From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7076124590445953024 X-Received: by 2002:adf:e802:0:b0:1ee:a1e5:bbeb with SMTP id o2-20020adfe802000000b001eea1e5bbebmr8059207wrm.112.1647608934802; Fri, 18 Mar 2022 06:08:54 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:600c:3c9d:b0:38c:7f6f:c944 with SMTP id bg29-20020a05600c3c9d00b0038c7f6fc944ls2084660wmb.3.canary-gmail; Fri, 18 Mar 2022 06:08:53 -0700 (PDT) X-Google-Smtp-Source: ABdhPJx9ifaeHs4SiBNDTZUI97ldf/hnhmnhwvyx7tPdkhTZuFx/DuKY86cn/O73vqhpTL1GMd1Q X-Received: by 2002:a7b:c347:0:b0:37e:68e6:d85c with SMTP id l7-20020a7bc347000000b0037e68e6d85cmr16432782wmj.176.1647608933790; Fri, 18 Mar 2022 06:08:53 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1647608933; cv=pass; d=google.com; s=arc-20160816; b=w04F46TJmsI8W+evQ54SDk6lljo81QIUaZVdmLkDiVz3SaD2xLsMVexF3+0pHerNK1 sGAy/WqH4wOi06zfyigz8jnCgJnAGp3yc/BrlokaHEUzT9HnqAPqUjhmhPrRgSNmMnUu mXVIZBLxo2HtopOW9yikQCU8xMRGnXSM72VnYwhw57bo9OOVEuZV4pg8cbM04gAkWvcK 6tsdAODSbU4yHxgHukWtShaBSzNtDT/o8ho3nGacvBklRAeIhLTPwR1jSp39Qb1zAQPV Ovg7R6S9kZ7EjHqfw1JfzHvGgZbaZ9RZq+61tPX2eHMhILB0/pGpYVdg3R/vOHos+US3 PK9g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :dkim-signature; bh=0Y2x/wRwCrbXvBtvx+7liViODnuwUgFfqKFN9dPAm4c=; b=lTv1qhbO8QXV9aqS4MrvEFpk+3ZJMEk8gJJjrRCBgHZCAv1ft1JK+6W1LtGY3bkdcq rGoTrTx5IrNFz3qoyolvxfaQ1V5r2Nhi1q5K3nUiQPdgEnwt4Wxs8kqxhob8p8LROZwK M5400cakLUxYfrosL22s+UQ94wJErmMKtSfQy6TktOX94rJR2I53U14j0XvQbO41U4qE 0wwQfqBquTheRioIgXIXbmkAsrduq3bv9lp1ofFQ/yPp2CE2M/sfGCK5PkR3USG2akPE m5qO1afbK+F3cZ4CvwuAgRPR8RHtRG0ugq7/ra0CdT1vFeZCaFx8GA7nwELNUAAvxmAB eKKQ== ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="b1xJP/6E"; arc=pass (i=1 spf=pass spfdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f400:fe05::61e as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-he1eur02on061e.outbound.protection.outlook.com. [2a01:111:f400:fe05::61e]) by gmr-mx.google.com with ESMTPS id az24-20020a05600c601800b00389a1a68b71si651705wmb.0.2022.03.18.06.08.53 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 18 Mar 2022 06:08:53 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f400:fe05::61e as permitted sender) client-ip=2a01:111:f400:fe05::61e; Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="b1xJP/6E"; arc=pass (i=1 spf=pass spfdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f400:fe05::61e as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=esu0TzC0ORIOfea8+Y89mVszjdqFWFB3Ronhe45j5Gs2MOByYWSxoG1jKua8EDa5L7WqNKkozjvVGiA0coyIKcu7JIHdZ/WnHh3zU8VNd7gtg1ftke6C4Oj/N+iE5LqWEktLKVfaQancJkCHnc3gMtZTWiep5hT/jzg3jzVhDkSdj4/cY3tI0xzW8sag+48M8FcL540yohHFpuzy9GUeQ2Pq0/XZlmC9no7C3zcOHmJGa7/FhbFz5cRY8FTJYemjNToGMuX1XUdzLcdf2kcGkqwsySQFl+wuNWA/vNkRosSp+FoUwlLpEM+PKzY7BNcscXp+vvox5yJDX5jWol4DDQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=0Y2x/wRwCrbXvBtvx+7liViODnuwUgFfqKFN9dPAm4c=; b=MaKjyjJdIG6eHZYzHmIaSPnnaeMc9AJ8LGuWUA7gibre0yTCjcmxaK3qh4v2lC9xHi52PQl0fI4uGs9+wF4F5aP6Nu9mNGDz8WQpV8W4AObfUU7uIDiyXStQPaK+IsuZ3InIWaLkthSkY6K1C5OTOOSkYeqXeS92llgrHLOoocid2phvba0qkAVqoZxTHgZd0wpwGqCUVPwAZyRcu7j3qqvxbzHBUUyWa80bf9j2lAvw8/bkWSU/EotWC54y3SqVWNoiuB8vLrSfWiaNWSzpDmD3jtVDdVUNioQbKYnxDtF8NUH/JEmsededem5I9dxVqYfiNFt/7RPd+ipbb9vbbQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 194.138.21.71) smtp.rcpttodomain=googlegroups.com smtp.mailfrom=siemens.com; dmarc=pass (p=none sp=none pct=100) action=none header.from=siemens.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0Y2x/wRwCrbXvBtvx+7liViODnuwUgFfqKFN9dPAm4c=; b=b1xJP/6EE0sgwW8x0BuGiMRFVV0/XMl8lpVoq/+ltNyiAMZHLSjwWsH/0N5dhzU7n2Y1+MsyZUEwyS0jwCpXRfD7k7KGQqkRc9VAmpvgPAFiaAINVowMc+OeVuKJ7qZgxzEE2tmKSneCIPW51magiJWtZTNHMQRD7BSU5oyodVNlhc+pKsn7JvyQTj8EvxbTk0So0DZ1wJZ0WwUexj+fu+E6fkp75Q7mTIat3Dh409crXrx+haTvguqN+ksd30nMr9GC6H11bSDyoDoK8OL5wlquim03it3Ppbn9s06KqmmcdiZwpncfGxsHxpOg0FgpHXcTgEqXV8zIEUjfM4Mygg== Received: from SV0P279CA0006.NORP279.PROD.OUTLOOK.COM (2603:10a6:f10:11::11) by DB7PR10MB2458.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:41::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5061.26; Fri, 18 Mar 2022 13:08:52 +0000 Received: from HE1EUR01FT025.eop-EUR01.prod.protection.outlook.com (2603:10a6:f10:11:cafe::a) by SV0P279CA0006.outlook.office365.com (2603:10a6:f10:11::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5061.28 via Frontend Transport; Fri, 18 Mar 2022 13:08:52 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 194.138.21.71) smtp.mailfrom=siemens.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=siemens.com; Received-SPF: Pass (protection.outlook.com: domain of siemens.com designates 194.138.21.71 as permitted sender) receiver=protection.outlook.com; client-ip=194.138.21.71; helo=hybrid.siemens.com; Received: from hybrid.siemens.com (194.138.21.71) by HE1EUR01FT025.mail.protection.outlook.com (10.152.0.182) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.20.5081.15 via Frontend Transport; Fri, 18 Mar 2022 13:08:52 +0000 Received: from DEMCHDC8A0A.ad011.siemens.net (139.25.226.106) by DEMCHDC9SKA.ad011.siemens.net (194.138.21.71) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.24; Fri, 18 Mar 2022 14:08:51 +0100 Received: from [167.87.72.239] (167.87.72.239) by DEMCHDC8A0A.ad011.siemens.net (139.25.226.106) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.18; Fri, 18 Mar 2022 14:08:51 +0100 Message-ID: Date: Fri, 18 Mar 2022 14:08:50 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.6.1 Subject: Re: [PATCH] Avoid sharing of /dev/shm from the build context Content-Language: en-US To: References: From: Jan Kiszka In-Reply-To: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Return-Path: jan.kiszka@siemens.com X-Originating-IP: [167.87.72.239] X-ClientProxiedBy: DEMCHDC89YA.ad011.siemens.net (139.25.226.104) To DEMCHDC8A0A.ad011.siemens.net (139.25.226.106) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 747af20b-c5da-4cbe-eeed-08da08e0730b X-MS-TrafficTypeDiagnostic: DB7PR10MB2458:EE_ X-Microsoft-Antispam-PRVS: X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:194.138.21.71;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:hybrid.siemens.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230001)(4636009)(40470700004)(46966006)(36840700001)(356005)(40460700003)(81166007)(44832011)(82960400001)(2906002)(31686004)(36756003)(70206006)(16576012)(70586007)(8676002)(5660300002)(8936002)(36860700001)(16526019)(26005)(186003)(2616005)(956004)(86362001)(31696002)(47076005)(6916009)(6706004)(336012)(498600001)(53546011)(82310400004)(83380400001)(3940600001)(36900700001)(43740500002);DIR:OUT;SFP:1101; X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Mar 2022 13:08:52.1386 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 747af20b-c5da-4cbe-eeed-08da08e0730b X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=38ae3bcd-9579-4fd4-adda-b42e1495d55a;Ip=[194.138.21.71];Helo=[hybrid.siemens.com] X-MS-Exchange-CrossTenant-AuthSource: HE1EUR01FT025.eop-EUR01.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR10MB2458 X-TUID: 33pa9obgMXqS On 18.03.22 10:13, Baurzhan Ismagulov wrote: > On Thu, Mar 17, 2022 at 07:05:16PM +0100, Jan Kiszka wrote: >>> diff --git a/meta/classes/buildchroot.bbclass b/meta/classes/buildchroot.bbclass >>> index dd8f4206..3b214c6c 100644 >>> --- a/meta/classes/buildchroot.bbclass >>> +++ b/meta/classes/buildchroot.bbclass >>> @@ -42,7 +42,8 @@ buildchroot_do_mounts() { >>> mount --bind '${CCACHE_DIR}' '${BUILDCHROOT_DIR}/ccache' >>> fi >>> mountpoint -q '${BUILDCHROOT_DIR}/dev' || >>> - mount --rbind /dev '${BUILDCHROOT_DIR}/dev' >>> + ( mount --rbind /dev '${BUILDCHROOT_DIR}/dev'; >>> + mount -t tmpfs none '${BUILDCHROOT_DIR}/dev/shm' ) >>> mount --make-rslave '${BUILDCHROOT_DIR}/dev' > > I'd personally convert that to if because I never remember the failure behavior You mean && - sure. > in subshells. While at it, I'd also combine to a single mount -o rbind,rslave > to avoid potential shared mount windows. > > I think that mounting every directory explicitly (bind instead of rbind) > provides more control and avoids a bunch of issues with recursive mounts. > Do we know what all needs to be mounted then? > >> Uladzimir, didn't check if this is going to be completely obsoleted by >> sbuild. If so, this can be ignored, and we will carry it locally until >> sbuild is merged. > > According to Uladzimir, ATM this is orthogonal and should be applied, we keep > buildchroot at least for some time, as e.g. wic is using it. > OK. Jan -- Siemens AG, Technology Competence Center Embedded Linux