From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 19 Jun 2026 12:13:37 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f55.google.com (mail-oo1-f55.google.com [209.85.161.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 65JADY0F001744 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 19 Jun 2026 12:13:35 +0200 Received: by mail-oo1-f55.google.com with SMTP id 006d021491bc7-69e87ffce0fsf2789746eaf.1 for ; Fri, 19 Jun 2026 03:13:35 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1781864009; cv=pass; d=google.com; s=arc-20240605; b=ANX/WL4wbSNCB9SbF4EtO/KuFv2N4Rk7cV7U3fegQmdTwu3w6SuZK4+EEEH9IJsrpQ sQkWy69EEEXekD+K0XIrvgMbdvPfSbnQdn5aYNG4qhFWDIF3HccnG4QQOn1DkWpKkM0Y +MtnATgKCBlzJDLMk1jskUEkI9TSTH9ym6O1PoUsmf9KfELCZ+tr67Z2rU6afivdMELw p9tDKriuHgcycy6//WCUYPXTcjBTyY69pJc821MzT2noinnEej7lF1b/mm5TVIujVEi0 RaOBuKwoj3tImrknJJ0ji0Ny5v/WqYjCKkjCWGjZGi/W+wvFX6Yw1mZFTf/jADdy6OYY bCJA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=47Ssdm29LZKQ2/SjBC0Fifuy+9VUfFZwftyrFuQQECc=; fh=Mw/kYNcAG3IO+hOGmFx/f+G99wkgDkLBrdGR6ObDQzk=; b=jvMTKjrVWDuvd9q/ubrwQ0bsZXWlofgu2eCcSisFWaQrB8wzK6aUSqE4tREX1tQEwc Ju+jz/FAbq6U+iKj6mtA+Flfsv2C2iS8wCnhy8+rf/yRclbUiV95BVGFV0iVOSnT6riG RhLlS5N7p1nZDHiNs6qfg8thCTtbYqU8ZbW1ssw0FNhuxr+ck0y9nLS8TM/UoocfSoTr J02DVFzU90PNR1mpLo3gj/iBEBUHSINzzURAdRuEIWIy2O6MULBlMFlD8OfEgZRRPe/f VsXK9QEcOmMQCQ50xGl2tmOd6VnvJGo1u/q+vhSwu9i5Bj2yyoMEHga7hdsFGhdCASUZ 7ROw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=nLgRjVhw; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1781864009; x=1782468809; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=47Ssdm29LZKQ2/SjBC0Fifuy+9VUfFZwftyrFuQQECc=; b=H/tzZLTLiPzwIfDG2lNZhbbjunLAuB9EiD48gj8s+Xh3ytaJ0BMTGZpj5s0bbBhjaQ FlpQeFY3/LicKIftnFkwH1iuOYyKpU/hZFC9Az/a+VVJKGnPJl2cBVPuuZomTbJcrkmD urr6hS449GncfjjNOOsz7bqd4xvzwJUOZM+2WG6tzGp7romGF/bl4NDErmfDQJhNvzev Jm4NDlwIaIsHSpgFD9X54J3AHSh4l/tcplOKq76d6Kp+cGuYpZJ0M5ZzKdCTcoSjFf1J Qwp9UFH1CCznEP5vEHU+z2t74G/cF1iJK6BNUPnNIdw2o+GgTQyDErNZ38wnH9g1W72Z qapg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781864009; x=1782468809; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=47Ssdm29LZKQ2/SjBC0Fifuy+9VUfFZwftyrFuQQECc=; b=i+72JxWdrz0EW6k8YD4FATcohnBO1mL/5De2OcU5mpSLMaUsqEEMSzWEPSpK1HESkA VtByagBMLhgaG9ZqzErjzvtkDDu/loMAsG5ctydF8kMIv3UZl7cMisSgbdVlQb/41/p5 HQ8mDFdjeCWQt6vfo/FLFeFVDowbIFIAcvdu9BLQgosGCKnld2iRn+5KNLAQnnjSy3hS 1NVg4axgycUamBe5QQiMfmM8oPex4ashDjuD8VmrfvphWeQ8HzqNUIfaWKfYXCqXKRRT yioDdr4b0KX45GaHGwYFvOOxOLdyej+11cBVZIPj6M77zUZ6K8XGOgC4d0l0Pjvc1I19 8yzA== X-Forwarded-Encrypted: i=3; AFNElJ9rKvc9rEqFpsZO/Rhudgb54F049B3KYv3zWWyrGly7iR8jxfeJRcOkNDwDDD9MGbMo5SzP@ilbers.de X-Gm-Message-State: AOJu0Yzr4B5rt+BeIIKK0A3utwCU3eIQpY8dO979Bgqzfh6ZsVxTlNw5 i5MDYoZMuVBd9LE1x+b9xnG9SoNNl8hpjD9z1yVKPYqTQQFTvPc+b1QO X-Received: by 2002:a05:6820:200e:b0:6a0:c6fa:5a05 with SMTP id 006d021491bc7-6a0d8da1113mr2270063eaf.13.1781864008658; Fri, 19 Jun 2026 03:13:28 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AX0PUUdHv0I3VnTgU/P314TGx7jTlw8kQtI7grAHY8IlnGfm1g==" Received: by 2002:a05:6870:8e15:b0:43d:b8f:a6db with SMTP id 586e51a60fabf-446dfb2777als1211641fac.1.-pod-prod-08-us; Fri, 19 Jun 2026 03:13:27 -0700 (PDT) X-Forwarded-Encrypted: i=3; AFNElJ+1cU4q9H+gOsPoPB4Kf5vi4iyievXccILiGC+iW7Lgu4QyhKaC/ZKGfYdBz1333DPyzBhEYjeRrflL@googlegroups.com X-Received: by 2002:a05:6808:c1a8:b0:489:f047:78f0 with SMTP id 5614622812f47-489f0477c12mr782004b6e.39.1781864007579; Fri, 19 Jun 2026 03:13:27 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1781864007; cv=pass; d=google.com; s=arc-20240605; b=eEt6WKvohRIwCDep3pnwTGuwhIzJ/qXFv5AeO2cKj1e2tkBP4Kqxcztk9KPLVXSKa/ IID+GFLAhWaWEr6ZgY7hgHssB/66lO/jVoYDQVSIj/YKUWdDb7D6tE/HtMTNbyFsMO2M zacZUCZvYbCvl95g643f1UEKumacWBkWRSGFWpMvB6J13QLg772lZAGolYLvQLRrxZRT 6mNQhCs/wty1y2ekZYHK+DGhWvfSAyw9r2O4iEcptjmh3OXHkoSmrc0kYbaulEcA77+m eBIsXNEDQjyZGVlWPOuuiX1D5vMBMB03Guw3kKfpEI0RDKohAZ7Tv7DGYAig/JN3e+CU VuFw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=irdZK4ISA7p1UHyN+iujUY0PysMzv4PS7vchEuBLQnQ=; fh=1OYwjxuzjLQA5I7ae2/k5FD/lA9HbhyyKAFqyV5DoNw=; b=FRO7l4HUKhtKspQ/cqqS9MPNncXunpMQAnJ1ihSMHXFk/HV2n1YR5mbhBQHNjtH7en UkPJLVhKYijruYRnmy8G6ZPAr45q0ksAwHmUNlTRpiBJSBP7kFxQ127LE6SLUh12yIqH MzhKqWFU596yp09jXY+pHx9tQ3pPgbLstkH20PA1l6vOC2TepjyKqJcc0VmP3hqFk2wT DLvUef3eLF1vpqMuFlz469rpqD58gdtRLmOE3zPiKd89yuULhxbMttb2Cv79fYJMSCjH SGv/ThcGJTHHzMjuo92OTAQIdVRJiKmGUCd0HcTV7IxokI5UL1iWlC2gmM4WiFxlKW/o 9g6Q==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=nLgRjVhw; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com. [2a01:111:f403:c201::6]) by gmr-mx.google.com with ESMTPS id 5614622812f47-489962256e1si57102b6e.7.2026.06.19.03.13.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 19 Jun 2026 03:13:27 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) client-ip=2a01:111:f403:c201::6; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=c3qR68mXMkgBP+CNfG59WAJw3UVJSTOyRUegKMb2NKdxjgXudSOq2X2cFfyz0w+fkz57WPyXVbS7E/BToDOmjVXQFNTzHVeyV0947MBuqTxCgoRnTQcVzTI474/Utb53jiSpshXjbtD08Q/fRcibXpDjadSstvrlBFaWHYPcK08SeBOQTQgTMDiY0k5DRIIjuP2V9Kjz0T/YZnO5PRcAFBEW5nmdKnj8BdNCZjmqsJRffWrs8K1iUMoZTWfZ71XuVMOqrcy4NjoMSOno0fCgSn2iPV1n2admrYit7TmQAW/Ux4LuA5uZrvFC+uKyMA21oPXEXVAQ7zUHH9o0bHaLow== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=irdZK4ISA7p1UHyN+iujUY0PysMzv4PS7vchEuBLQnQ=; b=Yue7d80N3RcPrgA7uenSZVVMANuTT46ml20PXtcvcWy9i4qHEvmA50VxAfU2ebjOK6arD47VOhF+8uI3fFwAi07Bp0eQjLALKEm+Z+CgzmK6mTRA+vvr0PhjjZgNkxpNCDlsDb+NbI4y9fTGui68COY4kQHKK+U4GS8+ZnhV5pbui12LUJpdYCgPhj447w4OxJ4iYpVF80hdBAo7SwGQu3pM6oQZLjoRX/qaH/V80o/Ltdz17ZDuL0gG0cgUcsYCjcWXU+J/Nxi+pYr/ndGLwMsMxwTSHDzJO8dsWrvASmNIX9gahxyFIkl3tAd5OYPhnS7HnlkczbUX2F3zGABMPg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by AM7PR10MB3576.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:13d::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.139.13; Fri, 19 Jun 2026 10:13:22 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0113.015; Fri, 19 Jun 2026 10:13:22 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: Zhihang Wei , "isar-users@googlegroups.com" CC: "Kiszka, Jan" , "Gylstorff, Quirin" Subject: Re: [PATCH v6 00/17] add support to build isar unprivileged Thread-Topic: [PATCH v6 00/17] add support to build isar unprivileged Thread-Index: AQHc/KjcYp/dR5V9p06B7WavCHAEArZFmrIAgAAUgAA= Date: Fri, 19 Jun 2026 10:13:22 +0000 Message-ID: References: <20260615092458.259691-1-felix.moessbauer@siemens.com> <4365217a-491e-4b9c-9a8f-f9c92ce6bcda@ilbers.de> In-Reply-To: <4365217a-491e-4b9c-9a8f-f9c92ce6bcda@ilbers.de> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|AM7PR10MB3576:EE_ x-ms-office365-filtering-correlation-id: a2c849c9-f520-4707-8ecc-08decdeb64d3 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|4022899009|366016|23010399003|38070700021|18002099003|22082099003|55112099003|6133799003|4143699003|11063799006|56012099006; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(4022899009)(366016)(23010399003)(38070700021)(18002099003)(22082099003)(55112099003)(6133799003)(4143699003)(11063799006)(56012099006);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?SVQ1b1ZRUXY1aStZdEJ2ZWZNbnBhSXZZQzhyS1kyd3I0anczOWIyR04yWGpr?= =?utf-8?B?eTVtbTRlTmhLaThYRG9IOW1pS2F5cWt4cXhPRTVGL211Rm5YYnU3eFRMRjND?= =?utf-8?B?OGNpczBVMWpkTGJ0Qm1QOG9admhmdGRaWmxvcGZXOGNodDhWdkdVK2lVMFZm?= =?utf-8?B?cnJWOVlVbC9EWXlWVmQ3MEpuVEdSNmlqQ3RMQXFWalFaMXNIalMrWFVpSFZV?= =?utf-8?B?cVlEY1dxRElWKzhWMDZZbWc3STNlNHlsS24ycmdZL1dKT3Y4ei91QnErcjA1?= =?utf-8?B?eGdIUGdNS215eDhSOFZTWHBidXhtcUdWZUZNTkFLYzI5Q3NmdURBak95aHlV?= =?utf-8?B?SSt1a0c2ZEE3d3p5aWUyK3JXZmNpSTdmYXpwV0ZkQkxpUkFudWt0ejhJUG9w?= =?utf-8?B?U3B6OEFsNkJ3K2ZjZnVOS3RXQUk0RHgvaEZjaEJwZjJkcWJZeWVEalNCR2pB?= =?utf-8?B?TkhmS2ZuVlBXUUhBQXJpbHdXVlpDZXhscmJpN3BFSVZvN1EvS25NdjVPL0x5?= =?utf-8?B?VklKMFErRGFxNjEvRXVzcTIvMGo2cnVRNUd0cXNYWVM2TWZPWVRkVkx6bHJ2?= =?utf-8?B?YnB0WW5ieS81YXFOL0ozejExR01uSFRtNkpYb3lVL0plbDIraDQ2am9yT0R0?= =?utf-8?B?Y0pXUnl5MGVLbCtsV3JQWVFOV1lMT2RvVy9DRnZPYVFFVmtmNzhNRElyT09R?= =?utf-8?B?NHRxb3JHbVdTcCtRV2Zrb25VbmZZUlhEV0twZ2ZmNVRwN3hDSWJhMUdEN29h?= =?utf-8?B?YWdRSW1DZHdmazRJdkJaNThhd21HRmw3dGE3dVV2dUdHOENxajlveFlmNVdP?= =?utf-8?B?QXgzalhCNFJTTlBEV1c1anpOZExpQUgzcGo2UHF3ZThMYWxpNFRsMzU1MjBO?= =?utf-8?B?UE42RnhlY0t4eVhPbXNhQlNvMVphSFI4Q09SOTNxaE8wejhmQTlmR0dzc21T?= =?utf-8?B?VzExWmdFMEZPSm8zMHRuZEExL21GU2NmUFhkaVZ1OWUzU1YwUmFDNEpUbDhI?= =?utf-8?B?czdSd2llOXZoaXZwRUJ5a0tzQVdWa1ZyVE54UDdsSjFaLzhCc2tKNmx0K2ts?= =?utf-8?B?N3lSZjZRSEJjQUl6cStEYlQ4cGYxNGdEekxCdDRUUnFRQ2pzVFk0aE13SXEw?= =?utf-8?B?dW9Yakd1QlBiK0Q5UVViWFhMK2tydXR3ZWdqK25IT2RQWmlJUktKTlVzU1dU?= =?utf-8?B?Y3dVL1V0TE1mdSs5S3hDcStLemJPL2Q0cGFPSGJ2clg1dmRNWEpkODF0Nk1k?= =?utf-8?B?R1lTSCtqbG9UOXUyQUhpOGxrY2NLd1dOdkVtTkk1ZndYbTZ2Y2JSQjBYN1di?= =?utf-8?B?V1dzRmZhU3pYcHpFSVBOcFl6UytvWXRzOVBQbG1WTEloR3pTbmxQRXBiQjVa?= =?utf-8?B?QkxpYTk1bk1ucGh1QzlwZkF6Ri8xdTdMR3JFOUJuSm5mS2IrWldidDUvZytF?= =?utf-8?B?bTRIc28yUDZPaFk2dks1L08wamdCcFV4WXJINnU3TXc3YzM3bTUvNys0dndl?= =?utf-8?B?amMxL2RkOXZUVkF1eFdvVWZZQ2pnUVBHcXJuVUFlTUpyS3J2Ym9YZDNERS90?= =?utf-8?B?dkhrK1c5ZHYvc3RkMDJUaHRwZTNzYkhxQm5kdDJibUJCM2lxZ0gwSzZSWFV5?= =?utf-8?B?eFZabUFkTDg5eTNZbzUwQmo1MjI0NFdESDV6VlJRb2Vwdmk1MzZrMUgzN1FV?= =?utf-8?B?dDkwWFhkMmxHTEp6MUVRUlNHbXAxQUZQVG9BME1yRXV3U1h2SGdrRkJCeU9x?= =?utf-8?B?MWR2SmxCUEhSQlpXS1d2KzFhdHJ0WHdVNlJRUE1BcmYyZEZKVEY0Znhodmpi?= =?utf-8?B?enBWbjI4bHp0T1lpOTRlUXpyM0NaODBhc21uTmh2QWt1YnNraElMSSt5RTcy?= =?utf-8?B?TTRxcW94SVhqSkFzZjhQRzZOZWhQT2tjVEVkMlZhVmVDcEpFc0M1aGpqWlpu?= =?utf-8?B?OExBWXdnMG1qYWdGZEhxaHA1aURrZHF0ZS8zc0pWdFNjbUNGdzFkcExjazQ3?= =?utf-8?B?VlBrZ0w5eVUrd21Mc3l3VVFYUGRqVzRqdWJJSlFWRUJibGNHUW8vRDZydUJI?= =?utf-8?B?UFR1SFZ0WWJHVjNVZEcremxQMEpLS2pkaUZVU1FrYlE5UGRIS1BKRUxqYVVp?= =?utf-8?B?MGNGdy96ZVJRbVBRZU1GQXlUNStNWm9hVnBVRldYdm9zYy8xV2t5dVlDZGNO?= =?utf-8?B?SEdRWjhwL2s3eGZtMjB2MTlwbjBkeG9qdnMyUWdTYXFBQlZObWUzWUVMVEp5?= =?utf-8?B?NEw1N3RBclcwRlRyd0RBbnZUcFY4R3lRU2MvYmduUko1SDFtYXBkOHdKejRj?= =?utf-8?B?QloxSk9Yb2pHYk9TUGhiYUl3dk11SlorMkVDdi93eG9rZ2MzRW5Ldz09?= Content-Type: text/plain; charset="UTF-8" Content-ID: <52ACB822EA0FA540A80F518547454689@EURPRD10.PROD.OUTLOOK.COM> MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: a2c849c9-f520-4707-8ecc-08decdeb64d3 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Jun 2026 10:13:22.5651 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: TDgLzTGwNnb1jyE+ksGhv1arXTdOasA2TC2VHfwjsVMrE7JR+3zPNIFCRuIhdd2cUx1PGUpbgstXKkyLdcfwahOl454jJQPywSix5wqLMr8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR10MB3576 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=nLgRjVhw; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: +StcHcNBcsHP On Fri, 2026-06-19 at 11:00 +0200, Zhihang Wei wrote: > On 6/15/26 11:24, 'Felix Moessbauer' via isar-users wrote: > > Dear isar-users, > > > > currently isar requires password-less sudo and an environment > > where mounting file systems is possible. This has proven problematic > > for security reasons, both when running in a privileged container or > > locally. > > > > To solve this, we implement fully rootless builds that rely on the > > unshare syscall which allows us to avoid sudo and instead operate in > > temporary kernel namespaces as a user that is just privileged within > > that namespace. This comes with some challenges regarding the handling > > of mounts (they are cleared when leaving the namespace), as well as > > cross namespace deployments (the outer user might not be able to access > > the inner data). For that, we rework the handling of mounts and artifact > > passing to make it compatible with both chroot modes (schroot and > > unshare). > > > > Note, that this series can be tested on a custom kas-container build > > provided in [1]. Hints how to migrate downstream layers are provided > > in the API changelog. > > > > Changes since PATCH v5: > > > > - rebased onto next > > - adjust to changes from "Rootfs install race fix for isar-apt packages": > > Manually add isar-apt mount in rootfs_install_pkgs_isar_download on > > rootless > > - adjust to changes in "image-postproc: gate systemd preset-all on masked > > unit state": Trivial change to use run_in_chroot instead of sudo chroot. > > > > Hi, > > I found an issue when testing in rootless mode. > > The test was run using a test-container with a customized kas container > built on 25307f7. > > The following test case fails: > testsuite/citest.py:NoCrossTest.test_nocross > when building 'mc:qemumipsel-bookworm:isar-image-ci' in nocross mode. > > Logs follow: > [stdlog] 2026-06-19 09:30:44,290 avocado.app cibuilder L0347 ERROR| > ERROR: mc:qemumipsel-bookworm:isar-mmdebstrap-target-1.0-r0 > do_bootstrap: > ExecutionError('/isar/build/tmp/work/debian-bookworm-mipsel/isar-mmdebstrap-target/1.0-r0/temp/run.do_bootstrap.2096', > 25, None, None) > [stdlog] 2026-06-19 09:30:44,290 avocado.app cibuilder L0347 ERROR| > ERROR: Logfile of failure stored in: > /isar/build/tmp/work/debian-bookworm-mipsel/isar-mmdebstrap-target/1.0-r0/temp/log.do_bootstrap.2096 > > DEBUG: Executing python function sstate_task_prefunc > DEBUG: Python function sstate_task_prefunc finished > DEBUG: Executing shell function do_bootstrap > removed > '/isar/build/tmp/work/debian-bookworm-mipsel/isar-mmdebstrap-target/1.0-r0/sources.list.d/bootstrap.list' > '/isar/build/tmp/work/debian-bookworm-mipsel/isar-mmdebstrap-target/1.0-r0/apt-sources' > -> > '/isar/build/tmp/work/debian-bookworm-mipsel/isar-mmdebstrap-target/1.0-r0/sources.list.d/bootstrap.list' > W: binfmt_misc not found in /proc/mounts -- not mounted? > W: cannot find update-binfmts > E: mipsel can neither be executed natively nor via qemu user emulation > with binfmt_misc I just tested this, but cannot reproduce. My build correctly passes in rootless mode. To me, it looks like your container is started in rootless mode, but the avocado executes the build in privileged mode (missing the ISAR_ROOTLESS = 1 flag, which is set by setting -p rootless=1). > > When testing them directly in rootful mode, we have an EXT4 filesystem > error also when running no_cross, but not known yet which target. Also > not sure whether it's related. Let me check and get back to you. Let me know once you identified the target. Felix > > Zhihang > > -- > You received this message because you are subscribed to the Google Groups "isar-users" group. > To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. > To view this discussion visit https://groups.google.com/d/msgid/isar-users/4365217a-491e-4b9c-9a8f-f9c92ce6bcda%40ilbers.de. -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/e297b0a534f817ef13dfb8c12c81c0edafb9b916.camel%40siemens.com.