From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6518759238035046400 X-Received: by 10.28.241.15 with SMTP id p15mr5093848wmh.5.1517815089046; Sun, 04 Feb 2018 23:18:09 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 10.223.165.85 with SMTP id j21ls2070589wrb.12.gmail; Sun, 04 Feb 2018 23:18:07 -0800 (PST) X-Google-Smtp-Source: AH8x226Rxwydm0LnRVxzuIpP/OAeBtOW1TkY6VHohGyYOB1dL/S9Q31KLoHK4C4GbMV9cyh6MwVs X-Received: by 10.223.152.40 with SMTP id v37mr4123689wrb.13.1517815087929; Sun, 04 Feb 2018 23:18:07 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1517815087; cv=none; d=google.com; s=arc-20160816; b=VAGwQIe5x83KX/g52dYSAGIdDVLdT1RSzCudNq56VBBaOP06n8uilfWZUacUsLBXAg qMqolZdq6qEL+R6tZ87f0UUam5FQpacJdLDbxrXtdJeyXJh0To19UlbxkUhpOnEKX8cy gUK6qUrzaaoA/9lUJMeb04J9ieTNekPMuTMuxFFKaF/UFkWmY9By14ICXZpRfh8nqXvi 8X1iW0FR4+WfiHdAdCLgVQQGECBMRk0pAa0wzhAMMdF5mhd4bmC4JwEIFWA5K1G4bMqg CPOuCuD8ZtTirCXKd86RNpkUCoJgdlprzd9vxE7+Fhj9N6QcAn4PDxlJOzuO0vu+JRlH skSQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:cc:references:to:subject :arc-authentication-results; bh=wI+AjHkSnLgKjxLa3R7mwHBR9yC2ZUFKCJ9RCkFqjQs=; b=x9OR3StPOyjttUVEWrUI95rPFHiYgW8EBqPFwWIqWlmqR3WK6UiWW4gcRTudovQY7P 5UEL1m9KlnjbZG4xN5i5HAjsKVpgJwsnvLdY6h0NGWmQVV5lZcRe062c0hixyNVH8oQd X/KWwnyX20Ry/373P/7JdDMZLEQYtw8dq46zg+RZ6ga12oy/jRmmb2huamXTI1nyX/22 4BNwBEWeAyCps1r7wkRBKOCUCbosEMcXQ/5mWoDb8wtB3PBcl7EHoAPkli4L0nB8Ku9F 9T0JFNbWDrwrt1YkzaeWJZqMLS70JFNJgGmNLNzlLo3Nq7bzy739tToQus8zbZ8060vQ jfMw== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com Return-Path: Received: from goliath.siemens.de (goliath.siemens.de. [192.35.17.28]) by gmr-mx.google.com with ESMTPS id s81si562912wmd.2.2018.02.04.23.18.07 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 04 Feb 2018 23:18:07 -0800 (PST) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.28 as permitted sender) client-ip=192.35.17.28; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com Received: from mail1.siemens.de (mail1.siemens.de [139.23.33.14]) by goliath.siemens.de (8.15.2/8.15.2) with ESMTPS id w157I6uA017312 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 5 Feb 2018 08:18:06 +0100 Received: from [167.87.25.38] ([167.87.25.38]) by mail1.siemens.de (8.15.2/8.15.2) with ESMTP id w157I6qF016719; Mon, 5 Feb 2018 08:18:06 +0100 Subject: Re: [PATCH 0/5] support creation of a full repo for offline/reproducible builds To: Cedric_Hombourger@mentor.com, isar-users@googlegroups.com, Alexander Smirnov References: <20180204175454.220-1-Cedric_Hombourger@mentor.com> Cc: Claudius Heine From: Jan Kiszka Message-ID: Date: Mon, 5 Feb 2018 08:18:04 +0100 User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.8.1.12) Gecko/20080226 SUSE/2.0.0.12-1.1 Thunderbird/2.0.0.12 Mnenhy/0.7.5.666 MIME-Version: 1.0 In-Reply-To: <20180204175454.220-1-Cedric_Hombourger@mentor.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: vMYfaAxMc/4L On 2018-02-04 18:54, Cedric_Hombourger@mentor.com wrote: > From: Cedric Hombourger > > The package repository created by isar using reprepro only includes packages by isar. > To support offline/reproducible builds, this changeset adds a do_populate task to > augment the repo with packages used during the build. The task may be used against > the buildchroot and images recipes. It should be noted that isar currently assumes > that the base distribution will provide both an -updates and security feed. This is > certainly true for Debian but may not be the case for other distributions or when > when using our own feed. The automatic addition of update and security feeds is more of a workaround until we have multi-repo support like Claudius is working on. I guess we can then drop this and just have repo lists for the different Debian versions with multiple entries. > > Some rework may be needed if the isar-apt changes get merged first. Conceptually the > implementation may not change much (as far as I can tell!) > > Please review and let me know if any rework is required. There is indeed quite some overlap with what Alex and I were discussing yesterday at FOSDEM. However, also looking at these patches, we need to do some homework first. As you correctly stated in patch 1, there is the issue that we pull package list twice at different times: first for the buildchroot and then again for the image. That needs to go first so that we end up with a consistent build. Also, all those duplications in logic between the two chroot setup recipes are killing us. So I would propose the following roadmap: - consolidate chroot building into a common class that both buildchroot and image recipes derive from, while doing that - generate multistrap.conf (e.g. "cat <