From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 19 Sep 2025 08:34:43 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-qv1-f60.google.com (mail-qv1-f60.google.com [209.85.219.60]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 58J6Ygh8002685 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 19 Sep 2025 08:34:42 +0200 Received: by mail-qv1-f60.google.com with SMTP id 6a1803df08f44-792f273fd58sf28112066d6.0 for ; Thu, 18 Sep 2025 23:34:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1758263676; x=1758868476; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:x-original-sender :mime-version:subject:references:in-reply-to:message-id:to:from:date :from:to:cc:subject:date:message-id:reply-to; bh=hYTf7hoNcPalGQslAluoGGitgZ7sPOcMb7BK9cv31Fk=; b=KCACJAOxmgYwI4881WNg2T6DLNw9CBiual2oPn5PC2nvHzWnRy/M9V2HLtalY4V+t+ GfSLizNbp2DpuL3Yukx3HahiO7XywxqKd8pVFoY+sBVtw81opEnHFY7VOi6Y0ELri4Hx IQDzBH73eSuncLKgxaNMNk0v4bUHb8oXriUeKCqzB9bPQoCic3H9HDgfTGPwdon2pyZr dpnckY/SE9g6f6YHY7Pr2OKvev9aNgvUiM3gDwZDDcZ7g7LUbohPd/QcviYvdQdjseAz tgQfKvCQDmm5jdFliAyuRIvDdCW7HyyuWTlxjuegO1kgRttcN70k5vvaqlvCDJ6d3/dL oy0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758263676; x=1758868476; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-sender:mime-version:subject:references:in-reply-to :message-id:to:from:date:x-beenthere:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=hYTf7hoNcPalGQslAluoGGitgZ7sPOcMb7BK9cv31Fk=; b=sTWQILtVBwet5AdKgD+D9Rf4oKTfWgZRCUzBcGP+rJR/YTdCTewqMveq7JfpUlUPN+ 7o3aSTUvvtfmquyvI1R9huy4e6+V6ONowcWpiq+qtBeEd8AwWDmVt9TJL2WkndWqelE2 fDxf2t68GIT3lv28CmOev8ZA+Li0aTfdL58Fh6PpGtWhmHJM7M1YfAAH9Aj/P7qReMhT nX5KBJWwywhSdDMdjljQHzCrAJQMaglPnpYX2u3y4PFk9KwDKRsZEbBRrGEv+yyDiDrW Q82nMRY+D5//N6xGzVEwYiWjsjybsPQqxLyvbSEnjnN5UaOLe1KJLP7afMIwk7c0F1vw I6PQ== X-Forwarded-Encrypted: i=1; AJvYcCUAX0Um8nH/BziyO/f/D0IRZcOB8jwLc9a0WLxO8/1lUGm8PnVgpcdCEJaIf1NHXJ40+z/x@ilbers.de X-Gm-Message-State: AOJu0Ywi3PIJiN0QZRWgi2nM04L9syCgEv/b4ggjypEJc9GCxonKReA9 4OI9beOBcsk0pRtPr2SSkWYVOQ86Az01u+juk7n34tAjRtIVC52uCI6T X-Google-Smtp-Source: AGHT+IG+TlTGnhqAo3mj4PNf05h9n02X3ATg6641uiVnYPAsxNOZBUpfEEUQ5g8+ZI0L0F5pAeSg6w== X-Received: by 2002:ad4:5b83:0:b0:78b:ae30:c9a4 with SMTP id 6a1803df08f44-799197eeb3emr20611986d6.33.1758263676291; Thu, 18 Sep 2025 23:34:36 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=ARHlJd5C6TSXNQN1bvdUYZikDkkR7rgmJGytMoFCcIh3D57a/w== Received: by 2002:a05:6214:501d:b0:6fb:4b71:4195 with SMTP id 6a1803df08f44-7934d2c0f53ls25776876d6.2.-pod-prod-06-us; Thu, 18 Sep 2025 23:34:35 -0700 (PDT) X-Received: by 2002:a05:620a:535e:b0:810:8706:9821 with SMTP id af79cd13be357-83baa7ff6b4mr239371085a.41.1758263675311; Thu, 18 Sep 2025 23:34:35 -0700 (PDT) Date: Thu, 18 Sep 2025 23:34:34 -0700 (PDT) From: "'Badrikesh Prusty' via isar-users" To: isar-users Message-Id: In-Reply-To: <20250919061720.1510008-1-badrikesh.prusty@siemens.com> References: <20250919061720.1510008-1-badrikesh.prusty@siemens.com> Subject: Re: [PATCH v2] meta: add "Rules-Requires-Root: no" to various recipes MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_262340_988594835.1758263674287" X-Original-Sender: badrikesh.prusty@siemens.com X-Original-From: Badrikesh Prusty Reply-To: Badrikesh Prusty Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: eCpEiDz+FXvY ------=_Part_262340_988594835.1758263674287 Content-Type: multipart/alternative; boundary="----=_Part_262341_765135866.1758263674287" ------=_Part_262341_765135866.1758263674287 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable This is the v2 of older=20 patch: https://groups.google.com/g/isar-users/c/AtFkLUZ8XUQ Thanks, Badrikesh On Friday, September 19, 2025 at 11:47:49=E2=80=AFAM UTC+5:30 Badrikesh Pru= sty=20 wrote: > From: badrikesh prusty > > Setting "Rules-Requires-Root: no" in the debian/control file avoids > unnecessarily calling fakeroot in the build environment. > > Debian recommends not using fakeroot to build a package if it is not > required i.e., if a package's build doesn't require any privileged > operations such as changing ownership to root, installing/modifying > files as root. > > This also fixes hangs observed during fakeroot calls in > dpkg-buildpackage. References: > https://github.com/ilbers/isar/issues/113 > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D1114644 > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D1072521 > > Signed-off-by: Badrikesh Prusty > --- > RECIPE-API-CHANGELOG.md | 7 +++++++ > .../recipes-bsp/optee-examples/files/debian/control.tmpl | 1 + > meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl | 1 + > meta/recipes-bsp/optee-os/files/debian/control.tmpl | 1 + > .../trusted-firmware-a/files/debian/control.tmpl | 1 + > meta/recipes-bsp/u-boot/files/debian/control.tmpl | 1 + > meta/recipes-kernel/linux-module/files/debian/control.tmpl | 1 + > meta/recipes-kernel/linux/files/debian/control.tmpl | 1 + > 8 files changed, 14 insertions(+) > > diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md > index 92e7811c..07e17aff 100644 > --- a/RECIPE-API-CHANGELOG.md > +++ b/RECIPE-API-CHANGELOG.md > @@ -741,3 +741,10 @@ By setting `MS_TPM_20_REF_DIR` in an optee-ftpm=20 > recipe, it is now possible to > use the new optee_ftpm code base from the OP-TEE project. That variable= =20 > has to > point to a subdir in `WORKDIR` which contains the unpacked ms-tpm-20-ref= =20 > source > code. > + > +### Avoid unnecessary use of fakeroot > + > +Set `Rules-Requires-Root: no` in `debian/control` files to prevent=20 > unnecessary > +invocation of fakeroot during package builds. This follows Debian=20 > guidelines > +recommending not to use fakeroot when no privileged operations (e.g.,=20 > `chown`, > +root file modifications) are required.=20 > diff --git=20 > a/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl=20 > b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl > index 85c9735f..9b930157 100644 > --- a/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl > +++ b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl > @@ -4,6 +4,7 @@ Priority: optional > Standards-Version: 3.9.6 > Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}),=20 > ${DEBIAN_BUILD_DEPENDS} > Maintainer: ISAR project > +Rules-Requires-Root: no > > Package: ${PN}-acipher-ta > Architecture: ${DISTRO_ARCH} > diff --git a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl=20 > b/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl > index e6af7554..3e8e6920 100644 > --- a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl > +++ b/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl > @@ -4,6 +4,7 @@ Priority: optional > Standards-Version: 3.9.6 > Maintainer: Unknown maintainer > Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}),=20 > ${DEBIAN_BUILD_DEPENDS} > +Rules-Requires-Root: no > > Package: ${PN} > Architecture: any > diff --git a/meta/recipes-bsp/optee-os/files/debian/control.tmpl=20 > b/meta/recipes-bsp/optee-os/files/debian/control.tmpl > index 7bcd6edb..2a3076d3 100644 > --- a/meta/recipes-bsp/optee-os/files/debian/control.tmpl > +++ b/meta/recipes-bsp/optee-os/files/debian/control.tmpl > @@ -4,6 +4,7 @@ Priority: optional > Standards-Version: 3.9.6 > Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}),=20 > ${DEBIAN_BUILD_DEPENDS} > Maintainer: ISAR project > +Rules-Requires-Root: no > > Package: ${DEBIAN_PACKAGE_NAME} > Architecture: ${DISTRO_ARCH} > diff --git a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmp= l=20 > b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl > index cf4607e3..5de639d9 100644 > --- a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl > +++ b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl > @@ -4,6 +4,7 @@ Priority: optional > Standards-Version: 3.9.6 > Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}),=20 > ${DEBIAN_BUILD_DEPENDS} > Maintainer: ISAR project > +Rules-Requires-Root: no > > Package: trusted-firmware-a-${TF_A_NAME} > Architecture: ${DISTRO_ARCH} > diff --git a/meta/recipes-bsp/u-boot/files/debian/control.tmpl=20 > b/meta/recipes-bsp/u-boot/files/debian/control.tmpl > index 006982c2..58f59ce6 100644 > --- a/meta/recipes-bsp/u-boot/files/debian/control.tmpl > +++ b/meta/recipes-bsp/u-boot/files/debian/control.tmpl > @@ -4,6 +4,7 @@ Priority: optional > Standards-Version: 3.9.6 > Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}),=20 > ${DEBIAN_BUILD_DEPENDS} > Maintainer: ISAR project > +Rules-Requires-Root: no > > Package: u-boot-${MACHINE} > Architecture: ${DISTRO_ARCH} > diff --git a/meta/recipes-kernel/linux-module/files/debian/control.tmpl= =20 > b/meta/recipes-kernel/linux-module/files/debian/control.tmpl > index 45fcbc0e..95e6e84a 100644 > --- a/meta/recipes-kernel/linux-module/files/debian/control.tmpl > +++ b/meta/recipes-kernel/linux-module/files/debian/control.tmpl > @@ -4,6 +4,7 @@ Priority: optional > Standards-Version: 3.9.6 > Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}),=20 > ${DEBIAN_BUILD_DEPENDS} > Maintainer: ${MAINTAINER} > +Rules-Requires-Root: no > > Package: ${PN} > Architecture: any > diff --git a/meta/recipes-kernel/linux/files/debian/control.tmpl=20 > b/meta/recipes-kernel/linux/files/debian/control.tmpl > index a79b86c4..2097a56d 100644 > --- a/meta/recipes-kernel/linux/files/debian/control.tmpl > +++ b/meta/recipes-kernel/linux/files/debian/control.tmpl > @@ -4,6 +4,7 @@ Priority: optional > Maintainer: ${MAINTAINER} > Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), bc, kmod, cpio,= =20 > ${KBUILD_DEPENDS} > Homepage: http://www.kernel.org/ > +Rules-Requires-Root: no > > Package: linux-image-${KERNEL_NAME_PROVIDED} > Build-Profiles: > --=20 > 2.47.3 > > --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= d78593be-ca92-4b8a-a2f5-b3c6ad062b5cn%40googlegroups.com. ------=_Part_262341_765135866.1758263674287 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable This is the v2 of older patch:=C2=A0https://groups.google.com/g/isar-users/= c/AtFkLUZ8XUQ

Thanks,
Badrikesh

On Friday, September 19, 2025 at 11:47:49=E2=80=AFAM UTC+5:30 = Badrikesh Prusty wrote:
From: badrikesh prusty <badrikes...@siemens.com>

Setting "Rules-Requires-Root: no" in the debian/control file = avoids
unnecessarily calling fakeroot in the build environment.

Debian recommends not using fakeroot to build a package if it is not
required i.e., if a package's build doesn't require any privile= ged
operations such as changing ownership to root, installing/modifying
files as root.

This also fixes hangs observed during fakeroot calls in
dpkg-buildpackage. References:
https://gith= ub.com/ilbers/isar/issues/113
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug= =3D1114644
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug= =3D1072521

Signed-off-by: Badrikesh Prusty <badrikes...@siemens.com>
---
RECIPE-API-CHANGELOG.md | 7 +++++++
.../recipes-bsp/optee-examples/files/debian/control.tmpl | 1 +
meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl | 1 +
meta/recipes-bsp/optee-os/files/debian/control.tmpl | 1 +
.../trusted-firmware-a/files/debian/control.tmpl | 1 +
meta/recipes-bsp/u-boot/files/debian/control.tmpl | 1 +
meta/recipes-kernel/linux-module/files/debian/control.tmpl | 1 +
meta/recipes-kernel/linux/files/debian/control.tmpl | 1 +
8 files changed, 14 insertions(+)

diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md
index 92e7811c..07e17aff 100644
--- a/RECIPE-API-CHANGELOG.md
+++ b/RECIPE-API-CHANGELOG.md
@@ -741,3 +741,10 @@ By setting `MS_TPM_20_REF_DIR` in an optee-ftpm re= cipe, it is now possible to
use the new optee_ftpm code base from the OP-TEE project. That variabl= e has to
point to a subdir in `WORKDIR` which contains the unpacked ms-tpm-20-r= ef source
code.
+
+### Avoid unnecessary use of fakeroot
+
+Set `Rules-Requires-Root: no` in `debian/control` files to prevent unn= ecessary
+invocation of fakeroot during package builds. This follows Debian guid= elines
+recommending not to use fakeroot when no privileged operations (e.g., = `chown`,
+root file modifications) are required.=20
diff --git a/meta-isar/recipes-bsp/optee-examples/files/debian/control.= tmpl b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl
index 85c9735f..9b930157 100644
--- a/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl
+++ b/meta-isar/recipes-bsp/optee-examples/files/debian/control.tmpl
@@ -4,6 +4,7 @@ Priority: optional
Standards-Version: 3.9.6
Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), ${DEBIAN_BUILD= _DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
+Rules-Requires-Root: no
=20
Package: ${PN}-acipher-ta
Architecture: ${DISTRO_ARCH}
diff --git a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl b/me= ta/recipes-bsp/optee-ftpm/files/debian/control.tmpl
index e6af7554..3e8e6920 100644
--- a/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl
+++ b/meta/recipes-bsp/optee-ftpm/files/debian/control.tmpl
@@ -4,6 +4,7 @@ Priority: optional
Standards-Version: 3.9.6
Maintainer: Unknown maintainer <unk...@example.com>
Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), ${DEBIAN_BUILD= _DEPENDS}
+Rules-Requires-Root: no
=20
Package: ${PN}
Architecture: any
diff --git a/meta/recipes-bsp/optee-os/files/debian/control.tmpl b/meta= /recipes-bsp/optee-os/files/debian/control.tmpl
index 7bcd6edb..2a3076d3 100644
--- a/meta/recipes-bsp/optee-os/files/debian/control.tmpl
+++ b/meta/recipes-bsp/optee-os/files/debian/control.tmpl
@@ -4,6 +4,7 @@ Priority: optional
Standards-Version: 3.9.6
Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), ${DEBIAN_BUILD= _DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
+Rules-Requires-Root: no
=20
Package: ${DEBIAN_PACKAGE_NAME}
Architecture: ${DISTRO_ARCH}
diff --git a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.t= mpl b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl
index cf4607e3..5de639d9 100644
--- a/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl
+++ b/meta/recipes-bsp/trusted-firmware-a/files/debian/control.tmpl
@@ -4,6 +4,7 @@ Priority: optional
Standards-Version: 3.9.6
Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), ${DEBIAN_BUILD= _DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
+Rules-Requires-Root: no
=20
Package: trusted-firmware-a-${TF_A_NAME}
Architecture: ${DISTRO_ARCH}
diff --git a/meta/recipes-bsp/u-boot/files/debian/control.tmpl b/meta/r= ecipes-bsp/u-boot/files/debian/control.tmpl
index 006982c2..58f59ce6 100644
--- a/meta/recipes-bsp/u-boot/files/debian/control.tmpl
+++ b/meta/recipes-bsp/u-boot/files/debian/control.tmpl
@@ -4,6 +4,7 @@ Priority: optional
Standards-Version: 3.9.6
Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), ${DEBIAN_BUILD= _DEPENDS}
Maintainer: ISAR project <isar-...@googlegroups.com>
+Rules-Requires-Root: no
=20
Package: u-boot-${MACHINE}
Architecture: ${DISTRO_ARCH}
diff --git a/meta/recipes-kernel/linux-module/files/debian/control.tmpl= b/meta/recipes-kernel/linux-module/files/debian/control.tmpl
index 45fcbc0e..95e6e84a 100644
--- a/meta/recipes-kernel/linux-module/files/debian/control.tmpl
+++ b/meta/recipes-kernel/linux-module/files/debian/control.tmpl
@@ -4,6 +4,7 @@ Priority: optional
Standards-Version: 3.9.6
Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), ${DEBIAN_BUILD= _DEPENDS}
Maintainer: ${MAINTAINER}
+Rules-Requires-Root: no
=20
Package: ${PN}
Architecture: any
diff --git a/meta/recipes-kernel/linux/files/debian/control.tmpl b/meta= /recipes-kernel/linux/files/debian/control.tmpl
index a79b86c4..2097a56d 100644
--- a/meta/recipes-kernel/linux/files/debian/control.tmpl
+++ b/meta/recipes-kernel/linux/files/debian/control.tmpl
@@ -4,6 +4,7 @@ Priority: optional
Maintainer: ${MAINTAINER}
Build-Depends: debhelper-compat (=3D ${DEBIAN_COMPAT}), bc, kmod, cpio= , ${KBUILD_DEPENDS}
Homepage: http://www.kernel.org/
+Rules-Requires-Root: no
=20
Package: linux-image-${KERNEL_NAME_PROVIDED}
Build-Profiles: <kernel>
--=20
2.47.3

--
You received this message because you are subscribed to the Google Groups &= quot;isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-use= rs+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/isar-use= rs/d78593be-ca92-4b8a-a2f5-b3c6ad062b5cn%40googlegroups.com.
------=_Part_262341_765135866.1758263674287-- ------=_Part_262340_988594835.1758263674287--