From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 21 Oct 2026 15:16:35 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-pg1-f187.google.com (mail-pg1-f187.google.com [209.85.215.187]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 69LDGXHh014566 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 21 Oct 2026 15:16:34 +0200 Received: by mail-pg1-f187.google.com with SMTP id 41be03b00d2f7-cc1cdfb337esf409249a12.0 for ; Wed, 21 Oct 2026 06:16:34 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1792588588; cv=pass; d=google.com; s=arc-20260327; b=hyF1eKd47bd8Nlky3nYl6iIYvj5enhhD8i4Y9ZeEDXg/MXyS80zI3iElMM7OEXTOsy omw/WUqPxkUPmqN14zQDdNXzpAJYUh/M6FA7vjskLSTf7AjbxNZbwuke2Egmo2XW24Yq us4BfJRWvqt+ufD3qSt6jt/y4Cv9HYShcwo9APiMxvq/sDqG86jml0c85fXmT2+SzhDz mSfVJvr54rFwfGSiFn/WkA+045ynVGXht0Oyp5zqoU8mZxRMXaZgg4zxDgJcnvjDM79c fpvYO53MVIP9bYw/3gqrdrNWyZ9cwz3zdtdjpnAQGBk6MKTEa8BldyWac0rH5wamjgHV F6Uw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=ykJowPijT5u6SSWbXUjM2s6F71IHPGAjxq2Tk/yFGWo=; fh=UHDZM6eIeQM5jQsj8SB5tA+eR/2ghUwrGpMLmWmS7UE=; b=cqsnXVYXk9ECdfK6SRF3yeKkKfPJh7Q3CWzZdVjHiZ+Tnj60NPxOH1azwYmFg6z22c oetO/nwvFQbjcKqi7PMVMkmFfp3/Get3d1+lvwX3zVBr4pvcrfDP6iXthwizV4h+nGoc yMJgeMRywOlW+3YBgyh4G30mWV+ksO1b/baciYIBgE5SGUwzWy2P6vHWeT5aMKgPxLND XQrQ6PLF8htbjQDssuY6tXAeJy5LqrTw3pTNhysZrJTCGs4gOFvsuNR4EbZ9doNddp48 8QuLsbUSsA5nYxtRHO6bGN5QS0Fvl5Qk1lwBZO9V79VjW/euTj+lE+//FKC78jxC2aJU QCWQ==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=IJ7lVw43; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1792588588; x=1793193388; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:content-type:user-agent:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=ykJowPijT5u6SSWbXUjM2s6F71IHPGAjxq2Tk/yFGWo=; b=nYLQ2uBRtv1D+xVQ6FuFsz+WXJLqVW7fFrPEc5ONDD6TuANrcj28cAhnpK4vBKw6Qe OaKoAPMIkCsnYs9z2aE7LS3GuFVDvUV6UxRg0jk+mdoRr02N31zW78yW+PrO5qx3gqbw soq3W3FDiIJHEHKq+qcdFjJDW+EXAzjaFXwO+DgX8TaNmZHJJFpIn8C2CYkalB6wyFgm KSXPdxbDSRKEqMVz7d799ARJ+3j7+I2u84+VFrhAyqWa/QKpTs/g9hjmXCCeCl9baG2T qXIQ/4EjsmNwtYj8qJolgFSOLVrtBUBNUUcwqrgjEEZ65dW8XhzUcB44AqGqaZHz2ept 62CA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792588588; x=1793193388; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:content-type:user-agent:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:cc:to:from:x-beenthere:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=ykJowPijT5u6SSWbXUjM2s6F71IHPGAjxq2Tk/yFGWo=; b=HL8XJtgb8eC3T+JFYWOZmHEHFnfo+5OqCtAd3qlskfBn2N4ulg3wbvxED8v9rMSBsA uOsMhm4PY8xSKXvryK//ZbvJiMGmnnZVssyUrS0dcgn/X5wGju2ZUE59UD1I/6rHba+G MUrDabqcwRpiHvtb69+oDAHHpPlj835/knZZrTQijCCt1XrhUz8Zyu90KF8vbIaAJpmt VDUPhtnXh80EP9eOqDhgDsPDwQRSUXY5Wggc0mvMdTEolPBG4qn6xUmkbGdItFi6RUGH SFgsraESld++ZMA8iOLTlZiXNDmdqWWSx5WR9DIu84KdPgFd4Yw4c3JdF6LIbgmGZbUD R66Q== X-Forwarded-Encrypted: i=3; AKwUvBxdOOsaq+lxQlRs7dO4CIlkq9CQ+9oKlZHgsJFy8mr85gw7NoVEi3EzNwIXJPQ0DrRAkgfA@ilbers.de X-Gm-Message-State: AFq9FYIqbXKQ1kyrbsRm1tK7KaJ7j5h3ODnl7UA+1b8qHqPc4QfNih2r TP3BMtqHfItdXZYfdA8dlg7KZC+d/naoKkdhkAqvAWTMhuTR9xUU4xC8 X-Received: by 2002:a17:90a:e7c4:b0:3ac:6e91:3f22 with SMTP id 98e67ed59e1d1-3ad86d7a806mr1585624a91.52.1792588587715; Wed, 21 Oct 2026 06:16:27 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcGdMNJp8HqL9bnjQ4UrP9xWpsleT7nFxjOKzJrbxoNCw==" Received: by 2002:a17:90b:3b85:b0:3ab:413:49b7 with SMTP id 98e67ed59e1d1-3ad85eeab8els1277373a91.1.-pod-prod-01-us; Wed, 21 Oct 2026 06:16:26 -0700 (PDT) X-Forwarded-Encrypted: i=3; AKwUvBzs5M50aDGw67jffjpk27UQeHA9McCXQvHUAcba3P+cZOJekXijCzP5aw11+O9jaPrQ7dawmC6fZrRv@googlegroups.com X-Received: by 2002:a05:6a21:3289:b0:3e2:1418:aae8 with SMTP id adf61e73a8af0-3e287eb571fmr1636471637.72.1792588586336; Wed, 21 Oct 2026 06:16:26 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1792588586; cv=pass; d=google.com; s=arc-20260327; b=dPppo0MiNBos0qrSwVWsrHF2X9mB5UdV82gvUQU+FKBepD9MXcogUGPZC3By70+P0/ GOBb6iNqdeuRRwjJifqDphKQwDwfRtzxktl8ggEsQq0pGKbq6fUWQu5Uvpi6ccJPljZr AYACJlep+OZ4dsaFAP2RfZko6po+GjBKuRWYDRbjzGv1UhOIMPirBcNoUT+jk3Iis3Qw 3bnNDCya5d4Rw4X7uhf9hRoSTRwCoKKHq2IOsqD3MVRwoj6PTGlsvTF6tMqb8RU0gv68 pvHgEfBRRhOcLzAOOQ/JWVoXzcqbTVbTjePAzpfyzXqAexF+GXphFLgHqeoCxhaL230u 3x7w== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=cR0m05hzbG+CarEztV7dZlQxK1UfLQWg6f63oYGL2Wg=; fh=E5TzRlP7ZEzA5WSKduyGwmxZP4v8PdH6kCI7L8g7jyk=; b=FW2tr7Za/C2bGFBs5dngq6wQgAXVTUtGNlDXWZRViv1u0T94BGY1BdRmHcBGvvA1oO WQuv4n4Qtfz5j/ny71EHYSluhyEu88hp4VBCdFQl7tLru99vCzzV2cXhLc44jMRPl5Jv T8xJLu33DY0IDWah+UnPUC3CNR1HhrpYc/uoCMFlEle3+Hwjjq/sIovmknCZha4VHE+D swkaTvlYY4G+C6UOiaYXXw/JLx46oM30QS3yBRaygvfFJKDPoRVeHRku03wAnpaswdFH 9+8dTnFVFCS2gDIDMA8r+rGFbQRkYb5wQdOklzEOPT+VVFyAHvcPSNIYcd087gvJxcGi SPJQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=IJ7lVw43; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com. [2a01:111:f403:c200::5]) by gmr-mx.google.com with ESMTPS id 41be03b00d2f7-cd6a86e166csi48898a12.13.2026.10.21.06.16.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 06:16:26 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) client-ip=2a01:111:f403:c200::5; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=XdcXJPCLn5ZQQfsboXq+WlWt3UyLSnQHSht7UFON34yYCnLDlMkca6SN3uiF5lcCyPWiISG6VuRrcc8BN8vTBdi2ybBC7GKGvI4QSA0K573PVJNEEfV6e5TIMSKWGN0QWUizrP4K7gNrYgV0VEc/3wpBIclABVFGsraENSis857LxAlxk9x1XF1WYI48x64lbM00HGyAof/6sajStrIOsrPrtxDhZ/CKTIvE84L8bEVolYSrscOy1+7/QHKvUb5tenIplXSOCJMEmUyFcvK83dvRtGGczZCa50bQQUqquBM8pS3MEUUFuxMAcdiMwU8S3XpTqE80mn/4Mbu3X4hf0Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=cR0m05hzbG+CarEztV7dZlQxK1UfLQWg6f63oYGL2Wg=; b=QXTMiSbTCsF5yYIDhLATRAV7+XRXn23vlKL0JQFR1MLVJQkEYr/dRBL5SuayG+4EeFbHSj+iq4aeC4D+FJqiVQckETtgf+O7rHnBO71a1ggo1N1/26Qzu2GjHU/becF45gT7KuD9oBHaPMPz8n3lS/5bXkFtUM5GkJTBZ2gjCfyfu5jH0AtOKK9v/zPzJQCepTc139kSNMtep/4ly29NOHP4V822AfKUzSKok1WoKk1RKlPgfxaqR/3RkkwZ1poD3xmavNGLXEHPpMXySl5+/ECvkWMxBXN01o6AwRglpUSKTpn/C7b5la8F7NYvljeBM6ZGZb9UMfSKAM0dTTvm6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DB4PR10MB7013.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:3f7::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Wed, 21 Oct 2026 13:16:20 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%3]) with mapi id 15.21.0522.017; Wed, 21 Oct 2026 13:16:20 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "Kowalsky, Clara" , "isar-users@googlegroups.com" CC: "Gylstorff, Quirin" Subject: Re: [PATCH 2/2] rootfs-add-files: use privileged execution helper for rootless builds Thread-Topic: [PATCH 2/2] rootfs-add-files: use privileged execution helper for rootless builds Thread-Index: AQHdYU7ukydzNXVmI0Koe+NKyKJhw7cH4x8AgAAHowCAAA9ZAA== Date: Wed, 21 Oct 2026 13:16:20 +0000 Message-ID: References: <20261021112532.3824701-1-clara.kowalsky@siemens.com> <20261021112532.3824701-2-clara.kowalsky@siemens.com> <20379368-dffd-4b96-8f6f-68e94259267d@siemens.com> In-Reply-To: <20379368-dffd-4b96-8f6f-68e94259267d@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10+b1 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|DB4PR10MB7013:EE_ x-ms-office365-filtering-correlation-id: 4f7840a6-8187-43ba-017b-08df2f757f74 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|366016|4022899009|1800799024|376014|23010399003|6133799003|55112099003|10067099003|18002099003|22082099003|4143699003|11063799006|261009223027099003|56012099006|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(4022899009)(1800799024)(376014)(23010399003)(6133799003)(55112099003)(10067099003)(18002099003)(22082099003)(4143699003)(11063799006)(261009223027099003)(56012099006)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?aU9GaGlaWkI1YzRwYWF4bVBSbXdIYnpraTkvTG1pZitoaWpzZytZcXdqcDdi?= =?utf-8?B?ZmNjVnBtMlgzN0ViWE13dUlLTUl2ZmY5eDJWSHFkaE1wSkRQNUVDTlJoTzc4?= =?utf-8?B?VndoL1BBa0RvWnBqNTRQZ0dPeTU1bDI1WENFNStlakVUQndaa2xFRWlxYVRO?= =?utf-8?B?bktLOWVaTFhTKzNIRU9Sb3BsMy9Ra25TYXBBeTRyaXgxZGpNS3RBOG13cVZq?= =?utf-8?B?eXJQRDhpVUZZOGZCMXFneWdza1BDWlpIV3Z2MEZGQ2h5SUdaZ1VoUWZsemNm?= =?utf-8?B?WklGUFg5ODVQSUVjbllrM2hnYnVDay9uT25iRG5zQjRuaEFYVjRhYm5hd0ZY?= =?utf-8?B?VzZ1TzkveVorSy9WYUZ3bTBaTDM3UThuSGgzbXA4QVdXYmg2SDhIMC9vQ1lz?= =?utf-8?B?RENhMWxiOStsc0hWQ25rbnVVV2o4WEdjMlNIN1BMTW5LMkRreDVGWkxxMXZt?= =?utf-8?B?bFFoK1Q1M0VOanczUlVJZGR5WHhnWnFwbllla0RsZFlTSGJNSm9RUmxpYjZo?= =?utf-8?B?MTExWllpRlFrMVhwTHZORHFqaDNabXpwL0JLVlp0WXk0ei9iNmoyR0t5N0F2?= =?utf-8?B?Q05WL1dNa2RsSGFYZlhXcnplMmUrU3Fya3NDZzlHeTJPMXE2eGxDN09kRm1F?= =?utf-8?B?QVdtVXkrbTZrK3pQWEU2MURSejFkTysxbUFQOVBZQWM2cnVVV2dpWjhOd2RO?= =?utf-8?B?SXFJdGtvRXZCWDNjSG02bHV1RS9OWVA3Nmsyalc1Y3ZIQVdmNFllWmlMU293?= =?utf-8?B?eFh5Zk5GSFlVcjhHMmovMDRXdkh4S241cEJMcUFJSk5RWWpqQWh6ZVovUWlX?= =?utf-8?B?Nks3OHZaQndoWENCQWZYcEJJNExCSzRYc1VOaUgwVm1aRGVSZVNHUHZORmtJ?= =?utf-8?B?OU84MXdzczc5dFIyQjR6ZUdMcFF5MFZ4WldWb0ZrZGdtSWNmOUF3dW82bVZS?= =?utf-8?B?aDVBbVIwU29JaXIweGFxeWttaG9Bd1huYzBSSFNEOE9zaEd4US9qem5CbTRP?= =?utf-8?B?YlZLWUQyY01XTk1rNG9kU0M0MVNpd0ZuQ25nWFJLdUZoSk9SUkNweWtOdlNj?= =?utf-8?B?U29TcWthTURCTDlTQTljL3U5eExicExkaEVYaFlRT1lDZ3FnanBFdzErbWRv?= =?utf-8?B?N082U0hVUmJxVXprTG5ESWo4YzdtQ3FRbVFJR3BhSTBXL0wrVzRtc21JZEVs?= =?utf-8?B?ZlBQMktlVzlSRmJMRUpLWGlibE1xRm54QWlZbDQzcXF1QVA5NGtCVWxvcXNE?= =?utf-8?B?RzJoamVDNHR0ckZXaGU0Sy9UUE1qNjJhajZlSHhxaWRkUmtPdWNvZ2ZCSys2?= =?utf-8?B?VFBzV042S1Fac1loMXlHSmhXSmkxSHI4czRDMWlHcVl4ZDFzL00rUUFHeUxK?= =?utf-8?B?emozU29YZnFCZ3c2NmZZZ2lZZXFzT3hhREN3MUhQMnFvMmlnTEtaNjIyZjRY?= =?utf-8?B?MkdSb1dUazhEQUlwUWVQV1RTSXBJTWFIM0QvVENwbDYvRm44djdYWC9Pa1Rq?= =?utf-8?B?clhxaXpza05LdUVQbnRBeVBCVmUzLzQxSnMxdTNpZmVSMVFGWWwyek9LeVE3?= =?utf-8?B?SjZISjQyR21HTmFXQ2FXTmt6RWEvSVdyWU1vaFJ4RVJjL2tpYkYzT3A5dnVp?= =?utf-8?B?Q1JjZ2YwSkpOeUhZb1hoRnVXZGF1SmpxeG1IczlGQklJYmJsZ3RwWjJVSC9E?= =?utf-8?B?SUp2OGVYRFpldUg4SkZ5TkZ0cTdqcEN4ajFTNnVaOU0yZ1A0bWdDUkNxV2lP?= =?utf-8?B?dXlITTRMRDFvcGdrSkJ4TmkxdVdGZVhYdXMyV1JjOGtUMXF3bkpTM1V2aE1C?= =?utf-8?B?OXJkM2hVdldJNCsyMkRzYXlnS09DUVNzb2tEVnlZYzFjU3V6UWh6TGlBdUV3?= =?utf-8?B?eDk1QVJSQ0FMYU92NjN2eFUwTTZGWHlVeHIvenN6R1RLakcyK2Z3c0l2ZWM2?= =?utf-8?B?SHk0ZWhPYWpvN29hVlEvSDhRTUVPNFNpa0tKVVR3UFI0cGtYZUVTUlBEd3lG?= =?utf-8?B?a2ZsOXBmZ0padzgraW1wVm5Ma3ZkTFJ0T3JlUElBWFBVU09aR1cvNW9VVEVy?= =?utf-8?B?aU9SemlOMVIvWGduYW9hM2ovNDlRS0VlMFRBQ3NwQ0VKU3hGM1VRUWxUQjNi?= =?utf-8?B?bFJaUnk3aFNBNlNLZFFtVFNsNHlMYzNWK2I0cnNIZWtMbWtwMjdRN1gzZzFX?= =?utf-8?B?MzVjcG40UDYxZ3lsZHpGWEhUZGVUVDJtM0JtSnNZWFVqVjZRQTFUa2dsY2Vw?= =?utf-8?B?ZXdFcHc0T3o5WGh5MUdheU1HYVRoNS81T2NzUDlFVzR2Y3JkK1h5UXR2Q2lt?= =?utf-8?B?Mkt2K29OcjJhcThqUnJYM09Oc2w2V3IxbEJlaiswYnlBZVc0S1JRTmZMU0t5?= =?utf-8?Q?skfuK2zN1SCZ/cgg=3D?= Content-Type: text/plain; charset="UTF-8" Content-ID: <0C573DFD9F48754DA4BEC7B3C2F3DB95@EURPRD10.PROD.OUTLOOK.COM> MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 4f7840a6-8187-43ba-017b-08df2f757f74 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Oct 2026 13:16:20.5688 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: E9yARFdy/+gqkJWZUmZK0Y3aEMR/qi18vS5uiGSBr6XiLbuAEguEF5teIx1OfeRVGarY47PGkphOSJEN55riwqdeQuhkECjg7O+l9WVqBvY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR10MB7013 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=IJ7lVw43; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: jho8X1EWZU/u On Wed, 2026-10-21 at 14:21 +0200, Clara Kowalsky wrote: > On 10/21/26 13:54, Moessbauer, Felix (FT RPD CPC OES-DE) wrote: > > On Wed, 2026-10-21 at 13:25 +0200, 'Clara Kowalsky' via isar-users > > wrote: > > > rootfs_add_files uses host sudo to create directories and files. > > > In unshare mode, package installation runs as root in a user namespace, > > > where host-root ownership may not map to namespace root. Dpkg can then > > > fail to replace a rootfs file with: > > > > ... and in rootless mode we don't require to have sudo installed at > > all. > > > > > > > > Unable to create `.dpkg-new`: Permission denied. > > > > > > Use RUN_PRIVILEGED_CMD for rootfs operations and disable ownership > > > preservation when copying files in unshare mode. > > > > The question is how to control ownership at all for these files. > > The whole rootfs_add_files logic seems to be broken. > > > > I even vote for just removing it. There can't be many users, given that > > nobody noticed that it breaks under rootless. > > > rootfs-add-files is used by installer-add-rootfs and therefore by > isar-image-installer. So it is quite essential. Either we fix this or > find a good replacement. I see... I'm just wondering why the installer tests did not catch this? They run perfectly fine with -p rootless=1. We probably really want to block sudo usage in kas-container when running in non-privileged mode. I'll try to inject a false sudo in the citest on -p rootless=1, but this will only be able to catch sudo usage without full path. Felix > > BR, > Clara > > > > > > > Fixes: 4fedb1ae6f90 ("add support for fully rootless builds") > > > Signed-off-by: Clara Kowalsky > > > --- > > > meta/classes-recipe/rootfs-add-files.bbclass | 15 +++++++++++---- > > > 1 file changed, 11 insertions(+), 4 deletions(-) > > > > > > diff --git a/meta/classes-recipe/rootfs-add-files.bbclass b/meta/classes-recipe/rootfs-add-files.bbclass > > > index d33752f3..b21e282b 100644 > > > --- a/meta/classes-recipe/rootfs-add-files.bbclass > > > +++ b/meta/classes-recipe/rootfs-add-files.bbclass > > > @@ -16,6 +16,13 @@ ROOTFS_ADDITIONAL_FILES ??= "" > > > > > > > > > python rootfs_add_files() { > > > + import shlex > > > + > > > + cmd = shlex.split(d.getVar('RUN_PRIVILEGED_CMD')) > > > > bb.process.run executes the command in a shell if not passed as list. > > With that, we don't need to split it. > > > > Felix > > > > > + copy_args = ['-a'] > > > + if d.getVar('ISAR_CHROOT_MODE') == 'unshare': > > > + copy_args.append('--no-preserve=ownership') > > > + > > > postprocess_additional_files = d.getVar('ROOTFS_ADDITIONAL_FILES').split() > > > rootfsdir = d.getVar("ROOTFSDIR") > > > > > > @@ -24,18 +31,18 @@ python rootfs_add_files() { > > > destination = d.getVarFlag(additional_file_entry, "destination") or "" > > > source = d.getVarFlag(additional_file_entry, "source") or "" > > > if os.path.exists(f"{rootfsdir}/{destination}"): > > > - bb.process.run(["/usr/bin/rm", "-f", f"{rootfsdir}/{destination}"]) > > > + bb.process.run(cmd + ["/usr/bin/rm", "-f", f"{rootfsdir}/{destination}"]) > > > > > > dest_dir = os.path.dirname(destination) > > > - bb.process.run(["sudo", "-E", "/usr/bin/mkdir", "-p", f"{rootfsdir}/{dest_dir}" ]) > > > + bb.process.run(cmd + ["/usr/bin/mkdir", "-p", f"{rootfsdir}/{dest_dir}"]) > > > # empty source creates only an empty destination file > > > if not source: > > > - bb.process.run(["sudo", "-E", "/usr/bin/touch", f"{rootfsdir}/{destination}" ]) > > > + bb.process.run(cmd + ["/usr/bin/touch", f"{rootfsdir}/{destination}"]) > > > return > > > > > > if not os.path.exists(f"{source}"): > > > bb.error(f"{source} does not exists and cannot be copied to the rootfs!") > > > # no recursive copy only single files > > > - bb.process.run(["sudo", "-E", "/usr/bin/cp", "-a", f"{source}", f"{rootfsdir}/{destination}" ]) > > > + bb.process.run(cmd + ["/usr/bin/cp"] + copy_args + [source, f"{rootfsdir}/{destination}"]) > > > } > > > ROOTFS_INSTALL_COMMAND += "rootfs_add_files" > > > -- > > > 2.55.0 > > > > > > -- > > > You received this message because you are subscribed to the Google Groups "isar-users" group. > > > To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. > > > To view this discussion visit https://groups.google.com/d/msgid/isar-users/20261021112532.3824701-2-clara.kowalsky%40siemens.com. > > -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/df7589e6a8e6d26811893bc00807ce26070370ef.camel%40siemens.com.