From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 21 Oct 2026 13:54:17 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f55.google.com (mail-wm1-f55.google.com [209.85.128.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 69LBsGdT014150 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 21 Oct 2026 13:54:16 +0200 Received: by mail-wm1-f55.google.com with SMTP id 5b1f17b1804b1-4a1db220b42sf5362965e9.0 for ; Wed, 21 Oct 2026 04:54:16 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1792583651; cv=pass; d=google.com; s=arc-20260327; b=L6hbjomPMqJtAYq3qr0XVnitBKdtXsWtSGrdI0zNVBqr/aJK+8Bc0nxSNdgRq9WPfa JHw3fP+cwcA7aUWfVX6x/9QdRlivVBMrXlRwMTOSbFrimIyzY3dtJRFgF3/Wt36NlXGX wR+MD+A+RI7baQcN+uoHItrNOie4IUOJvt2GDt3A3lpnP1FW6r0WhxrGz0h/YYLwpQqF mTZF/4sgdA6pCumZiNPiPwSEx/ZAchurzPuQ4Feg6IG9NngpNIKG9tiPinjwxD6mKA8L 5Wb63YZd4ye34FovIYFHOSwLlRMqDE0V78TD0EPUGwW+VW+T9HVtdia8xh/4vgmFkBZy 2aiA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=3XwRE1YDnoTOzRxL2j7JV8l1S8Ref79e8QOSAlbPbWY=; fh=rdwjIehgAVxbIvJtYPjZM0Lshj+LtFL0F31o1z9QLMo=; b=lP1cWJk0mp0AZgLSKurSKUGEWjQ2iK9TFy7+X7xj/tEp2Sxm3LDiN+6eQ6+PofmYlk +HOaxFlLLl9X7bzkDiUamOLyUzC9kXtId4yvIJ5nk09Aor23OQdWvm2Is43eTcEdqMp+ ybYJ/DEMFYsSDQmbiI/OSynm5IwEK65LFBSvQuairwktRT8xaYrJZS7IMmhimAaEYCI1 oDEWzIkwjl2vLYqrUAAt2F6/4Y0XwaVPLRCMgR4jp+vK0x/MucMHdbEbdeBjxnmPeYTF 2/gtfst8M7xk68jtO11BQMTq62R6sUFO71FX/bzkZwM7xqQFBDvn0rvLcIie6Lz2xscn jwOg==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=AWSgcN5v; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1792583651; x=1793188451; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:content-type:user-agent:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=3XwRE1YDnoTOzRxL2j7JV8l1S8Ref79e8QOSAlbPbWY=; b=R43hG5BTpzhv3yfJc5VcS6aLxvuW+zVoj/MDGbIziWG0u/66hJEZtL6/PimVF2DV4U qJ+mRVQU/v3A6JsY7pXt4hDkjzuBPWj5jBumXtlPn9IYuGj78YYzRm/0l1jgBA/++Fep HLyWjzz6/vV8uwGZfyoM4ViiaHDTQjoHJ2xLrzklYNb7p3IscNg+ii4N9b8XBKo9g+nL Qyd3DYyrF8uGGtmpx5bt2YiozdBkrg+yk9i0mqjOkRbRejdlw5IDgpIsJKX0uTYpL2mR Mbrgpw+GYpB6AU2MJxO0RpXNOW5Xh/kO5UIpSj6Zk1d5z6VLivroRlwt2qHgcLQPFeLQ k8kw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792583651; x=1793188451; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:content-type:user-agent:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:cc:to:from:x-beenthere:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=3XwRE1YDnoTOzRxL2j7JV8l1S8Ref79e8QOSAlbPbWY=; b=YmY3PkCiiYTwdkcA5zr8q3lBRVzWsoXqdlt4cg9+MObGPhPeDhYZ6L3xmVA7hfcSCU l6IEOZMomnU+ykqSWZFUPK3sf+RojSxcL3NPuZSDPvEHIq7cudPc4FNZ6voRSTGu5YhB 1UtHb2n7+6cE3ofNRRC62A6KWQYwJCdM6zzxEN0kuRBtojiTvqNgP/nwGjODIEccu0lZ GwehcvkdSYAk34R5lN3JOQ3t6K9ssvPyo+fXJoG6rKl+1RJksdW7Z+kBdEpVkQgDwQAx uAIbCUE7tpVAehovYrV05yJ37tRHuf/dMd/4Y7ep8dVSeOJ9whs3PGgQnt/mvZX1E8jG 9Akw== X-Forwarded-Encrypted: i=3; AKwUvBySAdhr+UGhdbWQm1iM8tjaL+6v2J6OIwXgD2GCkbP+91vPlRHFd1KJDVlH1YQXSVmd1avH@ilbers.de X-Gm-Message-State: AFq9FYIPH9x20hnKNwze08qf+sNnZmWbmId+w0devOAEF7PXLATqPcws uyra80BXw6IevCjhghe1bVtmcszzPyDSPHi8aAMM6m7tMmwAl2vGDDAR X-Received: by 2002:a05:600c:6748:b0:4a2:1a:a122 with SMTP id 5b1f17b1804b1-4a2001aa387mr25121065e9.9.1792583650759; Wed, 21 Oct 2026 04:54:10 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdfE3HUSp3NUH0IB81qq1D6N2sKKvBiF9jzZPRrlTkrPRw==" Received: by 2002:a05:600c:3b97:b0:49e:6618:1117 with SMTP id 5b1f17b1804b1-4a1fc2bfa9als11908235e9.1.-pod-prod-09-eu; Wed, 21 Oct 2026 04:54:08 -0700 (PDT) X-Forwarded-Encrypted: i=3; AKwUvBwnGaFMnX9NKn5c+N6ViZczMdiRBPTgVx/XQOSl+3AaDCnr1AgqEU/nBgYA2P5/ST1qQArHU3rsaQSi@googlegroups.com X-Received: by 2002:a05:600c:6304:b0:4a1:f377:5c68 with SMTP id 5b1f17b1804b1-4a1fdd46423mr33993165e9.34.1792583648468; Wed, 21 Oct 2026 04:54:08 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1792583648; cv=pass; d=google.com; s=arc-20260327; b=PLniFTU4IRm0SxULAnMXvSC3EVUMRE+H7Y+0J59pzH7CBdlacbCA6LOC1g8N7eIkPZ 3wntdxtDRnMhH8fOBJ2czJ1CSdDUIsufrCW+otltrv+aWnDlXW3FJNU8fyGtX3AZq6xr qwq7gCno/aTUjStuhUokj7T1LPcNe/BWdq6w/ZTLZAuByR79vl0psIY4KeYTaz2NTU8o Rc1LTHKfKEtuEkFQdpHc91fFlQjcHIzB+3owAHWaQkPgYMs2uaSbLHzjuDFaJiKlLDB/ QQ5NdMNLYUdsxiVcnWaJO7qi/GJFdkhr+0pVkMhFHnBIEVzZ08fGHbwKqEQR6C14tnj9 1A/A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=vPFfurqH8gvT1Arvb5UkFQ5aRIDhMq3J5vGLkY7gkl0=; fh=E5TzRlP7ZEzA5WSKduyGwmxZP4v8PdH6kCI7L8g7jyk=; b=jEGY6FpUAEofmmj3VEWvBhLe/qOltZCTUFYqm2wsD/QTNrnldtH8IhnE91XZTdQ7nx uD8jb56bYopPf/mHLFSs0w8bYwWNNaR1OdxImzUnYsJGDQr0hX+6Z/HuT1Q4w8QgaUu/ KLHePhTstPROgomWlwHrPBIZokTjCbTmUpYVNZZtktbFPUxnBrCFRbJdMPDOIn4v9FOj R++jXEcFap4HUfVwQALZjj+Pk7ws5B3IVHfwB6bgGqgDiTiB2Ou1M05tqwpYuQW8QI9q C1wLS0cBbBebQCqdeP9pD9Mo1+p1aiDMGj8U35GrPodLhCzL402JYCg8HnpEIHeNJys5 vjUg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=AWSgcN5v; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AS8PR04CU009.outbound.protection.outlook.com (mail-westeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c201::3]) by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-4a1fb69b332si394135e9.1.2026.10.21.04.54.08 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 04:54:08 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) client-ip=2a01:111:f403:c201::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=dfA9yJ8ucNeQk6+RmNkqNV+VafLX9a5k4V5OB9ZYFRPCLOPrDfogsscT2jUbvMgMU+xjWrOxJSmy5h6w8/4fotklzqARl+XdK8Iwo61YMw7O4XmtL2QCuwezHZjJilSb+2JSbhvwZIJ7POfP0hAdPRgcz3DAlu5XaHyuEsT5s6JiQzOEGmQOnTAvjB3fhKeA0iPOCBvlaIYeVjnC54nPTwfoRqX0EUjkJNAZq/bhD9Oq4GL1MjagKtFkKFcZG6VlWFzbRa8Xm/U+uK6cGZyckZb3wTHuIhCOk43RzE2RQuY+s+Y7NFWEoVlXnK/XduD/9xYnVXwThSy82BlTADeGRg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=vPFfurqH8gvT1Arvb5UkFQ5aRIDhMq3J5vGLkY7gkl0=; b=N7+VV0EVQnCjJvmYHlLu2rp3vFKHnkZlC0HtR1WZKbSO6JD0l4L6o6H7xSTewmbxPpE/dbfZ0VkZzPQSEKNLXogYSG/bkzpQXTXYppvgVUyZFPX5BwOg6kq+idD7C+h54MJ7TIH7OiWT4+PGOvzqTbUDaDkxuoXTDwpS7TZxUSlRYnMhkn5AimJIZq0brBNgTOum4dKnpw9UdxSmRousORq5Ne88zYHcKPCNdANo0k/Fu6Q2eXerO+Qua5ah+dmsGtpBqswzSVi/nrfQzUzf4WhZsUjIC9PV6Iqbia/OXmHel01gxs53eduQrM4gjn3sHgAYF1QuAguMX6UWH1m62Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by PA2PR10MB8852.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:420::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Wed, 21 Oct 2026 11:54:04 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%3]) with mapi id 15.21.0522.017; Wed, 21 Oct 2026 11:54:04 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "Kowalsky, Clara" , "isar-users@googlegroups.com" CC: "Gylstorff, Quirin" Subject: Re: [PATCH 2/2] rootfs-add-files: use privileged execution helper for rootless builds Thread-Topic: [PATCH 2/2] rootfs-add-files: use privileged execution helper for rootless builds Thread-Index: AQHdYU7ukydzNXVmI0Koe+NKyKJhw7cH4x8A Date: Wed, 21 Oct 2026 11:54:04 +0000 Message-ID: References: <20261021112532.3824701-1-clara.kowalsky@siemens.com> <20261021112532.3824701-2-clara.kowalsky@siemens.com> In-Reply-To: <20261021112532.3824701-2-clara.kowalsky@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10+b1 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|PA2PR10MB8852:EE_ x-ms-office365-filtering-correlation-id: ee8bd191-27f9-448f-ab09-08df2f6a0168 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|23010399003|4022899009|376014|38070700021|4143699003|56012099006|11063799006|261009223027099003|10067099003|22082099003|55112099003|18002099003|6133799003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(23010399003)(4022899009)(376014)(38070700021)(4143699003)(56012099006)(11063799006)(261009223027099003)(10067099003)(22082099003)(55112099003)(18002099003)(6133799003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?aXB0d3lpeEVwckVCdC91NTR1OE9xUkVkTFdDcXYwT1JDSkEwZmVkdW5abWxN?= =?utf-8?B?UXc3QlR1WE1UbFd2eFdEdWx2ZFNxL0RMWSsrcVp6OGdpbDhFcHl5WlJTcUZn?= =?utf-8?B?OVRCTUdXemRKU2tseGhkMWUxb0RtSk9WMEdkR2VSdkRaS3pPVUJxeXRqNzJl?= =?utf-8?B?SGMvcElFN1BvYVlvaG84ZlB5dUpvY0JvMUNRbGp4L05hNWh1RFAyaUR6Zmhk?= =?utf-8?B?OXo3U0pMb2xwSUUrbGEzR2dDNmFTR3UxVTErYklBdFAwRW5nUUNhUVBrMnpi?= =?utf-8?B?a0VBMVg3RkNjWnJaaFF3L0F0SFpkSC9uUEM1NmNVK0ljYWxVdTBxc3V2OTIr?= =?utf-8?B?amFVTFlKcTVhMUhFaEJZMjVwanV3eXA1eUx2SkNuL0xqcHRES3VHaitDMlYv?= =?utf-8?B?V3ppMmVweWJ0T2pKOWZlVEozdzk1MFNhL3cycDBwcW44ZmwxWnQvbDhCRWFh?= =?utf-8?B?U3dkK0h0bUNPclZNSHRsNXh3L3JSUy8rMlp1Tytzc0pkMkN0MlJZeEVFdUxR?= =?utf-8?B?YWtWdnlnS3RQK3V2N3BEVDZWTmJwQVNybjc2c1duUzQ5bFBWdi9WYlRJTXQv?= =?utf-8?B?UW5MQWNneHdUM1VaS3c0MCtPSWw5QzdwaGtSS3dsSXhGTldMOURRRkcrQnA2?= =?utf-8?B?VmY2dFROOWZ6cW1PdUVGZHZYaUlsSDJBWC8wTU85WVc4KzBjV2lqSE9rcmVD?= =?utf-8?B?N3haZEZ1cHkxUElsS0RwTVlvK3JpRlVqY2lUczlPUGcxVEtCRk5relhSWnhY?= =?utf-8?B?QmJMcGhFVGlIRm5rb2J3RnBhdmNPNk5aRUR0enRnckZuVUNzNEpFVStUK3Qy?= =?utf-8?B?QkZkNlpvV0tZRUlBei9DUnVkN1JUTVpUM1RjN25RMGFvVG1ZSklnREhqdklL?= =?utf-8?B?aFZ3K1JrY0xvazY3Z01iOTBzU2x4NG5Obzg5MDFYcU9DYjh4RW45YUYzMVZF?= =?utf-8?B?bE8zK1c3YWJVZDlJdXh2TEZDWVpFVmY4M3dLc2pkc3ZZVzV6bHljQjU1ZFVN?= =?utf-8?B?VC9WUlRGSVF2b0gwL00wcm8veDZJSmlMb0RQemhLN3NZUi9FeWRndUJVb095?= =?utf-8?B?bW1lZmpwUVEyWlRROTMvellGUUpzbWhiWGNDTkFjc3hrWWVSVDhaOVdSQTF3?= =?utf-8?B?WDFDT1VxMTAxTStOM2prTUJwZlZoZ2RwaWtxMXJ0MlBIbTRiTnJWemQ1YXBv?= =?utf-8?B?MUFPbE80ck5RZDNPWitWYXdVaVUvUVhwOU9OajY5aFR1dFFsUzI3NllVbEhH?= =?utf-8?B?RWc4RTJzdUl3TkoxVmVkMGp0aHhSYk43OWdRN1NXTEQvZGpzS3g5NVRQdjVx?= =?utf-8?B?cWM5SStqRXV1WkJhUW5mNzZOUkU4OWFaWFJDTFF4L1FyRGhlTXp5b1NlaFd0?= =?utf-8?B?dXd2anlKOHQwRGhTR0VuaS9UcHJEK1NNTUZIVnR2UUV5S0R2c3F5anQ0SUZn?= =?utf-8?B?SWpRZW9UUEZzeTAxRWsvOGV3bzAvTmxkOUdQYk1iREV0UmhqMHhZT0xWcStn?= =?utf-8?B?SnEyNXJ5U2VXQWl1UVJnVnlVUlFYbWJSOVU3dDRXd3FzN0RSL2QwTDdOLzVw?= =?utf-8?B?Z1ZBQXFtSFpUMVo2YkhvVS9RRm9yMmFLU1VTM2huRjJXOFpISjNIRDN0Q0Fv?= =?utf-8?B?SVgxWHZEcU91T0FlRmpZMkZPZ2xMOG5mWE1hVFZrYVU3TXZIYWhUTG9TZEdW?= =?utf-8?B?SDdudG5pcXF1SUkxZVdib0hjK3FwOW43VU5mbzllMG81SzNtSHJaY1hjelhN?= =?utf-8?B?akhSdzZQQkdxaFA0R1NWMjMrTnMwbWcxTGg0bDR2bHlGSTdPSnVrTktOQjNI?= =?utf-8?B?WnBWekNwbHB5M0pEMUdJMk9nTElYK3ZTaGZSdGg2ZFNzSm0vRTVqa0JqU3Vx?= =?utf-8?B?elVkUEhqWjh0VW1veFYrYmNXTzhDR093UFJaTDA5MkpNWjNnMFlzQURJNE5U?= =?utf-8?B?WU0rcnp0TVFSVzNEbEZIYzZFdmRkbFdLVzJ1anByU2dWcS9lMExTWUsrRmFW?= =?utf-8?B?dmI1Q0FocVZLZkRLSVlwN2xZcUYrR0FmRWNoeE9PcFpMeHJYYzA0Y2xhaXAw?= =?utf-8?B?R3B2eVpLbUhmZ1htY2llUGRKSzZsT3hBckZSNE9pdHpyRlkrZ3djVHNOaDVm?= =?utf-8?B?dDVueUxhdkJwdjh3QTY5dmZPZVp5cG8zWmdEWmxqbG5lcm93cDlRaGRjcEg3?= =?utf-8?B?WDh2VGNJV1BUV3hlWGdxdEhpN3BYNUdYNW9odnJNVWpjQ3gwRHRjQlo0QVpu?= =?utf-8?B?aksvdVVZRTVlbU53MjF3ZlozU2Z5cVJVWE8zd2VmOGhVRmhrNERQZ1hvQ1Zn?= =?utf-8?B?blJtS2t3cndJN0FtMUUxeG9sYnpEOVRHUjhrSDZQUFBYTHNhWFlWSkhvRDFi?= =?utf-8?Q?j2+h6Jrlb5ZzNEKw=3D?= Content-Type: text/plain; charset="UTF-8" Content-ID: <7B88C1924CBD5D49AE5EA950FB301E50@EURPRD10.PROD.OUTLOOK.COM> MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: ee8bd191-27f9-448f-ab09-08df2f6a0168 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Oct 2026 11:54:04.6332 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: uDBrIftFyw9W7VXJSKOd3rCz7l1xuTL5IHzTz0kicLdirWkXP7loi8wE5CkgOKKyip61DKem8MXL+T7GX+x9eLNqdfVgbrrgmdI0O44ZgBs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA2PR10MB8852 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=AWSgcN5v; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: wWTLqnEqDNf1 On Wed, 2026-10-21 at 13:25 +0200, 'Clara Kowalsky' via isar-users wrote: > rootfs_add_files uses host sudo to create directories and files. > In unshare mode, package installation runs as root in a user namespace, > where host-root ownership may not map to namespace root. Dpkg can then > fail to replace a rootfs file with: ... and in rootless mode we don't require to have sudo installed at all. > > Unable to create `.dpkg-new`: Permission denied. > > Use RUN_PRIVILEGED_CMD for rootfs operations and disable ownership > preservation when copying files in unshare mode. The question is how to control ownership at all for these files. The whole rootfs_add_files logic seems to be broken. I even vote for just removing it. There can't be many users, given that nobody noticed that it breaks under rootless. > > Fixes: 4fedb1ae6f90 ("add support for fully rootless builds") > Signed-off-by: Clara Kowalsky > --- > meta/classes-recipe/rootfs-add-files.bbclass | 15 +++++++++++---- > 1 file changed, 11 insertions(+), 4 deletions(-) > > diff --git a/meta/classes-recipe/rootfs-add-files.bbclass b/meta/classes-recipe/rootfs-add-files.bbclass > index d33752f3..b21e282b 100644 > --- a/meta/classes-recipe/rootfs-add-files.bbclass > +++ b/meta/classes-recipe/rootfs-add-files.bbclass > @@ -16,6 +16,13 @@ ROOTFS_ADDITIONAL_FILES ??= "" > > > python rootfs_add_files() { > + import shlex > + > + cmd = shlex.split(d.getVar('RUN_PRIVILEGED_CMD')) bb.process.run executes the command in a shell if not passed as list. With that, we don't need to split it. Felix > + copy_args = ['-a'] > + if d.getVar('ISAR_CHROOT_MODE') == 'unshare': > + copy_args.append('--no-preserve=ownership') > + > postprocess_additional_files = d.getVar('ROOTFS_ADDITIONAL_FILES').split() > rootfsdir = d.getVar("ROOTFSDIR") > > @@ -24,18 +31,18 @@ python rootfs_add_files() { > destination = d.getVarFlag(additional_file_entry, "destination") or "" > source = d.getVarFlag(additional_file_entry, "source") or "" > if os.path.exists(f"{rootfsdir}/{destination}"): > - bb.process.run(["/usr/bin/rm", "-f", f"{rootfsdir}/{destination}"]) > + bb.process.run(cmd + ["/usr/bin/rm", "-f", f"{rootfsdir}/{destination}"]) > > dest_dir = os.path.dirname(destination) > - bb.process.run(["sudo", "-E", "/usr/bin/mkdir", "-p", f"{rootfsdir}/{dest_dir}" ]) > + bb.process.run(cmd + ["/usr/bin/mkdir", "-p", f"{rootfsdir}/{dest_dir}"]) > # empty source creates only an empty destination file > if not source: > - bb.process.run(["sudo", "-E", "/usr/bin/touch", f"{rootfsdir}/{destination}" ]) > + bb.process.run(cmd + ["/usr/bin/touch", f"{rootfsdir}/{destination}"]) > return > > if not os.path.exists(f"{source}"): > bb.error(f"{source} does not exists and cannot be copied to the rootfs!") > # no recursive copy only single files > - bb.process.run(["sudo", "-E", "/usr/bin/cp", "-a", f"{source}", f"{rootfsdir}/{destination}" ]) > + bb.process.run(cmd + ["/usr/bin/cp"] + copy_args + [source, f"{rootfsdir}/{destination}"]) > } > ROOTFS_INSTALL_COMMAND += "rootfs_add_files" > -- > 2.55.0 > > -- > You received this message because you are subscribed to the Google Groups "isar-users" group. > To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. > To view this discussion visit https://groups.google.com/d/msgid/isar-users/20261021112532.3824701-2-clara.kowalsky%40siemens.com. -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/ce290c1686077ded51943110890522ac13dfa9db.camel%40siemens.com.