From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 18 Mar 2026 07:02:26 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-qt1-f190.google.com (mail-qt1-f190.google.com [209.85.160.190]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 62I62PiM031041 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 18 Mar 2026 07:02:26 +0100 Received: by mail-qt1-f190.google.com with SMTP id d75a77b69052e-5093b19111fsf485718191cf.0 for ; Tue, 17 Mar 2026 23:02:25 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1773813739; cv=pass; d=google.com; s=arc-20240605; b=lp03OncfXM+eVbv0h7iCjHVUdn16ONjyOPCKLHVHJGgFQzfjt1yIPZbQI/4ZUioZev xtHW027wkRk84E53C8ULCX9jCMKRq/tP8+li8+3T6z42JuQ6nWSK/KJ0vq8GrSJoiYQp BrHZUdSz8veoqnifuyJarKBZ86LRuaodeU/krNk7olGSp4yOxfln/wXTpNm4AhrqcuOs zM8upHs7pzXDihIiux0pjB+OAzB4GTFhKtG/0FY5QZYHcTeWHvz6lB6uYjweqWDRXr5P DpzfpHLxu0Divp81brJX97fo2wR2H0yRRGE/x4WClGtmy07OSz8i5L2S3QbH9ItrHGfc uW1Q== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :autocrypt:content-language:from:references:cc:to:subject:user-agent :date:message-id:dkim-signature; bh=An5zKrTzQQcZy3JKsWEBqTIKZy0Vy090aMwru6Vustk=; fh=aPwgdAnqpvo/K7kFdAZsFntGC/unaZ5Vw5rtqx90oLc=; b=WtF3yY94rem76y1X4xiQRwHe2OY9sz2+qjTnQm1r/ErPwZVSaHyRRR+topbZgRtY99 lo2qub+IHw8EZG1Hh7EvmDL3hBQozkpQakpvCMCNuA8enavRiYSZleO4fCtBvhMrY8vm JjdWEBriIyHQpkECxMrWHdlPQ47Zpd/TwsLVIo+ni3ydNtLGUv9Pef8c6FAQp4lxhNlS F11/jJtSK2k28yesCWTALQ6xk+jH3x7Gvu3hxscf4faElJM8o6afCU2jTrUpUfdioAPe Zir+3xfBmNzh1a7HItXBnN52T5NVAQXFOBk61/FoncB+IZng2uAyUptioma14mP6s5Vx lWaw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=iK7j1c4d; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1773813739; x=1774418539; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:cc:to :subject:user-agent:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=An5zKrTzQQcZy3JKsWEBqTIKZy0Vy090aMwru6Vustk=; b=JjIxj3eSW6Q2rbQd27awD24GJhMWbZQCJwVTDTt4O3hd/S7QtfUtBN/cIUogC1f7dZ geRSwH5kYNuN/mPuWiGBGeaOBh77+yun9JMyw1dYBjDuK4oIkB382wVSr9nuiqKOvkg9 VBr5rl30ZA7AI9ySBepkIhO0+A441pM/eOn5rNzWANTUKw8DxeHIXjY1DhpQC/KcsfgU btyV7Y2guxPpwHLG72vmn8OmaZaW5sAjRv4AT/YxywV41Ziji89p59OGX727D/vc+SMl 1OydYLOEoH3ZudN2uqZf4zbKtyO/EwiCCs7pg81cmUUKv12s3+ONDX4E6h+uGijMXRSa Pz+g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1773813739; x=1774418539; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:cc:to :subject:user-agent:date:message-id:x-beenthere:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=An5zKrTzQQcZy3JKsWEBqTIKZy0Vy090aMwru6Vustk=; b=Ihk4T0ygRQCleSMD17zwg8EXZHIdKNeQDpt+Mnpnwl7jr90F/buFAP6p6ljH+LZB2+ 9DuLog3jUBSweqirs5JK78wE+9JVryXnohbQh2Z0diWfzb+fbXGd1ZtcPtv49Gpjsocd 8frDPFqEDUQg/cFLXuGD9yt/iFMEwADmXbG2kK+3/4SOuCHfpgzadbf/mGDjUad5BsnN HOiB7x5aRtAU0GJD4Z6Djs898yuM4owqh7dGx7u1wfaZpeOIaVGF3f0dE+7Ud5DYCZT7 MVFYDuMyCLEmu6gs0d5rcqnhuWUhhVjVBHhZl24/i/DRRDoqUsrthhMHKL1nM+53O3yb f0Ow== X-Forwarded-Encrypted: i=3; AJvYcCVUshafYAOZHRZSqsez2LwVjM1C3g9mUxV7K9SzJnWXiflDF19CPseG+EzTn++v3dH8uGmk@ilbers.de X-Gm-Message-State: AOJu0YwMe9z3y4J+CNjdA90DaL2anBorpWpLxyPnqk1MQ1JwKRxZcWtI 0n2GXUbc1dk1hHF+MhxSbiXM5s55RyZtPUOrAcxuMYDZDMbT6nGBhf9I X-Received: by 2002:a05:622a:5c7:b0:509:2527:d78b with SMTP id d75a77b69052e-50b148b8ce4mr28664681cf.63.1773813739406; Tue, 17 Mar 2026 23:02:19 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+ErisIn1FCAPMMpTMPR2/TxXL3Ef3+vY/dDVpOcksTqGA==" Received: by 2002:ac8:5a0d:0:b0:509:41df:80ff with SMTP id d75a77b69052e-50956b0ed48ls102430271cf.2.-pod-prod-06-us; Tue, 17 Mar 2026 23:02:18 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCVQprWeHJYDU18WCsc20c0J7O+hlAL0GHqIk8cUTz61Vc+IUPSOPEHhPSbGmmHRKW2lRht7/eZFeBHi@googlegroups.com X-Received: by 2002:a05:622a:4f:b0:506:9fd8:f65e with SMTP id d75a77b69052e-50b148aadfbmr27617701cf.60.1773813738530; Tue, 17 Mar 2026 23:02:18 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1773813738; cv=pass; d=google.com; s=arc-20240605; b=XWxDb+mjQqtrJFHNnGWi677oXALicBmgMJNtipb4CJNszMinFE3ZRZtwYTQPvRZs1P zSdeI+UJVpyz8lRn6fMRdCD5FUbbIymq8H4CXOy7J3CmdJcBED+ZGIQ3LR6nyCVMwm+8 NhsBC1kVn2k7GblOFkqFuaucuz1wrYWF8zrpmIqZO78JhoX6UvPwSX/57paGYNwQo7gn h0TnuzqllrVQzfq+hNDd/7tzAJbx8DTZe5JswUPB65CIC6HQryVMj8Z9ixjJglLZElsc YSPiJ+jpSuaNAC20RwL1JolvktAIFjPMkeHdieU7YN3FHxaepxC7eDju/uxrAfIHLNVJ /rEA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:in-reply-to:autocrypt :content-language:from:references:cc:to:subject:user-agent:date :message-id:dkim-signature; bh=XWQdcIwK00NSSqsqBL/AdzblTcTnF9LD536H6S6qsL8=; fh=cunytZl3t0TVDrjU7/YuQt6qqxtYc1W4qughm37okLg=; b=PlcZxB2BlUf+34+N3qq2d7CnCOzWjYT4HHBY0azvVb4SoZZzPbKDnHjXfHs71+/zNu GEOFyPohoi7buie2VLrkEnTwow9+b1Vh1766DWS7LcQjGrsYa5min2HZ9nn7LOWByX3G ccpXQOHKrv0fWLJYtY4cEFWi1Pr8MRyF0lloJyN6+szt3mDONHk8vbegQdRM3xzKRLFK ueIaAfkVziVueqHNbPJO3mkRJbXsGAePZ4GJ/tvCIY+0NxBXK5DVJYGHXfUWMEpSIxJC 9iIu8EfRsKdnExVZpimEqLRj8otFrd48Eqj2sSw9K6QqXgUn08Gc4tn8MbQf3oOo5Jo2 3XPQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=iK7j1c4d; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AM0PR02CU008.outbound.protection.outlook.com (mail-westeuropeazlp170130006.outbound.protection.outlook.com. [2a01:111:f403:c201::6]) by gmr-mx.google.com with ESMTPS id d75a77b69052e-50b1358452bsi714741cf.6.2026.03.17.23.02.18 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 17 Mar 2026 23:02:18 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) client-ip=2a01:111:f403:c201::6; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ZaysW5KfI83FcKzuGGswRjElOKVNtjad73qZqQZtELDGT5hNWKQ0jz0L4boVYwEvpvOHDY8+39foHAnSiGuM7FOyCZFcgQC+N0j0Mio70E4hYzCATXu7RxjkjfkYyJ74H2FiEKH5Rq5QZQy+kk72E5XtIjytGMWmTf4oX8jXvWWsFYTxyas/QHcjq5tUXG02KY36lTEwUThh3xGNECaVCvAeUCU/eSDtUxGYS+0CcEuVK7Cc9GmiDJEroQ3yaPtnGDv5nRUj46XZKY6BfBXzsm27ZP0laFan2FQjE3h8WlRg8uQ0l64YKSKXF+SejBuOtd4x2vja3UWHSl/rSlxqVQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=XWQdcIwK00NSSqsqBL/AdzblTcTnF9LD536H6S6qsL8=; b=HPEOXGfbdDfT6BtucT0GCAdcnORObaPyD8xlFBxlFlZPZB/c+Hkywk5kVQLtDDgrN46Z8grn2WEm4pGCrQnkyQ7v43WfhVU1Af4iUloyWtI+nNj7NwhsYEpszYsoY6zeFAEoo4+k6+tKKYjiVgrLrEGChrcBNwmxPZj9RUiSSXJh0Sfhh/NGcNjZI7idYz7rBwdEGXAfxCjn7JzoTPH35o93QFSGZXwyWhclUN7LqKZOVkjrfX9AvPP+BeWAqploNn/Di8iXiBZncP1+HFKwcGmznLaLBl+ruQKRC4JMECc1V6FmhOkWSsdhbmwQC5GFo5fnuTgZ/LHVI+oT2ptfGQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) by DB9PR10MB7577.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:3c4::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9723.19; Wed, 18 Mar 2026 06:02:15 +0000 Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::be9f:e8ca:ee9:83e1]) by AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::be9f:e8ca:ee9:83e1%6]) with mapi id 15.20.9723.018; Wed, 18 Mar 2026 06:02:15 +0000 Message-ID: Date: Wed, 18 Mar 2026 07:02:14 +0100 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v2 00/16] add support to build isar unprivileged To: "Moessbauer, Felix (FT RPD CED OES-DE)" , "isar-users@googlegroups.com" , Uladzimir Bely Cc: "Gylstorff, Quirin (FT RPD CED OES-DE)" References: <20260227145716.3794146-1-felix.moessbauer@siemens.com> <6f5e70f4bffa0b21b3956f64d3699856bd2734a0.camel@siemens.com> From: "'Jan Kiszka' via isar-users" Content-Language: en-US Autocrypt: addr=jan.kiszka@siemens.com; keydata= xsFNBGZY+hkBEACkdtFD81AUVtTVX+UEiUFs7ZQPQsdFpzVmr6R3D059f+lzr4Mlg6KKAcNZ uNUqthIkgLGWzKugodvkcCK8Wbyw+1vxcl4Lw56WezLsOTfu7oi7Z0vp1XkrLcM0tofTbClW xMA964mgUlBT2m/J/ybZd945D0wU57k/smGzDAxkpJgHBrYE/iJWcu46jkGZaLjK4xcMoBWB I6hW9Njxx3Ek0fpLO3876bszc8KjcHOulKreK+ezyJ01Hvbx85s68XWN6N2ulLGtk7E/sXlb 79hylHy5QuU9mZdsRjjRGJb0H9Buzfuz0XrcwOTMJq7e7fbN0QakjivAXsmXim+s5dlKlZjr L3ILWte4ah7cGgqc06nFb5jOhnGnZwnKJlpuod3pc/BFaFGtVHvyoRgxJ9tmDZnjzMfu8YrA +MVv6muwbHnEAeh/f8e9O+oeouqTBzgcaWTq81IyS56/UD6U5GHet9Pz1MB15nnzVcyZXIoC roIhgCUkcl+5m2Z9G56bkiUcFq0IcACzjcRPWvwA09ZbRHXAK/ao/+vPAIMnU6OTx3ejsbHn oh6VpHD3tucIt+xA4/l3LlkZMt5FZjFdkZUuAVU6kBAwElNBCYcrrLYZBRkSGPGDGYZmXAW/ VkNUVTJkRg6MGIeqZmpeoaV2xaIGHBSTDX8+b0c0hT/Bgzjv8QARAQABzSNKYW4gS2lzemth IDxqYW4ua2lzemthQHNpZW1lbnMuY29tPsLBlAQTAQoAPhYhBABMZH11cs99cr20+2mdhQqf QXvYBQJmWPvXAhsDBQkFo5qABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEGmdhQqfQXvY zPAP/jGiVJ2VgPcRWt2P8FbByfrJJAPCsos+SZpncRi7tl9yTEpS+t57h7myEKPdB3L+kxzg K3dt1UhYp4FeIHA3jpJYaFvD7kNZJZ1cU55QXrJI3xu/xfB6VhCs+VAUlt7XhOsOmTQqCpH7 pRcZ5juxZCOxXG2fTQTQo0gfF5+PQwQYUp0NdTbVox5PTx5RK3KfPqmAJsBKdwEaIkuY9FbM 9lGg8XBNzD2R/13cCd4hRrZDtyegrtocpBAruVqOZhsMb/h7Wd0TGoJ/zJr3w3WnDM08c+RA 5LHMbiA29MXq1KxlnsYDfWB8ts3HIJ3ROBvagA20mbOm26ddeFjLdGcBTrzbHbzCReEtN++s gZneKsYiueFDTxXjUOJgp8JDdVPM+++axSMo2js8TwVefTfCYt0oWMEqlQqSqgQwIuzpRO6I ik7HAFq8fssy2cY8Imofbj77uKz0BNZC/1nGG1OI9cU2jHrqsn1i95KaS6fPu4EN6XP/Gi/O 0DxND+HEyzVqhUJkvXUhTsOzgzWAvW9BlkKRiVizKM6PLsVm/XmeapGs4ir/U8OzKI+SM3R8 VMW8eovWgXNUQ9F2vS1dHO8eRn2UqDKBZSo+qCRWLRtsqNzmU4N0zuGqZSaDCvkMwF6kIRkD ZkDjjYQtoftPGchLBTUzeUa2gfOr1T4xSQUHhPL8zsFNBGZY+hkBEADb5quW4M0eaWPIjqY6 aC/vHCmpELmS/HMa5zlA0dWlxCPEjkchN8W4PB+NMOXFEJuKLLFs6+s5/KlNok/kGKg4fITf Vcd+BQd/YRks3qFifckU+kxoXpTc2bksTtLuiPkcyFmjBph/BGms35mvOA0OaEO6fQbauiHa QnYrgUQM+YD4uFoQOLnWTPmBjccoPuiJDafzLxwj4r+JH4fA/4zzDa5OFbfVq3ieYGqiBrtj tBFv5epVvGK1zoQ+Rc+h5+dCWPwC2i3cXTUVf0woepF8mUXFcNhY+Eh8vvh1lxfD35z2CJeY txMcA44Lp06kArpWDjGJddd+OTmUkFWeYtAdaCpj/GItuJcQZkaaTeiHqPPrbvXM361rtvaw XFUzUlvoW1Sb7/SeE/BtWoxkeZOgsqouXPTjlFLapvLu5g9MPNimjkYqukASq/+e8MMKP+EE v3BAFVFGvNE3UlNRh+ppBqBUZiqkzg4q2hfeTjnivgChzXlvfTx9M6BJmuDnYAho4BA6vRh4 Dr7LYTLIwGjguIuuQcP2ENN+l32nidy154zCEp5/Rv4K8SYdVegrQ7rWiULgDz9VQWo2zAjo TgFKg3AE3ujDy4V2VndtkMRYpwwuilCDQ+Bpb5ixfbFyZ4oVGs6F3jhtWN5Uu43FhHSCqUv8 FCzl44AyGulVYU7hTQARAQABwsF8BBgBCgAmFiEEAExkfXVyz31yvbT7aZ2FCp9Be9gFAmZY +hkCGwwFCQWjmoAACgkQaZ2FCp9Be9hN3g/8CdNqlOfBZGCFNZ8Kf4tpRpeN3TGmekGRpohU bBMvHYiWW8SvmCgEuBokS+Lx3pyPJQCYZDXLCq47gsLdnhVcQ2ZKNCrr9yhrj6kHxe1Sqv1S MhxD8dBqW6CFe/mbiK9wEMDIqys7L0Xy/lgCFxZswlBW3eU2Zacdo0fDzLiJm9I0C9iPZzkJ gITjoqsiIi/5c3eCY2s2OENL9VPXiH1GPQfHZ23ouiMf+ojVZ7kycLjz+nFr5A14w/B7uHjz uL6tnA+AtGCredDne66LSK3HD0vC7569sZ/j8kGKjlUtC+zm0j03iPI6gi8YeCn9b4F8sLpB lBdlqo9BB+uqoM6F8zMfIfDsqjB0r/q7WeJaI8NKfFwNOGPuo93N+WUyBi2yYCXMOgBUifm0 T6Hbf3SHQpbA56wcKPWJqAC2iFaxNDowcJij9LtEqOlToCMtDBekDwchRvqrWN1mDXLg+av8 qH4kDzsqKX8zzTzfAWFxrkXA/kFpR3JsMzNmvextkN2kOLCCHkym0zz5Y3vxaYtbXG2wTrqJ 8WpkWIE8STUhQa9AkezgucXN7r6uSrzW8IQXxBInZwFIyBgM0f/fzyNqzThFT15QMrYUqhhW ZffO4PeNJOUYfXdH13A6rbU0y6xE7Okuoa01EqNi9yqyLA8gPgg/DhOpGtK8KokCsdYsTbk= In-Reply-To: <6f5e70f4bffa0b21b3956f64d3699856bd2734a0.camel@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR0P281CA0157.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:b3::20) To AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS4PR10MB6181:EE_|DB9PR10MB7577:EE_ X-MS-Office365-Filtering-Correlation-Id: 93d1da8b-4a06-4502-9f68-08de84b3e7c9 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|376014|1800799024|56012099003|18002099003|55112099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(56012099003)(18002099003)(55112099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?K1hPSk5WajBrMkVNUE80YkNUQWtka0llazBDT2ZvZzd6bnU2Z2s4NEtrSHl3?= =?utf-8?B?TjFadWU1NmNkRkY3c21CWUljaUpvUjRUK21oaUFpbkIwNzNXVS9JN1o3cm9k?= =?utf-8?B?Mk1ZNGVKeU02TXB2YjUrcHpUOUpMWkdPUWFleHZhLzRnam5mOHJXRGtoOHJW?= =?utf-8?B?RldxY2EzZ2hDN0Z2cG5tTk9TcVJ6bkVjUFBjZHc0SkhlSzE0UlBNT21nZVEw?= =?utf-8?B?TWlsMGN0UVJmcTNoeUdyR2hhYWhpRjNkaTd2ZXRGemdTbE4yOVlXc1pZRUtM?= =?utf-8?B?YmdidmdCenJMZktHVXR1RTM2VDRkMVRpS2t3eW5udVhWNW14cGNUQ2oxa3Z1?= =?utf-8?B?Y1MrRDV6dlIyY3V3bFhWSWZwOXNWUmJwaUFpckpDYWdhSlRlRmVWU1ZJS0RS?= =?utf-8?B?Rnd0Z21tRTVlOUJ5YkYzL1pVRVM0SnQvY2Nqa3d5SUJaNExpSmdoVGhmM3d6?= =?utf-8?B?ZFJ2NnFlNFhJdXlCYTUzY2s0ZzA5a3k1YjgrTkdvYzVKby9FdUFLUUg5Q3di?= =?utf-8?B?dm1oMnYxaWVqVk1IU1FEUTBvNXdHd25CY1ZSWHErS29ZZ0xQanM5ZmxiWVU2?= =?utf-8?B?M3prcU1hYVF1SnhSSnA2c2dOckxPR2t1MlU4aHdCdUxzT0trTUwyUGIzZ292?= =?utf-8?B?NUN4Ymw2V0JtdndYN3lvRFBmOFNua2lLMFhKN0tGZkNIcHFZS0xoV2poeEh2?= =?utf-8?B?b0xwL044cGxkV1NjRXliQ3RoaCt0TjVwTy96dy9TOWtZRUIzL0MvdzZHUlFC?= =?utf-8?B?dlZBVlVvYVl4clpRMzRzbnl2K1FYb2VIbE1tN3NYZnAzS05pdHBOTnY0U3Z6?= =?utf-8?B?emJGRkF1amNXV3o4emk2QmRYdzhDb0t5SEZoOXZyaURrRU1QUUZwT1FVakUx?= =?utf-8?B?dkJMSmJIdGRSNG8wQ3Rpa3Z1UEs0Mkljazk3Wkp3aGFNNEpvTlJNY2Y5d0lR?= =?utf-8?B?YkF1b2U2dFA2eWIyK0pVMG8vS3BHcGg3aHdPMVVnQUNFYjh0L1hUd2tYNExK?= =?utf-8?B?a1dOY3l6TU1ucHY4cVhmS2hua1RmeWVqVHlNcFc5RGNIUTFLWXlmU1dnT2hP?= =?utf-8?B?ZXZmQnFrYmhGZW93KzhnWmFwVlpYcWZnOWJhRzRUL3d3VDErT0ZrejJTSjFq?= =?utf-8?B?VUVOMXNrcmNhSmlrRFVPWm43bVg2RklqMGV5UHNFUjlSOFcrTWVXeDU3MWJT?= =?utf-8?B?WTBkNkJFWWF3YWZMYU1SV3IzaTNVS3BXMkhlQTNNYXh0VHBxdTJzWTdXUTdL?= =?utf-8?B?NmNqeWRzWW1vSk82UVMxU3g3WTFGUXl5TVczOW5MRWVSRElUTWJUNlRZdWQr?= =?utf-8?B?bE1PVy9SL0JMdEZYNHlyUXB2T1FZOGp1T1c2ZHFnR0FWd294S2NmbjN4L1Yw?= =?utf-8?B?bXlwMDFVVjc5MTZQblFVcm12eXA4RDRrclJKMVRSTDVGelFnck0zR2Vzc2xx?= =?utf-8?B?U1hsaUtGc0VtTUphbHBXc1l5STQ4dnBRcHZjTFpySk9zRE02ekpuUDF1ZEx4?= =?utf-8?B?Y1E4K0NsYzFqc05MVWNGRndCWTNkSTNnd1dScFhZZVFQNmlaVGFIVGFHYUZ3?= =?utf-8?B?alJ4K1JPRkZieE5VYTM3K24rUE5sYmMvbzZzWGhEY0ZRSGlLV3drREV0cnAr?= =?utf-8?B?QjluNTIrUnBkYVBqanlWMUVnWEVCU0xmdHJkRkd3MUIvUHd4dlpuMVFHQVha?= =?utf-8?B?NDNtQXlzTDYrenB6VGFGZDZXUWVJTit5TFRQV2owdnZuNkV2VkY2UVRUMENh?= =?utf-8?B?WGZwUjdhWFg4TnNPdFBzVGovaEk4OERCSkdMSkRjMmxXRUprRlR6aDlQVVpr?= =?utf-8?B?VWNMOTFFMDBDLzN3bTk4RU9xZUdNT29aYVFORE5BdVhGbm9xa0FnY0NxOUJU?= =?utf-8?B?blh4bHZkZzlxRGllOUFDTm5GZWNkWXJKaXBqYTEwc215WlVOeW9GOFQyT0I5?= =?utf-8?B?emxNeGNTN2RMOUJxeWFsVGZWTHVwTW4wZW42bjZpdkpwcTAwRExQODNQUmJE?= =?utf-8?B?d0pNcWlNWlJCazk3RGZaTXRISXU0eUordTVpN1VMS3AycVlRNjMwUWVmanhN?= =?utf-8?B?V2lqVU1RSHJqM0NDcDBVZTRySFhaSWNKdVJjRnZPR3BLZ2NkdmZOcFVNTHdv?= =?utf-8?B?QUJsQlUrbFBqRWtwSk5HZSsvcDV0cGJEcStvd290eFlOQ2tjTHZJbXNMNFhX?= =?utf-8?B?U0ZEL0xFdkNEQitqZU1YdkpqTHk2Qm1vNFFzQmI3K251dHFVZVN3WFFpRFFM?= =?utf-8?B?RW96MWIxdUN4VnFtVWZSWGgzMG00QnpjT2RwZlZiSVhlUHZROXFxaEFSYjdX?= =?utf-8?B?dnpTQjFMd2hJL016NGRQbjdIRmNnYWlSdkFEVmdZWGZ0anpTM3RPUT09?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 93d1da8b-4a06-4502-9f68-08de84b3e7c9 X-MS-Exchange-CrossTenant-AuthSource: AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Mar 2026 06:02:15.7062 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: cJBY5AWmCa9ircA1XHhaunhJSf1zGdIFyXJ1VxlFza/74h6N+O6ohemr/DLCD3iFI1QLJQc2cYGGpUD0hkzUjQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR10MB7577 X-Original-Sender: jan.kiszka@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=iK7j1c4d; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c201::6 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Jan Kiszka Reply-To: Jan Kiszka Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: LyiKN/oGJfNr On 17.03.26 19:41, Moessbauer, Felix (FT RPD CED OES-DE) wrote: > On Fri, 2026-02-27 at 15:57 +0100, Felix Moessbauer wrote: >> Dear isar-users, >> >> currently isar requires password-less sudo and an environment >> where mounting file systems is possible. This has proven problematic >> for security reasons, both when running in a privileged container or >> locally. >> >> To solve this, we implement fully rootless builds that rely on the >> unshare syscall which allows us to avoid sudo and instead operate in >> temporary kernel namespaces as a user that is just privileged within >> that namespace. This comes with some challenges regarding the handling >> of mounts (they are cleared when leaving the namespace), as well as >> cross namespace deployments (the outer user might not be able to access >> the inner data). For that, we rework the handling of mounts and artifact >> passing to make it compatible with both chroot modes (schroot and >> unshare). >> >> Note, that this series can be tested on a custom kas-container build >> provided in [1]. Hints how to migrate downstream layers are provided >> in the API changelog. >> > > Dear isar-users, > > I'm currently waiting for the isar release and then plan to send out a > v3 that adds support for the cached-base-repo and src / dbg package > downloading. By that, the series should be feature complete. > > The last remaining aspect I don't have a solution to (yet) is the > sbuild_dpkg_log_export in dpkg.bbclass. To me it looks like the dpkg > dump is generated but never consumed anywhere. If someone could guide > me how this is processed, I'll implement support for this as well. > You read 03c0c7154d1632b92c9420ceb23706cc959b7cb3? Adding Uladzimir. > We further need to clarify the interface between kas and isar. The > current proposal is as following: > > In isar, the rootless mode is activated by setting ISAR_ROOTLESS = "1". > In kas, the rootless mode is selected by setting build_system: isar- > rootless, which then sets the ISAR_ROOTLESS bitbake variable. We need > this two-staged approach, as kas-container needs to be able to parse > the top-level kas file and extract the isar / isar-privileged / isar- > rootless mode so that it can start the container accordingly. For kas, we are furthermore introducing the build_system "isar-privileged", urging the users of the current "isar" mode to move over while still mapping it on "isar-privileged" for now. The question is if we should apply a similar pattern to Isar, pushing users of the privileged build mode to also state that explicitly (ISAR_PRIVILEGED = "1" or so) so that we can eventually make rootless the default and even drop ISAR_ROOTLESS (in some years from now). Jan -- Siemens AG, Foundational Technologies Linux Expert Center -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/e2fa098c-ea23-4b0f-9478-a1548e2695fc%40siemens.com.