.