From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 04 Sep 2026 10:32:41 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wr1-f61.google.com (mail-wr1-f61.google.com [209.85.221.61]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 6848WeIh005558 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 4 Sep 2026 10:32:40 +0200 Received: by mail-wr1-f61.google.com with SMTP id ffacd0b85a97d-482f41ca436sf693325f8f.1 for ; Fri, 04 Sep 2026 01:32:40 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1788510755; cv=pass; d=google.com; s=arc-20260327; b=sR+wS9l4adxEVeFEOSlOWdgEYtrTQvVpE52rzQtXgGN0rN9wBYF/OmClqJluxEIUFz 6ef+sGYkqQ3R6lxmyJN7ws7OqYqwr8J1AxRPCt2DsRzYmsCW8K26bgilS3oSeQlmaFjI lZl/yXp9WiIvam2YP8zxkZ9MkVj6TnG3DxXuTnKGu2rUdxEkSiueJeLpJBADnxNONtDH 8ShsR0mJTpvusKs5eLZjOxs0UeKmzLecHRHsV4BjJiP86HBkc9BxQpfK/frLyUdS+Ugs 6dQG03DfY38kuA9nQN/UJP06cIgNfSmy+Cp6cxP5rTmRmkVJ0xgAP31JOgy7eIe948yX IKgw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:dkim-signature; bh=5H7ZNMeYkdtKBGei+NUGcmJeCZV9Z+SRM+RoPl7Ejqs=; fh=1j8zG0defqFpTTT45Ciun19N+yLsmCNkS5zz7NzWVyw=; b=TSz0kwZkS/gpIx1M9mBgAsnBvIRaq14A1Y35cmBIPHjf3II9Goxpm6YS5rxYgMcafK iuhXpbv2eBFOFoqAFT5fSg/HolY0MZbZ2fzCqCkmvFQ85IMzz2Eg4A2Iz+wl3+k4bfdR nVOjIvvvlEaVlYBjoXtZoVy/yZExuywg3h4UXUV21L/Rv0B6lj1gsDNx4EE4G+JCPf53 5MXnoqnIRvwMp2q3g4Tm0tgqeD9LHDbHIf6S0Kxk5/MeX4zcneg0U1a2Zvpwt0qsDpob pNnFcTvw9vnEoT203OkTc88km2wTK+mWekcxACtdnKBtHwdNDeFUFO83Rsxbxpp47BCk Bcyw==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1788510755; x=1789115555; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-type:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:from:to:cc:subject:date:message-id:reply-to:content-type; bh=5H7ZNMeYkdtKBGei+NUGcmJeCZV9Z+SRM+RoPl7Ejqs=; b=cbc0/5cVh+ZmZvdExDmfaNoVReTP9idOWbJvAtHgGYWy5XV6PMlbzcx7gnyaWKc5XB VPcCwKuk/lX27f7OjHeXvKJuSYGn4hgnoQAnqo7NtCrUCPYS5zFuQhIylRfkkO6zcLOu lXy/Gg7sRJ7UUhTN1b1lMhhuOA9Wm4Nxnm9FwZ5Ocr4/mb/o0qJ2+cEieDn+ZyyYSFLq T3D+GaewdQic9tjrikQgcpwuY2Z/0rEPrCPQgCgi8s/vSn3fIVq/VwEQk06HI6itNJ+Z 0F/8or4/nSvGiKXbVEiIag9bL0TqPNmkkll5DfTA6wADI+zEQAxsZwDF0P1E/w9tixt3 VskA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788510755; x=1789115555; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:content-type :in-reply-to:from:content-language:references:cc:to:subject :user-agent:mime-version:date:message-id:x-beenthere :x-gm-message-state:sender:from:to:cc:subject:date:message-id :reply-to:content-type; bh=5H7ZNMeYkdtKBGei+NUGcmJeCZV9Z+SRM+RoPl7Ejqs=; b=U25KOn1raoEjORxc4Zbkjwm6CeWBRU+h6yXWMlDiLQRrZqQb+qXghGCa7D99FkWTV5 3KTwq2HQz/7MZv3N0sre7eng0Mca6zX1sXFWmLyAfiePlfwiv/l2OOYaC3GDZt9hB0k9 vmp09szzvNjU2zmDnS/gSSiiY3fZ1Blqq2krCEDleOCmegDuxFmRPbBd1t7Gxw3BpWZG 6CQPTg3MV6AuXeywZwNhWjoZKUOWhWLtZ83dvEInBh/AbPa62A9+SP2ErfDwlFoX+7Jy UTYsOAS3rOi+jOYAZzRsaEKyFVFq8ZMerbWR7ysq92hb9J0S167i08NA70MYXBDh0ZJD TJ7g== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AKwUvByHme13WMJB9G0gQxfXGPDRaekevTXlhk0ZGrquzgPFK4ls/NsEciIHQMK0o1UwjkvZ0F5Z@ilbers.de X-Gm-Message-State: AFuF++lIW0GYu2htnYrNqKaLbY7fDQRXcd324gucdyfMy42EzvDtkeTw DFmJnXkxaC1su+2B46tegivwS8x8Km844njG0o4HAG5RTiWbmbRPFVO7 X-Received: by 2002:a05:6000:46cc:b0:481:512b:f0e7 with SMTP id ffacd0b85a97d-485872b687bmr3603236f8f.17.1788510755249; Fri, 04 Sep 2026 01:32:35 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdci+NRQV6kGpaMlSoVc461yr355Ba3QzbfBYkocM0/b2Q==" Received: by 2002:a05:6000:4817:b0:482:dd19:9b01 with SMTP id ffacd0b85a97d-485864dec35ls825906f8f.1.-pod-prod-05-eu; Fri, 04 Sep 2026 01:32:33 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBzDi4323rO3ZMamQjZYO0zPlfKFJioCUgzDjF9wCB61CkqpsxDCfa4dL1MYHdZ110co/cYOvcpoX4XT@googlegroups.com X-Received: by 2002:a05:6000:24c5:b0:485:8a46:705d with SMTP id ffacd0b85a97d-4858a4671d9mr2712491f8f.47.1788510752687; Fri, 04 Sep 2026 01:32:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1788510752; cv=none; d=google.com; s=arc-20260327; b=nQU6GEZj93Fq15NhnQDbrZ89hw3vHqThbYh2Y766BbAuSYGCQtSOozkovOlDyekkAX yIHtQoQhET2REl4+UpjBzhiBCH9dOBebl6s2flepZAxq9m/i+4gyj+CaD5pOMlqkpWRn XEyJU48rTVBfqV5vJ1uxpGOwPqcXBtEbPLpQ6oX+gXLeuhX/epcf7IfXfNyj1eO7h32p VlSqD9RL2/haxVvurexHapBkDoJEdHhvg4kwE9nf6N6j4feGkWnw7xV8Hq9umMM0fXpC 4Su3YI9ZT0jIOkrihsBj7Jtl518UBcF5cEpKJa0CCPXSr5ShKtL5q63KgzX0f+4ExKvN JTiQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id; bh=8jZX1mnA7JWIuYgsOvWBAs8WRCv0mG4cEjs40axFnS8=; fh=cZ7rz+TTAFpmDbOWGnv2clkDNvxqHmHe3Dy8XoVwYZE=; b=hh7W83aNPvY2PUFtAx9DLd2pjdGe1dDD7ulZNrLL2iZ76bpR6OQQBdo0RM1ReG99Jt wfDz4AwwpswMyvKpd/5wCpwJym7lA8swggwInKy/Zn8hheZJzO+wncTEPTm7WVdtvFe/ 67kMMUux9F2OkWIiM6qsV4WITx+HRa8O2RpdbWD6ZQ92PP5BD7Qf10J7hmEl6vsAqNVJ 69iqr4yao0IFrcBti+qOwNQw3GinnRI+J7xDa4OSqnqpOojCE0ogH73KGDXpxhmXLpEl aEtAH1Di8tnwBSmMsFUJWUNLE+TY03kcr/afbAkmK4cc3B/OdtqjQBHSbx04dr/4dosh dPgw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id ffacd0b85a97d-48588362136si36975f8f.1.2026.09.04.01.32.32 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Fri, 04 Sep 2026 01:32:32 -0700 (PDT) Received-SPF: pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [192.168.178.139] ([88.130.203.42]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 6848WTOM005551 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 4 Sep 2026 10:32:29 +0200 Message-ID: Date: Fri, 4 Sep 2026 10:32:29 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 1/1] rootfs: restore compatibility with bwrap 0.12.0 To: Felix Moessbauer , isar-users@googlegroups.com Cc: ulrich.teichert@ebs-group.io, florian.bezdeka@siemens.com, cedric.hombourger@siemens.com References: <20260831084200.751483-1-felix.moessbauer@siemens.com> Content-Language: en-US From: Zhihang Wei In-Reply-To: <20260831084200.751483-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: wzh@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of wzh@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=wzh@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: NhzOXdfty1P8 Applied to next, thanks. Zhihang On 8/31/26 10:42, 'Felix Moessbauer' via isar-users wrote: > Bubblewrap 0.12.0 is a security release that contains hardenings > regarding the handling of symlinks. This breaks the rootfs_cmd helper, > which over-mounts /bin, /lib and /lib64, which are symlinks to /usr/bin > (and alike). > > From debian bookworm on, /bin (and alike) are just symlinks to the > corresponding dirs below /usr. In this case, we only need to mount /usr. > On earlier versions, we need to mount the /bin (and alike) dirs as well. > > Signed-off-by: Felix Moessbauer > --- > meta/classes-recipe/rootfs.bbclass | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-) > > diff --git a/meta/classes-recipe/rootfs.bbclass b/meta/classes-recipe/rootfs.bbclass > index 8d394b05..0bef2d45 100644 > --- a/meta/classes-recipe/rootfs.bbclass > +++ b/meta/classes-recipe/rootfs.bbclass > @@ -142,8 +142,9 @@ rootfs_cmd() { > fi > shift # remove "--", command and its arguments follows > > + # bin, lib and lib64 are only real directories on unmerged-usr rootfs > for ro_d in bin etc lib lib64 sys usr var; do > - [ -d ${bwrap_rootfs}/${ro_d} ] || continue > + [ -d ${bwrap_rootfs}/${ro_d} ] && [ ! -L ${bwrap_rootfs}/${ro_d} ] || continue > bwrap_args="${bwrap_args} --ro-bind ${bwrap_rootfs}/${ro_d} /${ro_d}" > done > -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/d813f511-e7d8-4cb7-b3b1-d004915ef570%40ilbers.de.